This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json) Hash identifier: iOX2dq2nNJdYd/MrAgx5l/KIyx+hmUO15esvZrZxQ7E= Subject key identifier: 79:26:F0:85:02:98:0D:5D:B8:D1:AB:9F:75:D5:A4:2C:85:EF:64:AF Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b Certificate serial: 019B59ACE4F3951AC54A579E12AF7689852A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 08:01:01 +0000 Manifest this update: Fri 26 Dec 2025 08:01:01 +0000 Manifest next update: Sat 27 Dec 2025 08:01:01 +0000 Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: 17UOyeS/SBRXFIavo6zvWYAreHQh7EZgMbfmmtcA8Zc=) 2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e4:f3:95:1a:c5:4a:57:9e:12:af:76:89:85:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b Validity Not Before: Dec 26 08:01:01 2025 GMT Not After : Dec 27 08:01:01 2025 GMT Subject: CN=7926f08502980d5db8d1ab9f75d5a42c85ef64af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:a0:05:c6:22:8a:4d:62:b8:cc:d6:50:36: 91:40:5a:4e:09:70:0a:69:53:9c:6c:06:78:02:bd: 6c:e8:9d:2f:a0:69:4f:3e:33:a7:0c:4e:88:f4:bf: 69:63:71:a9:d3:80:8e:b6:ee:e3:e3:28:0a:55:1e: 7c:9b:c8:fe:ad:3f:34:1f:cf:44:8e:81:e9:29:e4: 2d:b8:8d:c9:9b:ea:c5:1f:bf:f6:cd:ac:0f:25:47: 8f:89:be:db:34:99:64:99:aa:71:24:d3:f3:29:db: 6f:8c:f2:ec:73:67:db:3d:75:17:65:7f:0c:8a:53: 54:9f:dc:7e:a4:d2:39:76:4c:a0:8e:1e:e1:f5:f3: 60:d5:7e:3a:c8:9d:4d:3a:43:85:42:bf:84:31:17: 62:78:25:ec:1c:93:fd:c9:b1:fc:76:5f:ee:b1:73: 21:28:72:50:83:0f:41:b5:8f:27:b7:0f:cb:5a:d2: af:5f:b7:2c:bd:a8:5d:c1:c4:db:fd:72:e4:09:78: 73:92:03:20:a6:f0:33:b2:ed:a0:ec:fa:77:82:28: 45:8b:9f:b1:5b:19:7d:62:d1:37:fa:78:33:7d:e7: 3b:5f:c7:46:ee:d1:2a:27:e2:bf:c5:0b:6c:a0:04: 80:70:95:7c:a2:f8:3f:52:cf:36:37:c8:61:e5:e0: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:F0:85:02:98:0D:5D:B8:D1:AB:9F:75:D5:A4:2C:85:EF:64:AF X509v3 Authority Key Identifier: keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:79:a4:e8:1b:83:96:e4:31:16:54:e2:c5:d9:93:7b:58: 70:7e:88:60:01:6c:40:5d:67:19:d0:e3:d3:9b:fd:8c:5d:56: 9c:3f:82:17:c6:e1:87:1e:5e:6b:9a:5f:6f:c0:10:ba:27:c9: f0:d1:99:36:e3:6e:ad:d4:ee:89:cd:1b:9f:ae:6f:11:41:e9: 57:53:fc:49:ed:22:3f:9e:e4:f8:e9:ec:c0:97:e2:6b:22:13: 09:f8:21:8a:44:14:63:af:ff:50:3f:ed:12:8d:1a:3e:76:6c: a6:c8:3d:8b:5e:46:64:55:64:f6:14:f5:7d:9a:99:fe:c0:61: 8a:bf:e8:ea:75:32:3c:6a:40:e3:b5:ce:44:04:65:e6:5c:3e: a0:0d:5c:05:de:9b:a0:87:82:ba:80:8c:78:b3:2d:9b:4b:72: f8:86:d9:20:58:40:98:c6:f1:e6:6d:7c:68:00:10:51:51:0c: a3:71:b5:53:d0:db:20:bb:8e:c8:d0:1f:51:b3:10:cd:5d:1e: e5:26:50:54:42:ac:e4:93:87:18:7e:84:c5:9d:8f:4e:60:1c: 54:44:db:b3:c5:ee:b4:32:b9:af:0b:ea:e9:eb:cd:0d:23:77: 0f:22:5e:b9:5c:3e:74:46:16:0a:9c:44:d9:20:ef:3a:4f:09: aa:09:cf:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOTzlRrFSleeEq92iYUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3 MGU2MmIwHhcNMjUxMjI2MDgwMTAxWhcNMjUxMjI3MDgwMTAxWjAzMTEwLwYDVQQD Eyg3OTI2ZjA4NTAyOTgwZDVkYjhkMWFiOWY3NWQ1YTQyYzg1ZWY2NGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0agBcYiik1iuMzWUDaRQFpOCXAK aVOcbAZ4Ar1s6J0voGlPPjOnDE6I9L9pY3Gp04COtu7j4ygKVR58m8j+rT80H89E joHpKeQtuI3Jm+rFH7/2zawPJUePib7bNJlkmapxJNPzKdtvjPLsc2fbPXUXZX8M ilNUn9x+pNI5dkygjh7h9fNg1X46yJ1NOkOFQr+EMRdieCXsHJP9ybH8dl/usXMh KHJQgw9BtY8ntw/LWtKvX7csvahdwcTb/XLkCXhzkgMgpvAzsu2g7Pp3gihFi5+x Wxl9YtE3+ngzfec7X8dG7tEqJ+K/xQtsoASAcJV8ovg/Us82N8hh5eDnlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkm8IUCmA1duNGrn3XVpCyF72SvMB8GA1UdIwQY MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5 LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm695pOgb g5bkMRZU4sXZk3tYcH6IYAFsQF1nGdDj05v9jF1WnD+CF8bhhx5ea5pfb8AQuifJ 8NGZNuNurdTuic0bn65vEUHpV1P8Se0iP57k+OnswJfiayITCfghikQUY6//UD/t Eo0aPnZspsg9i15GZFVk9hT1fZqZ/sBhir/o6nUyPGpA47XORARl5lw+oA1cBd6b oIeCuoCMeLMtm0ty+IbZIFhAmMbx5m18aAAQUVEMo3G1U9DbILuOyNAfUbMQzV0e 5SZQVEKs5JOHGH6ExZ2PTmAcVETbs8XutDK5rwvq6evNDSN3DyJeuVw+dEYWCpxE 2SDvOk8JqgnPKA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client