This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft File: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json) Hash identifier: t08jwH3K/IvvblxmxH/rQOv65sUxtudy0C5bco6Knzg= Subject key identifier: 82:06:B8:59:10:DA:DF:19:08:2F:29:E5:EB:04:79:15:59:4D:F1:75 Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6 Certificate issuer: /CN=614256ed38fb1e96944926db4c66c4d088acfbd6 Certificate serial: 019AF0BEDF9C7A086431DAFDB5F370DC7FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 23:00:32 +0000 Manifest this update: Fri 05 Dec 2025 23:00:32 +0000 Manifest next update: Sat 06 Dec 2025 23:00:32 +0000 Files and hashes: 1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=) 2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: WmS1PUn5S9TLLMm/bacgHWZfwGLdfsulYqlQ5GPHNlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:df:9c:7a:08:64:31:da:fd:b5:f3:70:dc:7f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6 Validity Not Before: Dec 5 23:00:32 2025 GMT Not After : Dec 6 23:00:32 2025 GMT Subject: CN=8206b85910dadf19082f29e5eb047915594df175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:61:b4:6f:28:32:af:e0:d7:27:4c:72:97: 66:d9:d4:70:73:b7:39:a3:82:4c:4e:27:a5:cf:b3: ca:d2:6d:df:05:cc:07:38:04:9d:b3:59:93:72:55: c9:b4:6a:3c:27:99:ba:b7:86:42:1a:92:a5:f9:87: fe:06:3b:37:cc:9e:bc:c9:58:bb:32:d5:d6:66:cb: 60:05:7c:66:6a:3c:98:47:94:9c:a0:04:29:0d:d2: 49:fb:34:df:22:eb:27:f2:e4:74:65:1c:93:d8:57: 02:26:a6:b6:43:fd:28:cb:a2:af:0d:b3:2d:2f:67: e9:2b:54:d7:a2:33:0a:72:14:9f:cf:ef:1c:31:83: 3c:fe:a0:aa:8f:10:4d:12:9f:49:1e:63:fd:a5:fb: f5:20:2a:8f:bb:70:d9:c6:a6:b4:1f:2c:ce:22:bf: 5a:69:ed:4e:25:e2:85:e9:5e:85:28:e0:b4:5b:a5: 2d:d3:f1:70:82:60:7a:4b:8c:45:a5:9f:b9:1a:74: d5:31:f0:9e:1d:4e:e2:60:37:ca:83:d8:c2:83:dd: 11:5f:5b:42:04:97:21:ca:2f:91:00:ac:9c:1c:a3: 4a:06:bb:88:c3:c0:60:2c:31:b9:f2:9f:55:dd:06: 0c:bf:55:09:ec:6f:d9:45:bb:d4:b4:72:7c:48:dd: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:06:B8:59:10:DA:DF:19:08:2F:29:E5:EB:04:79:15:59:4D:F1:75 X509v3 Authority Key Identifier: keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:06:e2:73:0b:af:50:20:e7:eb:60:da:2e:3c:35:1e:4e:e2: 65:4d:75:b7:0d:96:81:9b:9b:33:32:a8:ce:d3:2b:5a:fd:a3: 47:c8:9c:23:d1:be:d1:de:12:82:e7:76:32:e6:8d:dd:42:2f: 1c:fb:9e:24:21:d3:3a:70:d4:8b:72:61:61:f0:f8:18:63:fc: bb:49:f9:23:f1:7f:7e:53:da:bf:c3:37:19:c0:3a:74:5f:40: 57:36:51:fc:13:b8:ab:23:88:6a:2d:2b:ff:ec:ea:99:31:89: 87:4b:9c:0b:eb:3f:d8:bd:15:5d:c3:31:63:c1:a0:46:fc:7f: f6:5f:fb:88:b2:1c:81:d7:9f:4e:7d:50:3f:0d:96:d3:e1:ce: ff:1b:d2:d3:74:e2:b6:66:90:46:a9:5e:11:62:ef:26:cb:94: 3f:82:57:24:e2:d7:f2:e2:10:84:db:f6:c2:e8:5c:27:d0:c6: 29:e4:6c:e5:a4:e8:c9:b2:df:f1:ac:f3:d8:91:be:fb:3d:e1: 56:5b:b2:25:2f:7b:c9:bc:75:5b:92:1c:61:82:8a:53:06:7b: a6:75:72:87:cb:24:ff:cb:bd:1b:56:1e:59:2f:7d:b0:46:a4: 47:8f:08:93:c9:8c:6d:ff:04:66:67:65:41:f3:e5:0a:3e:1c: 47:66:54:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvt+ceghkMdr9tfNw3H/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDI1NmVkMzhmYjFlOTY5NDQ5MjZkYjRjNjZjNGQwODhh Y2ZiZDYwHhcNMjUxMjA1MjMwMDMyWhcNMjUxMjA2MjMwMDMyWjAzMTEwLwYDVQQD Eyg4MjA2Yjg1OTEwZGFkZjE5MDgyZjI5ZTVlYjA0NzkxNTU5NGRmMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a9htG8oMq/g1ydMcpdm2dRwc7c5 o4JMTielz7PK0m3fBcwHOASds1mTclXJtGo8J5m6t4ZCGpKl+Yf+Bjs3zJ68yVi7 MtXWZstgBXxmajyYR5ScoAQpDdJJ+zTfIusn8uR0ZRyT2FcCJqa2Q/0oy6KvDbMt L2fpK1TXojMKchSfz+8cMYM8/qCqjxBNEp9JHmP9pfv1ICqPu3DZxqa0HyzOIr9a ae1OJeKF6V6FKOC0W6Ut0/FwgmB6S4xFpZ+5GnTVMfCeHU7iYDfKg9jCg90RX1tC BJchyi+RAKycHKNKBruIw8BgLDG58p9V3QYMv1UJ7G/ZRbvUtHJ8SN1CVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIGuFkQ2t8ZCC8p5esEeRVZTfF1MB8GA1UdIwQY MBaAFGFCVu04+x6WlEkm20xmxNCIrPvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEt NjhiYTZjNTRlZjlhLzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEtNjhiYTZjNTRlZjlh LzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgbicwuv UCDn62DaLjw1Hk7iZU11tw2WgZubMzKoztMrWv2jR8icI9G+0d4Sgud2MuaN3UIv HPueJCHTOnDUi3JhYfD4GGP8u0n5I/F/flPav8M3GcA6dF9AVzZR/BO4qyOIai0r /+zqmTGJh0ucC+s/2L0VXcMxY8GgRvx/9l/7iLIcgdefTn1QPw2W0+HO/xvS03Ti tmaQRqleEWLvJsuUP4JXJOLX8uIQhNv2wuhcJ9DGKeRs5aToybLf8azz2JG++z3h VluyJS97ybx1W5IcYYKKUwZ7pnVyh8sk/8u9G1YeWS99sEakR48Ik8mMbf8EZmdl QfPlCj4cR2ZUhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:34 2025 by rpki-client