This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json) Hash identifier: mH+VY/cp6DIi7kv5+UHb2mzR4tqLoRAPlmiD75JfIo8= Subject key identifier: 73:74:0C:C9:7E:F8:2C:95:62:75:E7:31:6A:F5:0B:E9:38:A1:C2:71 Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Certificate serial: 019B1081437A7BBDF1DBDB1B26BA777DD5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft Manifest number: 0F68 Signing time: Fri 12 Dec 2025 03:01:05 +0000 Manifest this update: Fri 12 Dec 2025 03:01:05 +0000 Manifest next update: Sat 13 Dec 2025 03:01:05 +0000 Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=) 2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: RxuXk/mui0HxzNrjxy8k/Bc+DixVg9MX5EjL4J4Swec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:43:7a:7b:bd:f1:db:db:1b:26:ba:77:7d:d5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Validity Not Before: Dec 12 03:01:05 2025 GMT Not After : Dec 13 03:01:05 2025 GMT Subject: CN=73740cc97ef82c956275e7316af50be938a1c271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:cd:a7:be:2b:1b:5b:d1:2d:84:fd:a0:73: 41:13:6e:ab:5c:04:51:72:7c:19:c2:4f:a9:40:ee: ac:90:02:69:88:2c:31:84:0b:20:eb:4d:62:7d:0c: ae:38:3c:fa:6f:4d:69:71:52:a4:e7:73:00:35:a8: 9c:1b:88:7f:18:e6:5e:90:e3:79:5d:d2:07:9e:47: b4:c9:ba:50:d6:89:73:9a:1a:5d:cc:84:0b:e0:41: 8c:a6:fd:3e:ed:7e:c6:c2:eb:e9:a6:d7:ed:6a:52: cd:d8:59:23:a1:5d:48:9b:94:1b:e6:8b:81:af:30: e1:1c:53:5c:60:15:8e:67:0d:39:96:4f:63:ab:27: 00:f9:82:4a:39:b6:38:4d:5b:87:4a:86:df:96:6a: c9:18:45:3c:d8:8a:aa:62:77:d0:f5:7a:19:8c:bc: 0b:58:99:bd:49:ad:5c:78:1a:6c:a4:50:64:68:80: 27:9e:d4:1f:ff:28:a9:9c:b1:9e:12:0d:94:86:28: 8f:41:35:a9:e4:5c:77:11:f8:54:9c:f8:c8:e8:88: c8:4f:2a:56:ce:ae:e1:3e:56:dc:b0:77:a5:22:3d: 55:3e:4c:5b:01:26:81:75:3a:8c:fe:c9:22:5e:15: 3b:c3:b1:c0:10:28:c6:24:67:8f:cd:d2:20:a3:50: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:74:0C:C9:7E:F8:2C:95:62:75:E7:31:6A:F5:0B:E9:38:A1:C2:71 X509v3 Authority Key Identifier: keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:27:46:8a:98:1c:82:39:b5:90:e0:65:4b:51:2b:9f:c4:bd: 7d:f2:84:cb:87:2d:b9:7e:d5:37:92:f5:9c:a5:54:05:59:a5: e6:49:8a:03:e6:e7:7e:b5:07:5d:a8:b9:94:c7:41:14:49:b5: b1:7b:a9:8b:62:f2:b5:21:09:51:91:ab:98:a2:84:73:99:12: 96:d9:cc:05:d4:21:d1:1a:f3:fd:36:79:1e:6b:a8:97:22:0a: 72:26:5e:75:b0:1c:6b:38:1c:5e:74:a7:72:24:30:29:73:d3: 8f:9b:e9:fc:b1:f0:b7:fd:fe:a2:ee:e9:79:6d:5c:f5:66:18: 78:18:0d:6a:87:9b:95:40:51:3a:21:b9:60:2f:90:cb:8b:92: 17:dc:43:7e:38:f4:84:4e:ce:6b:dd:8f:c6:7d:da:ae:6c:f2: 43:44:14:1e:48:e1:04:20:8f:6b:6e:aa:99:31:17:77:91:40: 0a:64:8e:95:e6:01:a0:b3:82:8b:cb:3e:27:16:98:35:4a:ff: 28:75:a6:3e:ad:42:06:c7:ba:5f:36:da:00:36:7e:ec:d1:5e: a0:50:7d:ea:14:04:2a:24:68:ba:35:16:7d:64:2e:dd:ab:63: b9:3c:11:14:d8:93:28:b1:a2:a8:0d:06:6b:15:76:88:80:a2: e2:e4:fa:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgUN6e73x29sbJrp3fdXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz MmJjNDQwHhcNMjUxMjEyMDMwMTA1WhcNMjUxMjEzMDMwMTA1WjAzMTEwLwYDVQQD Eyg3Mzc0MGNjOTdlZjgyYzk1NjI3NWU3MzE2YWY1MGJlOTM4YTFjMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhDNp74rG1vRLYT9oHNBE26rXARR cnwZwk+pQO6skAJpiCwxhAsg601ifQyuODz6b01pcVKk53MANaicG4h/GOZekON5 XdIHnke0ybpQ1olzmhpdzIQL4EGMpv0+7X7GwuvpptftalLN2FkjoV1Im5Qb5ouB rzDhHFNcYBWOZw05lk9jqycA+YJKObY4TVuHSobflmrJGEU82IqqYnfQ9XoZjLwL WJm9Sa1ceBpspFBkaIAnntQf/yipnLGeEg2UhiiPQTWp5Fx3EfhUnPjI6IjITypW zq7hPlbcsHelIj1VPkxbASaBdTqM/skiXhU7w7HAECjGJGePzdIgo1ABLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN0DMl++CyVYnXnMWr1C+k4ocJxMB8GA1UdIwQY MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIidGipgc gjm1kOBlS1Ern8S9ffKEy4ctuX7VN5L1nKVUBVml5kmKA+bnfrUHXai5lMdBFEm1 sXupi2LytSEJUZGrmKKEc5kSltnMBdQh0Rrz/TZ5HmuolyIKciZedbAcazgcXnSn ciQwKXPTj5vp/LHwt/3+ou7peW1c9WYYeBgNaoeblUBROiG5YC+Qy4uSF9xDfjj0 hE7Oa92Pxn3armzyQ0QUHkjhBCCPa26qmTEXd5FACmSOleYBoLOCi8s+JxaYNUr/ KHWmPq1CBse6XzbaADZ+7NFeoFB96hQEKiRoujUWfWQu3atjuTwRFNiTKLGiqA0G axV2iICi4uT6kQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:34:23 2025 by rpki-client