This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json) Hash identifier: Sh8yOAiz/tqJsuoMjZxSRzz6XsV3I+fFe7O2icVkhzE= Subject key identifier: 7C:A9:C1:00:65:33:97:0F:0A:6E:E2:52:B2:76:04:7E:0E:0B:91:E0 Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Certificate serial: 019AF5E5E93528155E2BD0DBD168BBFBDAA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft Manifest number: 1027 Signing time: Sat 06 Dec 2025 23:01:16 +0000 Manifest this update: Sat 06 Dec 2025 23:01:16 +0000 Manifest next update: Sun 07 Dec 2025 23:01:16 +0000 Files and hashes: 1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=) 2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: f97o8nnEYtYd3rxqVFQIM0BoH/2iwjVxyOsvWZicNzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:e9:35:28:15:5e:2b:d0:db:d1:68:bb:fb:da:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Validity Not Before: Dec 6 23:01:16 2025 GMT Not After : Dec 7 23:01:16 2025 GMT Subject: CN=7ca9c1006533970f0a6ee252b276047e0e0b91e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:3a:56:45:db:02:eb:45:b6:9d:81:4c:2f: f4:8f:c4:79:e6:76:ed:64:75:6f:31:43:4c:53:ee: f5:0e:6a:af:75:7c:67:31:9f:3c:d3:46:43:96:54: 7a:59:dc:69:e8:b4:e4:24:94:1a:e3:f5:19:b5:82: ad:9d:81:aa:59:f5:db:8c:b3:d9:1d:19:c3:d0:98: 6c:90:92:4a:cf:aa:ab:de:0e:fe:b8:e6:23:09:f9: 1e:1b:50:aa:57:f7:fd:bd:12:93:7c:81:cd:d6:b7: 91:d2:e4:1d:83:51:a9:12:b7:fa:4d:1f:c3:09:bf: 20:8b:37:5b:19:5a:ea:0c:3f:c8:b0:a2:29:c8:c7: a8:8a:86:cf:6a:1e:b2:02:33:4c:1d:68:d9:af:64: 72:b1:dd:cc:d3:a3:65:17:27:8c:b0:41:7a:df:64: a8:0c:25:b3:46:7c:74:ec:d6:9d:c2:7b:3f:07:a5: b3:b4:64:4f:10:71:2a:f3:96:ac:e8:df:c5:40:2f: cf:c0:f0:63:d6:f5:6d:5a:a2:f6:73:06:a9:cf:11: fb:b6:89:99:69:8f:6c:3c:08:f7:74:a8:74:9a:d0: cc:0d:02:37:8e:64:69:e2:67:41:ce:74:8e:c2:68: 3d:c6:10:8e:db:49:ee:54:e9:73:60:12:79:02:64: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A9:C1:00:65:33:97:0F:0A:6E:E2:52:B2:76:04:7E:0E:0B:91:E0 X509v3 Authority Key Identifier: keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:62:9e:5a:64:9e:c3:ad:c8:66:6b:23:92:e3:e3:33:00:3f: 2b:b7:a2:d7:81:29:7d:27:7e:b8:54:8a:8c:5d:d3:8c:8a:5b: d2:aa:ca:2a:da:ef:e4:83:82:5e:74:59:da:ef:7a:43:9c:eb: f6:a6:f9:13:9b:20:b5:f3:92:f5:85:4f:da:88:ca:75:c7:66: 19:ca:f6:c9:8b:71:8f:5a:b0:4b:c3:62:16:ec:cc:fd:fb:dc: d9:65:92:15:b0:fa:19:12:85:cb:3c:63:72:e6:f6:a6:78:b2: b2:36:ef:1b:34:5c:bc:6e:61:94:0f:7c:a1:03:5d:23:b8:1b: 0f:ec:c1:b9:6c:3c:b1:22:e2:93:ae:1f:ff:b4:a0:72:e5:bc: b9:a3:dd:3e:f6:0c:40:db:86:87:7a:f5:94:b4:0a:41:fe:1d: 3d:cf:85:5f:8a:59:1b:61:04:14:2a:93:7d:97:bf:a9:01:7c: 75:c0:e2:87:a9:44:9d:02:ff:e5:fa:2f:4b:fe:ad:b2:51:c8: aa:be:e2:b8:cf:83:f2:72:a2:c6:bc:33:60:b9:51:06:0a:dd: 65:4f:03:27:1e:1e:eb:1e:65:0e:16:39:db:fb:84:e3:e7:cd: dd:6d:19:af:31:25:b9:5b:c8:84:98:ee:88:29:50:18:d7:a7: 7f:1c:bd:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ek1KBVeK9Db0Wi7+9qkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxY2UyZTU3ZjZmODYyY2EzMDU2ZTVmZDViM2U2ZWFjMzU1 NDA0MDEwHhcNMjUxMjA2MjMwMTE2WhcNMjUxMjA3MjMwMTE2WjAzMTEwLwYDVQQD Eyg3Y2E5YzEwMDY1MzM5NzBmMGE2ZWUyNTJiMjc2MDQ3ZTBlMGI5MWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MI6VkXbAutFtp2BTC/0j8R55nbt ZHVvMUNMU+71DmqvdXxnMZ8800ZDllR6Wdxp6LTkJJQa4/UZtYKtnYGqWfXbjLPZ HRnD0JhskJJKz6qr3g7+uOYjCfkeG1CqV/f9vRKTfIHN1reR0uQdg1GpErf6TR/D Cb8gizdbGVrqDD/IsKIpyMeoiobPah6yAjNMHWjZr2Rysd3M06NlFyeMsEF632So DCWzRnx07Nadwns/B6WztGRPEHEq85as6N/FQC/PwPBj1vVtWqL2cwapzxH7tomZ aY9sPAj3dKh0mtDMDQI3jmRp4mdBznSOwmg9xhCO20nuVOlzYBJ5AmRkHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHypwQBlM5cPCm7iUrJ2BH4OC5HgMB8GA1UdIwQY MBaAFGHOLlf2+GLKMFbl/Vs+bqw1VAQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzIt OTkwMzg1NTU5ZDFjLzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzItOTkwMzg1NTU5ZDFj LzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWKeWmSe w63IZmsjkuPjMwA/K7ei14EpfSd+uFSKjF3TjIpb0qrKKtrv5IOCXnRZ2u96Q5zr 9qb5E5sgtfOS9YVP2ojKdcdmGcr2yYtxj1qwS8NiFuzM/fvc2WWSFbD6GRKFyzxj cub2pniysjbvGzRcvG5hlA98oQNdI7gbD+zBuWw8sSLik64f/7SgcuW8uaPdPvYM QNuGh3r1lLQKQf4dPc+FX4pZG2EEFCqTfZe/qQF8dcDih6lEnQL/5fovS/6tslHI qr7iuM+D8nKixrwzYLlRBgrdZU8DJx4e6x5lDhY52/uE4+fN3W0ZrzEluVvIhJju iClQGNenfxy9SA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:34 2025 by rpki-client