This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft File: YMZLBPqPX-5oZvXHn499zqUBJRU.mft (raw, json) Hash identifier: BBAfQswbWLEFxAT0kzJ7uP6H03VK/7d/Cm06L1IqlOk= Subject key identifier: 69:A6:BE:B6:4C:D3:35:2F:51:D5:81:0F:A0:A1:D2:41:16:F1:A9:97 Authority key identifier: 60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15 Certificate issuer: /CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515 Certificate serial: 019B12DDB4F8B132F4817DD488737999C1F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft Manifest number: 1362 Signing time: Fri 12 Dec 2025 14:01:18 +0000 Manifest this update: Fri 12 Dec 2025 14:01:18 +0000 Manifest next update: Sat 13 Dec 2025 14:01:18 +0000 Files and hashes: 1: Q9vdhvNHwOEEPnjfpoIoeq4pq_E.roa (hash: AjW64DrutKx53AvwTAQKpO/FJMGHUcE1ZDsQqqfuNRE=) 2: YMZLBPqPX-5oZvXHn499zqUBJRU.crl (hash: eLMY83Mj8YtM2IRS3gCo5V39Pwfx1tm0xlSJuknzooI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:b4:f8:b1:32:f4:81:7d:d4:88:73:79:99:c1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c64b04fa8f5fee6866f5c79f8f7dcea5012515 Validity Not Before: Dec 12 14:01:18 2025 GMT Not After : Dec 13 14:01:18 2025 GMT Subject: CN=69a6beb64cd3352f51d5810fa0a1d24116f1a997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:ee:65:99:06:11:a3:f5:e5:28:2e:d9:e5: 64:08:d4:8d:2c:a3:73:64:16:c9:7a:f7:5a:7a:7b: 1b:e8:48:5e:2d:eb:18:6b:56:6b:68:5c:89:5b:19: 5f:4e:2c:62:08:e5:ce:6d:b6:fa:df:c0:06:75:5b: 0f:be:85:a0:88:e5:6b:67:ad:28:66:1f:e4:07:ac: 38:69:e4:0b:e1:72:cb:3b:5c:94:37:1a:49:41:c4: 68:05:41:3f:38:7d:53:d5:26:b9:16:05:38:36:8f: 96:8c:e9:89:ca:5b:64:9a:c4:0c:68:14:b2:ff:b1: 31:93:51:51:6d:a6:48:9f:52:87:5d:9d:b1:79:6c: 6d:3a:c6:58:e9:68:ef:dd:3e:12:77:a3:63:af:71: 5e:25:17:24:44:45:d8:1b:f4:ba:d2:92:2a:0a:c5: 15:ed:c9:39:60:89:38:3d:92:2f:0a:6c:90:d5:ba: f0:6e:e9:7b:9b:8a:06:97:a6:01:08:8d:c7:e9:67: 1a:e5:65:93:fd:34:54:19:80:e4:bb:74:b4:1b:cc: d0:aa:af:e6:0b:2e:32:93:2c:33:b5:d6:dc:40:95: 22:2c:77:b3:9f:96:6b:6d:30:c6:ac:65:6b:18:87: 47:bc:de:c9:24:06:49:f0:eb:2a:ea:1d:63:3d:bf: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A6:BE:B6:4C:D3:35:2F:51:D5:81:0F:A0:A1:D2:41:16:F1:A9:97 X509v3 Authority Key Identifier: keyid:60:C6:4B:04:FA:8F:5F:EE:68:66:F5:C7:9F:8F:7D:CE:A5:01:25:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMZLBPqPX-5oZvXHn499zqUBJRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/82491b-8caf-481b-b146-601a58f63393/1/YMZLBPqPX-5oZvXHn499zqUBJRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5d:38:a4:a8:a4:0d:2f:dc:b6:0d:ae:8c:0a:5c:97:f6:31: 