This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json) Hash identifier: n3hwA5iRhqyHBS0zUKNusZuqczzI8OvIhBYDu9qq49k= Subject key identifier: 6A:97:38:64:E7:0B:85:4E:C9:7B:23:25:E2:9B:C1:93:19:6E:99:5B Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf Certificate serial: 019B59AC9A9B8CF9C76C3D7A7C3406049480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 08:00:42 +0000 Manifest this update: Fri 26 Dec 2025 08:00:42 +0000 Manifest next update: Sat 27 Dec 2025 08:00:42 +0000 Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=) 2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: 6nUrWzDVu2Xm5YYDdty28SxQQCTUDu5eHsrsDRgIikE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:9a:9b:8c:f9:c7:6c:3d:7a:7c:34:06:04:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf Validity Not Before: Dec 26 08:00:42 2025 GMT Not After : Dec 27 08:00:42 2025 GMT Subject: CN=6a973864e70b854ec97b2325e29bc193196e995b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:67:52:e6:08:b8:26:00:76:d8:b3:41:bd: 48:34:59:74:2e:20:13:4d:ed:d9:4f:68:e5:e7:98: f0:ff:98:43:66:d6:28:06:17:07:37:89:e8:b7:9d: 6d:1f:0b:d4:f0:cc:5c:21:64:2f:b9:40:95:40:6f: 0a:9f:fa:56:2c:1b:d6:93:da:25:5d:df:f5:a3:08: 14:d1:62:d3:54:7a:07:84:ff:d8:a5:66:f2:c4:03: fc:d5:a2:32:c5:6b:ab:4b:b1:30:23:08:e7:2f:08: b2:8b:4a:f9:9d:ab:14:21:ee:77:90:5d:97:f2:58: 91:d8:04:c6:04:1c:37:77:a4:9f:20:33:77:25:66: d0:23:3b:8c:1b:74:ac:7e:d0:41:07:e8:ed:5e:44: 5b:df:e7:91:d7:ea:19:26:6e:89:7a:cf:fe:4f:7e: 8b:0a:a4:c5:5f:07:4b:13:72:00:d9:5b:d9:eb:b0: d1:26:be:38:84:21:a6:05:b0:90:8e:ed:e5:de:e0: 3e:e5:a8:6b:62:7b:ec:19:6d:df:b3:72:2b:5d:17: 82:32:d5:8d:a4:df:ba:ec:b7:7b:86:1a:5d:a7:bc: d4:02:50:e3:09:1c:e4:6c:7e:6a:df:5f:64:10:bf: 8a:dc:d9:68:c9:15:0f:d0:af:b9:2d:dd:ee:fd:75: ea:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:97:38:64:E7:0B:85:4E:C9:7B:23:25:E2:9B:C1:93:19:6E:99:5B X509v3 Authority Key Identifier: keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0e:ce:44:41:0d:61:3c:54:8c:aa:80:c0:94:6c:91:c5:4b: 13:35:9c:43:63:ae:3a:b2:ad:b1:1e:57:d8:73:11:8e:2e:a9: 9b:53:2a:c8:f8:c0:d4:46:37:fe:a9:8e:00:28:3f:94:a2:56: 03:fd:3e:4c:79:01:e3:c5:5f:96:f0:65:b8:05:ee:54:83:ed: 89:d1:2f:e2:db:23:9d:b9:e0:d2:59:c3:b5:e7:e2:73:3b:10: 74:6a:b5:49:28:dd:3e:07:35:58:ef:37:b8:cc:54:1d:ca:dc: 2a:e4:91:5d:92:7b:28:97:96:24:ff:07:ee:25:35:39:fe:aa: 91:bd:65:ff:b7:e0:9a:0a:a8:fe:e4:a8:4e:18:cd:99:fd:43: a0:19:b1:78:fe:7d:47:74:43:5c:a8:68:ba:32:70:76:3a:1f: d2:6b:a4:aa:df:87:05:d5:36:66:fa:25:f5:a1:55:bc:c1:ee: 9c:85:e4:60:bd:9b:84:c2:7e:6b:16:66:18:14:33:45:66:74: b1:5e:33:06:af:a3:ed:67:ec:0a:ca:20:1e:0a:48:e7:4b:40: ef:ec:76:7f:4e:6f:11:cb:93:4a:85:49:51:e8:f6:b7:52:32: cd:83:40:ec:ea:72:5e:da:e8:50:7e:d4:3c:e5:34:bf:69:15: 9a:61:90:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJqbjPnHbD16fDQGBJSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi ZjYxY2YwHhcNMjUxMjI2MDgwMDQyWhcNMjUxMjI3MDgwMDQyWjAzMTEwLwYDVQQD Eyg2YTk3Mzg2NGU3MGI4NTRlYzk3YjIzMjVlMjliYzE5MzE5NmU5OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycxnUuYIuCYAdtizQb1INFl0LiAT Te3ZT2jl55jw/5hDZtYoBhcHN4not51tHwvU8MxcIWQvuUCVQG8Kn/pWLBvWk9ol Xd/1owgU0WLTVHoHhP/YpWbyxAP81aIyxWurS7EwIwjnLwiyi0r5nasUIe53kF2X 8liR2ATGBBw3d6SfIDN3JWbQIzuMG3SsftBBB+jtXkRb3+eR1+oZJm6Jes/+T36L CqTFXwdLE3IA2VvZ67DRJr44hCGmBbCQju3l3uA+5ahrYnvsGW3fs3IrXReCMtWN pN+67Ld7hhpdp7zUAlDjCRzkbH5q319kEL+K3NloyRUP0K+5Ld3u/XXqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqXOGTnC4VOyXsjJeKbwZMZbplbMB8GA1UdIwQY MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5 LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPA7OREEN YTxUjKqAwJRskcVLEzWcQ2OuOrKtsR5X2HMRji6pm1MqyPjA1EY3/qmOACg/lKJW A/0+THkB48VflvBluAXuVIPtidEv4tsjnbng0lnDteficzsQdGq1SSjdPgc1WO83 uMxUHcrcKuSRXZJ7KJeWJP8H7iU1Of6qkb1l/7fgmgqo/uSoThjNmf1DoBmxeP59 R3RDXKhoujJwdjof0mukqt+HBdU2Zvol9aFVvMHunIXkYL2bhMJ+axZmGBQzRWZ0 sV4zBq+j7WfsCsogHgpI50tA7+x2f05vEcuTSoVJUej2t1IyzYNA7OpyXtroUH7U POU0v2kVmmGQgw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:28 2025 by rpki-client