This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft File: yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json) Hash identifier: gYz0lwepkdEt4FA/HouehCdvq1LZUjEiIGrt95OWBAA= Subject key identifier: 1D:1A:A1:4C:13:F3:56:25:CB:99:77:E3:B0:A6:A6:9F:74:61:7C:77 Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A Certificate issuer: /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a Certificate serial: 019AF352B2C8CAB7D6C9DEC516FD57D6A07A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=) 2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: bf817qdyKhLQS0y2QtRci4ciIwvMmFGB0c369iQYMGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b2:c8:ca:b7:d6:c9:de:c5:16:fd:57:d6:a0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=1d1aa14c13f35625cb9977e3b0a6a69f74617c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:1d:20:10:94:a0:37:8a:71:28:e7:07:2a: 30:2f:c8:92:d6:01:04:c3:53:76:97:8a:ff:a6:b4: d9:e7:58:c5:73:f5:0a:8f:39:ed:97:60:e0:0a:71: 71:d4:6f:ad:17:e1:e5:c4:6d:80:05:74:d2:f4:e3: 20:be:f2:15:65:45:7a:12:4d:cc:f9:83:f8:e3:b2: b5:93:21:99:bf:9f:9d:b3:31:5f:63:d0:db:32:30: aa:8e:9b:58:0e:e0:f3:8e:d3:db:74:0d:13:99:af: e3:8e:82:bb:86:13:88:22:6c:3d:cc:fa:b5:85:d9: bc:13:88:73:7a:17:1d:f0:2b:6c:03:fa:fe:21:b7: 56:d4:ad:8e:ca:18:80:99:d7:fc:a5:87:ad:28:cd: d3:08:96:60:e9:c5:6f:fc:17:52:6c:3b:7f:22:1a: a8:70:b7:8a:cf:e6:dd:87:91:87:c7:9d:98:35:a2: d6:82:0f:e3:44:58:45:3e:e7:78:dc:7e:2a:dc:89: bb:15:89:90:45:5c:69:3d:bf:1e:da:98:4d:a9:6d: 6d:b7:9a:fe:a8:fc:dd:9a:49:39:61:f8:53:c4:0c: 8e:df:ae:95:f6:a9:0e:57:2f:3a:91:6c:59:81:53: 8a:21:5b:c1:7e:23:ee:b6:c7:55:e5:9b:70:88:ee: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:A1:4C:13:F3:56:25:CB:99:77:E3:B0:A6:A6:9F:74:61:7C:77 X509v3 Authority Key Identifier: keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:89:48:74:24:c6:78:3a:6f:ee:0a:1e:49:9e:70:21:61:27: 2f:c0:0c:68:73:5e:84:9a:ef:62:a8:9f:7a:d2:3a:af:94:a3: 34:c6:20:6d:1d:68:51:e3:51:ed:8b:49:dd:cf:e2:33:5b:92: 16:42:b5:ba:f1:9a:7d:65:81:14:00:fb:83:02:81:97:b6:28: 72:1d:00:4c:ae:89:8a:96:ea:7d:f3:49:a9:04:05:5f:fc:05: 43:49:5a:0a:14:69:ab:f8:17:a8:3d:0e:df:e3:77:ce:0a:b1: 83:66:bc:05:64:c9:1d:77:b3:d0:61:ad:71:5d:bd:39:45:d7: 17:b2:d6:86:26:d6:64:d7:5b:1b:ed:c7:e6:db:fb:0f:fc:92: 68:c5:f7:94:26:96:c6:2f:5b:16:38:4e:99:be:d7:59:48:17: b9:60:3f:c2:09:fe:47:7f:21:7d:89:b9:52:b3:e5:60:d4:51: 44:7e:fb:73:a8:a3:7b:7d:6a:c3:fe:7c:fb:10:eb:29:db:9d: b3:1a:3c:3b:34:35:e6:f8:2b:c9:81:35:a4:d0:d1:7d:43:19: f6:c9:bd:43:c7:69:9b:b3:9e:aa:b9:d2:f8:46:2a:14:a5:6c: 0d:40:43:c8:6e:09:f7:43:c6:a0:05:7e:f0:a8:6e:c9:93:51: ea:40:0a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrLIyrfWyd7FFv1X1qB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ODdkMDlmZDNmYzJiNzA0YzY2MTEwYmIwMjUyZWUwYzZi MWJhNGEwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD EygxZDFhYTE0YzEzZjM1NjI1Y2I5OTc3ZTNiMGE2YTY5Zjc0NjE3Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn4dIBCUoDeKcSjnByowL8iS1gEE w1N2l4r/prTZ51jFc/UKjzntl2DgCnFx1G+tF+HlxG2ABXTS9OMgvvIVZUV6Ek3M +YP447K1kyGZv5+dszFfY9DbMjCqjptYDuDzjtPbdA0Tma/jjoK7hhOIImw9zPq1 hdm8E4hzehcd8CtsA/r+IbdW1K2OyhiAmdf8pYetKM3TCJZg6cVv/BdSbDt/Ihqo cLeKz+bdh5GHx52YNaLWgg/jRFhFPud43H4q3Im7FYmQRVxpPb8e2phNqW1tt5r+ qPzdmkk5YfhTxAyO366V9qkOVy86kWxZgVOKIVvBfiPutsdV5ZtwiO5tHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0aoUwT81Yly5l347Cmpp90YXx3MB8GA1UdIwQY MBaAFMmH0J/T/CtwTGYRC7AlLuDGsbpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZTRmNmItMjIzNS00MzJlLWE2OWEt MDdkYWM3YjkyZDQ0LzEveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zZTRmNmItMjIzNS00MzJlLWE2OWEtMDdkYWM3YjkyZDQ0 LzEveVlmUW45UDhLM0JNWmhFTHNDVXU0TWF4dWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIlIdCTG eDpv7goeSZ5wIWEnL8AMaHNehJrvYqifetI6r5SjNMYgbR1oUeNR7YtJ3c/iM1uS FkK1uvGafWWBFAD7gwKBl7Yoch0ATK6JipbqffNJqQQFX/wFQ0laChRpq/gXqD0O 3+N3zgqxg2a8BWTJHXez0GGtcV29OUXXF7LWhibWZNdbG+3H5tv7D/ySaMX3lCaW xi9bFjhOmb7XWUgXuWA/wgn+R38hfYm5UrPlYNRRRH77c6ije31qw/58+xDrKdud sxo8OzQ15vgryYE1pNDRfUMZ9sm9Q8dpm7OeqrnS+EYqFKVsDUBDyG4J90PGoAV+ 8KhuyZNR6kAKtg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:07 2025 by rpki-client