This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json) Hash identifier: FMmASSmv+RV1GR0VZ+9osDiPizQ34H64ofkhtWtu48k= Subject key identifier: 27:69:C1:89:FA:86:05:88:18:AB:55:CC:54:A6:C3:C0:31:99:FD:11 Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97 Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397 Certificate serial: 019B0E934711BD6436EBF5BEA743AD3ECCFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft Manifest number: 1639 Signing time: Thu 11 Dec 2025 18:01:31 +0000 Manifest this update: Thu 11 Dec 2025 18:01:31 +0000 Manifest next update: Fri 12 Dec 2025 18:01:31 +0000 Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=) 2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=) 3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: gGBv+JpLgdxRDjbEQZHpZqAezPU8Mm+LFCaUo3sYO9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:47:11:bd:64:36:eb:f5:be:a7:43:ad:3e:cc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397 Validity Not Before: Dec 11 18:01:31 2025 GMT Not After : Dec 12 18:01:31 2025 GMT Subject: CN=2769c189fa86058818ab55cc54a6c3c03199fd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:c3:23:7d:b9:2e:bc:19:ca:2e:a9:6c:1e: f7:58:f5:cb:1e:bf:11:c8:57:b1:9f:49:95:c1:db: e5:41:28:1a:de:14:93:a0:06:bb:f1:f2:eb:47:50: 90:1e:9d:16:9c:15:ad:0f:b8:89:67:1c:bd:ea:cb: 57:24:db:90:0f:4a:91:f9:88:01:cb:44:f5:3d:c7: 97:09:96:39:ce:4c:29:b2:67:5f:86:72:ab:3a:18: 72:72:06:9d:32:76:92:49:39:e1:f1:2e:e3:76:14: ff:8d:4e:81:7f:19:c7:6e:b8:c2:00:1b:de:85:e2: e8:9c:01:7e:2d:6c:d1:f2:4d:96:00:6e:e3:64:17: bb:fc:f9:2e:79:38:96:51:53:ac:a8:fb:ee:c9:c7: 14:48:2c:cc:ea:b5:75:74:46:13:b5:e9:6a:d3:e3: ef:76:46:f2:0c:5d:6e:41:85:c6:81:ba:e1:a4:9c: 6c:08:24:60:d6:7d:de:bb:b4:cd:2d:72:bd:d3:cc: a9:e2:fe:bf:5f:f8:0a:0e:dc:7a:c8:6e:c6:a1:d6: cb:08:0f:ab:af:73:0a:77:55:60:1c:65:2f:be:fa: 03:bb:04:f6:77:a6:16:f5:7c:7a:ba:48:a9:de:6b: b0:6d:d5:22:9a:66:ac:f9:ae:a1:6d:1a:66:56:56: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:69:C1:89:FA:86:05:88:18:AB:55:CC:54:A6:C3:C0:31:99:FD:11 X509v3 Authority Key Identifier: keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e4:38:b3:42:f1:1d:82:01:e7:8c:12:b0:45:b3:2e:cc:5a: c9:ca:9d:19:23:dc:ab:8c:35:78:14:36:e2:ce:6d:51:d0:b0: 10:37:57:4f:7b:96:5d:73:1c:d3:67:0e:5f:eb:2c:29:33:be: 6b:2c:62:ce:be:da:83:cd:37:e1:91:65:ad:a6:5e:4f:eb:b4: 48:b6:e8:1d:d2:e0:3d:2f:b6:1d:41:60:2a:07:f2:6e:88:12: 67:f4:63:7c:c4:45:b0:3c:bd:cc:58:8e:0c:ae:22:57:f6:92: 18:5e:ba:d7:a3:90:e2:45:f1:c6:5b:20:db:33:2b:1c:da:6a: fc:cf:42:d1:da:4b:e9:89:4b:c9:ce:34:3c:59:e7:9e:b9:49: d1:d6:fd:83:e1:ce:b9:9d:7c:ce:db:b9:54:f6:a2:d5:29:17: 49:0b:67:4a:21:34:ab:03:c4:19:da:2b:66:cc:81:80:ae:4b: a2:c2:64:97:84:b9:85:e8:c6:cd:da:44:82:5b:bf:24:f1:f9: d0:df:ad:26:fe:be:12:a0:ba:78:85:c0:e2:df:f2:c4:ae:39: 5a:5c:ca:c8:f5:85:75:1c:6c:c7:61:bf:ac:0e:9e:c7:8d:7c: 82:57:15:4f:73:10:fe:79:e5:a6:50:41:30:ad:55:bf:0c:90: 20:0d:c3:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk0cRvWQ26/W+p0OtPsz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4 YjYzOTcwHhcNMjUxMjExMTgwMTMxWhcNMjUxMjEyMTgwMTMxWjAzMTEwLwYDVQQD EygyNzY5YzE4OWZhODYwNTg4MThhYjU1Y2M1NGE2YzNjMDMxOTlmZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktLDI325LrwZyi6pbB73WPXLHr8R yFexn0mVwdvlQSga3hSToAa78fLrR1CQHp0WnBWtD7iJZxy96stXJNuQD0qR+YgB y0T1PceXCZY5zkwpsmdfhnKrOhhycgadMnaSSTnh8S7jdhT/jU6BfxnHbrjCABve heLonAF+LWzR8k2WAG7jZBe7/PkueTiWUVOsqPvuyccUSCzM6rV1dEYTtelq0+Pv dkbyDF1uQYXGgbrhpJxsCCRg1n3eu7TNLXK908yp4v6/X/gKDtx6yG7GodbLCA+r r3MKd1VgHGUvvvoDuwT2d6YW9Xx6ukip3muwbdUimmas+a6hbRpmVlYQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdpwYn6hgWIGKtVzFSmw8Axmf0RMB8GA1UdIwQY MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt OWY5MzIyZDY3MzJiLzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeQ4s0Lx HYIB54wSsEWzLsxaycqdGSPcq4w1eBQ24s5tUdCwEDdXT3uWXXMc02cOX+ssKTO+ ayxizr7ag8034ZFlraZeT+u0SLboHdLgPS+2HUFgKgfybogSZ/RjfMRFsDy9zFiO DK4iV/aSGF6616OQ4kXxxlsg2zMrHNpq/M9C0dpL6YlLyc40PFnnnrlJ0db9g+HO uZ18ztu5VPai1SkXSQtnSiE0qwPEGdorZsyBgK5LosJkl4S5hejGzdpEglu/JPH5 0N+tJv6+EqC6eIXA4t/yxK45WlzKyPWFdRxsx2G/rA6ex418glcVT3MQ/nnlplBB MK1VvwyQIA3DfQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:09 2025 by rpki-client