This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft File: ySi2NBei54heM4gakkqsnUCqymA.mft (raw, json) Hash identifier: JLQTNIgCjSZA4c42FHDA7is+lOibJhXTytHZ4P8nKrU= Subject key identifier: B6:8A:8B:D1:50:30:F6:E8:B8:20:DF:BA:F2:3E:20:E3:B6:50:6C:8F Authority key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60 Certificate issuer: /CN=c928b63417a2e7885e33881a924aac9d40aaca60 Certificate serial: 019B6E0F3EB61C9616B677EC3098B4B53756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft Manifest number: 05FF Signing time: Tue 30 Dec 2025 07:00:51 +0000 Manifest this update: Tue 30 Dec 2025 07:00:51 +0000 Manifest next update: Wed 31 Dec 2025 07:00:51 +0000 Files and hashes: 1: 6MMtZ0p0S3UErh0fFksqehnDVrk.roa (hash: aSANX+R++VciglglpvxzYCwuVSwi4gwoCdbTa6Ro3gg=) 2: ySi2NBei54heM4gakkqsnUCqymA.crl (hash: 7l7fKZoQeAhm7Df4/UdbzToNQsUpj23alFLZiFbdKLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:3e:b6:1c:96:16:b6:77:ec:30:98:b4:b5:37:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c928b63417a2e7885e33881a924aac9d40aaca60 Validity Not Before: Dec 30 07:00:51 2025 GMT Not After : Dec 31 07:00:51 2025 GMT Subject: CN=b68a8bd15030f6e8b820dfbaf23e20e3b6506c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e2:cc:d0:fa:3f:29:d3:c4:e6:8d:6b:22:84: 38:56:41:66:01:10:2b:c5:d8:a2:81:ef:8c:b7:1d: 57:3f:a2:b5:02:db:7a:89:af:e9:48:17:27:95:56: 41:3c:15:f4:2a:d8:7c:bd:63:b7:fe:d0:40:69:17: ec:b6:4b:91:11:bf:52:78:a0:ba:b6:5f:bd:95:46: 2e:77:46:ba:58:f4:8e:ed:17:95:96:a6:c1:c6:15: 6b:3b:4b:3d:2e:da:53:76:18:ec:05:a8:15:df:88: 0f:ab:56:ec:2e:c6:03:e2:4d:16:71:d2:9e:9f:66: 51:a4:fc:ee:20:ce:d6:36:c1:36:d6:3f:6d:97:b9: ec:e3:66:98:51:bf:8a:8f:1f:e0:9e:17:9a:69:a1: 5b:ce:ff:a9:5a:0a:5e:12:8a:80:8e:ad:0e:4d:92: 64:06:bb:b1:d1:49:75:70:04:0d:6a:d2:79:c2:ab: f5:21:b4:86:1a:f8:b7:da:f8:b7:65:61:c9:6a:4c: bc:20:7d:eb:8d:78:7e:41:ad:29:99:b3:10:7a:5a: a3:4e:d9:e3:b5:81:1d:3c:30:15:76:a3:93:4d:f4: 2e:b6:ed:c8:ad:33:72:a3:3a:4b:39:cf:9c:94:34: fe:53:89:68:28:0e:09:bb:43:68:f0:07:b0:56:42: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8A:8B:D1:50:30:F6:E8:B8:20:DF:BA:F2:3E:20:E3:B6:50:6C:8F X509v3 Authority Key Identifier: keyid:C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:3c:6b:4d:fe:54:fc:c2:9e:67:ca:b5:19:3a:04:fd:78:90: a4:c2:f9:c1:60:3f:a0:c1:fb:b9:56:a0:5e:d3:3f:6a:8f:14: 77:e8:be:db:f3:90:72:73:57:3f:ef:cd:cc:48:76:fc:55:9b: 88:80:99:d0:07:98:0b:c6:e7:d7:75:ff:3a:df:6c:5e:91:7d: 62:26:4e:99:20:c9:05:b3:6a:69:e9:d1:fc:5d:96:64:bf:8b: f5:41:f3:83:e1:1a:e6:87:8c:93:9e:12:e0:54:f2:0e:20:a8: af:a7:f4:58:fd:32:0d:35:42:32:5b:4c:53:46:cb:78:10:d1: 12:4b:40:27:d8:8d:0e:db:9f:e6:15:c7:ce:a3:f0:dc:bf:9f: 80:ea:11:22:9f:ff:ae:0c:e5:28:68:7d:ce:c8:c6:04:fb:7b: c8:11:22:b3:f7:8a:6d:b2:ba:87:49:d1:f3:4f:a5:04:fe:51: 46:07:65:88:5e:02:ad:04:31:48:bb:84:07:58:3e:bb:72:0a: b9:1b:79:ba:a2:1b:bd:49:8a:f3:90:f8:de:f3:72:a7:c8:ed: 36:4f:6a:75:f4:ca:b4:10:d9:51:b7:33:29:d0:b7:61:c1:2a: 0d:e3:16:65:bf:1f:66:28:47:d3:0d:67:16:cd:45:3a:2a:2a: d4:f5:13:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDz62HJYWtnfsMJi0tTdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MjhiNjM0MTdhMmU3ODg1ZTMzODgxYTkyNGFhYzlkNDBh YWNhNjAwHhcNMjUxMjMwMDcwMDUxWhcNMjUxMjMxMDcwMDUxWjAzMTEwLwYDVQQD EyhiNjhhOGJkMTUwMzBmNmU4YjgyMGRmYmFmMjNlMjBlM2I2NTA2YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uLM0Po/KdPE5o1rIoQ4VkFmARAr xdiige+Mtx1XP6K1Att6ia/pSBcnlVZBPBX0Kth8vWO3/tBAaRfstkuREb9SeKC6 tl+9lUYud0a6WPSO7ReVlqbBxhVrO0s9LtpTdhjsBagV34gPq1bsLsYD4k0WcdKe n2ZRpPzuIM7WNsE21j9tl7ns42aYUb+Kjx/gnheaaaFbzv+pWgpeEoqAjq0OTZJk Brux0Ul1cAQNatJ5wqv1IbSGGvi32vi3ZWHJaky8IH3rjXh+Qa0pmbMQelqjTtnj tYEdPDAVdqOTTfQutu3IrTNyozpLOc+clDT+U4loKA4Ju0No8AewVkJDdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaKi9FQMPbouCDfuvI+IOO2UGyPMB8GA1UdIwQY MBaAFMkotjQXoueIXjOIGpJKrJ1AqspgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUt OGM5NzE2MWUwNjJmLzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85ZDdlNmEtMGVhZS00MzRmLTlhMzUtOGM5NzE2MWUwNjJm LzEveVNpMk5CZWk1NGhlTTRnYWtrcXNuVUNxeW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4DxrTf5U /MKeZ8q1GToE/XiQpML5wWA/oMH7uVagXtM/ao8Ud+i+2/OQcnNXP+/NzEh2/FWb iICZ0AeYC8bn13X/Ot9sXpF9YiZOmSDJBbNqaenR/F2WZL+L9UHzg+Ea5oeMk54S 4FTyDiCor6f0WP0yDTVCMltMU0bLeBDREktAJ9iNDtuf5hXHzqPw3L+fgOoRIp// rgzlKGh9zsjGBPt7yBEis/eKbbK6h0nR80+lBP5RRgdliF4CrQQxSLuEB1g+u3IK uRt5uqIbvUmK85D43vNyp8jtNk9qdfTKtBDZUbczKdC3YcEqDeMWZb8fZihH0w1n Fs1FOioq1PUTIw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:36 2025 by rpki-client