This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft File: YOEKHGag5gAkq6ti0zJoLHE6o0c.mft (raw, json) Hash identifier: NPnAvHF05EWjnNUI/tek4IEOUJry2/6AyHHqobuwNEw= Subject key identifier: 21:CF:FB:1E:B0:03:3B:16:52:EA:D7:64:2B:5C:42:4B:45:89:3B:E7 Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47 Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347 Certificate serial: 019B51BD494619E778CAB0A494090E8D98C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 19:01:58 +0000 Manifest this update: Wed 24 Dec 2025 19:01:58 +0000 Manifest next update: Thu 25 Dec 2025 19:01:58 +0000 Files and hashes: 1: UGjGolH12_x3cCDDDs-wfhhaN4U.roa (hash: FV6D5mk0nwiH6BRySmQ169aN1Z1SEVl4Kc/yfJEULos=) 2: YOEKHGag5gAkq6ti0zJoLHE6o0c.crl (hash: Nbt7xpUBRscaitVh0gDD//kwBUtb3qJ7UU2gBB+xr9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:49:46:19:e7:78:ca:b0:a4:94:09:0e:8d:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347 Validity Not Before: Dec 24 19:01:58 2025 GMT Not After : Dec 25 19:01:58 2025 GMT Subject: CN=21cffb1eb0033b1652ead7642b5c424b45893be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:2e:c2:d7:fc:42:36:f5:4f:be:55:ba:40: 13:03:d2:05:b5:d1:bd:e6:4d:19:d7:ff:e9:3d:1a: 62:7c:58:f6:10:c3:fc:a4:e4:08:6e:af:ad:56:20: 7c:cc:89:40:fd:1e:dd:b7:6c:c2:83:bc:21:6b:db: 0a:e7:9e:c6:28:a0:7d:51:cb:c8:f1:ec:78:6c:84: 4d:7f:b9:aa:e2:77:57:d0:7b:12:df:8f:44:c1:ba: 69:18:04:87:58:f1:6e:a5:6a:f6:7a:e0:87:b5:78: ce:02:4d:a9:62:27:c8:fa:9d:51:ea:c1:7b:91:ca: 6d:15:c5:49:27:35:66:2d:b1:fc:02:29:5d:1d:aa: 71:44:9c:a3:01:99:74:09:77:e7:a5:b5:7a:9a:8e: 68:77:f9:2f:90:aa:83:32:4d:a0:df:91:cf:6c:96: 1f:bc:f2:79:96:22:9e:7f:8c:d9:09:e9:e2:c8:c3: 7a:d4:ec:5c:fb:88:07:bf:5b:0b:6f:be:60:f8:2d: 34:ec:26:1d:2e:5d:be:c5:99:af:7c:0b:91:03:93: c2:bc:e4:66:ae:ac:9d:6a:66:32:78:ca:25:d7:92: f1:6b:04:81:be:a2:15:cd:f9:5a:89:4c:28:99:30: 2d:d3:26:95:ba:a0:f8:f2:76:86:16:70:0b:ce:55: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CF:FB:1E:B0:03:3B:16:52:EA:D7:64:2B:5C:42:4B:45:89:3B:E7 X509v3 Authority Key Identifier: keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:03:4e:3c:2f:3f:0b:24:4d:0e:4e:10:c0:f9:51:0d:9f: 64:0d:ff:b0:a6:4a:75:3f:21:32:1a:1b:da:91:d5:d3:40:4a: 8c:7c:67:c9:5a:4a:e6:6d:1b:76:fc:74:84:e9:6a:7b:5f:44: 5f:17:88:bf:15:b2:9e:9a:f6:5b:42:a0:bc:90:34:69:3d:17: 5e:83:fb:58:3a:65:b6:3f:37:ed:a2:ff:55:49:44:60:e7:35: 9f:7c:f8:d3:e7:fe:d4:39:b8:e9:3f:12:27:16:36:65:ac:de: 8f:57:09:2f:ce:ca:ad:16:e6:b8:37:cb:9e:da:7d:66:4d:cd: 0b:74:56:a8:72:ba:af:82:cb:95:f9:2a:43:79:69:8c:7d:5e: 91:62:36:51:68:96:7b:9c:35:05:da:a8:f3:ca:88:3d:fd:f4: eb:d8:3e:f3:ff:28:a8:a1:c5:3f:fc:43:ae:14:71:8e:f1:27: 40:15:f5:ec:5a:07:82:6b:76:75:aa:a3:fa:b2:79:1c:de:e4: 2c:a1:81:f8:dc:6e:25:3d:4a:ef:f9:93:e8:6e:40:bd:a4:ba: eb:7a:bf:29:75:f9:85:c3:38:23:f3:93:25:46:47:22:1a:d4: 38:f1:b9:71:e2:f2:02:c0:f0:64:ff:44:36:bd:e8:2c:49:7a: bd:f9:ed:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUlGGed4yrCklAkOjZjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz YWEzNDcwHhcNMjUxMjI0MTkwMTU4WhcNMjUxMjI1MTkwMTU4WjAzMTEwLwYDVQQD EygyMWNmZmIxZWIwMDMzYjE2NTJlYWQ3NjQyYjVjNDI0YjQ1ODkzYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Iuwtf8Qjb1T75VukATA9IFtdG9 5k0Z1//pPRpifFj2EMP8pOQIbq+tViB8zIlA/R7dt2zCg7wha9sK557GKKB9UcvI 8ex4bIRNf7mq4ndX0HsS349EwbppGASHWPFupWr2euCHtXjOAk2pYifI+p1R6sF7 kcptFcVJJzVmLbH8AildHapxRJyjAZl0CXfnpbV6mo5od/kvkKqDMk2g35HPbJYf vPJ5liKef4zZCeniyMN61Oxc+4gHv1sLb75g+C007CYdLl2+xZmvfAuRA5PCvORm rqydamYyeMol15LxawSBvqIVzflaiUwomTAt0yaVuqD48naGFnALzlWf5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHP+x6wAzsWUurXZCtcQktFiTvnMB8GA1UdIwQY MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt NjQxNzcwNzUxN2Q2LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2 LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/MDTjwv PwskTQ5OEMD5UQ2fZA3/sKZKdT8hMhob2pHV00BKjHxnyVpK5m0bdvx0hOlqe19E XxeIvxWynpr2W0KgvJA0aT0XXoP7WDpltj837aL/VUlEYOc1n3z40+f+1Dm46T8S JxY2Zazej1cJL87KrRbmuDfLntp9Zk3NC3RWqHK6r4LLlfkqQ3lpjH1ekWI2UWiW e5w1Bdqo88qIPf3069g+8/8oqKHFP/xDrhRxjvEnQBX17FoHgmt2daqj+rJ5HN7k LKGB+NxuJT1K7/mT6G5AvaS663q/KXX5hcM4I/OTJUZHIhrUOPG5ceLyAsDwZP9E Nr3oLEl6vfntTg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:56 2025 by rpki-client