This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json) Hash identifier: fO7m9NwbPJiiGOR+cnUcNZAO9wlwhdjQYYMNU9eLfiU= Subject key identifier: E3:B0:B0:A9:C7:DC:4E:BC:F7:CF:31:A5:E7:02:A4:99:85:8A:80:FB Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76 Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076 Certificate serial: 019B3720DC504E4B314D30A6FA30FF658E3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft Manifest number: 01F3 Signing time: Fri 19 Dec 2025 15:00:58 +0000 Manifest this update: Fri 19 Dec 2025 15:00:58 +0000 Manifest next update: Sat 20 Dec 2025 15:00:58 +0000 Files and hashes: 1: XeHwlV4_nC5T8BptDxih7yIgLeg.roa (hash: SOsMIv7q0cLJ7sDVkddmO8lkJPy7j4qBPOmyU0Pco9g=) 2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: 68yhRWLOd5ctj4VCumY5qIjLkVv6uQGadwaxKYaj2m8=) 3: _CP3e0WLgHreGwKUhpdfEeFss0U.roa (hash: QypuSrQ37amqxwFK8xiRJM3wGtIQUHMjSUwWELe4qw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:dc:50:4e:4b:31:4d:30:a6:fa:30:ff:65:8e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076 Validity Not Before: Dec 19 15:00:58 2025 GMT Not After : Dec 20 15:00:58 2025 GMT Subject: CN=e3b0b0a9c7dc4ebcf7cf31a5e702a499858a80fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:91:8a:c4:1c:49:95:4a:44:d4:6f:1f:1b: c4:b0:36:40:f2:51:8b:fd:24:d9:09:7b:d8:d6:25: 7f:1e:87:59:26:67:c4:67:1f:9d:0f:6a:46:e9:10: f9:b5:b8:85:39:ab:02:81:26:07:8d:4b:12:36:86: 19:6c:7c:ea:36:df:9d:83:3b:70:fb:ef:92:81:f4: 9f:f2:bd:ea:07:7c:c8:ec:97:bb:76:e7:51:b0:e3: 83:71:ce:23:07:7f:eb:35:f1:a8:02:0c:bd:95:dc: f9:82:09:d8:13:13:0c:4b:46:12:20:96:6c:fe:79: 92:df:19:a0:b2:eb:e0:03:fe:ab:12:cc:5b:8e:29: 34:bf:ab:5e:7f:cc:e8:10:9b:8a:7b:c3:d5:c3:c1: b6:21:17:fb:cb:29:74:1f:7d:ef:24:fb:3a:c4:51: bf:b8:37:dd:b5:39:4b:0e:cb:58:e6:68:17:fb:8c: 54:bb:79:2b:03:47:94:bb:fd:61:14:73:25:dd:bf: 23:fd:44:77:f8:a4:48:57:11:42:32:63:49:59:70: 43:da:08:82:00:d3:f6:19:28:56:79:dc:c6:4c:e3: f8:0f:bd:f4:e9:14:46:e5:3d:3c:38:fe:88:45:a7: c9:c1:1d:ab:1d:9d:1f:22:24:40:68:df:db:5e:12: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:B0:A9:C7:DC:4E:BC:F7:CF:31:A5:E7:02:A4:99:85:8A:80:FB X509v3 Authority Key Identifier: keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4d:f6:3a:39:05:5f:ca:83:3c:88:c5:a5:ec:a6:69:3f:14: ce:48:21:7d:6f:54:1e:53:90:17:e2:e3:5e:56:a7:95:30:ff: 7c:c8:71:33:18:c4:7e:cd:79:d9:c7:62:d9:05:78:03:86:c7: 4d:63:18:de:18:33:72:8e:69:c0:3e:c9:a1:b7:0d:42:34:83: f3:0e:30:27:a7:db:18:74:b0:d7:dd:c5:5f:0b:63:0d:21:cb: ac:b6:1f:05:a2:1c:c0:43:56:c2:00:56:76:68:62:cc:09:e9: 7d:44:a9:ff:e6:b5:d8:63:b1:28:fd:7f:59:05:71:49:ad:03: a5:75:c7:aa:98:a6:0b:55:79:b2:f8:8a:c6:64:46:85:12:f8: cf:c1:b4:e3:1a:1a:3a:2b:ea:3f:15:c9:0d:13:d9:3e:c6:20: 7e:f2:d3:8b:2f:15:a9:d9:4b:62:1a:56:36:80:06:e3:15:68: 46:91:9a:34:6b:34:da:53:74:ab:e9:ae:16:ef:6c:1c:15:98: 8e:9b:84:2f:70:8d:41:34:48:ad:bf:c5:24:54:f2:3f:e9:36: a1:5b:f0:74:57:87:f3:35:c2:8f:30:09:e4:48:a0:a6:5e:c8: e3:60:4c:77:9a:2a:78:83:9c:08:01:53:10:eb:ac:76:3e:04: c1:da:9c:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3INxQTksxTTCm+jD/ZY48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOWVhN2FiYWZjNTJjN2ZmYTIwYTdhNmFhZTRhZTJkMjYy NTIwNzYwHhcNMjUxMjE5MTUwMDU4WhcNMjUxMjIwMTUwMDU4WjAzMTEwLwYDVQQD EyhlM2IwYjBhOWM3ZGM0ZWJjZjdjZjMxYTVlNzAyYTQ5OTg1OGE4MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLWRisQcSZVKRNRvHxvEsDZA8lGL /STZCXvY1iV/HodZJmfEZx+dD2pG6RD5tbiFOasCgSYHjUsSNoYZbHzqNt+dgztw +++SgfSf8r3qB3zI7Je7dudRsOODcc4jB3/rNfGoAgy9ldz5ggnYExMMS0YSIJZs /nmS3xmgsuvgA/6rEsxbjik0v6tef8zoEJuKe8PVw8G2IRf7yyl0H33vJPs6xFG/ uDfdtTlLDstY5mgX+4xUu3krA0eUu/1hFHMl3b8j/UR3+KRIVxFCMmNJWXBD2giC ANP2GShWedzGTOP4D7306RRG5T08OP6IRafJwR2rHZ0fIiRAaN/bXhJ8vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOwsKnH3E68988xpecCpJmFioD7MB8GA1UdIwQY MBaAFGCep6uvxSx/+iCnpqrkri0mJSB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEt NDE3MGI4MmFkZjVkLzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEtNDE3MGI4MmFkZjVk LzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE32OjkF X8qDPIjFpeymaT8UzkghfW9UHlOQF+LjXlanlTD/fMhxMxjEfs152cdi2QV4A4bH TWMY3hgzco5pwD7JobcNQjSD8w4wJ6fbGHSw193FXwtjDSHLrLYfBaIcwENWwgBW dmhizAnpfUSp/+a12GOxKP1/WQVxSa0DpXXHqpimC1V5sviKxmRGhRL4z8G04xoa OivqPxXJDRPZPsYgfvLTiy8VqdlLYhpWNoAG4xVoRpGaNGs02lN0q+muFu9sHBWY jpuEL3CNQTRIrb/FJFTyP+k2oVvwdFeH8zXCjzAJ5Eigpl7I42BMd5oqeIOcCAFT EOusdj4EwdqcOA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:16:48 2025 by rpki-client