This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json) Hash identifier: HmlqMQRzAvC6qMvem4yPRGcJoNy1u+ypxoNxD9KHPAg= Subject key identifier: 25:97:28:ED:22:D5:71:C7:99:90:6F:0A:E1:A3:C0:0A:64:6A:EC:75 Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942 Certificate serial: 019B2AAEB7E6C7CECE074560DB45C90DA985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft Manifest number: 15C6 Signing time: Wed 17 Dec 2025 05:00:51 +0000 Manifest this update: Wed 17 Dec 2025 05:00:51 +0000 Manifest next update: Thu 18 Dec 2025 05:00:51 +0000 Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: SA/t0qMW87k70efrSqh5y1U4OjGp/+A97NtR97aksCc=) 2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:b7:e6:c7:ce:ce:07:45:60:db:45:c9:0d:a9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942 Validity Not Before: Dec 17 05:00:51 2025 GMT Not After : Dec 18 05:00:51 2025 GMT Subject: CN=259728ed22d571c799906f0ae1a3c00a646aec75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:c3:f3:0b:c8:fe:42:e3:9e:1c:66:a1:4b: 1d:06:a6:71:b4:fb:a4:d5:ad:2d:a0:ad:3a:75:01: 84:4e:fb:7f:29:76:77:4b:cd:02:40:98:06:27:4b: 20:5d:db:fc:d3:a1:f1:e7:c6:12:22:ae:32:38:d8: 8e:d8:9e:9e:92:39:09:2e:c6:55:dc:48:3e:1d:02: 8f:94:1a:44:3f:da:0d:56:9a:e0:49:e8:b8:cd:ea: 60:5f:d1:6a:3d:9d:e8:d4:04:2a:1d:51:26:31:37: 9c:51:b0:7f:44:8a:60:07:6d:b5:05:35:d5:d0:92: 34:be:86:7b:81:7d:25:a7:43:8b:3d:99:73:e8:6e: e4:28:0b:12:bf:e6:4e:63:56:fb:b7:7f:9d:99:6e: 1d:10:41:2b:c5:e3:a7:ed:ec:ec:7a:97:d6:99:75: 3b:2d:0b:73:41:b0:f2:cf:7f:2c:ea:06:fc:0b:c2: df:b1:30:5c:a8:89:2b:30:5f:8c:58:0b:3f:f7:ab: 10:43:eb:ba:7a:33:ed:0b:e5:3b:1f:6d:08:2c:34: c3:24:cf:ed:0b:c2:1a:bd:9e:28:50:16:0f:f7:8f: c1:e7:cb:b1:75:2a:b9:17:f5:6d:21:8e:95:0f:0c: 8c:64:6d:23:d4:a5:10:03:05:75:28:90:86:56:15: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:97:28:ED:22:D5:71:C7:99:90:6F:0A:E1:A3:C0:0A:64:6A:EC:75 X509v3 Authority Key Identifier: keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f8:8a:05:b7:67:64:5d:fb:3b:7a:33:53:0e:14:20:7c:ac: 6b:5a:7f:b1:9f:14:52:13:9a:59:ad:73:47:a8:91:78:94:87: fe:99:23:d3:28:d7:20:d3:51:9e:3d:56:04:ae:e3:1c:c6:ef: a5:4c:a5:bf:bd:dd:d8:ae:0c:36:78:35:44:c1:17:77:df:32: a1:5a:e9:36:2a:4f:09:6c:1b:51:e1:91:99:5d:b9:b5:8f:4d: fa:2b:2e:67:4f:ee:3d:06:65:36:41:cb:89:69:2b:74:6a:89: 00:fa:38:6c:eb:a1:cb:0b:62:aa:1a:30:49:41:0d:c6:d4:72: 95:0e:ae:5d:69:60:2f:21:c1:1e:02:38:f2:3e:b5:dd:3a:be: 2a:57:85:5d:ca:23:7b:19:04:2b:b1:d9:10:e6:93:d0:fd:f5: 76:20:14:5e:60:39:20:ab:44:4a:ea:a1:02:61:ca:c2:f9:65: 60:63:f4:e6:0c:3b:c5:69:33:9d:8f:b0:da:2d:25:a3:eb:16: f3:18:d7:47:d2:39:af:23:6b:45:42:44:fd:f7:99:f7:91:d5: e8:80:2a:ed:a5:48:ce:4f:58:5f:b7:fc:a3:64:60:9c:2c:a4: 41:63:18:50:78:b4:35:de:60:54:ba:4d:74:10:1f:08:ef:81: 77:ef:04:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrrfmx87OB0Vg20XJDamFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx MWQ5NDIwHhcNMjUxMjE3MDUwMDUxWhcNMjUxMjE4MDUwMDUxWjAzMTEwLwYDVQQD EygyNTk3MjhlZDIyZDU3MWM3OTk5MDZmMGFlMWEzYzAwYTY0NmFlYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmHD8wvI/kLjnhxmoUsdBqZxtPuk 1a0toK06dQGETvt/KXZ3S80CQJgGJ0sgXdv806Hx58YSIq4yONiO2J6ekjkJLsZV 3Eg+HQKPlBpEP9oNVprgSei4zepgX9FqPZ3o1AQqHVEmMTecUbB/RIpgB221BTXV 0JI0voZ7gX0lp0OLPZlz6G7kKAsSv+ZOY1b7t3+dmW4dEEErxeOn7ezsepfWmXU7 LQtzQbDyz38s6gb8C8LfsTBcqIkrMF+MWAs/96sQQ+u6ejPtC+U7H20ILDTDJM/t C8IavZ4oUBYP94/B58uxdSq5F/VtIY6VDwyMZG0j1KUQAwV1KJCGVhUysQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWXKO0i1XHHmZBvCuGjwApkaux1MB8GA1UdIwQY MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4 LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEviKBbdn ZF37O3ozUw4UIHysa1p/sZ8UUhOaWa1zR6iReJSH/pkj0yjXINNRnj1WBK7jHMbv pUylv73d2K4MNng1RMEXd98yoVrpNipPCWwbUeGRmV25tY9N+isuZ0/uPQZlNkHL iWkrdGqJAPo4bOuhywtiqhowSUENxtRylQ6uXWlgLyHBHgI48j613Tq+KleFXcoj exkEK7HZEOaT0P31diAUXmA5IKtESuqhAmHKwvllYGP05gw7xWkznY+w2i0lo+sW 8xjXR9I5ryNrRUJE/feZ95HV6IAq7aVIzk9YX7f8o2RgnCykQWMYUHi0Nd5gVLpN dBAfCO+Bd+8Eew== -----END CERTIFICATE-----Generated at Wed Dec 17 15:07:29 2025 by rpki-client