This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft File: YZmtJxLZe7wR4V39skAnE66ADL0.mft (raw, json) Hash identifier: ACReUkBjFnT4VC4w28DPwg3nPZQvDBlKREy9yD+CFek= Subject key identifier: 0C:50:6C:46:A3:0C:9F:F8:97:97:8E:ED:80:AD:56:54:54:68:EB:36 Authority key identifier: 61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD Certificate issuer: /CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd Certificate serial: 019B59E3A858A77BD435790A651210D7DB6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft Manifest number: 011C Signing time: Fri 26 Dec 2025 09:00:50 +0000 Manifest this update: Fri 26 Dec 2025 09:00:50 +0000 Manifest next update: Sat 27 Dec 2025 09:00:50 +0000 Files and hashes: 1: YZmtJxLZe7wR4V39skAnE66ADL0.crl (hash: pmDuTUtFjD78UnoiRhiW6v6AjVNJIxSbatgWr9qg6+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a8:58:a7:7b:d4:35:79:0a:65:12:10:d7:db:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd Validity Not Before: Dec 26 09:00:50 2025 GMT Not After : Dec 27 09:00:50 2025 GMT Subject: CN=0c506c46a30c9ff897978eed80ad56545468eb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:f2:cb:b7:7d:5c:24:79:b2:25:61:2f:33: 5c:06:f3:a7:5c:c4:c0:5e:20:88:42:61:bd:09:1e: e6:7b:19:f8:69:38:7d:b3:52:ed:b4:a2:80:82:76: 67:d7:8c:5c:6f:3c:92:8c:cf:65:b1:3a:1b:9c:e7: e0:6e:ea:cf:2b:fd:02:87:bc:91:6b:a9:4f:07:be: c4:76:0b:02:0d:6f:22:6a:e5:91:1d:aa:3b:cc:37: 2a:1b:fd:af:f1:08:a8:05:37:99:5f:d9:0b:cb:53: c0:bf:68:ff:70:0b:16:73:d9:3d:04:dc:29:af:53: 6e:ee:59:ed:b8:ee:b3:3e:22:31:13:de:1e:dd:31: 29:37:7a:29:72:26:55:01:1b:b3:1c:2b:67:ae:e1: 3b:d3:9e:e0:60:d2:2d:89:69:45:a9:b0:df:b6:36: c8:26:0b:e5:57:8a:dd:4f:61:42:c1:40:ff:0a:bb: 20:44:ba:d5:df:a8:62:7f:66:f0:03:25:8c:aa:fd: 60:fd:ad:4e:a2:2b:42:03:6d:b7:b3:a5:5c:d8:f2: fe:2a:b8:f4:7a:72:3a:e4:40:0f:78:7b:a8:b0:99: a7:0c:8f:7b:62:78:7d:19:2b:87:8b:f9:47:f2:a1: 63:0c:5e:cf:cc:48:41:c3:0f:49:52:9e:74:c3:7b: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:50:6C:46:A3:0C:9F:F8:97:97:8E:ED:80:AD:56:54:54:68:EB:36 X509v3 Authority Key Identifier: keyid:61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:46:e2:64:44:83:67:59:0f:a8:31:92:99:66:a2:19:30:7d: 18:95:59:b2:ab:26:a1:48:97:ec:83:b6:e8:30:f6:1c:25:20: 8f:73:97:a7:e0:06:79:57:2f:1b:da:8d:72:2a:0c:b6:3e:0d: e1:ed:b2:d8:a2:66:72:ba:8a:a1:bc:4c:ac:cb:a3:5a:11:91: 8a:37:1d:53:67:c9:73:75:ee:36:bf:1c:92:de:5d:01:17:0e: a5:a2:8b:f3:bb:83:0f:e8:76:ed:42:8c:e8:4c:d0:1d:37:8a: 3d:4c:53:c3:bf:27:12:4a:4f:b5:d7:86:51:03:1f:e7:5c:f2: eb:c9:b3:ff:52:3c:7a:52:f6:00:1c:25:02:d8:b8:62:32:d1: 59:c0:94:62:b6:92:d6:da:b0:44:87:6a:ac:36:d9:93:48:ae: 6d:7b:ae:30:1e:fd:cb:e3:32:f7:5c:f3:7a:4d:46:1e:d3:96: ce:09:8e:0f:f6:8f:70:56:1e:96:5c:c7:2a:2e:1f:39:6e:00: c5:b6:a2:de:c4:2f:dc:49:3e:ad:7d:f1:74:51:05:0e:07:08: 95:49:08:60:2d:4a:76:50:76:91:85:d7:22:3e:87:b4:0e:f5: 74:75:31:e7:18:9a:de:7c:59:8a:32:64:7e:61:4c:18:ab:34: 5f:63:28:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46hYp3vUNXkKZRIQ19trMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOTlhZDI3MTJkOTdiYmMxMWUxNWRmZGIyNDAyNzEzYWU4 MDBjYmQwHhcNMjUxMjI2MDkwMDUwWhcNMjUxMjI3MDkwMDUwWjAzMTEwLwYDVQQD EygwYzUwNmM0NmEzMGM5ZmY4OTc5NzhlZWQ4MGFkNTY1NDU0NjhlYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wfyy7d9XCR5siVhLzNcBvOnXMTA XiCIQmG9CR7mexn4aTh9s1LttKKAgnZn14xcbzySjM9lsTobnOfgburPK/0Ch7yR a6lPB77EdgsCDW8iauWRHao7zDcqG/2v8QioBTeZX9kLy1PAv2j/cAsWc9k9BNwp r1Nu7lntuO6zPiIxE94e3TEpN3opciZVARuzHCtnruE7057gYNItiWlFqbDftjbI JgvlV4rdT2FCwUD/CrsgRLrV36hif2bwAyWMqv1g/a1OoitCA223s6Vc2PL+Krj0 enI65EAPeHuosJmnDI97Ynh9GSuHi/lH8qFjDF7PzEhBww9JUp50w3uipwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxQbEajDJ/4l5eO7YCtVlRUaOs2MB8GA1UdIwQY MBaAFGGZrScS2Xu8EeFd/bJAJxOugAy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVptdEp4TFplN3dSNFYzOXNrQW5FNjZBREwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YzE4MWUtZTFlMy00MThjLTk2ODEt MzZiMDA3OTE3NTFhLzEvWVptdEp4TFplN3dSNFYzOXNrQW5FNjZBREwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82YzE4MWUtZTFlMy00MThjLTk2ODEtMzZiMDA3OTE3NTFh LzEvWVptdEp4TFplN3dSNFYzOXNrQW5FNjZBREwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkbiZESD Z1kPqDGSmWaiGTB9GJVZsqsmoUiX7IO26DD2HCUgj3OXp+AGeVcvG9qNcioMtj4N 4e2y2KJmcrqKobxMrMujWhGRijcdU2fJc3XuNr8ckt5dARcOpaKL87uDD+h27UKM 6EzQHTeKPUxTw78nEkpPtdeGUQMf51zy68mz/1I8elL2ABwlAti4YjLRWcCUYraS 1tqwRIdqrDbZk0iubXuuMB79y+My91zzek1GHtOWzgmOD/aPcFYellzHKi4fOW4A xbai3sQv3Ek+rX3xdFEFDgcIlUkIYC1KdlB2kYXXIj6HtA71dHUx5xia3nxZijJk fmFMGKs0X2MoQA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:03 2025 by rpki-client