This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json) Hash identifier: vtCyzlG+GS6+Y87P8n7G2XKRWF+MkzD7KJQDSP1nnWU= Subject key identifier: 17:24:56:26:36:CD:73:A6:01:D7:8B:BD:14:F5:A8:E3:CB:3E:3B:4C Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47 Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347 Certificate serial: 019B34C56FF24F93789A05369320E4927506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:01:52 +0000 Manifest this update: Fri 19 Dec 2025 04:01:52 +0000 Manifest next update: Sat 20 Dec 2025 04:01:52 +0000 Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=) 2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: To/M1K83jtsTfl+4tZZAoargskfeTmmJOJxhng3sQto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:6f:f2:4f:93:78:9a:05:36:93:20:e4:92:75:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347 Validity Not Before: Dec 19 04:01:52 2025 GMT Not After : Dec 20 04:01:52 2025 GMT Subject: CN=1724562636cd73a601d78bbd14f5a8e3cb3e3b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:df:a3:ff:0f:fa:a2:a3:7e:28:b9:58:b6: 31:d8:6b:c7:49:44:5a:23:10:6c:61:85:12:88:14: 94:b1:e4:81:ff:8c:44:45:5e:24:41:c8:50:0c:b1: c5:79:4f:a0:fb:eb:11:d0:61:74:b1:20:56:77:ad: 1c:61:e7:d6:4c:f6:00:b7:78:a6:d7:5c:65:bc:a1: d7:50:49:0b:5d:67:9e:23:cc:f3:58:c2:39:7f:a7: ba:5d:32:6f:47:05:ae:99:42:70:5a:35:51:41:be: c3:66:e6:e2:29:68:b9:de:36:32:72:68:8f:bb:da: ff:21:ca:70:f6:95:ce:0c:7b:08:8f:fa:c8:c7:c4: d6:d8:d3:36:dd:bd:cf:db:60:9e:21:19:73:a7:11: 46:9f:c6:a8:cf:04:b6:36:80:18:6a:8b:86:c4:c2: a8:a0:59:70:13:62:77:fe:72:f5:17:a0:2e:fc:da: 6a:b6:56:ba:30:cc:b7:cb:cc:c6:91:0c:c1:12:78: 6f:33:49:69:c6:37:0d:57:8d:fd:24:cc:d3:9e:37: 26:93:87:30:0c:1e:41:ed:1c:f7:12:ba:d6:33:27: fd:3a:1d:a7:dc:d7:70:97:c2:4e:a3:b9:6c:e8:62: 67:2a:a0:87:c5:1c:9d:2b:95:98:41:62:f0:c9:ce: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:24:56:26:36:CD:73:A6:01:D7:8B:BD:14:F5:A8:E3:CB:3E:3B:4C X509v3 Authority Key Identifier: keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d2:cc:e6:21:35:30:70:b3:46:49:c2:34:a8:b7:4a:49:d4: fa:37:2d:a8:af:32:e6:b7:b8:51:e5:50:7c:76:8b:09:c7:b8: 1c:93:a6:48:78:d2:68:06:1e:a9:4d:4b:8e:47:8b:fa:e8:54: d5:29:07:77:5c:e1:aa:4f:cf:53:d6:34:c9:ae:b0:80:3a:cf: c0:2e:ea:da:b2:44:ea:ee:29:7b:9a:bf:21:d2:f8:38:71:b9: b6:4d:05:c3:7c:54:f6:fb:b8:91:a6:98:f7:69:e7:c5:7c:64: 11:34:f1:2d:1c:85:cb:f5:8b:5f:be:07:08:5d:3f:37:6d:e6: 4e:46:a0:39:d4:e7:f5:4a:5e:ca:8b:54:af:2b:dc:7f:a6:4c: 30:c2:2e:3f:78:33:53:6d:3d:8b:c9:03:0f:cd:53:b9:29:4d: 03:39:f9:ec:ea:e2:57:38:11:56:7f:05:c0:e0:d7:8f:d8:31: b3:d3:c1:13:ac:0d:eb:91:b1:74:86:be:ba:c4:ea:d2:5a:2c: 67:52:4c:8c:31:21:1c:32:00:06:ca:ed:91:ed:e4:6b:69:ef: 13:19:26:4f:85:aa:3a:fe:b4:ed:b9:3a:97:c1:89:53:3b:d1: 31:7d:08:0b:00:b3:46:a2:62:19:80:54:e8:ee:4e:58:f0:fd: 68:3d:60:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xW/yT5N4mgU2kyDkknUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz YWEzNDcwHhcNMjUxMjE5MDQwMTUyWhcNMjUxMjIwMDQwMTUyWjAzMTEwLwYDVQQD EygxNzI0NTYyNjM2Y2Q3M2E2MDFkNzhiYmQxNGY1YThlM2NiM2UzYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXTfo/8P+qKjfii5WLYx2GvHSURa IxBsYYUSiBSUseSB/4xERV4kQchQDLHFeU+g++sR0GF0sSBWd60cYefWTPYAt3im 11xlvKHXUEkLXWeeI8zzWMI5f6e6XTJvRwWumUJwWjVRQb7DZubiKWi53jYycmiP u9r/Icpw9pXODHsIj/rIx8TW2NM23b3P22CeIRlzpxFGn8aozwS2NoAYaouGxMKo oFlwE2J3/nL1F6Au/Npqtla6MMy3y8zGkQzBEnhvM0lpxjcNV439JMzTnjcmk4cw DB5B7Rz3ErrWMyf9Oh2n3Ndwl8JOo7ls6GJnKqCHxRydK5WYQWLwyc7AdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBckViY2zXOmAdeLvRT1qOPLPjtMMB8GA1UdIwQY MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt NjQxNzcwNzUxN2Q2LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2 LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANLM5iE1 MHCzRknCNKi3SknU+jctqK8y5re4UeVQfHaLCce4HJOmSHjSaAYeqU1LjkeL+uhU 1SkHd1zhqk/PU9Y0ya6wgDrPwC7q2rJE6u4pe5q/IdL4OHG5tk0Fw3xU9vu4kaaY 92nnxXxkETTxLRyFy/WLX74HCF0/N23mTkagOdTn9UpeyotUryvcf6ZMMMIuP3gz U209i8kDD81TuSlNAzn57OriVzgRVn8FwODXj9gxs9PBE6wN65GxdIa+usTq0los Z1JMjDEhHDIABsrtke3ka2nvExkmT4WqOv607bk6l8GJUzvRMX0ICwCzRqJiGYBU 6O5OWPD9aD1gkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:45:01 2025 by rpki-client