This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json) Hash identifier: 3BKcCV2nhUsC2iIExLz0kfeaU0uPdXjDlo6dJarodvY= Subject key identifier: 14:FA:CC:35:A5:99:48:7F:59:75:79:76:2E:CC:B8:65:E5:CB:60:AA Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Certificate serial: 019B35D73E3AD738FAB8F3AAAA70E0E19FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft Manifest number: 143B Signing time: Fri 19 Dec 2025 09:00:57 +0000 Manifest this update: Fri 19 Dec 2025 09:00:57 +0000 Manifest next update: Sat 20 Dec 2025 09:00:57 +0000 Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=) 2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: 51wBtAMBqKVTEtpdt0XUPfUqnAeufTvjm2NDUIIrY6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:3e:3a:d7:38:fa:b8:f3:aa:aa:70:e0:e1:9f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Validity Not Before: Dec 19 09:00:57 2025 GMT Not After : Dec 20 09:00:57 2025 GMT Subject: CN=14facc35a599487f597579762eccb865e5cb60aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:c9:a4:97:5f:04:91:fa:42:42:3e:7e:72: 35:67:6e:b5:58:b3:19:a5:71:aa:82:a5:e0:26:9a: ab:a1:1b:36:d2:33:37:0e:d9:b6:a9:7a:28:d8:54: 56:ec:f2:32:44:57:8b:0a:f6:a8:8e:a5:d1:59:53: 6c:f9:5b:f5:bb:5c:06:2e:4a:f9:c0:8f:93:a6:7e: 5d:08:f2:70:80:d1:25:e0:ac:ac:23:2b:e2:7b:9d: 4f:f7:1e:82:41:a5:a8:bb:db:94:46:51:c4:4d:43: f6:d6:6c:af:80:de:b2:93:c1:83:37:7c:ab:97:b6: 9d:8f:1b:8d:d0:02:67:7b:65:e3:4d:ca:02:dd:f3: 8f:7c:44:79:58:eb:2a:d1:68:8a:85:09:37:49:79: e6:5a:d9:96:69:38:b6:f1:54:c1:11:7b:ee:f4:b3: af:81:aa:ed:00:93:a3:ac:2f:eb:76:24:3c:89:d9: a5:d5:08:46:9c:54:de:eb:b9:ce:41:a4:a9:83:06: ed:76:95:ce:4e:94:5d:60:69:b7:1c:f6:e1:6b:b1: 58:86:77:ae:4a:29:e1:79:8a:bd:b5:a3:b0:80:98: 71:2d:ea:ed:03:87:50:bf:98:42:5a:9d:f4:a1:49: 43:0b:15:ba:94:22:23:59:c6:bd:2d:9c:5f:d1:fb: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FA:CC:35:A5:99:48:7F:59:75:79:76:2E:CC:B8:65:E5:CB:60:AA X509v3 Authority Key Identifier: keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:10:87:79:f7:7c:f0:2c:ed:7e:ba:0a:7a:b6:2c:b6:92:a0: f8:0c:ec:94:a9:75:a2:cc:8b:c4:1d:4d:ca:77:04:c9:01:91: eb:1d:7d:74:36:0e:c2:03:a0:09:c5:8a:54:51:6a:3c:b1:20: 63:cd:c2:94:ae:da:ef:51:88:dd:d8:9c:90:59:12:49:6e:82: 1d:db:ef:75:b5:ba:ab:59:3b:3c:9f:b9:f8:0e:88:76:8d:fa: a2:4b:4d:c6:44:75:af:e8:7d:c8:66:61:0c:04:06:d4:4f:b7: f8:8f:ba:79:92:82:f9:6a:78:bb:72:08:bb:b5:18:cb:ca:ec: 7d:de:cd:89:cb:54:9f:84:8f:79:91:f6:fd:d3:4b:0a:06:ed: 68:ca:77:26:8e:e3:12:03:bc:68:c9:e7:83:bb:75:26:5f:cb: e3:fa:10:ed:b7:73:18:df:9c:6b:b4:32:3a:eb:75:5e:48:a5: ac:81:1a:d9:27:89:db:55:85:78:21:ab:b8:d9:99:bf:92:80: 72:0c:2d:12:79:83:82:23:20:06:ec:66:74:6e:51:86:ed:2c: 4f:60:b0:f0:19:7d:1e:d4:c4:01:f3:f0:c6:b9:24:e0:6d:1f: 22:91:3c:07:94:23:31:76:ae:46:24:36:e2:7a:4d:07:03:2c: 64:1c:46:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11z461zj6uPOqqnDg4Z+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjg1N2M0M2NhMWRmMDRjYjY5YTRhMGFhYzg2MjliZGYz Mjc1NmIwHhcNMjUxMjE5MDkwMDU3WhcNMjUxMjIwMDkwMDU3WjAzMTEwLwYDVQQD EygxNGZhY2MzNWE1OTk0ODdmNTk3NTc5NzYyZWNjYjg2NWU1Y2I2MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurnJpJdfBJH6QkI+fnI1Z261WLMZ pXGqgqXgJpqroRs20jM3Dtm2qXoo2FRW7PIyRFeLCvaojqXRWVNs+Vv1u1wGLkr5 wI+Tpn5dCPJwgNEl4KysIyvie51P9x6CQaWou9uURlHETUP21myvgN6yk8GDN3yr l7adjxuN0AJne2XjTcoC3fOPfER5WOsq0WiKhQk3SXnmWtmWaTi28VTBEXvu9LOv gartAJOjrC/rdiQ8idml1QhGnFTe67nOQaSpgwbtdpXOTpRdYGm3HPbha7FYhneu SinheYq9taOwgJhxLertA4dQv5hCWp30oUlDCxW6lCIjWca9LZxf0fs4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT6zDWlmUh/WXV5di7MuGXly2CqMB8GA1UdIwQY MBaAFGBoV8Q8od8Ey2mkoKrIYpvfMnVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEt ZDQ3MTBkMDIyMzM2LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEtZDQ3MTBkMDIyMzM2 LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhCHefd8 8CztfroKerYstpKg+AzslKl1osyLxB1NyncEyQGR6x19dDYOwgOgCcWKVFFqPLEg Y83ClK7a71GI3dickFkSSW6CHdvvdbW6q1k7PJ+5+A6Ido36oktNxkR1r+h9yGZh DAQG1E+3+I+6eZKC+Wp4u3IIu7UYy8rsfd7NictUn4SPeZH2/dNLCgbtaMp3Jo7j EgO8aMnng7t1Jl/L4/oQ7bdzGN+ca7QyOut1XkilrIEa2SeJ21WFeCGruNmZv5KA cgwtEnmDgiMgBuxmdG5Rhu0sT2Cw8Bl9HtTEAfPwxrkk4G0fIpE8B5QjMXauRiQ2 4npNBwMsZBxG4g== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:39 2025 by rpki-client