This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft File: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json) Hash identifier: hCaUKjkaS9iJHnX5ANtD46QjpR0T00xstWiaYEwHTIY= Subject key identifier: 90:55:EB:48:6F:7B:9B:C0:31:D3:42:2C:6F:8F:92:97:32:5E:07:AE Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Certificate serial: 019B3833AD785BC114085A2AFE0CF27C66D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft Manifest number: 086C Signing time: Fri 19 Dec 2025 20:01:09 +0000 Manifest this update: Fri 19 Dec 2025 20:01:09 +0000 Manifest next update: Sat 20 Dec 2025 20:01:09 +0000 Files and hashes: 1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: /hzTKhd/RBLzIH4UjMNjWhTqWpP/eWuni3Gaj3K7Xxg=) 2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=) 3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=) 4: HANmGqWDLzD8xzgH1N2qbf2RpVU.roa (hash: w2O64hJj+mcPhVqUkjApVC5JtsigQzHQewLezmoT9do=) 5: ap5KNPIgh8eRLDgd9o9o98m3A_g.roa (hash: wFA6DMYFq5ZeJnSJaOkvybASHTJl6BSASaBH5ShXruc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:ad:78:5b:c1:14:08:5a:2a:fe:0c:f2:7c:66:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Validity Not Before: Dec 19 20:01:09 2025 GMT Not After : Dec 20 20:01:09 2025 GMT Subject: CN=9055eb486f7b9bc031d3422c6f8f9297325e07ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:f0:fb:eb:db:1e:85:e8:71:27:96:f0:66: c6:e1:e0:16:dd:8e:b0:83:11:43:eb:7f:08:81:8e: 49:93:92:20:a4:11:56:41:c1:c1:39:9f:01:40:d5: af:2f:1e:00:a4:e4:1b:bd:f8:77:20:3b:56:d4:45: be:5b:86:94:c4:cd:f9:f9:b4:ef:d6:aa:04:76:62: 50:5f:1e:09:a6:42:ff:e9:5b:89:d7:5e:ae:12:25: 63:a2:66:57:0c:27:57:43:e9:88:ee:e1:4f:e2:83: 67:a7:d4:f8:fe:0c:99:12:20:fb:00:df:4c:b9:28: ac:ff:c8:99:ee:1b:70:c5:d2:9e:61:2a:48:83:f5: 59:33:c1:45:ea:57:df:12:9a:b3:c2:73:83:7e:8a: d8:42:45:3f:5a:7f:ff:06:43:b3:e9:fd:b3:66:a0: 59:1b:a3:dd:ce:be:76:75:44:a0:c7:bd:70:ef:c2: 43:37:31:34:82:5f:f5:fe:20:1d:0d:f6:b4:ca:4f: c6:de:0b:be:80:0e:21:16:e7:31:2f:ef:ba:0c:e5: 6b:5e:dc:34:43:69:f3:fb:d1:13:d4:57:e8:33:9f: 07:2f:c5:d5:fd:b3:d2:95:29:1f:8b:ee:47:46:68: 6e:26:a0:e7:da:98:e8:72:b2:b2:5b:ba:73:c2:81: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:55:EB:48:6F:7B:9B:C0:31:D3:42:2C:6F:8F:92:97:32:5E:07:AE X509v3 Authority Key Identifier: keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:af:c1:d2:48:b5:47:52:b8:6f:41:c5:fb:81:91:30:4e:63: 53:79:ca:9e:50:77:5f:2a:32:6c:d4:4a:bc:a8:ce:06:fe:7b: 74:dd:2c:ac:c8:60:1a:43:9b:62:c4:0e:d6:d6:f9:b5:21:79: e3:d8:c5:99:e6:07:f5:00:bf:6b:6d:41:02:6a:ec:d3:e3:fd: cb:d2:99:c4:08:54:c1:66:7f:fd:a5:54:fb:e9:8f:77:ee:00: cc:4e:0e:48:73:67:41:8a:a3:2e:24:85:02:9b:a8:4a:3f:fe: 34:77:c8:1b:81:25:5c:97:30:2d:c9:8e:3c:a2:75:9d:60:70: 48:9f:85:bf:97:30:ad:b0:6f:7b:19:e6:41:f7:2f:c7:8b:d3: 6c:0a:65:f0:f6:e7:5f:27:8c:e3:98:be:14:ae:02:2a:8e:3d: 46:6d:1b:3d:f4:3a:9c:3a:7a:0f:9c:e6:9c:1e:e5:63:f4:4b: f3:ba:c7:19:30:48:12:4a:77:b4:dc:9b:8f:03:21:6a:35:03: 1a:05:3a:eb:fe:da:86:de:91:f8:5a:7d:9b:02:11:44:d1:6d: 5e:99:32:bb:83:dd:4d:5e:ac:eb:32:c7:fd:18:17:d5:96:00: 2f:47:5a:08:de:bb:3f:7b:89:3a:0c:3c:00:7f:8c:49:1d:c5: 94:e8:35:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M614W8EUCFoq/gzyfGbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm N2YwNTQwHhcNMjUxMjE5MjAwMTA5WhcNMjUxMjIwMjAwMTA5WjAzMTEwLwYDVQQD Eyg5MDU1ZWI0ODZmN2I5YmMwMzFkMzQyMmM2ZjhmOTI5NzMyNWUwN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwTw++vbHoXocSeW8GbG4eAW3Y6w gxFD638IgY5Jk5IgpBFWQcHBOZ8BQNWvLx4ApOQbvfh3IDtW1EW+W4aUxM35+bTv 1qoEdmJQXx4JpkL/6VuJ116uEiVjomZXDCdXQ+mI7uFP4oNnp9T4/gyZEiD7AN9M uSis/8iZ7htwxdKeYSpIg/VZM8FF6lffEpqzwnODforYQkU/Wn//BkOz6f2zZqBZ G6Pdzr52dUSgx71w78JDNzE0gl/1/iAdDfa0yk/G3gu+gA4hFucxL++6DOVrXtw0 Q2nz+9ET1FfoM58HL8XV/bPSlSkfi+5HRmhuJqDn2pjocrKyW7pzwoGjHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBV60hve5vAMdNCLG+PkpcyXgeuMB8GA1UdIwQY MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct MTE3NWU1YTA3YTU1LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1 LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXK/B0ki1 R1K4b0HF+4GRME5jU3nKnlB3XyoybNRKvKjOBv57dN0srMhgGkObYsQO1tb5tSF5 49jFmeYH9QC/a21BAmrs0+P9y9KZxAhUwWZ//aVU++mPd+4AzE4OSHNnQYqjLiSF ApuoSj/+NHfIG4ElXJcwLcmOPKJ1nWBwSJ+Fv5cwrbBvexnmQfcvx4vTbApl8Pbn XyeM45i+FK4CKo49Rm0bPfQ6nDp6D5zmnB7lY/RL87rHGTBIEkp3tNybjwMhajUD GgU66/7aht6R+Fp9mwIRRNFtXpkyu4PdTV6s6zLH/RgX1ZYAL0daCN67P3uJOgw8 AH+MSR3FlOg1xQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:10:02 2025 by rpki-client