This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json) Hash identifier: 43zbde6RxRH1Lg0opPKHGO+gzSpe5kEfP6pI98LWpDg= Subject key identifier: 72:02:F4:9E:3F:CA:F4:F4:59:73:C1:CE:FC:B2:31:10:29:B2:CD:3C Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Certificate serial: 019B08C845D3F7E7B60251A09937C6EE931D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft Manifest number: 1340 Signing time: Wed 10 Dec 2025 15:01:41 +0000 Manifest this update: Wed 10 Dec 2025 15:01:41 +0000 Manifest next update: Thu 11 Dec 2025 15:01:41 +0000 Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=) 2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=) 3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=) 4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: Grd8hSCGF/BD6BsX9+ie7tJSZNThbfzwvJkBhonRt90=) 5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=) 6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=) 7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=) 8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:45:d3:f7:e7:b6:02:51:a0:99:37:c6:ee:93:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Validity Not Before: Dec 10 15:01:41 2025 GMT Not After : Dec 11 15:01:41 2025 GMT Subject: CN=7202f49e3fcaf4f45973c1cefcb2311029b2cd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:32:dc:40:06:d9:27:40:66:24:1a:53:1a: 62:ce:4e:b4:48:d7:0d:45:61:6b:91:8e:0e:6b:cf: d5:85:7f:5a:ca:f4:df:40:ff:12:fe:89:d9:c7:df: 69:98:b5:a5:0a:63:23:f8:30:4d:55:59:82:0c:07: da:ce:de:6d:a1:bb:52:0f:4c:24:f6:46:46:51:53: 06:7c:de:64:7f:7a:99:1c:c9:8a:78:03:f4:69:25: 3c:7f:c2:e7:d1:cc:13:bb:db:03:1e:fa:a6:36:7d: 93:42:e3:64:99:74:85:15:d6:5b:e5:93:70:85:46: 06:b3:29:62:6c:28:bd:31:b8:74:96:3a:87:01:e5: 88:a2:7a:1e:6d:16:2b:73:3c:37:5f:b4:6c:ee:8d: e0:93:ff:98:ad:71:29:44:ba:43:f7:6d:02:4c:1f: 49:e4:be:ac:79:9d:e8:4f:a0:8b:41:9c:f3:ab:eb: ac:5c:ce:23:01:b1:6b:3a:90:9e:e2:2d:e8:1a:e1: fc:28:55:03:05:b0:5c:ba:32:5e:83:cb:d8:66:20: 87:93:5c:ae:38:f3:19:a0:09:82:fc:19:cd:e6:30: 28:f7:ce:aa:89:73:ed:87:5e:71:17:d0:29:3b:7e: 24:1c:88:b4:dc:07:7f:03:21:eb:52:c5:a8:b2:d8: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:02:F4:9E:3F:CA:F4:F4:59:73:C1:CE:FC:B2:31:10:29:B2:CD:3C X509v3 Authority Key Identifier: keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b1:b9:57:37:fc:7d:80:68:f3:37:35:9e:ce:ed:e3:4e:43: 46:0a:74:ff:6c:60:cc:a2:80:4a:3d:1f:8d:b2:f8:1b:d8:db: 52:c8:ca:ff:14:03:e4:08:97:93:9f:79:1b:14:56:76:71:d8: 30:55:12:1a:73:38:ce:16:18:e8:1a:58:1e:2a:75:12:55:7a: 7d:a2:98:fd:c0:35:3b:49:e2:9a:3b:00:29:1c:46:62:1c:87: c4:ae:f8:12:bc:af:53:cc:4a:b1:c1:fa:97:e6:3f:f0:3f:55: 80:49:83:2b:0c:8f:a4:c9:e9:d0:d1:07:40:82:42:7c:f4:5b: 32:e0:3d:56:dd:a8:78:a1:40:92:cb:c2:ab:43:9c:07:b1:2e: a9:c6:cf:4d:a7:d8:88:18:ea:8c:ba:ca:9a:07:83:59:11:d6: 3d:2c:21:42:cb:62:8c:84:09:12:71:5e:57:20:46:53:d6:4c: b5:74:20:5e:22:66:f0:e5:70:55:75:ee:5c:41:7b:64:bf:6d: 96:f9:2b:e3:ad:b2:a6:e8:f3:36:c2:b2:1c:4a:8f:e2:d2:19: c3:a4:c7:5b:93:10:66:89:01:36:03:c3:44:0f:77:cd:68:64: 78:01:ef:26:d3:42:bd:fc:85:ce:50:af:5f:0e:8f:d0:19:ff: c9:23:08:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyEXT9+e2AlGgmTfG7pMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5 YWQwNzgwHhcNMjUxMjEwMTUwMTQxWhcNMjUxMjExMTUwMTQxWjAzMTEwLwYDVQQD Eyg3MjAyZjQ5ZTNmY2FmNGY0NTk3M2MxY2VmY2IyMzExMDI5YjJjZDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkky3EAG2SdAZiQaUxpizk60SNcN RWFrkY4Oa8/VhX9ayvTfQP8S/onZx99pmLWlCmMj+DBNVVmCDAfazt5tobtSD0wk 9kZGUVMGfN5kf3qZHMmKeAP0aSU8f8Ln0cwTu9sDHvqmNn2TQuNkmXSFFdZb5ZNw hUYGsylibCi9Mbh0ljqHAeWIonoebRYrczw3X7Rs7o3gk/+YrXEpRLpD920CTB9J 5L6seZ3oT6CLQZzzq+usXM4jAbFrOpCe4i3oGuH8KFUDBbBcujJeg8vYZiCHk1yu OPMZoAmC/BnN5jAo986qiXPth15xF9ApO34kHIi03Ad/AyHrUsWostg5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIC9J4/yvT0WXPBzvyyMRApss08MB8GA1UdIwQY MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt ODdkM2IwMjNkOTE5LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5 LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7G5Vzf8 fYBo8zc1ns7t405DRgp0/2xgzKKASj0fjbL4G9jbUsjK/xQD5AiXk595GxRWdnHY MFUSGnM4zhYY6BpYHip1ElV6faKY/cA1O0nimjsAKRxGYhyHxK74EryvU8xKscH6 l+Y/8D9VgEmDKwyPpMnp0NEHQIJCfPRbMuA9Vt2oeKFAksvCq0OcB7EuqcbPTafY iBjqjLrKmgeDWRHWPSwhQstijIQJEnFeVyBGU9ZMtXQgXiJm8OVwVXXuXEF7ZL9t lvkr462ypujzNsKyHEqP4tIZw6THW5MQZokBNgPDRA93zWhkeAHvJtNCvfyFzlCv Xw6P0Bn/ySMIpg== -----END CERTIFICATE-----Generated at Wed Dec 10 22:32:54 2025 by rpki-client