This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json) Hash identifier: gvig2v4AoAzhlRBtw06FLKKdSXmvjfH26E8iTj7fIsw= Subject key identifier: A2:36:88:2C:89:05:1E:CA:4D:5A:15:70:61:8E:9D:A4:19:BE:1A:98 Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Certificate serial: 019B10EF466BE1909DFEB0E21CD5ED3B812C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 05:01:15 +0000 Manifest this update: Fri 12 Dec 2025 05:01:15 +0000 Manifest next update: Sat 13 Dec 2025 05:01:15 +0000 Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=) 2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: WKh992xnASVB22TjuLsywtM3ClFx8Y1+Qcgz8w2H8Fw=) 3: xrWOE_nW0Gwg8_uXXdLjv5S3bsk.roa (hash: LG+6VKhGHvSGTVuGjhuxo2fqbg4w3RjW0n+axpRLJ0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:46:6b:e1:90:9d:fe:b0:e2:1c:d5:ed:3b:81:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Validity Not Before: Dec 12 05:01:15 2025 GMT Not After : Dec 13 05:01:15 2025 GMT Subject: CN=a236882c89051eca4d5a1570618e9da419be1a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:dc:d8:ea:92:cb:d7:b9:88:ec:b8:ff:0a: ff:fd:6c:3c:82:45:15:92:ba:28:d5:27:8c:7c:cf: ec:de:9d:5e:f8:c7:89:c9:cb:a8:a6:74:07:83:97: 70:02:3c:5c:a9:0b:3b:ff:e0:bd:ea:54:06:5b:15: fa:0a:a4:89:56:5f:4d:b9:66:07:90:36:0f:25:a6: 77:e4:ce:f7:e9:91:30:fe:18:30:b9:71:bd:71:fd: b8:62:db:93:3f:7a:76:97:24:e1:c2:c8:f1:b5:66: c9:b1:6d:8b:f5:2b:3d:ea:d8:27:26:30:09:f5:92: 42:04:ca:0b:8e:71:10:7a:e2:f5:93:d2:6e:22:dc: d6:0d:3d:d5:9a:68:7d:10:52:98:16:b5:cf:79:89: 7a:c6:7d:5a:03:0d:8c:64:b8:6f:06:4c:f6:29:15: 3a:35:28:1f:3f:50:41:ff:b8:49:e8:23:88:5e:a1: d0:a4:a6:04:ae:73:53:77:fa:32:1d:74:8b:ba:12: 5a:f2:ed:d2:b4:36:8e:18:c1:a3:04:39:ba:5b:5f: 5a:4d:18:05:83:ff:05:9e:9f:ab:d2:57:11:2c:2c: 2e:7f:19:99:fc:de:43:68:d3:4d:48:7b:46:61:18: 83:69:9c:e8:a0:ad:5e:d5:2a:bd:d7:16:2f:62:95: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:88:2C:89:05:1E:CA:4D:5A:15:70:61:8E:9D:A4:19:BE:1A:98 X509v3 Authority Key Identifier: keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ed:ae:ae:a4:03:54:f6:29:0a:d4:e9:f6:db:67:19:82:36: 31:46:a5:c0:d8:4a:cb:c1:96:c5:20:ad:a3:70:e2:cb:3e:43: 49:fd:a9:56:a3:e7:9f:f8:14:7c:e3:ea:41:c0:68:74:c7:81: 4f:0b:41:3c:6b:aa:45:2f:43:26:ca:a0:b4:2f:95:b8:4a:89: 4a:d1:6d:e1:dd:a0:19:d5:3d:22:ef:fd:60:96:80:4e:d0:ed: ae:41:8f:00:9a:27:eb:73:9e:4e:d3:d1:e7:3d:50:15:9c:b9: e1:fe:5e:d1:f2:63:a7:51:c9:60:5f:59:a5:18:3e:e3:72:6a: 4b:ba:ef:ce:e4:f3:08:17:a1:60:25:5d:4f:53:ab:55:1d:89: b7:41:48:74:70:8b:21:a3:b9:5d:ce:e9:df:7b:c0:87:18:13: 6a:a4:03:75:c2:36:a1:43:0c:89:b4:74:d2:f1:78:1c:ed:6c: a4:59:81:b2:9e:5d:74:83:3e:92:51:49:0c:07:88:7c:b0:f2: 95:08:fe:ab:64:db:9f:dd:29:b9:ca:e0:a9:5a:0c:5f:13:b9: 75:d5:58:22:58:c1:f8:b3:f2:b3:39:2a:a1:d2:6d:96:a6:d7: 2c:17:73:d0:1a:97:6b:d2:82:2b:6c:41:9d:37:1e:24:48:8f: f1:7b:f5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ70Zr4ZCd/rDiHNXtO4EsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz NzNlMmEwHhcNMjUxMjEyMDUwMTE1WhcNMjUxMjEzMDUwMTE1WjAzMTEwLwYDVQQD EyhhMjM2ODgyYzg5MDUxZWNhNGQ1YTE1NzA2MThlOWRhNDE5YmUxYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGHc2OqSy9e5iOy4/wr//Ww8gkUV kroo1SeMfM/s3p1e+MeJycuopnQHg5dwAjxcqQs7/+C96lQGWxX6CqSJVl9NuWYH kDYPJaZ35M736ZEw/hgwuXG9cf24YtuTP3p2lyThwsjxtWbJsW2L9Ss96tgnJjAJ 9ZJCBMoLjnEQeuL1k9JuItzWDT3Vmmh9EFKYFrXPeYl6xn1aAw2MZLhvBkz2KRU6 NSgfP1BB/7hJ6COIXqHQpKYErnNTd/oyHXSLuhJa8u3StDaOGMGjBDm6W19aTRgF g/8Fnp+r0lcRLCwufxmZ/N5DaNNNSHtGYRiDaZzooK1e1Sq91xYvYpXeuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKI2iCyJBR7KTVoVcGGOnaQZvhqYMB8GA1UdIwQY MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO2urqQD VPYpCtTp9ttnGYI2MUalwNhKy8GWxSCto3Diyz5DSf2pVqPnn/gUfOPqQcBodMeB TwtBPGuqRS9DJsqgtC+VuEqJStFt4d2gGdU9Iu/9YJaATtDtrkGPAJon63OeTtPR 5z1QFZy54f5e0fJjp1HJYF9ZpRg+43JqS7rvzuTzCBehYCVdT1OrVR2Jt0FIdHCL IaO5Xc7p33vAhxgTaqQDdcI2oUMMibR00vF4HO1spFmBsp5ddIM+klFJDAeIfLDy lQj+q2Tbn90pucrgqVoMXxO5ddVYIljB+LPyszkqodJtlqbXLBdz0BqXa9KCK2xB nTceJEiP8Xv1dw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:51:21 2025 by rpki-client