This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json) Hash identifier: tnqNYOkXstqiqS9wcvZdBiAhRUUGddVaoTlQxOdBkns= Subject key identifier: D3:37:A0:21:9B:96:76:20:1D:E4:C1:81:C1:C7:49:91:5B:FD:E0:A2 Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Certificate serial: 019B2C2F90B9D7E95A08D928E538B5538958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft Manifest number: 06D3 Signing time: Wed 17 Dec 2025 12:01:13 +0000 Manifest this update: Wed 17 Dec 2025 12:01:13 +0000 Manifest next update: Thu 18 Dec 2025 12:01:13 +0000 Files and hashes: 1: BWZ8TffzeheUILd5O5vwxA8ANgs.roa (hash: 9mVvCij2ArMXMv49a46m8ltBnU+gbtg05+eZlvNEdYk=) 2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: OSXsm9O+zlShwPvXnTT1R4bcGY15RvRxyoAqaL+0KcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:90:b9:d7:e9:5a:08:d9:28:e5:38:b5:53:89:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Validity Not Before: Dec 17 12:01:13 2025 GMT Not After : Dec 18 12:01:13 2025 GMT Subject: CN=d337a0219b9676201de4c181c1c749915bfde0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:6b:10:9f:d5:1a:e1:90:a6:77:2c:5b:d3: 3b:e1:d1:5e:bb:4b:9d:e8:bc:a7:a7:fd:c9:ed:b9: a3:14:d9:5d:4d:1a:6b:f3:c6:6b:f9:47:87:d6:48: 95:78:d9:9b:8c:be:14:f7:f1:90:23:54:a5:c7:17: 9c:97:08:e5:92:8f:f9:34:6f:f9:a1:49:b2:01:3a: 9f:39:d6:ca:ae:33:fd:c0:13:24:5f:61:c8:d4:51: 91:6e:72:74:af:81:65:9e:50:e8:2e:01:1d:bd:d7: b4:f5:c3:84:1f:67:cd:e4:c3:95:a0:36:84:e5:7f: 11:75:cd:9f:85:f2:c3:01:51:91:bc:97:d3:43:f2: d8:32:9c:45:17:91:07:df:43:a1:e1:4f:3c:eb:ba: 6f:ea:6f:60:3e:03:6a:c0:07:fe:b5:a4:b8:49:99: f1:44:59:d7:b3:60:01:dc:32:62:47:bd:96:ca:7c: 56:1e:92:f9:f9:45:4a:61:94:5c:b0:18:89:a5:68: d6:8b:94:0f:d3:e6:f9:9e:ca:ca:e0:bb:95:5e:ca: 73:57:76:a8:07:6e:b1:b0:d8:ee:d3:76:7c:ad:16: 5e:d8:43:25:27:41:df:8f:13:25:ca:bd:73:7d:d0: dc:71:bc:1e:9a:0d:70:bb:54:1d:29:4a:9b:83:3c: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:A0:21:9B:96:76:20:1D:E4:C1:81:C1:C7:49:91:5B:FD:E0:A2 X509v3 Authority Key Identifier: keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:bc:47:c4:9d:da:c2:0d:20:b5:08:7e:2c:4d:2b:fb:d3:61: 7d:24:77:d9:47:76:4f:c6:cb:b2:59:45:89:a3:75:6f:a0:f0: ff:19:64:76:a9:89:7c:71:48:04:af:d6:f9:37:21:62:e2:e1: c4:93:3f:26:9e:79:73:40:bf:53:76:66:21:95:87:99:8f:1b: b8:36:33:31:76:fe:b3:34:5c:79:a9:8c:f7:99:74:1e:0a:7f: b7:3e:34:21:45:83:e6:06:4f:4d:de:33:7d:71:85:93:17:8f: d5:0d:26:bb:07:f3:c9:f3:b1:44:f2:f4:3e:dc:f1:03:5e:67: 12:a8:17:2a:cf:fd:d2:55:a6:9b:12:07:38:05:46:a2:8d:fe: 47:f2:07:ae:c7:70:48:51:4a:66:d8:2f:90:9d:f2:e7:f3:b2: 0c:a5:61:c9:a0:a8:36:42:d5:52:b9:f3:2d:66:83:9f:fa:97: bb:46:9c:70:f9:e4:ac:a1:a1:31:59:21:62:69:9e:a9:85:86: 66:48:a1:f0:58:44:4b:0e:25:34:30:cf:b7:6c:b5:51:22:e4: c7:ce:57:d3:e6:fd:42:41:e1:fc:26:88:6c:45:73:51:61:f1: fa:c6:3e:51:3d:26:5c:fe:44:1e:00:49:bf:7c:f0:40:33:74: b2:60:13:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5C51+laCNko5Ti1U4lYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4 ZGQ5ZGQwHhcNMjUxMjE3MTIwMTEzWhcNMjUxMjE4MTIwMTEzWjAzMTEwLwYDVQQD EyhkMzM3YTAyMTliOTY3NjIwMWRlNGMxODFjMWM3NDk5MTViZmRlMGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/trEJ/VGuGQpncsW9M74dFeu0ud 6Lynp/3J7bmjFNldTRpr88Zr+UeH1kiVeNmbjL4U9/GQI1Slxxeclwjlko/5NG/5 oUmyATqfOdbKrjP9wBMkX2HI1FGRbnJ0r4FlnlDoLgEdvde09cOEH2fN5MOVoDaE 5X8Rdc2fhfLDAVGRvJfTQ/LYMpxFF5EH30Oh4U8867pv6m9gPgNqwAf+taS4SZnx RFnXs2AB3DJiR72WynxWHpL5+UVKYZRcsBiJpWjWi5QP0+b5nsrK4LuVXspzV3ao B26xsNju03Z8rRZe2EMlJ0HfjxMlyr1zfdDccbwemg1wu1QdKUqbgzzsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM3oCGblnYgHeTBgcHHSZFb/eCiMB8GA1UdIwQY MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5 LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0rxHxJ3a wg0gtQh+LE0r+9NhfSR32Ud2T8bLsllFiaN1b6Dw/xlkdqmJfHFIBK/W+TchYuLh xJM/Jp55c0C/U3ZmIZWHmY8buDYzMXb+szRceamM95l0Hgp/tz40IUWD5gZPTd4z fXGFkxeP1Q0muwfzyfOxRPL0PtzxA15nEqgXKs/90lWmmxIHOAVGoo3+R/IHrsdw SFFKZtgvkJ3y5/OyDKVhyaCoNkLVUrnzLWaDn/qXu0accPnkrKGhMVkhYmmeqYWG Zkih8FhESw4lNDDPt2y1USLkx85X0+b9QkHh/CaIbEVzUWHx+sY+UT0mXP5EHgBJ v3zwQDN0smATWA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:36 2025 by rpki-client