This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json) Hash identifier: To/O0ASwmEBDIv/g/prfoq2IXstKtANy4MAaERoXeL8= Subject key identifier: F0:08:EE:A2:E8:93:10:AD:BD:16:6A:0F:C2:29:F7:91:0A:B5:C3:7F Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Certificate serial: 019B4626177FB67145018D68870771E4FB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft Manifest number: 0BCD Signing time: Mon 22 Dec 2025 13:00:59 +0000 Manifest this update: Mon 22 Dec 2025 13:00:59 +0000 Manifest next update: Tue 23 Dec 2025 13:00:59 +0000 Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=) 2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: 0P55zBJvm2QDcp8bxid9ebGKxwj0LoP3tiwLHxtp71c=) 3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=) 4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:17:7f:b6:71:45:01:8d:68:87:07:71:e4:fb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Validity Not Before: Dec 22 13:00:59 2025 GMT Not After : Dec 23 13:00:59 2025 GMT Subject: CN=f008eea2e89310adbd166a0fc229f7910ab5c37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:34:7d:97:69:93:c2:fa:86:ef:ae:c9:51: ff:42:00:b1:44:fd:c4:e0:65:2a:21:da:eb:ad:6a: 23:40:29:48:b2:db:ac:2f:e9:be:af:59:e0:f6:0f: ff:a6:d5:17:11:b2:70:86:78:15:e4:f1:e6:2e:03: e3:64:ad:4e:96:d7:d9:70:6d:4a:70:93:8c:6a:39: af:2d:ad:36:b9:31:9e:40:2e:6a:de:0e:ec:42:f2: af:e6:37:43:b0:16:66:c4:2f:76:47:e7:63:bf:10: b1:fb:b6:8a:b5:34:de:4f:8f:9a:f1:5f:1e:e2:69: 80:c0:12:41:67:88:0a:66:ff:1e:36:d6:3e:1f:c8: 45:66:f9:11:35:f4:93:ab:8d:cd:f7:3b:2c:8b:09: 9d:97:9f:1c:d2:5a:c0:ed:d2:58:d8:12:8f:73:9e: b4:df:36:d4:a7:5c:82:fe:bb:10:1e:ea:16:45:74: d4:9e:c4:6b:3c:c8:db:59:29:19:98:00:00:cd:ff: 3b:c7:2c:79:04:42:06:33:1d:79:91:d2:fa:bf:4a: 4e:35:18:32:34:3e:15:87:74:89:18:98:79:00:ca: e5:b3:42:9f:4d:ff:df:33:8c:20:6a:63:30:e8:69: 4a:35:d0:42:82:88:cd:5c:39:5b:07:c7:55:05:be: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:08:EE:A2:E8:93:10:AD:BD:16:6A:0F:C2:29:F7:91:0A:B5:C3:7F X509v3 Authority Key Identifier: keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:a2:1c:43:fa:e0:c1:11:5f:30:4c:75:f4:3b:14:6e:49: 13:57:04:8c:5a:2e:60:8b:3a:f4:bf:57:6d:b9:53:11:34:9f: e6:d2:09:b4:72:05:b4:6c:ba:3a:f7:09:14:10:31:30:69:80: a8:c4:61:94:f2:40:e8:99:2a:a8:57:a2:b1:86:a7:39:1e:9c: 8b:c6:b5:6d:31:fb:92:63:8e:c2:95:bf:91:3d:7b:e8:d2:86: 7c:9f:b6:53:33:45:5b:a1:cf:46:71:64:1d:f9:74:4e:09:b2: 6a:d9:80:74:60:23:ac:f9:37:4a:85:cc:90:bf:d7:a6:13:2a: 59:e7:c0:66:3c:26:56:06:d2:2f:b0:1b:ea:74:25:63:e5:d8: 64:e6:37:68:da:1d:16:cc:3c:c8:99:3e:ef:76:8a:f1:14:ff: e7:c2:c2:f0:47:64:3c:4a:ad:45:fd:39:da:31:b4:c1:dc:16: d4:12:a9:c9:6b:3f:1d:92:b0:3b:1f:f1:ed:74:70:36:0e:b0: 93:a3:3c:03:6a:0c:69:57:9e:71:c0:86:66:c5:67:92:63:63: 6d:fb:17:1d:01:a4:9e:8a:e0:6c:ee:e0:02:21:a3:19:04:37: 39:20:1f:ca:b6:39:95:be:4d:22:f3:ba:3a:21:6f:05:3c:f4: b4:ae:3a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJhd/tnFFAY1ohwdx5PtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4 YzNiZjEwHhcNMjUxMjIyMTMwMDU5WhcNMjUxMjIzMTMwMDU5WjAzMTEwLwYDVQQD EyhmMDA4ZWVhMmU4OTMxMGFkYmQxNjZhMGZjMjI5Zjc5MTBhYjVjMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DE0fZdpk8L6hu+uyVH/QgCxRP3E 4GUqIdrrrWojQClIstusL+m+r1ng9g//ptUXEbJwhngV5PHmLgPjZK1OltfZcG1K cJOMajmvLa02uTGeQC5q3g7sQvKv5jdDsBZmxC92R+djvxCx+7aKtTTeT4+a8V8e 4mmAwBJBZ4gKZv8eNtY+H8hFZvkRNfSTq43N9zssiwmdl58c0lrA7dJY2BKPc560 3zbUp1yC/rsQHuoWRXTUnsRrPMjbWSkZmAAAzf87xyx5BEIGMx15kdL6v0pONRgy ND4Vh3SJGJh5AMrls0KfTf/fM4wgamMw6GlKNdBCgojNXDlbB8dVBb5fnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAI7qLokxCtvRZqD8Ip95EKtcN/MB8GA1UdIwQY MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqGiHEP6 4MERXzBMdfQ7FG5JE1cEjFouYIs69L9XbblTETSf5tIJtHIFtGy6OvcJFBAxMGmA qMRhlPJA6JkqqFeisYanOR6ci8a1bTH7kmOOwpW/kT176NKGfJ+2UzNFW6HPRnFk Hfl0TgmyatmAdGAjrPk3SoXMkL/XphMqWefAZjwmVgbSL7Ab6nQlY+XYZOY3aNod Fsw8yJk+73aK8RT/58LC8EdkPEqtRf052jG0wdwW1BKpyWs/HZKwOx/x7XRwNg6w k6M8A2oMaVeeccCGZsVnkmNjbfsXHQGknorgbO7gAiGjGQQ3OSAfyrY5lb5NIvO6 OiFvBTz0tK46fA== -----END CERTIFICATE-----Generated at Mon Dec 22 16:07:42 2025 by rpki-client