This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json) Hash identifier: rszgJbHyuN3T4bp78z95kxz/5CvwLX9j34uYU04o48Q= Subject key identifier: 29:08:34:63:68:FC:A7:A4:73:D5:B3:80:22:65:F2:F9:BE:04:16:C6 Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec Certificate serial: 019B10134777BC7CEF13A2CCA3DCF9406866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft Manifest number: 0459 Signing time: Fri 12 Dec 2025 01:00:57 +0000 Manifest this update: Fri 12 Dec 2025 01:00:57 +0000 Manifest next update: Sat 13 Dec 2025 01:00:57 +0000 Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=) 2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: d2XyR96r+yYjpabEm5ZlgE6BpT6hbEswPQftoLIFXBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:47:77:bc:7c:ef:13:a2:cc:a3:dc:f9:40:68:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec Validity Not Before: Dec 12 01:00:57 2025 GMT Not After : Dec 13 01:00:57 2025 GMT Subject: CN=2908346368fca7a473d5b3802265f2f9be0416c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:68:b0:c9:a8:e7:7b:1e:e1:89:37:5c:86: 37:63:ea:87:6f:f1:b5:65:52:98:4a:44:a1:3d:7b: 18:4c:63:e6:6f:5f:9a:b1:26:41:38:9a:fc:a4:3d: e7:18:68:8d:fc:a9:98:b3:9e:fb:fc:bb:ce:44:f5: 6c:98:a3:06:b6:d5:ff:40:0e:e9:2e:bf:be:05:34: 0b:0f:39:90:4a:19:7e:59:ab:cb:a3:ab:f1:90:c0: dc:82:91:82:b0:85:e2:5c:71:e5:4a:34:42:4b:28: 74:42:c8:aa:8c:a7:6d:36:b0:92:ad:99:c1:8b:49: 8e:82:ac:81:e2:94:07:8e:40:49:44:05:14:3e:76: 87:9e:37:9e:d8:00:30:14:a8:e9:f7:a2:db:cf:d9: c9:88:cb:1a:c6:0f:11:98:57:ed:d3:6b:6a:1e:97: 0c:cf:59:47:ab:ab:8b:a8:b2:9d:b6:9d:63:f9:3f: 91:52:91:12:1d:d9:2c:50:e4:5d:ad:e9:f8:12:75: 73:03:6a:a3:f2:c8:cb:6c:11:9f:1f:84:94:7b:0a: 6e:f8:eb:a7:cf:b7:17:ef:01:f7:11:d9:52:71:2e: 52:85:09:ad:f2:c0:ac:bf:e8:55:d3:14:c1:d5:38: b3:d6:59:fd:f2:8c:78:1b:d6:2b:40:c4:f0:ef:a7: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:08:34:63:68:FC:A7:A4:73:D5:B3:80:22:65:F2:F9:BE:04:16:C6 X509v3 Authority Key Identifier: keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fe:c4:98:5a:30:18:4c:04:d2:0e:df:27:6a:10:53:64:90: 09:dc:4d:38:ee:b9:f9:f0:e4:a4:0e:e4:2f:ca:69:69:11:14: d8:37:34:3f:84:4f:1f:99:c1:c9:cb:54:e9:df:fd:bf:2c:cd: 10:09:4b:ed:fd:33:b1:ab:2d:b3:73:9f:8f:fe:6a:01:70:b6: b7:11:6f:ea:2f:c5:e1:5e:a8:51:c4:82:66:31:ee:a3:9d:55: 8f:98:e2:08:68:f6:7a:6a:b0:0e:90:93:7d:85:e9:87:62:d8: 2e:ab:7f:9e:5e:c7:63:af:6e:d5:18:f3:29:23:87:59:5c:21: b3:02:fe:ab:e7:8e:e5:89:74:5a:5a:a1:36:bb:45:a3:10:d5: ff:65:c5:bd:ab:e8:f7:2d:0e:3b:4b:7a:41:e1:5d:05:31:c7: 72:78:94:0c:5c:9f:99:88:b6:84:05:33:97:d4:d5:11:8c:d5: 95:83:11:b5:93:75:3b:c9:13:f8:20:b8:da:b0:6d:8b:c8:d5: 08:0b:13:30:7a:67:f2:53:79:57:f1:53:4a:62:34:42:77:83: b2:5e:4d:eb:81:2d:fc:03:be:ae:58:37:7d:1f:f0:63:a2:8a: a7:a8:7f:c7:3c:70:7b:ec:c9:b5:5d:b3:c2:a4:fc:f6:d5:d7: 26:8b:d6:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE0d3vHzvE6LMo9z5QGhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5 Yzg3ZWMwHhcNMjUxMjEyMDEwMDU3WhcNMjUxMjEzMDEwMDU3WjAzMTEwLwYDVQQD EygyOTA4MzQ2MzY4ZmNhN2E0NzNkNWIzODAyMjY1ZjJmOWJlMDQxNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpxosMmo53se4Yk3XIY3Y+qHb/G1 ZVKYSkShPXsYTGPmb1+asSZBOJr8pD3nGGiN/KmYs577/LvORPVsmKMGttX/QA7p Lr++BTQLDzmQShl+WavLo6vxkMDcgpGCsIXiXHHlSjRCSyh0QsiqjKdtNrCSrZnB i0mOgqyB4pQHjkBJRAUUPnaHnjee2AAwFKjp96Lbz9nJiMsaxg8RmFft02tqHpcM z1lHq6uLqLKdtp1j+T+RUpESHdksUORdren4EnVzA2qj8sjLbBGfH4SUewpu+Oun z7cX7wH3EdlScS5ShQmt8sCsv+hV0xTB1Tiz1ln98ox4G9YrQMTw76fw1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkINGNo/Kekc9WzgCJl8vm+BBbGMB8GA1UdIwQY MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAef7EmFow GEwE0g7fJ2oQU2SQCdxNOO65+fDkpA7kL8ppaREU2Dc0P4RPH5nByctU6d/9vyzN EAlL7f0zsasts3Ofj/5qAXC2txFv6i/F4V6oUcSCZjHuo51Vj5jiCGj2emqwDpCT fYXph2LYLqt/nl7HY69u1RjzKSOHWVwhswL+q+eO5Yl0WlqhNrtFoxDV/2XFvavo 9y0OO0t6QeFdBTHHcniUDFyfmYi2hAUzl9TVEYzVlYMRtZN1O8kT+CC42rBti8jV CAsTMHpn8lN5V/FTSmI0QneDsl5N64Et/AO+rlg3fR/wY6KKp6h/xzxwe+zJtV2z wqT89tXXJovWqg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:41 2025 by rpki-client