This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json) Hash identifier: NwH7i9rcJ57qcl/+LfZUxXkv7d59Swoi8RxXkaJyJs4= Subject key identifier: 01:01:14:BF:5D:99:40:3F:65:8D:36:D2:73:F1:1E:62:C0:00:5C:E9 Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Certificate serial: 019B11262C91D7B46276667DEA2D5FC42590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft Manifest number: 06C5 Signing time: Fri 12 Dec 2025 06:01:12 +0000 Manifest this update: Fri 12 Dec 2025 06:01:12 +0000 Manifest next update: Sat 13 Dec 2025 06:01:12 +0000 Files and hashes: 1: BWZ8TffzeheUILd5O5vwxA8ANgs.roa (hash: 9mVvCij2ArMXMv49a46m8ltBnU+gbtg05+eZlvNEdYk=) 2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: vnnR/v/P0aIBE24D3At1+ar/RDjGxNZrnRg1hORI1Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:2c:91:d7:b4:62:76:66:7d:ea:2d:5f:c4:25:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Validity Not Before: Dec 12 06:01:12 2025 GMT Not After : Dec 13 06:01:12 2025 GMT Subject: CN=010114bf5d99403f658d36d273f11e62c0005ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:a2:b4:b1:f0:24:1b:d5:65:11:1b:7a:9e: 1a:8e:74:0b:37:55:a9:29:f1:05:42:1f:f6:ef:d1: 3e:bc:02:da:f8:4c:1d:38:6c:68:ef:b4:52:27:8a: 54:f9:33:d6:dd:f7:5f:c3:a1:18:9f:f6:48:91:bc: 2b:4f:52:22:56:68:65:31:39:88:37:98:c4:08:ed: 48:2a:08:d9:fb:99:90:d0:37:61:a2:30:73:13:53: 31:e6:72:44:a7:28:77:5b:78:69:73:eb:9c:89:bc: e8:6a:06:7e:71:0f:8e:e6:60:74:db:37:5c:4b:28: 09:24:cf:24:68:e9:a3:a1:a9:6c:6d:cd:7c:81:55: 35:5d:72:82:56:5d:1d:6c:2d:8e:fb:a2:9a:1d:24: cf:82:5c:b2:95:0f:fe:32:8b:d6:4a:46:7e:30:7e: c0:97:e5:df:4b:93:b4:24:98:1e:60:48:bb:a2:d0: 6b:1b:c6:18:f1:2a:37:65:2f:69:a4:a0:53:b6:1a: 7a:61:09:7e:7b:da:7e:e0:0d:28:7e:b2:f5:51:56: 43:7b:00:58:0e:bf:6a:1f:d2:04:14:04:90:af:93: 45:88:89:7a:52:58:0e:62:ac:c6:b7:65:1b:aa:60: bd:d2:00:74:dc:4b:b7:07:3d:76:6c:3c:0a:e9:24: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:01:14:BF:5D:99:40:3F:65:8D:36:D2:73:F1:1E:62:C0:00:5C:E9 X509v3 Authority Key Identifier: keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:65:72:72:33:a7:76:36:09:36:06:29:8f:b4:8d:1c:95:3e: e7:cc:14:fb:19:a5:55:f4:92:90:f5:68:11:47:f7:c4:7b:36: 0b:0e:5d:90:47:dd:59:25:16:91:ac:9e:3a:b1:ee:2f:f2:48: 5a:6a:43:b9:81:0c:c0:09:f7:5d:57:19:2b:2e:2c:50:5b:5c: 0a:78:60:44:5b:53:d2:0e:7a:a8:1d:67:27:c3:49:68:9b:21: 53:76:e4:a8:45:95:9f:09:82:c0:65:5b:02:40:b7:4c:0e:c3: 5f:b7:2f:7b:ab:0d:b6:e6:5c:90:ed:20:a5:3e:2e:d2:9f:65: 85:d4:57:79:a5:f2:05:bb:8a:c8:8c:4b:25:7a:54:72:09:7a: f7:0f:46:40:18:07:25:e9:b0:d5:73:36:a6:6c:84:66:02:a6: a5:9e:bf:5c:6e:04:d0:55:71:00:b9:14:23:9e:b8:d9:a7:88: 4f:f3:fc:d9:72:b0:2f:50:b9:f3:1b:e9:b6:36:32:3f:26:a3: 3b:3e:08:c4:97:10:de:e6:59:ea:11:60:ba:3d:32:5e:cd:1b: 30:f4:98:19:35:87:16:1e:9a:a9:60:f1:be:5c:4e:64:6d:a4: 0d:c4:8e:2c:c5:9a:9c:68:00:d0:90:bf:23:0f:56:f8:29:f7: 23:ed:8c:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJiyR17RidmZ96i1fxCWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4 ZGQ5ZGQwHhcNMjUxMjEyMDYwMTEyWhcNMjUxMjEzMDYwMTEyWjAzMTEwLwYDVQQD EygwMTAxMTRiZjVkOTk0MDNmNjU4ZDM2ZDI3M2YxMWU2MmMwMDA1Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxOitLHwJBvVZREbep4ajnQLN1Wp KfEFQh/279E+vALa+EwdOGxo77RSJ4pU+TPW3fdfw6EYn/ZIkbwrT1IiVmhlMTmI N5jECO1IKgjZ+5mQ0DdhojBzE1Mx5nJEpyh3W3hpc+ucibzoagZ+cQ+O5mB02zdc SygJJM8kaOmjoalsbc18gVU1XXKCVl0dbC2O+6KaHSTPglyylQ/+MovWSkZ+MH7A l+XfS5O0JJgeYEi7otBrG8YY8So3ZS9ppKBTthp6YQl+e9p+4A0ofrL1UVZDewBY Dr9qH9IEFASQr5NFiIl6UlgOYqzGt2UbqmC90gB03Eu3Bz12bDwK6SRUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEBFL9dmUA/ZY020nPxHmLAAFzpMB8GA1UdIwQY MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt M2FiZmFmZTc0YWE5LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5 LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1WVycjOn djYJNgYpj7SNHJU+58wU+xmlVfSSkPVoEUf3xHs2Cw5dkEfdWSUWkayeOrHuL/JI WmpDuYEMwAn3XVcZKy4sUFtcCnhgRFtT0g56qB1nJ8NJaJshU3bkqEWVnwmCwGVb AkC3TA7DX7cve6sNtuZckO0gpT4u0p9lhdRXeaXyBbuKyIxLJXpUcgl69w9GQBgH Jemw1XM2pmyEZgKmpZ6/XG4E0FVxALkUI5642aeIT/P82XKwL1C58xvptjYyPyaj Oz4IxJcQ3uZZ6hFguj0yXs0bMPSYGTWHFh6aqWDxvlxOZG2kDcSOLMWanGgA0JC/ Iw9W+Cn3I+2MRQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:22 2025 by rpki-client