This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json) Hash identifier: KU8nanBdlEFB5Zk1jB+05tYmmzUZdAJ4SdzN1lSqAs8= Subject key identifier: 2F:75:39:B5:1D:C8:F5:50:77:D5:91:C9:C9:AC:D3:23:69:90:42:6B Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59 Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959 Certificate serial: 019B3B6B908F233427F6B6B850F0A9E9189F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft Manifest number: 0AE5 Signing time: Sat 20 Dec 2025 11:01:03 +0000 Manifest this update: Sat 20 Dec 2025 11:01:03 +0000 Manifest next update: Sun 21 Dec 2025 11:01:03 +0000 Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=) 2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: Pguk4wIeyUGRu2AIdOEsNoXPeWfaglmqa2e7v9DvcEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:90:8f:23:34:27:f6:b6:b8:50:f0:a9:e9:18:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959 Validity Not Before: Dec 20 11:01:03 2025 GMT Not After : Dec 21 11:01:03 2025 GMT Subject: CN=2f7539b51dc8f55077d591c9c9acd3236990426b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:29:24:54:f8:53:54:0e:76:6f:33:6a:65: 86:fc:f6:33:76:52:fe:aa:86:97:ad:19:f5:80:db: ad:f4:ed:89:0a:c6:2f:31:dd:d6:0f:5d:58:ce:21: 08:df:8a:cb:58:fb:5a:9c:69:19:4a:53:c7:fa:7b: 12:4a:7b:c4:a2:b8:fc:8d:2c:52:fa:d7:40:ba:41: e0:85:f1:e7:7f:35:c2:eb:a0:d4:8d:b0:be:32:96: 75:e6:04:71:cd:c7:3b:87:35:a9:ad:52:fb:d4:3d: 47:8c:eb:2d:dc:3a:ef:74:d7:27:7f:27:bd:85:3d: be:e1:ba:67:3a:ee:fb:20:d3:0e:b9:99:88:45:4e: 81:85:6a:65:f8:60:ad:f4:8f:b0:3b:93:5f:fe:e2: d7:70:22:17:63:7a:42:d3:5d:b7:07:9e:c8:91:8a: 7f:35:c1:2d:d5:9a:8a:61:70:3c:ba:51:6f:ca:dd: ee:26:48:75:4d:a2:17:6f:a5:88:93:fe:7b:fc:d7: 6a:ce:18:dd:85:c4:92:e7:32:70:04:20:3b:52:2e: be:77:11:4d:5b:85:8a:a2:d2:90:de:b1:01:70:fc: e9:b1:ed:71:7d:4a:0c:96:9f:fe:d6:7f:c7:bb:57: ab:ad:12:31:82:5e:02:b1:e9:73:f8:20:96:8a:9b: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:39:B5:1D:C8:F5:50:77:D5:91:C9:C9:AC:D3:23:69:90:42:6B X509v3 Authority Key Identifier: keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:54:ab:79:80:d9:80:be:72:83:4b:87:c9:7c:a1:82:f0:a7: c3:ce:63:6d:45:3e:15:64:69:95:03:01:a6:ff:b7:ae:b3:02: f9:24:2a:36:66:d8:15:b8:7f:9f:45:2b:49:1e:5d:19:76:ec: 06:20:5a:06:74:55:b1:b5:2f:6c:14:c8:42:82:77:5d:e3:7e: 3e:ab:93:db:78:4f:d4:61:3d:3a:2e:e0:8a:c1:82:d6:de:2d: b0:7f:e1:7e:b4:f5:18:cc:cc:0c:04:a4:c1:90:36:6c:4b:41: 01:2a:91:58:9a:44:a9:e8:6c:7b:a3:a6:f5:95:c2:e9:4c:c6: 39:2d:24:90:72:cf:cc:0a:4d:f8:66:04:88:07:72:14:7a:bf: a3:05:c5:80:66:1b:bc:3a:d7:55:b6:66:1d:a5:5b:22:3d:a2: 1a:8f:7d:a1:88:ee:1b:a5:21:50:6f:cc:25:9f:c3:1c:a2:17: ba:6c:d9:28:c3:c7:47:32:0e:51:13:54:9e:7d:6b:bc:63:8b: 66:a8:52:eb:6f:7b:a4:34:4f:69:97:70:82:5f:5a:88:1e:75: 51:be:59:08:49:43:0f:b3:26:c1:52:76:fd:06:60:f4:fc:4e: 50:ec:4d:9b:d2:c2:70:f3:2e:95:8b:e8:68:44:6c:3a:5b:0f: cf:75:a6:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5CPIzQn9ra4UPCp6RifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDczNjVlMGNmMzBjYThmY2U5OGM2MjY2MGQxODZhOTc5 YmM5NTkwHhcNMjUxMjIwMTEwMTAzWhcNMjUxMjIxMTEwMTAzWjAzMTEwLwYDVQQD EygyZjc1MzliNTFkYzhmNTUwNzdkNTkxYzljOWFjZDMyMzY5OTA0MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H4pJFT4U1QOdm8zamWG/PYzdlL+ qoaXrRn1gNut9O2JCsYvMd3WD11YziEI34rLWPtanGkZSlPH+nsSSnvEorj8jSxS +tdAukHghfHnfzXC66DUjbC+MpZ15gRxzcc7hzWprVL71D1HjOst3DrvdNcnfye9 hT2+4bpnOu77INMOuZmIRU6BhWpl+GCt9I+wO5Nf/uLXcCIXY3pC0123B57IkYp/ NcEt1ZqKYXA8ulFvyt3uJkh1TaIXb6WIk/57/NdqzhjdhcSS5zJwBCA7Ui6+dxFN W4WKotKQ3rEBcPzpse1xfUoMlp/+1n/Hu1errRIxgl4Cselz+CCWipv9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC91ObUdyPVQd9WRycms0yNpkEJrMB8GA1UdIwQY MBaAFGAHNl4M8wyo/OmMYmYNGGqXm8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTIt Yjc1YjQ5MDQ5ODJmLzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTItYjc1YjQ5MDQ5ODJm LzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglSreYDZ gL5yg0uHyXyhgvCnw85jbUU+FWRplQMBpv+3rrMC+SQqNmbYFbh/n0UrSR5dGXbs BiBaBnRVsbUvbBTIQoJ3XeN+PquT23hP1GE9Oi7gisGC1t4tsH/hfrT1GMzMDASk wZA2bEtBASqRWJpEqehse6Om9ZXC6UzGOS0kkHLPzApN+GYEiAdyFHq/owXFgGYb vDrXVbZmHaVbIj2iGo99oYjuG6UhUG/MJZ/DHKIXumzZKMPHRzIOURNUnn1rvGOL ZqhS6297pDRPaZdwgl9aiB51Ub5ZCElDD7MmwVJ2/QZg9PxOUOxNm9LCcPMulYvo aERsOlsPz3WmQg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:30 2025 by rpki-client