This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json) Hash identifier: SlvE1owEjAVqIOOR+wRGY04YkWHiBgFkT5O8xQU85yU= Subject key identifier: F8:4E:B3:E8:5D:DE:C0:4A:6D:9C:06:7A:09:A4:85:5F:81:62:71:9A Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f Certificate serial: 019AE897D712A33FDFF2BD15CA69CE319EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft Manifest number: 16EF Signing time: Thu 04 Dec 2025 09:00:56 +0000 Manifest this update: Thu 04 Dec 2025 09:00:56 +0000 Manifest next update: Fri 05 Dec 2025 09:00:56 +0000 Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=) 2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: 24j1DyAos2A5Ko44rZJMl7DN7Ks3Z/0PFwWlINI6Jvs=) 3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:97:d7:12:a3:3f:df:f2:bd:15:ca:69:ce:31:9e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f Validity Not Before: Dec 4 09:00:56 2025 GMT Not After : Dec 5 09:00:56 2025 GMT Subject: CN=f84eb3e85ddec04a6d9c067a09a4855f8162719a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:68:1e:58:f4:60:1d:8e:c3:96:20:90:21: 98:38:cd:6d:b4:89:23:5b:9c:68:2b:45:7a:97:ea: de:0b:6c:39:9a:5f:69:75:b3:6d:10:ad:14:e4:fd: c5:2c:98:44:06:7c:d8:9f:19:9a:f9:50:ca:ae:fb: 95:bc:bc:1c:ad:04:49:fd:d1:f5:45:51:f0:47:39: e4:52:5f:c8:b6:ae:47:92:dc:96:2f:29:89:8f:6a: 4a:a6:90:71:83:27:b8:9b:ef:7d:fd:ae:ad:f7:81: 33:8e:fa:1e:5e:3c:88:4c:fa:31:61:e7:1c:4a:ea: 8c:e1:68:1f:f1:7f:e0:cf:26:83:e7:58:91:bd:7a: 00:4d:be:46:ac:d8:23:b7:c4:d6:ac:6c:f2:63:b3: 1f:b4:ab:f5:65:ec:eb:b9:ff:bd:b4:5e:5d:73:e1: a7:30:90:fd:3b:8b:cc:4a:df:f4:0e:6b:38:01:c4: 2a:13:d8:a5:24:c2:cc:ca:39:f0:52:75:34:67:cf: 06:7d:8d:e5:57:5e:99:59:f9:1f:7d:a3:54:4a:fb: 64:4f:51:94:2c:15:de:e5:31:8b:20:a5:a6:b4:b6: c5:26:78:73:4e:0e:96:c3:c9:b0:9d:bc:0d:e3:62: 63:34:dc:7b:da:9c:2e:2e:00:5b:b5:ae:36:7d:27: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4E:B3:E8:5D:DE:C0:4A:6D:9C:06:7A:09:A4:85:5F:81:62:71:9A X509v3 Authority Key Identifier: keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c5:f9:9d:c4:f7:91:3f:ed:16:42:e3:ea:08:5e:aa:9e:42: 40:ff:f3:1a:79:a5:3a:c7:71:9b:b5:69:1f:a3:b9:63:2f:f7: 8a:be:cf:61:45:0b:86:51:3c:30:f8:3a:ad:07:3f:6a:4f:f7: c5:47:af:c2:11:df:23:4c:e3:0c:f5:d0:8f:12:cc:07:55:1e: 9a:74:ec:38:6d:49:7d:4b:f8:da:00:11:4c:ce:0b:0e:35:2e: c5:f9:d9:eb:06:f0:5c:e2:d0:4f:44:29:6c:b0:ee:dc:6e:d2: e3:da:ef:2e:1e:b9:85:6f:ac:34:50:34:4e:0c:75:0f:dc:32: 73:e5:0f:e9:6d:6e:89:62:c1:29:8f:50:3b:66:33:99:07:16: 29:57:59:68:d1:0b:fe:18:fa:df:6b:84:8f:2b:d7:6e:3a:19: e4:e1:02:42:34:4c:32:89:69:ac:f0:96:d9:70:d6:c0:05:8c: 13:b8:4a:85:c5:65:64:d3:8d:f5:8d:af:12:04:de:bf:1e:f0: f6:f5:19:b7:56:2a:b4:45:08:29:a9:e8:8c:43:db:8a:29:84: 95:72:40:58:0b:45:d2:0a:78:d1:80:1c:79:ce:2c:82:f4:b4: b8:df:e6:f5:6a:4e:23:21:4c:d3:fc:db:f4:ea:5d:52:34:b3: 42:0d:c3:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrol9cSoz/f8r0VymnOMZ6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZDBiMDIwNzYwM2JlNDNkODQ5MmU5ODUxMzc4YjhiNGYw OTU5NGYwHhcNMjUxMjA0MDkwMDU2WhcNMjUxMjA1MDkwMDU2WjAzMTEwLwYDVQQD EyhmODRlYjNlODVkZGVjMDRhNmQ5YzA2N2EwOWE0ODU1ZjgxNjI3MTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo9oHlj0YB2Ow5YgkCGYOM1ttIkj W5xoK0V6l+reC2w5ml9pdbNtEK0U5P3FLJhEBnzYnxma+VDKrvuVvLwcrQRJ/dH1 RVHwRznkUl/Itq5HktyWLymJj2pKppBxgye4m+99/a6t94EzjvoeXjyITPoxYecc SuqM4Wgf8X/gzyaD51iRvXoATb5GrNgjt8TWrGzyY7MftKv1Zezruf+9tF5dc+Gn MJD9O4vMSt/0Dms4AcQqE9ilJMLMyjnwUnU0Z88GfY3lV16ZWfkffaNUSvtkT1GU LBXe5TGLIKWmtLbFJnhzTg6Ww8mwnbwN42JjNNx72pwuLgBbta42fSe8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhOs+hd3sBKbZwGegmkhV+BYnGaMB8GA1UdIwQY MBaAFGDQsCB2A75D2EkumFE3i4tPCVlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDIt ZjQ5ZmVhNTQ1ZTc4LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTc5NGEtYjE5MS00NjQ2LWE4NDItZjQ5ZmVhNTQ1ZTc4 LzEvWU5Dd0lIWUR2a1BZU1M2WVVUZUxpMDhKV1U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcX5ncT3 kT/tFkLj6gheqp5CQP/zGnmlOsdxm7VpH6O5Yy/3ir7PYUULhlE8MPg6rQc/ak/3 xUevwhHfI0zjDPXQjxLMB1UemnTsOG1JfUv42gARTM4LDjUuxfnZ6wbwXOLQT0Qp bLDu3G7S49rvLh65hW+sNFA0Tgx1D9wyc+UP6W1uiWLBKY9QO2YzmQcWKVdZaNEL /hj632uEjyvXbjoZ5OECQjRMMolprPCW2XDWwAWME7hKhcVlZNON9Y2vEgTevx7w 9vUZt1YqtEUIKanojEPbiimElXJAWAtF0gp40YAcec4sgvS0uN/m9WpOIyFM0/zb 9OpdUjSzQg3Dnw== -----END CERTIFICATE-----Generated at Thu Dec 4 11:24:03 2025 by rpki-client