This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json) Hash identifier: bfpkDq5qc9SXJIcEQq4aXk4iC1Z9TMh5vwzg1Bxosi0= Subject key identifier: A1:14:10:B2:4B:39:76:3B:E9:CE:E5:6F:FC:77:CE:29:E9:93:01:B3 Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d Certificate serial: 019B46CB1EEE2CB654293A5CF6E06F0FC921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft Manifest number: 067F Signing time: Mon 22 Dec 2025 16:01:15 +0000 Manifest this update: Mon 22 Dec 2025 16:01:15 +0000 Manifest next update: Tue 23 Dec 2025 16:01:15 +0000 Files and hashes: 1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=) 2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=) 3: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: f61xdsUO3Cwmh8VnFFSmhXuRDhoyqmb2HLmJodUgs1g=) 4: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:1e:ee:2c:b6:54:29:3a:5c:f6:e0:6f:0f:c9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d Validity Not Before: Dec 22 16:01:15 2025 GMT Not After : Dec 23 16:01:15 2025 GMT Subject: CN=a11410b24b39763be9cee56ffc77ce29e99301b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:e2:9a:67:e0:ff:98:e3:d5:e5:1b:e8:8e: c8:87:10:a7:8b:92:61:83:6b:59:32:c7:ef:26:b0: ff:1b:74:0b:df:5e:5b:9e:00:e1:13:9f:f6:f7:1d: 46:79:f1:0f:18:1e:02:37:35:62:99:ab:b8:4a:72: 62:e7:51:0b:c5:85:eb:f8:c7:17:dd:87:06:27:b5: a0:40:ff:a6:c6:07:e1:12:be:3f:10:61:95:05:ee: 97:4f:37:cc:fe:9e:2f:84:e7:be:df:3e:1b:fd:56: 90:9c:a2:88:e9:ce:80:32:71:97:14:7f:33:6d:b1: da:56:cd:ef:0d:44:16:bb:43:fc:c7:ae:05:68:34: c8:1d:45:84:47:b2:99:da:04:29:87:50:2c:6b:71: 3d:ee:a8:80:6b:57:74:bd:e9:8d:de:4d:23:ce:04: 03:b4:68:88:14:26:3e:c3:dc:20:6e:25:f8:d8:21: b3:d9:4a:0e:3e:bb:90:95:b7:2d:c3:9c:4a:50:3d: 63:54:2b:b3:c2:d8:94:d5:19:75:4c:4a:da:69:8c: 0c:0f:4f:55:e2:75:d8:14:aa:1c:25:a7:22:3b:eb: a1:d0:dd:0d:82:59:78:b3:a1:4b:0f:30:29:e9:3b: 41:dc:bb:cf:04:d1:d1:7f:5c:df:20:3b:21:97:2f: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:14:10:B2:4B:39:76:3B:E9:CE:E5:6F:FC:77:CE:29:E9:93:01:B3 X509v3 Authority Key Identifier: keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:24:c0:5d:be:b7:04:f6:41:1b:35:51:48:88:00:5e:33:06: 7d:10:89:62:62:b5:c0:40:64:a7:ab:07:9c:f4:a3:df:38:29: 9c:34:fd:6e:58:e1:f8:aa:15:81:b7:e6:20:79:6e:9d:08:18: 60:3b:4c:71:41:03:fb:1f:ee:f7:9b:ae:09:b4:76:a3:5c:b3: a0:69:db:53:c8:42:e3:45:ba:ee:fc:ed:bc:92:22:fe:fc:02: 7d:73:37:15:27:4d:f4:c8:7d:c5:22:85:42:3f:76:2f:df:31: cc:e8:2a:c8:5f:3c:bf:27:3a:2b:25:43:68:21:d6:e5:68:e7: ab:57:04:f5:23:7b:a9:04:d7:15:c9:17:81:db:5e:47:8f:c2: e0:8d:ba:62:0d:ef:de:45:a9:8b:9b:e9:05:95:8d:ab:4a:f3: 90:f2:62:55:b9:83:f7:a9:73:92:72:75:a2:fa:c9:31:5a:7f: 3f:8d:3c:ef:08:ba:4a:fa:83:7c:d7:3d:8d:2b:82:bb:ac:81: aa:7f:07:67:2c:6a:a4:96:29:45:87:0a:c2:1a:f1:a5:6f:47: 31:a2:ad:e9:a4:e9:b0:2a:a3:dd:39:ed:3f:76:f9:5c:02:00: 9f:ed:b6:6d:63:24:9b:95:fb:c5:8e:67:76:19:c5:5f:a9:ad: 26:a5:b2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyx7uLLZUKTpc9uBvD8khMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwM2IzMWJjNmU3ZjQyZjYzMDM4NzBmMDIzNGI0MGRlZjcx ZmEwM2QwHhcNMjUxMjIyMTYwMTE1WhcNMjUxMjIzMTYwMTE1WjAzMTEwLwYDVQQD EyhhMTE0MTBiMjRiMzk3NjNiZTljZWU1NmZmYzc3Y2UyOWU5OTMwMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbPimmfg/5jj1eUb6I7IhxCni5Jh g2tZMsfvJrD/G3QL315bngDhE5/29x1GefEPGB4CNzVimau4SnJi51ELxYXr+McX 3YcGJ7WgQP+mxgfhEr4/EGGVBe6XTzfM/p4vhOe+3z4b/VaQnKKI6c6AMnGXFH8z bbHaVs3vDUQWu0P8x64FaDTIHUWER7KZ2gQph1Asa3E97qiAa1d0vemN3k0jzgQD tGiIFCY+w9wgbiX42CGz2UoOPruQlbctw5xKUD1jVCuzwtiU1Rl1TEraaYwMD09V 4nXYFKocJaciO+uh0N0Ngll4s6FLDzAp6TtB3LvPBNHRf1zfIDshly9DTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEUELJLOXY76c7lb/x3zinpkwGzMB8GA1UdIwQY MBaAFGA7Mbxuf0L2MDhw8CNLQN73H6A9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMt Njc5MzI2NTZlNTk0LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMtNjc5MzI2NTZlNTk0 LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyTAXb63 BPZBGzVRSIgAXjMGfRCJYmK1wEBkp6sHnPSj3zgpnDT9bljh+KoVgbfmIHlunQgY YDtMcUED+x/u95uuCbR2o1yzoGnbU8hC40W67vztvJIi/vwCfXM3FSdN9Mh9xSKF Qj92L98xzOgqyF88vyc6KyVDaCHW5Wjnq1cE9SN7qQTXFckXgdteR4/C4I26Yg3v 3kWpi5vpBZWNq0rzkPJiVbmD96lzknJ1ovrJMVp/P4087wi6SvqDfNc9jSuCu6yB qn8HZyxqpJYpRYcKwhrxpW9HMaKt6aTpsCqj3TntP3b5XAIAn+22bWMkm5X7xY5n dhnFX6mtJqWyVA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:57:44 2025 by rpki-client