This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: U93PHUrhUebjzngc75QDcegh7LntiXCJBBOXsckkfQ0= Subject key identifier: 3C:16:5A:AE:E6:A1:4B:24:1E:E5:01:94:E2:1F:DA:BE:82:C4:29:D0 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019AEDBEB8B2E922EFF4727FED8D75904703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0EE1 Signing time: Fri 05 Dec 2025 09:01:30 +0000 Manifest this update: Fri 05 Dec 2025 09:01:30 +0000 Manifest next update: Sat 06 Dec 2025 09:01:30 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: e92QTJM3wN6uzmjDJP++VPw7Dl9QDaLEFDFpZ9UwAUI=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:be:b8:b2:e9:22:ef:f4:72:7f:ed:8d:75:90:47:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Dec 5 09:01:30 2025 GMT Not After : Dec 6 09:01:30 2025 GMT Subject: CN=3c165aaee6a14b241ee50194e21fdabe82c429d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:a0:ba:01:77:50:d0:8b:86:04:c5:8e:cb: eb:ea:bf:5b:1d:27:92:46:96:68:6b:3e:a9:22:8c: 3f:82:61:36:f5:31:c1:eb:c8:9a:fe:1c:72:9d:c4: cc:b7:82:6c:da:17:5b:26:90:fb:1e:9a:50:61:db: 1a:7d:88:63:fd:8b:ed:b3:51:54:5b:7c:3e:1a:8f: 8f:20:06:c0:8c:c2:f7:7c:dd:74:cf:f1:57:7b:b4: d9:b5:37:4d:c2:04:d6:fa:48:36:fd:e5:f3:a7:c7: 0f:bc:d4:76:96:26:c0:f8:c5:32:07:9c:07:90:2e: 50:29:41:64:4f:9f:d8:b6:e8:90:be:a3:44:3c:1d: f8:b1:4f:35:ac:b5:cc:2e:f2:72:0a:32:2f:cd:e9: 73:b0:89:c4:f0:51:7f:0c:20:92:da:33:60:4c:89: 84:02:0a:35:77:6e:9b:59:98:95:14:ef:dd:2d:16: af:f8:14:e3:ad:e6:ad:39:44:28:17:36:84:3e:52: e3:d2:7d:4a:75:90:92:85:03:4a:65:27:e6:73:1e: 7a:22:9e:55:2b:7f:36:e4:d8:78:44:c4:bb:00:c3: 76:ea:b0:13:49:b0:57:9b:ae:0c:b7:66:c2:ac:1a: 6d:a2:35:75:07:c8:84:36:3c:57:df:b9:d7:7b:d0: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:5A:AE:E6:A1:4B:24:1E:E5:01:94:E2:1F:DA:BE:82:C4:29:D0 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c2:69:70:4d:68:b2:7f:84:89:ce:02:55:3e:f0:9e:d2:7d: d9:5b:10:d3:0a:c1:07:f9:6a:64:0c:cd:e7:52:50:f9:0c:dd: 74:92:70:3c:96:7f:b3:3f:40:32:69:d1:3e:4d:ab:cd:90:61: eb:e9:36:cf:39:85:ad:64:09:73:e2:0b:45:0c:bd:72:b3:6e: 17:66:1b:14:9d:51:f5:98:ce:7a:ac:57:72:72:a7:98:3a:16: ae:85:49:df:1b:6b:e3:87:f8:5b:91:04:66:d3:45:63:41:f3: 80:b0:54:c2:4a:7d:47:65:56:0a:19:e1:58:36:14:d1:bf:07: 76:0b:9e:a8:1a:b3:63:a9:c0:8b:9d:7f:1a:21:55:d7:be:a9: b6:f5:87:6d:2b:af:5f:a4:b5:d4:e4:6b:27:7d:5b:54:08:89: 83:9a:ce:e0:4a:15:ba:62:67:ca:90:63:36:4a:05:fd:4c:d8: 83:39:b0:49:28:2e:65:da:fd:69:9a:58:c6:e3:65:0c:5c:a2: 6d:a6:d0:78:04:50:59:ea:0d:2b:20:eb:af:db:81:bc:cb:f1: 5e:bc:93:e1:f0:dd:b7:77:72:60:ff:df:e2:fb:25:c6:cb:b8: d1:d3:4e:37:c3:54:f0:12:75:18:41:db:7f:d8:c7:fe:3a:38: 98:c5:59:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrtvriy6SLv9HJ/7Y11kEcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUxMjA1MDkwMTMwWhcNMjUxMjA2MDkwMTMwWjAzMTEwLwYDVQQD EygzYzE2NWFhZWU2YTE0YjI0MWVlNTAxOTRlMjFmZGFiZTgyYzQyOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5KgugF3UNCLhgTFjsvr6r9bHSeS RpZoaz6pIow/gmE29THB68ia/hxyncTMt4Js2hdbJpD7HppQYdsafYhj/Yvts1FU W3w+Go+PIAbAjML3fN10z/FXe7TZtTdNwgTW+kg2/eXzp8cPvNR2libA+MUyB5wH kC5QKUFkT5/YtuiQvqNEPB34sU81rLXMLvJyCjIvzelzsInE8FF/DCCS2jNgTImE Ago1d26bWZiVFO/dLRav+BTjreatOUQoFzaEPlLj0n1KdZCShQNKZSfmcx56Ip5V K3825Nh4RMS7AMN26rATSbBXm64Mt2bCrBptojV1B8iENjxX37nXe9CCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwWWq7moUskHuUBlOIf2r6CxCnQMB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcJpcE1o sn+Eic4CVT7wntJ92VsQ0wrBB/lqZAzN51JQ+QzddJJwPJZ/sz9AMmnRPk2rzZBh 6+k2zzmFrWQJc+ILRQy9crNuF2YbFJ1R9ZjOeqxXcnKnmDoWroVJ3xtr44f4W5EE ZtNFY0HzgLBUwkp9R2VWChnhWDYU0b8HdgueqBqzY6nAi51/GiFV176ptvWHbSuv X6S11ORrJ31bVAiJg5rO4EoVumJnypBjNkoF/UzYgzmwSSguZdr9aZpYxuNlDFyi babQeARQWeoNKyDrr9uBvMvxXryT4fDdt3dyYP/f4vslxsu40dNON8NU8BJ1GEHb f9jH/jo4mMVZtA== -----END CERTIFICATE-----Generated at Fri Dec 5 16:32:04 2025 by rpki-client