This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json) Hash identifier: faSjsPFamTAOHelAEtv67C7uMDksE7uQwRxnPuELvaU= Subject key identifier: 9E:9D:7B:8C:FA:16:78:FE:51:7A:70:56:2A:5A:A4:94:96:57:2A:46 Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec Certificate serial: 019B3A90BE5C9EAB013CE685BC64BE8B2A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft Manifest number: 046F Signing time: Sat 20 Dec 2025 07:02:02 +0000 Manifest this update: Sat 20 Dec 2025 07:02:02 +0000 Manifest next update: Sun 21 Dec 2025 07:02:02 +0000 Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=) 2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: nY0mW82SpDb3bPTFl3QatOLyqy2r8skj4SbWnf8F6Ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:be:5c:9e:ab:01:3c:e6:85:bc:64:be:8b:2a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec Validity Not Before: Dec 20 07:02:02 2025 GMT Not After : Dec 21 07:02:02 2025 GMT Subject: CN=9e9d7b8cfa1678fe517a70562a5aa49496572a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6b:ba:3d:ea:24:f7:ea:de:9b:b3:46:42:ed: 8d:7c:47:34:67:81:68:fa:55:f6:48:f8:f3:91:04: 10:1a:85:99:92:e8:f4:5f:65:e6:33:f4:89:e4:96: db:99:78:a8:67:11:6e:b3:c7:10:ed:6f:30:3f:cf: 84:64:ea:4e:41:16:b1:d7:84:dc:b9:de:45:ca:4d: 75:f7:45:91:52:6e:80:1d:4c:aa:3c:f3:40:7f:1c: ee:60:12:4a:a1:ef:f2:07:d2:9f:c3:f0:66:b1:63: c1:a9:e6:ac:a3:99:bb:39:c2:1f:57:a4:61:22:9d: f4:bc:a5:c6:c2:a8:45:e6:5f:69:4e:42:12:f6:7a: aa:71:73:48:0f:4c:d7:6c:e1:f1:90:d1:2e:9e:8d: af:97:32:70:cc:fd:8b:fb:b6:7b:39:84:93:a9:ba: 5f:ae:09:4c:c0:3f:85:c2:88:91:34:b5:7a:3d:72: 0b:5c:a0:45:09:00:a6:5f:26:df:60:d0:02:7a:ce: fa:28:bf:63:3c:8e:f1:5a:d2:aa:80:16:c4:54:5c: 18:42:62:af:2a:45:1b:3a:c8:95:ad:72:3e:c3:84: 92:95:87:97:80:1c:2a:7f:91:d0:5f:1f:e0:52:38: 79:e6:d1:56:55:a8:aa:5b:fa:6c:27:b8:8d:f8:4e: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9D:7B:8C:FA:16:78:FE:51:7A:70:56:2A:5A:A4:94:96:57:2A:46 X509v3 Authority Key Identifier: keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f0:c8:87:86:99:78:cb:a5:48:0b:64:36:a5:77:3c:34:0a: ce:e3:e4:9e:4d:0b:bb:68:2d:87:93:9e:74:a2:12:2c:c7:a0: b4:f5:16:65:58:ed:58:1c:51:6e:7d:83:22:35:4d:16:af:5e: d7:cf:0b:7d:19:ba:14:48:b5:e8:56:29:3f:00:c4:20:0e:b5: b3:c2:01:d7:68:fe:b4:55:79:0f:bb:a6:4c:e0:02:5d:37:75: d5:ca:1d:a2:f1:b9:15:55:e1:f0:f8:b8:fe:b3:f0:58:b3:41: 7a:26:59:00:b4:4e:a5:25:a2:25:df:ed:71:db:c6:73:f0:18: 29:b8:b9:bd:ab:c3:04:f3:23:0a:28:86:e5:62:36:1c:15:ad: 9d:7f:d0:ee:2d:81:f3:4a:05:20:45:9d:5e:43:67:bf:6b:13: aa:1e:43:9d:7f:3d:7e:e2:c0:8e:be:d0:6e:5c:4a:06:4d:e0: 0c:ce:fe:ba:6e:97:6f:3e:ae:0d:fa:fa:7f:48:66:f4:1e:db: c8:45:70:05:a8:c5:dc:2e:27:55:95:1f:33:d0:ad:4c:e4:18: f1:8a:a8:bd:cb:88:b3:bb:75:9b:f3:fa:27:34:48:a3:af:25: 67:3a:c8:a8:ce:a6:e6:ce:88:b7:3c:af:92:56:d0:a9:ff:aa: d2:47:5d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kL5cnqsBPOaFvGS+iypBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5 Yzg3ZWMwHhcNMjUxMjIwMDcwMjAyWhcNMjUxMjIxMDcwMjAyWjAzMTEwLwYDVQQD Eyg5ZTlkN2I4Y2ZhMTY3OGZlNTE3YTcwNTYyYTVhYTQ5NDk2NTcyYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mu6Peok9+rem7NGQu2NfEc0Z4Fo +lX2SPjzkQQQGoWZkuj0X2XmM/SJ5JbbmXioZxFus8cQ7W8wP8+EZOpOQRax14Tc ud5Fyk1190WRUm6AHUyqPPNAfxzuYBJKoe/yB9Kfw/BmsWPBqeaso5m7OcIfV6Rh Ip30vKXGwqhF5l9pTkIS9nqqcXNID0zXbOHxkNEuno2vlzJwzP2L+7Z7OYSTqbpf rglMwD+FwoiRNLV6PXILXKBFCQCmXybfYNACes76KL9jPI7xWtKqgBbEVFwYQmKv KkUbOsiVrXI+w4SSlYeXgBwqf5HQXx/gUjh55tFWVaiqW/psJ7iN+E7BDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6de4z6Fnj+UXpwVipapJSWVypGMB8GA1UdIwQY MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPDIh4aZ eMulSAtkNqV3PDQKzuPknk0Lu2gth5OedKISLMegtPUWZVjtWBxRbn2DIjVNFq9e 188LfRm6FEi16FYpPwDEIA61s8IB12j+tFV5D7umTOACXTd11codovG5FVXh8Pi4 /rPwWLNBeiZZALROpSWiJd/tcdvGc/AYKbi5vavDBPMjCiiG5WI2HBWtnX/Q7i2B 80oFIEWdXkNnv2sTqh5DnX89fuLAjr7QblxKBk3gDM7+um6Xbz6uDfr6f0hm9B7b yEVwBajF3C4nVZUfM9CtTOQY8YqovcuIs7t1m/P6JzRIo68lZzrIqM6m5s6Itzyv klbQqf+q0kddjw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:29 2025 by rpki-client