This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json) Hash identifier: fqVxlwJwJ+4fp9rS3/KK/JblkbyY101WXrXumTLMV8M= Subject key identifier: 0F:55:73:BA:CD:58:B5:55:56:EB:BA:BA:7E:DE:F0:03:3E:2E:20:0E Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Certificate serial: 019B32D617C888592CC459B887249835457B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft Manifest number: 0FA4 Signing time: Thu 18 Dec 2025 19:00:50 +0000 Manifest this update: Thu 18 Dec 2025 19:00:50 +0000 Manifest next update: Fri 19 Dec 2025 19:00:50 +0000 Files and hashes: 1: 1ZXZrb7_KMMAffteaFQez59OJV0.roa (hash: qoGAFlDhNoBjbRdWcrJQCoTnOEYR10v5Gl4Yr+NRQu4=) 2: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: zyZ7bltxAaVQhl0Z6YGt1ohjxt7Yc3W6qzYk7vUJ/DI=) 3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=) 4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:17:c8:88:59:2c:c4:59:b8:87:24:98:35:45:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Validity Not Before: Dec 18 19:00:50 2025 GMT Not After : Dec 19 19:00:50 2025 GMT Subject: CN=0f5573bacd58b55556ebbaba7edef0033e2e200e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:11:b5:18:2f:1a:ff:6f:a3:41:e1:bf:f3: 16:fc:ac:04:df:22:cd:44:48:43:6d:10:ec:7f:da: 4e:29:7b:0e:38:22:7f:d1:b4:65:99:bd:6f:c8:12: 40:44:06:54:a8:63:d0:7a:78:b5:1b:91:83:c8:a2: a2:02:9e:ad:df:5b:31:93:aa:f0:b3:9d:ff:76:17: 01:ee:3f:00:6f:53:fa:1e:c2:58:c6:4c:32:7a:85: 82:52:12:4d:90:f4:76:5f:8b:d4:7c:31:b5:fc:17: c4:80:c7:a9:37:2c:7a:b9:5c:6d:b8:ec:87:7f:7b: 9d:0d:78:78:46:e8:18:c4:35:ba:0b:ba:48:f6:0f: 95:29:d4:64:99:dd:f6:a1:83:c4:2d:2b:f9:64:1b: 96:52:2d:84:87:d1:5b:4f:d5:dc:5d:e7:00:d4:50: 70:2e:84:6d:f8:f0:04:7b:24:b7:50:c1:f9:1b:b9: 2a:87:76:68:fe:ac:60:4b:e2:35:e0:25:ef:15:76: 47:b7:57:73:49:1c:6d:dc:35:8f:2b:8b:7e:e8:41: 4f:36:95:02:c6:52:d3:08:3b:ce:07:f7:f4:2b:d1: d5:09:3f:7d:2b:65:4b:e4:66:de:80:9f:cd:ca:69: 46:a8:e3:8f:03:02:9d:c6:23:31:be:df:b8:59:b4: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:55:73:BA:CD:58:B5:55:56:EB:BA:BA:7E:DE:F0:03:3E:2E:20:0E X509v3 Authority Key Identifier: keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a1:97:49:a2:34:33:44:fb:93:fc:58:29:a1:73:85:d2:f9: 21:89:f0:a7:86:d7:7f:85:d4:2d:c7:39:6a:66:c6:cd:37:8e: 4c:9c:6c:f4:a5:35:a6:be:6f:09:7f:02:a7:bc:9a:3d:9f:2b: 76:dc:2c:15:84:17:10:6f:c0:92:22:ad:5c:45:49:1d:f9:fa: 04:68:f4:2b:ca:30:b5:b5:86:85:14:0e:85:81:b7:98:b8:e4: a3:a4:69:ef:6a:4b:04:15:e8:49:1b:cb:00:b1:f9:4c:56:21: c8:a3:da:50:6b:fa:c0:dd:f9:a7:f2:3b:ef:93:06:86:4b:5c: 53:37:97:5f:58:89:b5:e1:f7:0e:55:ef:87:78:1a:d4:88:31: 5a:5e:f0:56:cb:43:a6:03:50:ef:25:88:e4:23:4e:ab:77:f7: 73:2c:6c:b4:38:cb:12:e7:23:f6:e7:eb:7c:3e:9e:77:93:52: 29:89:a9:12:b3:ed:5a:f1:5a:6a:79:74:b8:0d:35:4f:93:83: 50:41:39:2b:69:65:8a:8b:fe:7f:7c:df:b7:0b:65:93:fc:b6: 36:7e:70:6d:4a:06:27:2f:2f:85:2e:eb:c0:48:4f:69:86:15: 4e:88:48:bd:69:d8:19:0e:3d:15:a3:c6:7d:8a:c0:64:85:26: 96:ed:db:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1hfIiFksxFm4hySYNUV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh NGVhZmEwHhcNMjUxMjE4MTkwMDUwWhcNMjUxMjE5MTkwMDUwWjAzMTEwLwYDVQQD EygwZjU1NzNiYWNkNThiNTU1NTZlYmJhYmE3ZWRlZjAwMzNlMmUyMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgARtRgvGv9vo0Hhv/MW/KwE3yLN REhDbRDsf9pOKXsOOCJ/0bRlmb1vyBJARAZUqGPQeni1G5GDyKKiAp6t31sxk6rw s53/dhcB7j8Ab1P6HsJYxkwyeoWCUhJNkPR2X4vUfDG1/BfEgMepNyx6uVxtuOyH f3udDXh4RugYxDW6C7pI9g+VKdRkmd32oYPELSv5ZBuWUi2Eh9FbT9XcXecA1FBw LoRt+PAEeyS3UMH5G7kqh3Zo/qxgS+I14CXvFXZHt1dzSRxt3DWPK4t+6EFPNpUC xlLTCDvOB/f0K9HVCT99K2VL5GbegJ/NymlGqOOPAwKdxiMxvt+4WbTycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9Vc7rNWLVVVuu6un7e8AM+LiAOMB8GA1UdIwQY MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaGXSaI0 M0T7k/xYKaFzhdL5IYnwp4bXf4XULcc5ambGzTeOTJxs9KU1pr5vCX8Cp7yaPZ8r dtwsFYQXEG/AkiKtXEVJHfn6BGj0K8owtbWGhRQOhYG3mLjko6Rp72pLBBXoSRvL ALH5TFYhyKPaUGv6wN35p/I775MGhktcUzeXX1iJteH3DlXvh3ga1IgxWl7wVstD pgNQ7yWI5CNOq3f3cyxstDjLEucj9ufrfD6ed5NSKYmpErPtWvFaanl0uA01T5OD UEE5K2lliov+f3zftwtlk/y2Nn5wbUoGJy8vhS7rwEhPaYYVTohIvWnYGQ49FaPG fYrAZIUmlu3bew== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:13 2025 by rpki-client