This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json) Hash identifier: ksib+IDmO3IwXaQuQ4KQnFlsNswAeUFse2D7HzGG0aQ= Subject key identifier: CA:E3:DE:F3:EC:02:B2:CB:B5:C9:DF:C2:3C:1D:A4:4C:C6:E3:D9:18 Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Certificate serial: 019B2CD3C97CF29109ADA950804883581CD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft Manifest number: 06E3 Signing time: Wed 17 Dec 2025 15:00:35 +0000 Manifest this update: Wed 17 Dec 2025 15:00:35 +0000 Manifest next update: Thu 18 Dec 2025 15:00:35 +0000 Files and hashes: 1: VAzYkQRTgwiJaHwxuivv8ZFztSM.roa (hash: JX1t8tGMn8nyq5oj+S/xubK6nVg6WbHVtaOCdwSyvtE=) 2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: sPNAVmaVgf7Y/Zud15qT2TrPhWiub+ydq0qmcKoG1F8=) 3: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:d3:c9:7c:f2:91:09:ad:a9:50:80:48:83:58:1c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Validity Not Before: Dec 17 15:00:35 2025 GMT Not After : Dec 18 15:00:35 2025 GMT Subject: CN=cae3def3ec02b2cbb5c9dfc23c1da44cc6e3d918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:97:0c:4a:14:a5:0a:59:97:4d:46:15:d3: b2:a4:8e:24:38:bf:9b:01:eb:15:48:67:73:e5:2f: e8:aa:34:02:20:d6:c7:4e:ea:3b:18:18:61:03:8c: ae:bc:8a:0f:09:04:ab:29:4a:7b:85:51:cc:85:65: 2c:04:30:c5:6a:1f:c2:35:2c:37:5a:ec:c5:07:cb: 8a:ef:b4:ba:b5:33:ac:7e:76:71:ef:4e:f9:ed:27: 2d:64:ed:ed:09:d8:ae:45:56:11:3e:3f:54:cb:50: 74:16:b3:d7:9f:83:7f:48:e5:b1:27:43:67:aa:07: d7:d9:22:a9:43:8f:d6:0c:51:e0:44:a2:b0:f8:fe: a1:1c:4f:30:9b:f1:48:5f:9d:6f:32:df:32:96:1e: ab:e1:9d:39:63:29:b5:e5:c0:f5:a1:37:d4:6e:30: 6d:b0:76:56:8c:88:94:76:5b:6a:8e:27:1a:74:4a: d9:f6:60:07:a0:24:5f:59:41:cf:25:df:28:e3:90: c7:fa:b6:71:43:d2:58:db:e4:ab:bf:ca:98:49:d7: ee:41:0f:22:bf:3a:e1:83:36:c8:64:30:35:70:ee: 4c:db:e8:53:7f:5c:91:80:00:62:aa:5f:eb:a8:09: 12:88:a1:0d:d8:e0:50:af:ae:73:70:ce:c2:50:8e: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:DE:F3:EC:02:B2:CB:B5:C9:DF:C2:3C:1D:A4:4C:C6:E3:D9:18 X509v3 Authority Key Identifier: keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:38:21:35:40:e9:47:63:f0:f9:84:35:d2:67:52:11:34:77: 41:91:b1:1d:e8:f8:ba:25:1e:f9:82:7f:19:8a:c7:22:a1:e9: 12:6b:52:f8:d2:c9:5d:f7:44:f2:2e:ee:ed:55:81:b6:ed:90: e3:3d:48:54:2b:6c:68:cb:ef:16:95:3d:b4:f4:4f:12:87:c4: 3d:d2:57:06:4b:eb:94:b7:64:94:25:4b:6a:d6:87:bb:19:af: a6:71:d6:b2:e1:68:56:fe:5c:72:67:d9:66:0d:96:66:36:dd: 4c:35:94:d7:8d:48:77:0b:6b:90:c2:40:fc:66:f6:82:2d:a4: 04:a8:8c:a7:87:6d:7a:99:31:b7:40:a1:d8:97:1d:3f:4f:fc: 38:8e:d0:12:52:20:85:08:d9:bc:6c:51:b1:e6:27:1e:f1:f4: e6:e9:56:d2:b7:37:bd:8b:0a:14:9b:df:ee:73:54:54:e2:69: af:ef:ce:8f:cc:b9:83:db:4a:ea:4a:e4:22:1f:ee:60:f4:78: 61:f9:cf:b0:7d:b6:14:b6:0e:d5:98:fb:5e:ee:e7:fc:70:8d: 12:42:5b:b3:be:94:f1:bb:ab:43:c5:9c:07:59:e1:fe:65:a1: 52:5e:13:38:43:9c:b3:ac:70:47:7b:cb:ca:83:41:2e:31:1f: 13:d8:75:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZss08l88pEJralQgEiDWBzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjBiZGJhNDZjZTUwYzBhYTBjNDFmMGIxYjQ5ZmE3ZWQ2 ODEwY2IwHhcNMjUxMjE3MTUwMDM1WhcNMjUxMjE4MTUwMDM1WjAzMTEwLwYDVQQD EyhjYWUzZGVmM2VjMDJiMmNiYjVjOWRmYzIzYzFkYTQ0Y2M2ZTNkOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8OXDEoUpQpZl01GFdOypI4kOL+b AesVSGdz5S/oqjQCINbHTuo7GBhhA4yuvIoPCQSrKUp7hVHMhWUsBDDFah/CNSw3 WuzFB8uK77S6tTOsfnZx70757SctZO3tCdiuRVYRPj9Uy1B0FrPXn4N/SOWxJ0Nn qgfX2SKpQ4/WDFHgRKKw+P6hHE8wm/FIX51vMt8ylh6r4Z05Yym15cD1oTfUbjBt sHZWjIiUdltqjicadErZ9mAHoCRfWUHPJd8o45DH+rZxQ9JY2+Srv8qYSdfuQQ8i vzrhgzbIZDA1cO5M2+hTf1yRgABiql/rqAkSiKEN2OBQr65zcM7CUI6wqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrj3vPsArLLtcnfwjwdpEzG49kYMB8GA1UdIwQY MBaAFGAgvbpGzlDAqgxB8LG0n6ftaBDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2Yt YjMwOTExMmQyZWVjLzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2YtYjMwOTExMmQyZWVj LzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzghNUDp R2Pw+YQ10mdSETR3QZGxHej4uiUe+YJ/GYrHIqHpEmtS+NLJXfdE8i7u7VWBtu2Q 4z1IVCtsaMvvFpU9tPRPEofEPdJXBkvrlLdklCVLataHuxmvpnHWsuFoVv5ccmfZ Zg2WZjbdTDWU141IdwtrkMJA/Gb2gi2kBKiMp4dtepkxt0Ch2JcdP0/8OI7QElIg hQjZvGxRseYnHvH05ulW0rc3vYsKFJvf7nNUVOJpr+/Oj8y5g9tK6krkIh/uYPR4 YfnPsH22FLYO1Zj7Xu7n/HCNEkJbs76U8burQ8WcB1nh/mWhUl4TOEOcs6xwR3vL yoNBLjEfE9h1zg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:10:29 2025 by rpki-client