This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft File: YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json) Hash identifier: mr5jWrUyaEEYsiiVkRWfpuqlzeb0GU7Z/0fFOyNaq4c= Subject key identifier: 58:2A:18:3D:F8:F6:F4:D3:BD:68:6B:D6:7A:8C:90:EB:C8:18:C2:2E Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 Certificate issuer: /CN=60325c21d2fafe743398dc1e5574433280110469 Certificate serial: 019B24E3545B1FAF1F308C3E7B66692FE597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft Manifest number: 162D Signing time: Tue 16 Dec 2025 02:00:36 +0000 Manifest this update: Tue 16 Dec 2025 02:00:36 +0000 Manifest next update: Wed 17 Dec 2025 02:00:36 +0000 Files and hashes: 1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=) 2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=) 3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: 7buqmIw61DqowXyMxldpkPpVtvMPnKDj+GCEwHPltho=) 4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=) 5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:54:5b:1f:af:1f:30:8c:3e:7b:66:69:2f:e5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60325c21d2fafe743398dc1e5574433280110469 Validity Not Before: Dec 16 02:00:36 2025 GMT Not After : Dec 17 02:00:36 2025 GMT Subject: CN=582a183df8f6f4d3bd686bd67a8c90ebc818c22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:4b:00:e6:b9:2a:be:c7:33:7e:e0:15:d1: 55:f1:2e:79:f2:52:c6:52:f2:a7:6b:20:ff:01:31: 7b:bc:df:e1:13:cb:0c:0b:d9:00:d1:b7:28:a5:ad: be:d7:06:99:b7:11:38:8a:da:87:99:21:c4:6b:08: 4f:e4:28:4e:6a:f7:d4:64:8c:9e:ed:94:66:93:e4: 4c:b9:d0:40:8a:18:4b:87:e7:e4:36:aa:8f:55:ff: ad:37:c0:f4:07:ab:2b:5c:44:ac:68:a5:95:01:58: 66:bb:26:62:4b:9f:e8:aa:8c:b0:6c:e0:f2:6f:a7: c2:8f:e3:0f:04:6d:be:f8:d7:26:fd:4c:f6:d7:1e: 32:aa:b3:81:67:77:46:23:98:6d:3c:55:61:c7:7a: 31:e9:d0:bc:48:7e:51:f0:9c:28:86:7a:e0:0f:99: 8d:7d:7a:99:6e:93:82:b0:25:e3:0a:69:ab:b4:4a: 75:4f:fb:b8:89:24:d0:ba:fd:c5:29:c0:5f:f5:51: 11:ae:ad:95:ec:bc:44:40:67:d0:4a:d9:98:b4:a4: cd:30:12:99:51:e6:e0:34:67:bc:ff:8d:95:20:a1: a1:4b:e7:c1:3f:37:b3:a4:72:60:d3:72:b0:cc:2c: 0b:47:44:0b:b7:61:c4:38:b6:79:8b:3b:ac:56:d6: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:18:3D:F8:F6:F4:D3:BD:68:6B:D6:7A:8C:90:EB:C8:18:C2:2E X509v3 Authority Key Identifier: keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cb:b9:46:96:8a:f6:02:96:bf:1b:c0:d0:48:52:11:bc:ac: c7:50:7e:29:eb:83:1a:a1:91:41:14:4e:ad:c2:06:3a:e5:bd: 47:2a:f5:76:e0:c4:60:83:9b:0f:2d:bc:05:ed:66:ad:f9:03: 22:1c:c7:09:5e:b4:75:c0:62:e1:83:d5:bd:f4:10:74:e3:df: b7:b6:06:3b:24:a6:26:09:69:38:19:07:4e:2e:52:50:4f:df: 2c:14:29:ba:40:04:ea:4f:8e:c8:2f:01:c0:b6:a2:c4:ed:0e: 3d:9e:2a:1d:71:63:8e:c1:fc:8a:bc:80:65:5f:c8:a6:4d:ea: 0e:97:83:10:3e:01:13:85:31:07:5c:b3:78:32:f6:87:f7:8d: 0c:da:b1:df:8c:4a:5e:9b:5c:e8:6c:d1:5f:d9:1f:1a:b3:50: 1b:80:f9:ad:66:de:4b:7d:5f:fd:13:d7:5f:a2:73:c0:97:4b: dd:54:b3:dd:ad:f1:f3:b5:03:da:a7:ce:f7:34:98:ee:94:de: 97:bc:1d:5a:7d:e1:ca:0b:8c:f2:2e:f5:ca:cb:bb:02:dc:b4: 34:1b:ae:4b:82:fc:85:a8:3d:c2:70:f5:24:f9:18:b7:cb:ab: ec:1b:4c:ac:85:b5:4b:25:03:09:40:e0:72:52:5e:74:34:49: 04:4d:cf:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk41RbH68fMIw+e2ZpL+WXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzI1YzIxZDJmYWZlNzQzMzk4ZGMxZTU1NzQ0MzMyODAx MTA0NjkwHhcNMjUxMjE2MDIwMDM2WhcNMjUxMjE3MDIwMDM2WjAzMTEwLwYDVQQD Eyg1ODJhMTgzZGY4ZjZmNGQzYmQ2ODZiZDY3YThjOTBlYmM4MThjMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D9LAOa5Kr7HM37gFdFV8S558lLG UvKnayD/ATF7vN/hE8sMC9kA0bcopa2+1waZtxE4itqHmSHEawhP5ChOavfUZIye 7ZRmk+RMudBAihhLh+fkNqqPVf+tN8D0B6srXESsaKWVAVhmuyZiS5/oqoywbODy b6fCj+MPBG2++Ncm/Uz21x4yqrOBZ3dGI5htPFVhx3ox6dC8SH5R8JwohnrgD5mN fXqZbpOCsCXjCmmrtEp1T/u4iSTQuv3FKcBf9VERrq2V7LxEQGfQStmYtKTNMBKZ UebgNGe8/42VIKGhS+fBPzezpHJg03KwzCwLR0QLt2HEOLZ5izusVtZqQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgqGD349vTTvWhr1nqMkOvIGMIuMB8GA1UdIwQY MBaAFGAyXCHS+v50M5jcHlV0QzKAEQRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQt YzU4ZTk1Y2Q0Mjc3LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMjc3MGItZGExOS00NzkwLWE0OTQtYzU4ZTk1Y2Q0Mjc3 LzEvWURKY0lkTDZfblF6bU53ZVZYUkRNb0FSQkdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcu5RpaK 9gKWvxvA0EhSEbysx1B+KeuDGqGRQRROrcIGOuW9Ryr1duDEYIObDy28Be1mrfkD IhzHCV60dcBi4YPVvfQQdOPft7YGOySmJglpOBkHTi5SUE/fLBQpukAE6k+OyC8B wLaixO0OPZ4qHXFjjsH8iryAZV/Ipk3qDpeDED4BE4UxB1yzeDL2h/eNDNqx34xK Xptc6GzRX9kfGrNQG4D5rWbeS31f/RPXX6JzwJdL3VSz3a3x87UD2qfO9zSY7pTe l7wdWn3hyguM8i71ysu7Aty0NBuuS4L8hag9wnD1JPkYt8ur7BtMrIW1SyUDCUDg clJedDRJBE3Pvg== -----END CERTIFICATE-----Generated at Tue Dec 16 10:40:48 2025 by rpki-client