1a:5a:d7:e1:5b:1d:1c:9f:ed:bf:36:75:9b:1f:55:ac:e2:c9: b3:43:06:59:00:a3:ca:7c:02:f0:8f:b7:d9:7b:1f:55:96:62: df:8b:27:42:15:25:e5:69:93:e8:92:2d:f7:42:09:37:0e:36: d8:b5:87:80:de:2c:0e:2e:4a:cc:25:73:f0:e7:76:47:e6:dc: d9:0e:d2:13:74:ce:bb:c4:b2:10:86:7e:b5:c4:e7:c9:ca:ed: 87:0a:d5:f4:49:1b:2e:90:5d:5a:87:9f:c1:93:8a:13:2b:de: 58:e0:a7:df:6b:2d:d5:d8:a7:c7:d4:63:40:72:20:9d:a7:14: 25:17:a0:84:4b:a0:dd:da:e8:24:66:d3:60:1a:d6:84:f3:3d: 12:69:be:49:6e:e8:0f:89:b7:c0:42:ba:b4:1a:18:23:b2:d4: 84:3d:38:8b:31:46:a0:df:39:1b:36:f3:32:74:e6:0c:02:dd: fd:10:9d:fd:d2:2e:78:47:c5:0f:81:7a:f6:19:08:c3:8d:29: b4:0f:a4:de:20:16:2a:12:8b:89:f7:e5:83:5e:b6:c3:e5:c4: 2a:1c:76:56:9b:6b:95:87:54:1b:67:80:08:3d:be:ff:98:f3: 23:a6:73:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3bT4sTL0gX3UiHN5mcHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzY0YjA0ZmE4ZjVmZWU2ODY2ZjVjNzlmOGY3ZGNlYTUw MTI1MTUwHhcNMjUxMjEyMTQwMTE4WhcNMjUxMjEzMTQwMTE4WjAzMTEwLwYDVQQD Eyg2OWE2YmViNjRjZDMzNTJmNTFkNTgxMGZhMGExZDI0MTE2ZjFhOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsvuZZkGEaP15Sgu2eVkCNSNLKNz ZBbJevdaensb6EheLesYa1ZraFyJWxlfTixiCOXObbb638AGdVsPvoWgiOVrZ60o Zh/kB6w4aeQL4XLLO1yUNxpJQcRoBUE/OH1T1Sa5FgU4No+WjOmJyltkmsQMaBSy /7Exk1FRbaZIn1KHXZ2xeWxtOsZY6Wjv3T4Sd6Njr3FeJRckREXYG/S60pIqCsUV 7ck5YIk4PZIvCmyQ1brwbul7m4oGl6YBCI3H6Wca5WWT/TRUGYDku3S0G8zQqq/m Cy4ykywztdbcQJUiLHezn5ZrbTDGrGVrGIdHvN7JJAZJ8Osq6h1jPb8uBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmmvrZM0zUvUdWBD6Ch0kEW8amXMB8GA1UdIwQY MBaAFGDGSwT6j1/uaGb1x5+Pfc6lASUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84MjQ5MWItOGNhZi00ODFiLWIxNDYt NjAxYTU4ZjYzMzkzLzEvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84MjQ5MWItOGNhZi00ODFiLWIxNDYtNjAxYTU4ZjYzMzkz LzEvWU1aTEJQcVBYLTVvWnZYSG40OTl6cVVCSlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF04pKik DS/ctg2ujApcl/YxGlrX4VsdHJ/tvzZ1mx9VrOLJs0MGWQCjynwC8I+32XsfVZZi 34snQhUl5WmT6JIt90IJNw422LWHgN4sDi5KzCVz8Od2R+bc2Q7SE3TOu8SyEIZ+ tcTnycrthwrV9EkbLpBdWoefwZOKEyveWOCn32st1dinx9RjQHIgnacUJReghEug 3droJGbTYBrWhPM9Emm+SW7oD4m3wEK6tBoYI7LUhD04izFGoN85GzbzMnTmDALd /RCd/dIueEfFD4F69hkIw40ptA+k3iAWKhKLifflg162w+XEKhx2VptrlYdUG2eA CD2+/5jzI6ZzjA== -----END CERTIFICATE-----Generated at Fri Dec 12 16:28:08 2025 by rpki-client