This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json) Hash identifier: Uphbbzx/JVaECfJcKWLHPbhqJMDGgxo7WBHOaqAParU= Subject key identifier: 2B:9C:9A:D9:4C:AE:A9:0E:8F:B1:89:A5:E8:31:B4:23:41:20:EF:14 Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9 Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9 Certificate serial: 019B3C7F22378C3776BA90D46BE0342DEF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft Manifest number: 11C8 Signing time: Sat 20 Dec 2025 16:02:03 +0000 Manifest this update: Sat 20 Dec 2025 16:02:03 +0000 Manifest next update: Sun 21 Dec 2025 16:02:03 +0000 Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: dwmo05lTvdmlQHBMiZr7UuOsrzb1RbOFT+JsE46LhcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:22:37:8c:37:76:ba:90:d4:6b:e0:34:2d:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9 Validity Not Before: Dec 20 16:02:03 2025 GMT Not After : Dec 21 16:02:03 2025 GMT Subject: CN=2b9c9ad94caea90e8fb189a5e831b4234120ef14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:71:30:c1:56:59:9e:da:fc:f1:3b:ee:fd: 65:a5:80:ab:4f:31:9b:40:04:1a:3e:61:3a:3f:24: 59:12:d0:de:73:91:9a:64:63:87:0e:94:0b:ea:c2: 1f:a3:24:32:1a:b5:e3:91:d6:f0:94:a6:58:fa:1e: c7:a5:10:e5:b5:79:78:bf:bc:ed:0d:8d:58:9a:67: 62:10:ff:56:24:60:c2:54:19:2a:3c:42:51:32:35: 28:f2:3b:d7:18:2b:2d:e5:17:d4:67:a9:57:b4:e9: de:66:e0:92:db:36:87:f2:a8:bb:25:9f:aa:0a:4c: a9:3d:0d:f2:90:ec:74:d2:85:a5:33:17:83:e0:42: 58:b1:e4:1c:69:2f:2a:dd:fe:4a:aa:71:e6:0d:68: d4:99:a4:ab:dd:c4:74:b4:f3:ad:86:c6:ff:ab:59: 96:55:06:7c:bd:15:a5:d2:29:a6:17:56:99:3f:19: 08:32:74:6f:6d:6a:14:b2:e5:48:c3:de:fc:f7:3b: c8:99:2d:61:96:27:2e:b4:84:35:e2:8e:fb:2a:ad: 8f:e1:cb:72:a2:61:33:b4:ee:51:4b:e4:42:f0:65: 32:69:aa:a8:57:35:5f:03:a5:e3:5c:c8:9f:75:97: db:83:d2:fa:23:3a:c8:ed:ab:94:f4:be:e0:84:bd: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:9A:D9:4C:AE:A9:0E:8F:B1:89:A5:E8:31:B4:23:41:20:EF:14 X509v3 Authority Key Identifier: keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:de:ad:c8:20:3e:e9:c7:ea:17:a9:54:8f:e9:f6:97:fb:d3: 5c:e9:d2:8e:82:23:81:55:bf:6e:58:c4:1d:dc:86:90:a1:b0: 9a:b2:eb:a6:1d:05:e1:27:b8:b6:5b:8a:70:03:7a:45:9f:31: ff:2e:09:83:18:69:22:a8:34:c1:28:8c:da:02:14:b2:ca:59: c0:dd:17:1d:91:80:70:ea:0c:72:2b:c2:77:ab:fa:be:4b:a0: b6:93:41:9b:0a:51:59:a2:e6:d4:42:a1:20:3b:3d:af:5b:ef: 48:9d:b6:25:b8:82:a6:98:ca:d3:c8:a9:73:f0:78:37:ba:d4: 71:fe:b6:91:eb:40:4f:e9:bf:b0:5c:a0:84:c0:e8:3c:53:8a: c1:a3:fe:7f:20:ea:47:c5:8a:bf:e1:5e:b8:56:f1:09:12:a3: 33:fa:56:ec:b3:2e:0b:02:fe:41:ca:18:75:f2:5a:92:3f:b9: 52:97:3e:3d:6c:bf:03:e5:7b:c8:49:72:5a:e6:0b:ab:7f:8a: 76:5d:a0:f8:56:9e:13:09:03:ff:79:94:cf:0c:98:52:81:ea: 0a:3c:66:c3:5e:e4:a0:48:b3:7b:31:7c:a7:b8:db:c7:ab:68: 79:56:c4:91:b2:e0:39:7c:e1:60:da:22:19:63:d8:d2:be:9c: db:46:fc:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fyI3jDd2upDUa+A0Le8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj ZDRhYTkwHhcNMjUxMjIwMTYwMjAzWhcNMjUxMjIxMTYwMjAzWjAzMTEwLwYDVQQD EygyYjljOWFkOTRjYWVhOTBlOGZiMTg5YTVlODMxYjQyMzQxMjBlZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklVxMMFWWZ7a/PE77v1lpYCrTzGb QAQaPmE6PyRZEtDec5GaZGOHDpQL6sIfoyQyGrXjkdbwlKZY+h7HpRDltXl4v7zt DY1YmmdiEP9WJGDCVBkqPEJRMjUo8jvXGCst5RfUZ6lXtOneZuCS2zaH8qi7JZ+q CkypPQ3ykOx00oWlMxeD4EJYseQcaS8q3f5KqnHmDWjUmaSr3cR0tPOthsb/q1mW VQZ8vRWl0immF1aZPxkIMnRvbWoUsuVIw9789zvImS1hlicutIQ14o77Kq2P4cty omEztO5RS+RC8GUyaaqoVzVfA6XjXMifdZfbg9L6IzrI7auU9L7ghL2idQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCucmtlMrqkOj7GJpegxtCNBIO8UMB8GA1UdIwQY MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkt6tyCA+ 6cfqF6lUj+n2l/vTXOnSjoIjgVW/bljEHdyGkKGwmrLrph0F4Se4tluKcAN6RZ8x /y4JgxhpIqg0wSiM2gIUsspZwN0XHZGAcOoMcivCd6v6vkugtpNBmwpRWaLm1EKh IDs9r1vvSJ22JbiCppjK08ipc/B4N7rUcf62ketAT+m/sFyghMDoPFOKwaP+fyDq R8WKv+FeuFbxCRKjM/pW7LMuCwL+QcoYdfJakj+5Upc+PWy/A+V7yElyWuYLq3+K dl2g+FaeEwkD/3mUzwyYUoHqCjxmw17koEizezF8p7jbx6toeVbEkbLgOXzhYNoi GWPY0r6c20b8Fg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:36:33 2025 by rpki-client