This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json) Hash identifier: T63PXXMAfGcBTudX7oz9cEEVoOfMR6tVTy3aZFbn1A0= Subject key identifier: 01:DB:8B:16:6C:72:F7:15:21:0E:CC:D9:05:4F:F0:25:C1:76:05:AA Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71 Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771 Certificate serial: 019B3CB54CBB463C6325251BAB455F1CAB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 17:01:13 +0000 Manifest this update: Sat 20 Dec 2025 17:01:13 +0000 Manifest next update: Sun 21 Dec 2025 17:01:13 +0000 Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: 9cRebGdeuNv44kcRuc7O1hfgdvID/M0p1BkXsUQpQ/E=) 2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:4c:bb:46:3c:63:25:25:1b:ab:45:5f:1c:ab:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771 Validity Not Before: Dec 20 17:01:13 2025 GMT Not After : Dec 21 17:01:13 2025 GMT Subject: CN=01db8b166c72f715210eccd9054ff025c17605aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:59:4c:c6:64:3b:c6:4d:e3:0d:e2:f4:9f: d1:8d:77:34:35:0d:28:23:8b:a5:60:ea:25:54:44: b5:30:09:77:46:ce:1d:93:79:3e:ab:9e:23:d0:bc: 02:04:58:76:99:63:30:82:ff:cc:50:12:4d:9b:ae: 2a:c9:fb:9b:9f:0b:95:b7:e1:c5:b7:e6:6f:26:68: 60:2a:bf:ef:d3:e1:e9:9a:55:a1:d2:1f:fa:a6:13: 53:3c:c9:e1:6a:c8:c9:50:3f:ef:2f:75:04:7a:8d: 37:ab:2a:f2:6d:0c:f0:de:ef:aa:79:4f:3d:1e:bc: 81:9b:a3:f5:4f:52:b3:02:53:46:da:59:41:a3:cd: 8b:9b:33:34:ec:cd:08:6c:78:c0:5a:81:72:5d:b6: 60:f2:97:b7:59:40:4a:a2:e7:60:80:93:cc:da:5c: 01:c2:52:63:02:01:51:ab:2c:1f:92:4c:89:a9:54: 22:67:df:a4:c5:ef:44:09:d0:c0:84:78:19:b5:1c: d7:c9:65:54:30:ab:cd:c5:8a:0b:7b:2e:87:78:69: ee:e1:0b:fa:dc:cd:15:3b:34:7a:7c:c4:0d:0f:59: 96:89:64:b6:5b:8e:c8:76:ae:e2:30:94:f9:25:a7: e9:63:1e:c1:3f:0f:81:6f:e7:b7:19:78:01:33:d3: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:8B:16:6C:72:F7:15:21:0E:CC:D9:05:4F:F0:25:C1:76:05:AA X509v3 Authority Key Identifier: keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:dd:c8:08:2b:68:e1:0f:38:96:ee:12:97:33:72:fa:65:68: ca:7d:9b:69:07:2f:61:57:d2:bd:be:a7:eb:ac:89:0a:dc:9f: 2c:3f:2b:18:28:30:2a:52:40:51:9e:b2:38:b3:28:41:1c:bb: 46:ea:e8:0f:5e:43:47:66:05:be:6d:6e:0c:a8:00:6b:4f:be: 85:12:dd:9c:8b:e0:4c:9a:0e:53:4b:0a:96:96:b7:d9:bc:2b: 5d:db:e5:45:4a:44:3b:4a:9c:ba:94:e0:a4:29:4f:f4:84:35: c4:94:80:55:7a:70:8d:4c:8f:85:de:d3:5c:bc:d0:44:93:b9: a0:11:0f:9f:f6:7f:da:67:32:55:45:3a:af:e4:d9:ea:d0:7e: 7d:ac:ab:d1:e8:cf:a5:37:fc:df:b2:0e:c6:75:23:36:3d:65: 62:45:68:63:23:7f:90:b8:3a:7b:7b:de:5b:9f:ef:54:01:74: bf:52:50:ff:2d:6b:cb:95:2a:19:fc:32:ba:2c:14:25:52:5c: c0:29:22:e4:a2:02:01:ad:52:87:b1:50:58:dc:8f:60:26:f8: 6e:76:9c:ca:4c:3a:96:11:73:9c:e1:6e:f1:6f:4d:1e:c3:9f: b8:b0:8e:ac:17:3f:39:75:89:a7:30:71:fb:ac:10:f1:78:07: 9f:65:13:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUy7RjxjJSUbq0VfHKucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3 ZTM3NzEwHhcNMjUxMjIwMTcwMTEzWhcNMjUxMjIxMTcwMTEzWjAzMTEwLwYDVQQD EygwMWRiOGIxNjZjNzJmNzE1MjEwZWNjZDkwNTRmZjAyNWMxNzYwNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMVZTMZkO8ZN4w3i9J/RjXc0NQ0o I4ulYOolVES1MAl3Rs4dk3k+q54j0LwCBFh2mWMwgv/MUBJNm64qyfubnwuVt+HF t+ZvJmhgKr/v0+HpmlWh0h/6phNTPMnhasjJUD/vL3UEeo03qyrybQzw3u+qeU89 HryBm6P1T1KzAlNG2llBo82LmzM07M0IbHjAWoFyXbZg8pe3WUBKoudggJPM2lwB wlJjAgFRqywfkkyJqVQiZ9+kxe9ECdDAhHgZtRzXyWVUMKvNxYoLey6HeGnu4Qv6 3M0VOzR6fMQND1mWiWS2W47Idq7iMJT5JafpYx7BPw+Bb+e3GXgBM9PO+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHbixZscvcVIQ7M2QVP8CXBdgWqMB8GA1UdIwQY MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0 LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN3ICCto 4Q84lu4SlzNy+mVoyn2baQcvYVfSvb6n66yJCtyfLD8rGCgwKlJAUZ6yOLMoQRy7 RuroD15DR2YFvm1uDKgAa0++hRLdnIvgTJoOU0sKlpa32bwrXdvlRUpEO0qcupTg pClP9IQ1xJSAVXpwjUyPhd7TXLzQRJO5oBEPn/Z/2mcyVUU6r+TZ6tB+fayr0ejP pTf837IOxnUjNj1lYkVoYyN/kLg6e3veW5/vVAF0v1JQ/y1ry5UqGfwyuiwUJVJc wCki5KICAa1Sh7FQWNyPYCb4bnacykw6lhFznOFu8W9NHsOfuLCOrBc/OXWJpzBx +6wQ8XgHn2UTTg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:49:32 2025 by rpki-client