This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft File: YCmxoIE54dqWQ90EJPXNZFB-N3E.mft (raw, json) Hash identifier: V0Uocp45QsIM/Qn+UV+P8j/l9FbVwifs+7rEwydwDU4= Subject key identifier: 5A:86:07:1F:61:55:E3:18:26:C6:2C:B1:BF:7E:AC:4B:E9:93:77:FC Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71 Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771 Certificate serial: 019B53E1EE1A1668F5042AA65D7B2FE66B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft Manifest number: 1791 Signing time: Thu 25 Dec 2025 05:01:13 +0000 Manifest this update: Thu 25 Dec 2025 05:01:13 +0000 Manifest next update: Fri 26 Dec 2025 05:01:13 +0000 Files and hashes: 1: YCmxoIE54dqWQ90EJPXNZFB-N3E.crl (hash: Ts0nDtDd6DsT/V6VZM6sk4Eq+O9jg+c02hu9rJxZkso=) 2: agnml2BoZnHcte3vAx95htHMxBs.roa (hash: 2HEzDKJFq3kC6T211YFaUksF6gjmrNkAZDecesO3QWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:ee:1a:16:68:f5:04:2a:a6:5d:7b:2f:e6:6b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771 Validity Not Before: Dec 25 05:01:13 2025 GMT Not After : Dec 26 05:01:13 2025 GMT Subject: CN=5a86071f6155e31826c62cb1bf7eac4be99377fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:a7:c0:36:23:c5:64:c2:18:8e:e7:24:5a: 6f:55:f0:66:d7:96:8a:94:9c:ea:c2:36:0b:89:54: af:4a:f7:7b:c8:87:30:a9:5a:99:ae:41:f4:30:36: 66:b8:fc:bc:89:fe:a2:ee:0e:7b:f9:3a:00:b9:fd: 0e:99:f0:30:e9:9e:5e:ce:d7:61:6f:29:8d:cc:e2: 2f:d2:b8:d0:da:42:51:bc:d6:d2:bc:74:90:c6:27: bc:8e:be:48:8b:1d:60:88:42:e8:ce:b2:74:a2:a3: 7b:43:ba:0e:29:0f:8a:3a:16:6e:83:72:3c:88:f5: 5e:15:a2:b8:37:40:3a:ed:99:ab:7a:de:3b:80:58: 56:3a:f1:d9:59:a6:51:88:1c:de:da:05:89:d2:af: e4:47:0d:2b:b4:a3:e6:99:0e:40:53:79:7c:97:c6: 2b:df:1a:63:b9:44:63:c2:6f:71:c2:49:b0:53:7b: bb:2a:ca:f7:24:02:23:d9:00:c9:91:ad:ea:88:22: e1:fc:f3:f3:31:4e:e8:b9:db:72:69:15:23:fb:14: 8a:28:c8:32:b1:b2:67:b8:f9:0b:12:d4:4e:c6:e7: 2b:ba:90:60:6f:da:61:73:09:18:c7:18:3e:81:7b: 3b:aa:b1:96:93:eb:d8:b3:2b:3b:3c:64:00:02:61: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:07:1F:61:55:E3:18:26:C6:2C:B1:BF:7E:AC:4B:E9:93:77:FC X509v3 Authority Key Identifier: keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b2:1b:90:73:03:13:a9:67:e1:a6:09:79:f7:d9:f8:61:14: 58:0b:d8:57:04:7e:41:b8:52:a1:e0:f7:30:be:8d:b5:b1:82: 58:e9:e0:91:43:98:76:a6:33:d5:83:a2:2b:1f:db:67:e8:2b: 3d:b8:cf:b4:1c:cc:25:0f:b0:ce:0e:4b:ea:a1:40:70:f6:37: 43:48:ca:08:30:65:37:2a:b5:c5:1d:b3:df:83:2c:04:3b:1b: 7d:81:30:e0:7c:66:17:33:51:31:23:41:ec:51:e9:77:ce:ea: 13:da:14:bd:75:74:96:7a:ba:4d:e4:ba:17:de:e3:7c:2c:0b: 59:34:9e:a8:21:dd:33:a6:6d:7f:1b:ca:5f:50:32:a2:e5:a7: 3d:ee:7c:d8:1a:0b:5a:1a:f0:bb:af:52:7e:52:f7:ef:23:8e: 0d:65:e8:35:98:4f:5b:e6:48:f4:94:88:84:e5:3f:26:04:d5: d7:13:c4:be:4c:b9:67:ab:18:d1:43:52:f6:aa:02:8f:02:1d: ae:c8:cd:53:cd:fa:3e:d1:db:9e:bb:16:51:86:c6:06:4a:0a: d8:3c:d3:93:de:b6:08:97:6e:30:f0:af:16:a5:db:da:e4:0c: 3c:34:85:7e:17:94:2a:82:5f:13:9f:55:0e:7e:e9:ef:7a:f9: 8b:18:d5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4e4aFmj1BCqmXXsv5muFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjliMWEwODEzOWUxZGE5NjQzZGQwNDI0ZjVjZDY0NTA3 ZTM3NzEwHhcNMjUxMjI1MDUwMTEzWhcNMjUxMjI2MDUwMTEzWjAzMTEwLwYDVQQD Eyg1YTg2MDcxZjYxNTVlMzE4MjZjNjJjYjFiZjdlYWM0YmU5OTM3N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGinwDYjxWTCGI7nJFpvVfBm15aK lJzqwjYLiVSvSvd7yIcwqVqZrkH0MDZmuPy8if6i7g57+ToAuf0OmfAw6Z5eztdh bymNzOIv0rjQ2kJRvNbSvHSQxie8jr5Iix1giELozrJ0oqN7Q7oOKQ+KOhZug3I8 iPVeFaK4N0A67Zmret47gFhWOvHZWaZRiBze2gWJ0q/kRw0rtKPmmQ5AU3l8l8Yr 3xpjuURjwm9xwkmwU3u7Ksr3JAIj2QDJka3qiCLh/PPzMU7oudtyaRUj+xSKKMgy sbJnuPkLEtROxucrupBgb9phcwkYxxg+gXs7qrGWk+vYsys7PGQAAmH+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqGBx9hVeMYJsYssb9+rEvpk3f8MB8GA1UdIwQY MBaAFGApsaCBOeHalkPdBCT1zWRQfjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzIt NTYxNTUxM2ZkY2Y0LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZDU2ZjYtOTQxMC00ODQ0LWE0NzItNTYxNTUxM2ZkY2Y0 LzEvWUNteG9JRTU0ZHFXUTkwRUpQWE5aRkItTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrIbkHMD E6ln4aYJeffZ+GEUWAvYVwR+QbhSoeD3ML6NtbGCWOngkUOYdqYz1YOiKx/bZ+gr PbjPtBzMJQ+wzg5L6qFAcPY3Q0jKCDBlNyq1xR2z34MsBDsbfYEw4HxmFzNRMSNB 7FHpd87qE9oUvXV0lnq6TeS6F97jfCwLWTSeqCHdM6ZtfxvKX1AyouWnPe582BoL Whrwu69SflL37yOODWXoNZhPW+ZI9JSIhOU/JgTV1xPEvky5Z6sY0UNS9qoCjwId rsjNU836PtHbnrsWUYbGBkoK2DzTk962CJduMPCvFqXb2uQMPDSFfheUKoJfE59V Dn7p73r5ixjVvQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:26:21 2025 by rpki-client