This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json) Hash identifier: CZ6BMMPL5PMXsFNPUaO56LMz1mLSqD+bYeRcOSsKb2Q= Subject key identifier: C8:CD:DA:98:A2:99:F2:EE:04:5B:64:F0:B3:49:A1:5A:EB:FA:8E:9B Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49 Certificate serial: 019AF277350D9403A2EA04CF7DFB921AB809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft Manifest number: 1084 Signing time: Sat 06 Dec 2025 07:01:29 +0000 Manifest this update: Sat 06 Dec 2025 07:01:29 +0000 Manifest next update: Sun 07 Dec 2025 07:01:29 +0000 Files and hashes: 1: VqIWjBWlYBceSFr-zqKzJgNUIvM.roa (hash: Goyl+zMBt9K8bsmInK/tMhspP8k2k8ODxJhJDONQhxk=) 2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: J2bshAZv5WuwSlip3OfNTGuz2OPiPsZfvDfAqYyHAjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:35:0d:94:03:a2:ea:04:cf:7d:fb:92:1a:b8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49 Validity Not Before: Dec 6 07:01:29 2025 GMT Not After : Dec 7 07:01:29 2025 GMT Subject: CN=c8cdda98a299f2ee045b64f0b349a15aebfa8e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:86:79:36:67:f0:b3:32:b4:e0:34:11:d3: fc:27:03:dc:f6:ae:ec:4a:31:e9:fb:49:2a:59:f5: f4:e6:ef:06:53:b2:3e:8a:8e:4f:aa:1d:17:c2:35: d5:51:4f:3f:58:83:80:66:be:6f:b4:28:89:1c:94: d4:cd:5d:e7:ee:7f:22:2c:64:76:85:f8:0e:5f:e9: 8c:75:ac:c6:e2:52:31:46:e7:c9:75:94:67:2e:a3: ee:1e:3d:8b:49:52:1c:6f:14:9e:89:e3:fe:3b:cb: 5d:4d:52:ce:65:22:0c:6e:69:d5:c0:ec:f2:d3:d9: 13:2d:cc:12:c1:1b:81:c6:29:8b:a6:0c:46:67:66: 6e:b9:ad:ca:9d:45:d1:ff:b2:e0:f2:fb:47:2e:75: b2:47:2b:c1:3b:7f:0f:8a:8e:5d:77:01:d8:12:a9: 62:71:72:c1:28:7b:3c:77:44:9b:00:f6:44:42:2b: b9:b8:d6:6a:da:eb:ff:6e:d7:56:51:e6:5a:f5:ff: 8a:81:97:1a:32:0e:b8:ed:11:d5:99:51:41:54:90: 4e:5e:f5:1d:12:c6:ae:e1:9c:28:d2:b7:7d:e7:06: 58:ca:c8:9e:84:59:48:49:6f:55:bb:a6:f5:f4:57: 9a:f9:93:bb:4a:a3:d5:55:9a:f0:c7:54:66:bf:59: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:DA:98:A2:99:F2:EE:04:5B:64:F0:B3:49:A1:5A:EB:FA:8E:9B X509v3 Authority Key Identifier: keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c7:33:8d:6a:8e:1a:e6:9d:12:81:89:69:99:4b:32:93:06: d0:27:ef:c6:47:64:73:09:7c:ce:27:03:e7:78:04:95:66:3e: 84:1c:39:9b:af:d6:3a:b8:a3:f2:9b:a8:11:cd:86:5c:8a:f3: 6a:27:36:50:db:ca:44:73:fe:a3:61:ef:cb:75:13:f0:27:07: df:57:fd:14:4c:ed:4a:5c:5d:57:21:58:0a:56:a0:08:be:8d: 9d:02:0e:69:08:f9:ef:e8:53:ef:d0:00:1c:47:34:de:b7:93: 41:87:43:10:5c:5d:7e:ee:4b:26:5c:d5:8c:ad:e8:d3:f8:c8: 4e:7f:8e:57:8c:6d:cc:cb:36:13:79:93:fe:3f:d9:7b:a4:35: 38:06:ec:4f:39:d9:78:c4:53:7e:2d:b9:48:4a:06:de:f8:cf: e9:6f:52:b5:33:11:7d:9d:9b:36:98:9f:fa:cf:0c:a6:20:a4: 10:7b:c3:e0:42:f9:89:93:e0:bf:51:c0:26:4e:72:9a:4c:1d: 58:08:36:86:a1:3e:10:f8:f5:d2:12:3b:96:fa:67:c0:b7:81: 1e:7f:8c:93:9a:01:e9:c4:38:51:d2:99:c1:96:5e:d6:3f:1e: d4:b4:a1:46:74:de:48:ff:6d:ad:44:a0:b9:59:53:9c:cd:2e: dd:52:39:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzUNlAOi6gTPffuSGrgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmJkODg4N2RhODQ0NzEzMThkODM4ODRhYzAwNWYwMWI0 NGZkNDkwHhcNMjUxMjA2MDcwMTI5WhcNMjUxMjA3MDcwMTI5WjAzMTEwLwYDVQQD EyhjOGNkZGE5OGEyOTlmMmVlMDQ1YjY0ZjBiMzQ5YTE1YWViZmE4ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4aGeTZn8LMytOA0EdP8JwPc9q7s SjHp+0kqWfX05u8GU7I+io5Pqh0XwjXVUU8/WIOAZr5vtCiJHJTUzV3n7n8iLGR2 hfgOX+mMdazG4lIxRufJdZRnLqPuHj2LSVIcbxSeieP+O8tdTVLOZSIMbmnVwOzy 09kTLcwSwRuBximLpgxGZ2Zuua3KnUXR/7Lg8vtHLnWyRyvBO38Pio5ddwHYEqli cXLBKHs8d0SbAPZEQiu5uNZq2uv/btdWUeZa9f+KgZcaMg647RHVmVFBVJBOXvUd Esau4Zwo0rd95wZYysiehFlISW9Vu6b19Fea+ZO7SqPVVZrwx1Rmv1nC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjN2piimfLuBFtk8LNJoVrr+o6bMB8GA1UdIwQY MBaAFGH72Ih9qERxMY2DiErABfAbRP1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEt Y2VjOWUxN2Y1MDRiLzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wY2U1NjktYWI4ZS00NzEyLTk0OWEtY2VjOWUxN2Y1MDRi LzEvWWZ2WWlIMm9SSEV4allPSVNzQUY4QnRFX1VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsczjWqO GuadEoGJaZlLMpMG0Cfvxkdkcwl8zicD53gElWY+hBw5m6/WOrij8puoEc2GXIrz aic2UNvKRHP+o2Hvy3UT8CcH31f9FEztSlxdVyFYClagCL6NnQIOaQj57+hT79AA HEc03reTQYdDEFxdfu5LJlzVjK3o0/jITn+OV4xtzMs2E3mT/j/Ze6Q1OAbsTznZ eMRTfi25SEoG3vjP6W9StTMRfZ2bNpif+s8MpiCkEHvD4EL5iZPgv1HAJk5ymkwd WAg2hqE+EPj10hI7lvpnwLeBHn+Mk5oB6cQ4UdKZwZZe1j8e1LShRnTeSP9trUSg uVlTnM0u3VI5Vg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:50 2025 by rpki-client