This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json) Hash identifier: iqaWkEaZ/Tm6RVMyT0VXX8arr3ITEaNnivemjSeiZxQ= Subject key identifier: 3D:58:83:FC:84:B3:8F:69:9D:AD:00:0A:D6:F3:99:03:1D:8A:16:69 Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d Certificate serial: 019AF23F6DCF46E569E42F66750EB3B4AE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft Manifest number: 0C49 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: 1pfflrWL-bwxSYtCoyCJ-yY9sDg.roa (hash: GQomu/TYWDDZCVUe6xLQFaU9+r7oU6WwcMu5JseyRnc=) 2: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: 9lRPxuoUW5REuVrhZthOUU2xawQpeh8LiiXdTMzy0jU=) 3: gGh1amzB-Jk0RfzueDLNl64yqE4.roa (hash: 38qHDRBSH9mSj8MHcmispF3MzSiDWYpbmwEncu1yUrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6d:cf:46:e5:69:e4:2f:66:75:0e:b3:b4:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=3d5883fc84b38f699dad000ad6f399031d8a1669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:31:eb:d5:35:d3:56:76:13:1f:de:2e:7c: fc:d5:40:01:e4:e2:f8:02:8f:17:62:9d:79:58:dc: 14:1c:85:dc:5c:4a:4a:c1:3e:41:53:81:67:ca:31: 99:2c:a5:17:0e:12:fc:ef:1b:98:e2:ec:4f:d3:92: 25:72:de:8c:b0:fe:ef:1e:94:e6:49:07:f5:3e:36: 4d:4d:27:ce:be:35:9e:fc:fb:b7:b6:44:91:d1:9b: b7:65:dd:dc:53:df:a4:86:b2:1a:8b:76:59:c8:3b: 4c:a5:ec:da:a6:12:7f:2f:a1:aa:40:86:7a:9e:15: ba:7d:e4:00:a8:2e:ab:68:5f:65:e8:35:7b:64:70: 45:23:2e:bb:d8:a5:3b:bb:1a:de:3f:fb:2d:4e:4c: e7:a3:9a:23:3c:39:e5:5d:ec:a6:9e:75:5f:aa:b6: 7c:80:83:5a:08:9f:97:56:e7:66:19:54:88:68:46: 9e:0e:a0:74:85:0e:6f:99:14:82:f6:73:6b:9f:de: 93:17:53:ce:80:69:aa:d6:d9:7c:9e:55:8d:73:3a: 48:d3:df:74:da:7f:7f:12:59:4d:60:c6:df:6c:55: dd:f5:de:61:97:b1:6a:d0:c0:e5:cd:f6:e5:09:87: ed:06:4d:63:14:a2:82:4c:8f:4c:16:32:ef:fb:c6: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:58:83:FC:84:B3:8F:69:9D:AD:00:0A:D6:F3:99:03:1D:8A:16:69 X509v3 Authority Key Identifier: keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4e:f5:d1:4e:ea:ea:b2:db:b7:b9:a1:a1:72:29:13:59:b1: b2:c3:0f:ef:d2:01:1e:98:84:cf:ba:43:15:92:40:93:27:31: 48:51:c6:04:2f:b5:16:39:e2:ac:1c:b1:71:69:96:fa:30:81: 86:5b:17:68:58:87:05:09:3a:f9:31:8a:01:e2:7c:2b:6a:12: a6:76:ef:b3:4c:3a:6f:22:2b:60:5f:d8:be:de:48:7d:68:1e: 12:31:54:42:f1:42:36:1d:ac:bb:79:a4:36:f5:94:b9:23:28: f0:95:ff:59:90:a4:b1:21:23:2f:60:6e:e1:e7:87:10:5f:83: a5:d9:15:64:06:5c:cd:d5:b5:38:07:e1:28:59:97:33:34:55: 3c:6d:22:44:ff:af:2e:2e:ec:b5:c1:87:d8:10:d7:a1:9d:99: f8:8f:9c:d8:c8:e4:83:91:83:c3:2f:e7:1c:7d:36:0f:fc:85: 56:31:f2:24:1e:9d:61:b9:cb:40:2f:46:06:31:ae:8a:29:af: 2c:1f:cc:5f:85:8e:7c:a0:fd:7f:89:db:4a:84:68:de:9a:4e: 0b:62:b3:44:27:8b:a9:e6:ff:8b:6e:42:9a:29:65:2a:22:eb: d8:63:db:08:6e:63:f8:f2:d8:bd:8d:4c:f3:51:5d:24:26:e3: bf:ac:96:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP23PRuVp5C9mdQ6ztK6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODc3ZjRjZTBkMzYxNjE3NzI0ZDRiMjg5YTg5MThjNWM2 ZDcyMmQwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EygzZDU4ODNmYzg0YjM4ZjY5OWRhZDAwMGFkNmYzOTkwMzFkOGExNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCwx69U101Z2Ex/eLnz81UAB5OL4 Ao8XYp15WNwUHIXcXEpKwT5BU4FnyjGZLKUXDhL87xuY4uxP05Ilct6MsP7vHpTm SQf1PjZNTSfOvjWe/Pu3tkSR0Zu3Zd3cU9+khrIai3ZZyDtMpezaphJ/L6GqQIZ6 nhW6feQAqC6raF9l6DV7ZHBFIy672KU7uxreP/stTkzno5ojPDnlXeymnnVfqrZ8 gINaCJ+XVudmGVSIaEaeDqB0hQ5vmRSC9nNrn96TF1POgGmq1tl8nlWNczpI0990 2n9/EllNYMbfbFXd9d5hl7Fq0MDlzfblCYftBk1jFKKCTI9MFjLv+8YW9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1Yg/yEs49pna0ACtbzmQMdihZpMB8GA1UdIwQY MBaAFGGHf0zg02FhdyTUsomokYxcbXItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEt YzcyMjIxN2U1M2I2LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jNDNiMmYtMTBiYS00MTcwLWI1MjEtYzcyMjIxN2U1M2I2 LzEvWVlkX1RPRFRZV0YzSk5TeWlhaVJqRnh0Y2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE710U7q 6rLbt7mhoXIpE1mxssMP79IBHpiEz7pDFZJAkycxSFHGBC+1FjnirByxcWmW+jCB hlsXaFiHBQk6+TGKAeJ8K2oSpnbvs0w6byIrYF/Yvt5IfWgeEjFUQvFCNh2su3mk NvWUuSMo8JX/WZCksSEjL2Bu4eeHEF+DpdkVZAZczdW1OAfhKFmXMzRVPG0iRP+v Li7stcGH2BDXoZ2Z+I+c2Mjkg5GDwy/nHH02D/yFVjHyJB6dYbnLQC9GBjGuiimv LB/MX4WOfKD9f4nbSoRo3ppOC2KzRCeLqeb/i25CmillKiLr2GPbCG5j+PLYvY1M 81FdJCbjv6yWWA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:12 2025 by rpki-client