This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json) Hash identifier: pYzcn6K0Pw1M7lh0PEEy5dS7t47L77hxbyQLscIsKYs= Subject key identifier: 50:FE:90:A5:AF:14:AF:CD:E7:01:66:4F:FA:F1:EE:EB:F3:56:9B:A5 Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Certificate serial: 019B38A18A428EAA12F4F9754C3C45310D0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft Manifest number: 0FA7 Signing time: Fri 19 Dec 2025 22:01:09 +0000 Manifest this update: Fri 19 Dec 2025 22:01:09 +0000 Manifest next update: Sat 20 Dec 2025 22:01:09 +0000 Files and hashes: 1: 1ZXZrb7_KMMAffteaFQez59OJV0.roa (hash: qoGAFlDhNoBjbRdWcrJQCoTnOEYR10v5Gl4Yr+NRQu4=) 2: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: JVNlJhJMryB/igp+lrBs4WQyA581d5bwCxGESu06zcE=) 3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=) 4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:8a:42:8e:aa:12:f4:f9:75:4c:3c:45:31:0d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Validity Not Before: Dec 19 22:01:09 2025 GMT Not After : Dec 20 22:01:09 2025 GMT Subject: CN=50fe90a5af14afcde701664ffaf1eeebf3569ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b6:51:2c:e6:70:41:72:c2:61:ef:e7:be:d9: 4a:07:e0:24:48:9a:8a:81:ab:82:5d:2b:a6:14:b3: 7e:49:22:2d:9f:50:68:df:ff:1f:cd:8b:68:b2:6b: 26:30:ad:81:c8:c2:fe:16:c2:f6:76:78:5b:8b:68: 20:85:75:33:29:74:a2:a6:36:18:4b:50:c0:e6:37: 92:06:4f:f6:df:b7:2a:b6:f6:70:c2:2b:06:97:39: a9:fd:ce:a8:29:f4:d1:16:de:a1:73:10:bc:c3:cb: d2:09:f4:29:5c:2f:cb:26:da:0e:21:ca:d8:27:0a: c1:46:64:91:b7:15:7e:03:47:b4:d6:db:2a:d6:3c: 4e:ac:26:6b:08:ba:76:e5:39:c9:79:da:06:d2:ac: 74:f6:88:56:27:07:ff:e7:05:6d:e1:cc:a7:d8:ce: 91:3e:23:8e:a2:49:5e:e9:81:59:d7:11:cb:10:d5: db:66:ff:ac:ce:2d:0a:f0:24:38:f7:fb:30:98:d1: 8d:06:9a:d7:62:6f:98:b9:64:f5:aa:fe:b5:0a:31: 2c:0d:ff:da:37:58:cf:c0:78:64:f9:7c:75:71:5c: bb:1c:b7:65:46:ed:27:65:d7:5d:84:7f:3d:a7:ec: 47:57:2a:79:29:da:0a:d2:0d:f0:43:92:b7:ba:3d: 0f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FE:90:A5:AF:14:AF:CD:E7:01:66:4F:FA:F1:EE:EB:F3:56:9B:A5 X509v3 Authority Key Identifier: keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3b:af:62:6d:6b:b3:db:bd:8c:7f:61:02:b7:1d:aa:17:7c: 1b:d6:23:ef:f5:ec:24:f0:ed:07:27:a0:09:ed:40:ce:1a:de: 00:ee:17:da:a4:57:1f:04:19:d9:ba:10:18:55:eb:21:1b:c9: db:f5:5a:5c:8e:ec:e1:2e:4c:84:2c:d9:b8:4c:72:7c:12:20: 55:ae:a8:80:8c:96:52:ca:74:e1:01:ba:ef:0f:0a:ea:ea:5b: eb:58:9d:f5:2b:40:14:88:d0:e3:83:0a:8d:15:d0:6a:ba:28: 52:bd:3d:fe:c0:13:20:f0:d8:e4:14:8c:7e:54:be:ce:64:fb: f5:25:6b:7e:a4:27:44:c4:55:62:2f:aa:07:3d:fa:68:6f:c1: c3:b1:f2:43:f3:7c:39:3e:ac:79:1b:64:4b:4c:9e:f7:a9:af: 0c:b3:bb:12:8e:fc:6a:5b:d0:80:ce:7a:f0:62:47:cb:53:c3: ad:03:c4:21:57:67:f9:17:2a:79:b4:9d:f7:77:15:ce:0a:c0: 98:b4:f1:fd:31:b5:db:c1:eb:c0:b0:18:fe:e7:be:5c:34:5d: d5:9f:40:46:fe:d9:3c:77:7e:af:48:8d:1e:9c:01:3a:24:e1: f3:58:25:4d:9c:7a:ab:e2:2c:cb:7d:73:87:2d:f3:e5:b6:7a: d8:08:ad:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oYpCjqoS9Pl1TDxFMQ0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh NGVhZmEwHhcNMjUxMjE5MjIwMTA5WhcNMjUxMjIwMjIwMTA5WjAzMTEwLwYDVQQD Eyg1MGZlOTBhNWFmMTRhZmNkZTcwMTY2NGZmYWYxZWVlYmYzNTY5YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87ZRLOZwQXLCYe/nvtlKB+AkSJqK gauCXSumFLN+SSItn1Bo3/8fzYtosmsmMK2ByML+FsL2dnhbi2gghXUzKXSipjYY S1DA5jeSBk/237cqtvZwwisGlzmp/c6oKfTRFt6hcxC8w8vSCfQpXC/LJtoOIcrY JwrBRmSRtxV+A0e01tsq1jxOrCZrCLp25TnJedoG0qx09ohWJwf/5wVt4cyn2M6R PiOOokle6YFZ1xHLENXbZv+szi0K8CQ49/swmNGNBprXYm+YuWT1qv61CjEsDf/a N1jPwHhk+Xx1cVy7HLdlRu0nZdddhH89p+xHVyp5KdoK0g3wQ5K3uj0PaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD+kKWvFK/N5wFmT/rx7uvzVpulMB8GA1UdIwQY MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzuvYm1r s9u9jH9hArcdqhd8G9Yj7/XsJPDtByegCe1AzhreAO4X2qRXHwQZ2boQGFXrIRvJ 2/VaXI7s4S5MhCzZuExyfBIgVa6ogIyWUsp04QG67w8K6upb61id9StAFIjQ44MK jRXQarooUr09/sATIPDY5BSMflS+zmT79SVrfqQnRMRVYi+qBz36aG/Bw7HyQ/N8 OT6seRtkS0ye96mvDLO7Eo78alvQgM568GJHy1PDrQPEIVdn+RcqebSd93cVzgrA mLTx/TG128HrwLAY/ue+XDRd1Z9ARv7ZPHd+r0iNHpwBOiTh81glTZx6q+Isy31z hy3z5bZ62AitwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:01:26 2025 by rpki-client