This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json) Hash identifier: 1efIR/fEnnXazW0cAygtN1fDxirM8CYMIYlPba6fOTM= Subject key identifier: 92:B6:35:BB:DD:AB:4B:1C:14:EE:B1:CC:B7:CA:60:14:47:C0:EA:D5 Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Certificate serial: 019B597677D3E061D7F261BEC27629C76208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft Manifest number: 0E79 Signing time: Fri 26 Dec 2025 07:01:34 +0000 Manifest this update: Fri 26 Dec 2025 07:01:34 +0000 Manifest next update: Sat 27 Dec 2025 07:01:34 +0000 Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: fvIi9PQtq6gEY/subnVYXthobMxTZY3dQrRZkTuXFaE=) 2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:77:d3:e0:61:d7:f2:61:be:c2:76:29:c7:62:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Validity Not Before: Dec 26 07:01:34 2025 GMT Not After : Dec 27 07:01:34 2025 GMT Subject: CN=92b635bbddab4b1c14eeb1ccb7ca601447c0ead5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:4c:e4:52:5e:23:0f:1d:43:77:9d:37:18: 9f:42:ea:c0:22:27:89:0c:cc:c2:05:60:22:de:3a: f7:13:0f:1e:9e:c0:fb:4d:b0:72:53:e9:b1:62:32: e3:9c:c9:d1:a1:fe:c8:db:1e:14:42:ff:06:b2:77: 29:fe:13:0a:27:31:63:6b:ce:fe:41:69:8d:da:b6: cd:3c:8b:b7:f1:22:54:b0:4d:bc:79:1e:0c:bb:09: 04:25:0d:91:fc:a0:d0:96:72:cf:8e:b8:0e:a8:4d: ad:cd:43:c4:c9:6b:3a:82:0b:d3:66:82:1d:ea:71: fe:46:3b:f1:df:2c:1a:c6:21:87:95:dd:83:39:6e: a4:4e:bd:55:92:18:a0:e4:b7:a4:9d:46:49:15:94: 4d:99:f1:d3:db:3a:ff:31:62:0d:f0:32:b8:96:9f: 37:ec:b4:3f:64:8c:d9:81:7d:10:b4:9f:bf:ee:60: f1:72:50:03:22:e9:56:ea:11:10:a8:8c:52:6f:43: e3:5a:42:23:07:a2:6a:cc:7a:37:86:c6:06:4e:95: 46:08:95:f6:93:9b:ee:40:3f:52:86:0c:d7:33:e5: ab:8e:54:9d:2f:fd:a1:a6:fa:8d:ab:d2:23:60:ea: 6d:e2:74:c7:a7:38:b1:a6:bb:f0:03:96:20:5c:a4: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:35:BB:DD:AB:4B:1C:14:EE:B1:CC:B7:CA:60:14:47:C0:EA:D5 X509v3 Authority Key Identifier: keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9f:6b:35:d3:b1:f3:f3:37:1e:fe:72:ab:f5:24:86:c3:d4: 44:5e:36:ec:03:fa:c9:49:df:ce:66:f7:1c:dd:90:57:e9:65: c2:94:ac:d6:84:b2:ee:6d:97:2e:a1:2f:fe:40:4b:b2:da:1e: 38:3a:ef:9a:f4:0e:a7:a0:07:5d:85:41:8a:76:a4:7c:7a:17: fb:6e:b6:bf:aa:31:06:cb:cc:70:16:09:7c:36:ae:5d:0a:de: f3:51:dd:b2:0d:ff:40:c5:0d:17:83:63:ba:f2:10:88:dc:83: 91:b7:e2:3e:57:6d:f2:f6:e8:f4:79:1c:ba:37:b7:fa:10:df: af:ee:a7:d5:f9:5a:03:bb:8a:6b:58:30:62:c9:42:c9:ad:36: d7:88:06:d6:eb:89:13:75:b7:d5:d9:e9:78:78:a9:69:2b:71: 89:53:f1:7d:a7:6e:cd:88:5e:b7:55:9e:f2:0f:1d:32:77:ba: b5:43:73:bd:79:69:1e:aa:08:c8:d3:43:09:04:d1:d1:d5:ee: 1b:0e:0a:76:11:c3:3f:b3:44:7f:15:ac:f8:67:a3:a9:9a:9a: e3:18:c3:d0:54:4f:1f:4e:16:fe:88:01:c3:0b:a1:26:46:1f: da:33:24:94:fe:78:2c:81:3b:3d:0f:11:1c:4f:62:7f:8c:6a: 84:e1:a3:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnfT4GHX8mG+wnYpx2IIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5 ZGE5MTgwHhcNMjUxMjI2MDcwMTM0WhcNMjUxMjI3MDcwMTM0WjAzMTEwLwYDVQQD Eyg5MmI2MzViYmRkYWI0YjFjMTRlZWIxY2NiN2NhNjAxNDQ3YzBlYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApllM5FJeIw8dQ3edNxifQurAIieJ DMzCBWAi3jr3Ew8ensD7TbByU+mxYjLjnMnRof7I2x4UQv8Gsncp/hMKJzFja87+ QWmN2rbNPIu38SJUsE28eR4MuwkEJQ2R/KDQlnLPjrgOqE2tzUPEyWs6ggvTZoId 6nH+Rjvx3ywaxiGHld2DOW6kTr1Vkhig5LeknUZJFZRNmfHT2zr/MWIN8DK4lp83 7LQ/ZIzZgX0QtJ+/7mDxclADIulW6hEQqIxSb0PjWkIjB6JqzHo3hsYGTpVGCJX2 k5vuQD9ShgzXM+WrjlSdL/2hpvqNq9IjYOpt4nTHpzixprvwA5YgXKRK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK2Nbvdq0scFO6xzLfKYBRHwOrVMB8GA1UdIwQY MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4 LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ59rNdOx 8/M3Hv5yq/UkhsPURF427AP6yUnfzmb3HN2QV+llwpSs1oSy7m2XLqEv/kBLstoe ODrvmvQOp6AHXYVBinakfHoX+262v6oxBsvMcBYJfDauXQre81Hdsg3/QMUNF4Nj uvIQiNyDkbfiPldt8vbo9Hkcuje3+hDfr+6n1flaA7uKa1gwYslCya0214gG1uuJ E3W31dnpeHipaStxiVPxfaduzYhet1We8g8dMne6tUNzvXlpHqoIyNNDCQTR0dXu Gw4KdhHDP7NEfxWs+GejqZqa4xjD0FRPH04W/ogBwwuhJkYf2jMklP54LIE7PQ8R HE9if4xqhOGjTQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:46 2025 by rpki-client