This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json) Hash identifier: eUKO5xrLUT1zz4JObc1PEGQ//OY/v8TGLoM872sk32A= Subject key identifier: 25:15:ED:65:6D:FD:9B:75:62:6A:D8:D3:8A:49:05:79:BF:4C:74:6A Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Certificate serial: 019B2EFA1AAD56DA544020646F43934F4FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft Manifest number: 161C Signing time: Thu 18 Dec 2025 01:01:41 +0000 Manifest this update: Thu 18 Dec 2025 01:01:41 +0000 Manifest next update: Fri 19 Dec 2025 01:01:41 +0000 Files and hashes: 1: Ky7rxpR-4kSoR04Qa7eCVK5uiAA.roa (hash: 79v9RJlNPMb159U3SJ5gXF4cXCcoiW5a6vs+5ie+7Wo=) 2: Zc10HX1foB49pMgA50Z_9jpZwkI.roa (hash: 2g9yRUzjmd9wC7gYwkCUgnhu5bqK4zqTow7PrbYY/ZM=) 3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: r0ld9zfuFUwANOZtnAW8wJoysHv4at2uAx73OvlGT0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:1a:ad:56:da:54:40:20:64:6f:43:93:4f:4f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Validity Not Before: Dec 18 01:01:41 2025 GMT Not After : Dec 19 01:01:41 2025 GMT Subject: CN=2515ed656dfd9b75626ad8d38a490579bf4c746a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:69:c6:d9:7f:dc:b3:97:5e:8f:62:24:82: 2a:c9:ec:48:2a:e6:27:aa:4b:46:1a:26:ac:0b:e2: 0d:e2:43:2e:83:6c:9d:23:c9:e7:2b:47:30:f9:03: 33:81:6c:f7:c7:31:f1:54:97:73:21:a7:a7:23:f8: f1:24:a5:c7:7d:4f:58:bc:f2:d7:fe:df:9d:1e:d5: 38:1d:25:70:5d:db:ff:ad:d5:d2:05:16:7f:6c:38: 58:4f:01:04:16:a6:51:9f:f1:b6:fe:99:06:4a:75: 35:5a:d9:b6:31:5d:05:df:e0:8d:39:3c:71:00:9c: d6:14:ab:bf:05:cb:f0:12:b1:e4:b7:4f:3a:b7:62: b7:f7:60:f0:a8:ee:68:42:10:f8:7d:51:54:3b:9e: 1e:a0:3e:32:3c:ed:58:de:a4:f9:77:46:d8:39:c3: 25:68:cc:d2:0f:dd:3a:b2:8e:90:1c:d1:bc:f1:05: a8:41:aa:02:0e:72:4b:62:12:b5:ec:7a:cb:12:b2: 04:07:25:a2:22:1b:b8:ea:d4:f6:f1:09:8b:2b:0e: a6:a3:34:c8:f9:97:c4:d2:f3:9f:26:6a:64:0b:c9: 44:f1:9d:9f:e2:88:ae:04:5d:b4:43:b9:33:b9:11: ed:2b:c9:ba:71:83:00:9e:0e:be:8c:14:6e:a5:05: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:15:ED:65:6D:FD:9B:75:62:6A:D8:D3:8A:49:05:79:BF:4C:74:6A X509v3 Authority Key Identifier: keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:58:a4:9c:9d:46:a9:34:42:c6:9e:86:4f:17:58:f5:64:3c: 2e:10:34:f7:c9:5b:69:52:e3:18:89:fa:fd:4c:b1:66:1b:78: 3b:82:8f:2b:7a:4f:99:37:1c:f5:45:bd:40:c3:bb:be:f0:1d: c6:23:a4:71:98:64:9e:e1:88:12:c8:3f:23:b2:a2:49:27:b8: 62:e7:26:10:cb:19:3b:ff:01:37:0e:8c:7d:d5:18:ac:c2:75: 96:d7:b2:ec:80:9f:5d:73:41:1a:80:bb:b0:88:ed:bd:0e:33: c4:9e:7f:07:76:2e:0d:d1:f1:60:8a:6e:a2:59:de:b8:fe:2c: 2a:6c:98:25:22:df:0c:84:39:5e:8a:0b:7f:ef:1e:b7:69:1d: 78:1e:ee:5d:d4:5d:01:2f:c5:2a:8f:58:1d:2c:89:12:d5:28: 57:9a:fd:56:4a:1a:9c:85:ee:ea:5d:bf:44:a2:e6:d2:03:5d: e2:ae:b0:ec:a3:b3:b2:b3:3d:6d:0d:87:14:58:0b:e2:63:17: 00:5c:8b:96:df:8e:75:d0:15:f6:0c:66:81:54:75:e6:69:3d: 29:06:b3:b3:36:21:ce:9f:0f:7c:10:4c:dc:cf:57:a0:69:63: 19:f4:1c:ea:26:c1:3d:de:2a:dd:23:9f:1c:6c:53:c5:94:d5: 4c:39:dd:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+hqtVtpUQCBkb0OTT0+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0 Y2JkYmUwHhcNMjUxMjE4MDEwMTQxWhcNMjUxMjE5MDEwMTQxWjAzMTEwLwYDVQQD EygyNTE1ZWQ2NTZkZmQ5Yjc1NjI2YWQ4ZDM4YTQ5MDU3OWJmNGM3NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvppxtl/3LOXXo9iJIIqyexIKuYn qktGGiasC+IN4kMug2ydI8nnK0cw+QMzgWz3xzHxVJdzIaenI/jxJKXHfU9YvPLX /t+dHtU4HSVwXdv/rdXSBRZ/bDhYTwEEFqZRn/G2/pkGSnU1Wtm2MV0F3+CNOTxx AJzWFKu/BcvwErHkt086t2K392DwqO5oQhD4fVFUO54eoD4yPO1Y3qT5d0bYOcMl aMzSD906so6QHNG88QWoQaoCDnJLYhK17HrLErIEByWiIhu46tT28QmLKw6mozTI +ZfE0vOfJmpkC8lE8Z2f4oiuBF20Q7kzuRHtK8m6cYMAng6+jBRupQVk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUV7WVt/Zt1YmrY04pJBXm/THRqMB8GA1UdIwQY MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It ODNlNTVjNWY2ZjdkLzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFiknJ1G qTRCxp6GTxdY9WQ8LhA098lbaVLjGIn6/UyxZht4O4KPK3pPmTcc9UW9QMO7vvAd xiOkcZhknuGIEsg/I7KiSSe4YucmEMsZO/8BNw6MfdUYrMJ1ltey7ICfXXNBGoC7 sIjtvQ4zxJ5/B3YuDdHxYIpuolneuP4sKmyYJSLfDIQ5XooLf+8et2kdeB7uXdRd AS/FKo9YHSyJEtUoV5r9VkoanIXu6l2/RKLm0gNd4q6w7KOzsrM9bQ2HFFgL4mMX AFyLlt+OddAV9gxmgVR15mk9KQazszYhzp8PfBBM3M9XoGljGfQc6ibBPd4q3SOf HGxTxZTVTDndAw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:20 2025 by rpki-client