This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json) Hash identifier: nOrX977dkJIah1nzYJeDR1kC2EbrmNqYhxgNfD/Gdkc= Subject key identifier: 8E:CD:60:44:17:63:FF:A5:03:47:BE:FA:8F:53:3E:9D:65:C9:B1:54 Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a Certificate serial: 019B59E3DDA101043D95A066C951C992F2D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft Manifest number: 0943 Signing time: Fri 26 Dec 2025 09:01:04 +0000 Manifest this update: Fri 26 Dec 2025 09:01:04 +0000 Manifest next update: Sat 27 Dec 2025 09:01:04 +0000 Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=) 2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: a43T4p0nC4MthcaIZA/CeXOfpcC3qC0aiGYI3WryMX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:dd:a1:01:04:3d:95:a0:66:c9:51:c9:92:f2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a Validity Not Before: Dec 26 09:01:04 2025 GMT Not After : Dec 27 09:01:04 2025 GMT Subject: CN=8ecd60441763ffa50347befa8f533e9d65c9b154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:2d:fb:8c:1c:d5:46:7b:4b:2e:d0:e3:ca: 5e:e8:bc:53:cb:29:4a:0a:1b:5f:4a:43:a5:90:86: 3e:57:19:42:6d:e4:d2:f5:b2:f6:52:60:12:30:70: b9:f5:c0:57:22:17:ae:33:e9:f8:2c:82:d2:b4:5a: 9c:ad:a1:f9:23:5e:5e:ac:1f:02:9e:da:d9:78:4b: 51:5f:bf:af:50:07:dd:3a:56:21:d6:cb:d3:4c:29: 89:8b:52:ef:97:0e:9e:b0:97:0e:d3:51:d7:9c:4f: 7d:d4:3f:a8:63:9f:29:17:5a:1d:0c:7b:16:c9:ad: 1e:c1:d2:74:78:d4:3f:e1:c4:2d:71:31:e8:93:de: 76:7a:58:c5:c0:87:9a:58:0c:10:92:a8:f2:fc:b1: 58:89:64:68:6c:cf:c5:47:b3:d3:56:74:04:89:b0: 60:04:1a:06:8d:2b:d8:e8:3d:d5:3c:cd:79:d2:e0: d0:61:b5:29:00:b0:69:fa:6a:7d:53:78:52:19:3b: e3:22:e9:35:9b:be:68:50:d4:0d:9e:8d:b3:0c:80: d1:d3:a3:00:75:f4:1d:9c:be:86:3b:8d:d0:2c:ad: 7a:8a:98:4a:e5:03:5a:82:17:cb:74:51:f7:f9:52: a7:11:93:f7:74:29:9d:0f:a6:49:94:27:cf:10:82: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CD:60:44:17:63:FF:A5:03:47:BE:FA:8F:53:3E:9D:65:C9:B1:54 X509v3 Authority Key Identifier: keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c6:f4:ed:1e:06:4b:eb:42:a8:ae:da:62:ed:7b:1b:4b:64: ea:d2:da:84:fd:7f:b2:c5:59:55:1a:b2:de:bc:8e:0d:f9:8e: a7:18:4a:2f:6d:c7:9d:8b:a2:98:3f:75:00:0d:ce:a3:65:a6: 99:19:bd:fc:0a:bb:62:7b:52:5d:c0:65:24:ff:65:ea:f5:a0: ca:a3:aa:20:79:ac:d0:49:93:e8:03:d9:14:4c:86:5e:59:48: de:b6:0f:1c:2d:f8:07:9d:18:c4:9f:55:ae:a7:0c:cd:b2:ee: d0:a7:98:dd:e9:42:03:12:36:76:fc:cd:98:f4:85:dd:ea:7a: 9d:f4:0a:f8:5e:ff:ca:d5:07:e4:b8:c7:b2:2b:96:87:76:50: 70:19:8d:a6:35:88:3d:2f:2d:73:fb:69:fe:8f:c5:1a:3e:3d: 80:af:ac:89:33:c2:5a:cb:e0:68:7f:10:90:b3:04:d9:43:a7: 77:d8:6f:91:d8:a6:ca:76:01:a1:f8:2c:ef:b8:3f:b7:fc:a8: b2:08:c6:09:de:4a:48:9e:b7:0f:94:95:71:65:97:e2:96:39: a6:75:cf:18:05:83:04:2f:7b:0d:a8:37:fb:a1:79:72:9a:a7: 56:09:cd:b4:1f:15:7a:f8:11:aa:1d:e3:92:90:f4:72:67:ef: 33:8e:ac:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ492hAQQ9laBmyVHJkvLQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGM1YTAwMzY4ZDhhZTFmYmE5OTU0MzFmMDNhNDEzMWFk ZDhhOWEwHhcNMjUxMjI2MDkwMTA0WhcNMjUxMjI3MDkwMTA0WjAzMTEwLwYDVQQD Eyg4ZWNkNjA0NDE3NjNmZmE1MDM0N2JlZmE4ZjUzM2U5ZDY1YzliMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyot+4wc1UZ7Sy7Q48pe6LxTyylK ChtfSkOlkIY+VxlCbeTS9bL2UmASMHC59cBXIheuM+n4LILStFqcraH5I15erB8C ntrZeEtRX7+vUAfdOlYh1svTTCmJi1Lvlw6esJcO01HXnE991D+oY58pF1odDHsW ya0ewdJ0eNQ/4cQtcTHok952eljFwIeaWAwQkqjy/LFYiWRobM/FR7PTVnQEibBg BBoGjSvY6D3VPM150uDQYbUpALBp+mp9U3hSGTvjIuk1m75oUNQNno2zDIDR06MA dfQdnL6GO43QLK16iphK5QNaghfLdFH3+VKnEZP3dCmdD6ZJlCfPEILxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7NYEQXY/+lA0e++o9TPp1lybFUMB8GA1UdIwQY MBaAFGDcWgA2jYrh+6mVQx8DpBMa3YqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYt ZWJiMzk4MmMyZWIwLzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYtZWJiMzk4MmMyZWIw LzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8b07R4G S+tCqK7aYu17G0tk6tLahP1/ssVZVRqy3ryODfmOpxhKL23HnYuimD91AA3Oo2Wm mRm9/Aq7YntSXcBlJP9l6vWgyqOqIHms0EmT6APZFEyGXllI3rYPHC34B50YxJ9V rqcMzbLu0KeY3elCAxI2dvzNmPSF3ep6nfQK+F7/ytUH5LjHsiuWh3ZQcBmNpjWI PS8tc/tp/o/FGj49gK+siTPCWsvgaH8QkLME2UOnd9hvkdimynYBofgs77g/t/yo sgjGCd5KSJ63D5SVcWWX4pY5pnXPGAWDBC97Dag3+6F5cpqnVgnNtB8VevgRqh3j kpD0cmfvM46s6A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client