This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json) Hash identifier: zyjfN9ZgTaL1XmQ36Vm06rgBcO5XTsWX3WCKfgWDJ1I= Subject key identifier: 93:5A:9D:31:BE:EF:87:94:FF:06:36:78:F8:42:84:A8:3C:3F:AB:21 Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b Certificate serial: 019B76A4B23F85287C33E72AF5F12B8D015D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft Manifest number: 17A9 Signing time: Wed 31 Dec 2025 23:01:03 +0000 Manifest this update: Wed 31 Dec 2025 23:01:03 +0000 Manifest next update: Thu 01 Jan 2026 23:01:03 +0000 Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: b+x3zKquB79ejhdGPH6Bcc2uV+nrnnAtCSSimk/EOEM=) 2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:b2:3f:85:28:7c:33:e7:2a:f5:f1:2b:8d:01:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b Validity Not Before: Dec 31 23:01:03 2025 GMT Not After : Jan 1 23:01:03 2026 GMT Subject: CN=935a9d31beef8794ff063678f84284a83c3fab21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:59:aa:c2:b8:5a:d6:61:e5:6d:aa:a8:e1: bc:66:29:c6:7e:a8:24:a4:5f:5e:10:3a:5c:1e:95: 06:28:ff:11:df:c9:da:9e:b7:b8:6d:11:0f:ae:72: d5:d1:a4:00:72:1c:c0:a2:9c:85:01:f6:85:3f:b9: 1c:23:14:fb:a8:59:c6:39:3f:e2:89:0d:bd:3c:3b: b0:c1:2f:99:87:51:47:16:5f:a1:a3:d3:ca:89:5e: 89:f6:d2:a8:1e:5a:14:49:52:9d:ef:5a:f0:2e:21: 5f:0f:68:a1:47:c8:52:79:77:9c:5e:51:11:fa:0a: b5:9e:5e:fc:6b:ff:eb:c8:79:0b:f2:fd:93:70:98: 2d:81:38:c1:3b:25:64:25:2f:c5:c6:b5:a6:0f:8f: 47:7a:0a:71:3f:19:46:78:c1:d4:5d:53:8f:54:6a: 97:a7:1d:0b:c7:b0:cd:cb:10:9c:9b:bd:11:31:a1: 3d:5f:b5:49:eb:6f:03:6e:05:26:84:aa:95:c4:b1: c7:00:e4:7a:50:b4:62:99:f3:94:0d:3d:ab:1f:69: af:a8:c1:2b:72:9e:ab:27:5e:5e:0a:25:15:54:01: dd:07:22:cd:62:65:5c:a1:89:43:84:48:60:a6:bb: 75:61:9c:13:7e:c1:df:91:47:19:16:12:bd:84:c8: d6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:9D:31:BE:EF:87:94:FF:06:36:78:F8:42:84:A8:3C:3F:AB:21 X509v3 Authority Key Identifier: keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:48:cc:3b:22:17:46:93:db:a6:b0:be:b4:5c:f8:c6:5a:7e: 04:22:a6:95:0a:ff:5d:aa:a4:a4:df:26:ad:60:60:6c:1c:58: f1:39:91:67:d4:9b:b0:30:77:82:86:c9:97:bf:30:be:5d:17: d8:bc:8e:07:c7:47:89:26:9d:cf:2e:8e:63:a3:f4:e7:dd:31: eb:84:68:b9:cb:06:c1:04:8f:b5:4d:03:e8:36:15:ee:43:ba: 8a:a2:76:ad:0a:94:03:87:eb:58:9d:a7:a2:b5:b2:15:59:29: ea:5e:dd:06:7c:50:b1:bf:06:0c:eb:23:8d:73:37:d1:0d:64: 29:8e:cf:fb:1f:7d:3a:33:12:a7:7f:41:80:3a:0b:8c:68:75: f2:d7:6c:6c:d4:bd:5c:fa:cb:a5:a2:96:7e:31:82:96:f7:d2: a6:0c:d1:0c:a0:02:d0:dc:20:21:95:81:af:e6:50:22:59:55: 12:f2:e4:f6:fd:8f:01:2a:7f:37:3a:5c:0d:ac:86:71:b0:8a: e4:c8:a2:4f:58:69:49:66:eb:a9:3e:25:d1:73:0e:c9:c5:7e: c1:ab:db:fb:b7:a8:de:32:e4:a8:06:f3:48:9a:82:b1:92:65: 36:1b:0a:ab:8a:fe:39:77:56:f5:99:fd:d4:63:e3:c6:6f:38: fd:38:47:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pLI/hSh8M+cq9fErjQFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3 MGU2MmIwHhcNMjUxMjMxMjMwMTAzWhcNMjYwMTAxMjMwMTAzWjAzMTEwLwYDVQQD Eyg5MzVhOWQzMWJlZWY4Nzk0ZmYwNjM2NzhmODQyODRhODNjM2ZhYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuclZqsK4WtZh5W2qqOG8ZinGfqgk pF9eEDpcHpUGKP8R38nanre4bREPrnLV0aQAchzAopyFAfaFP7kcIxT7qFnGOT/i iQ29PDuwwS+Zh1FHFl+ho9PKiV6J9tKoHloUSVKd71rwLiFfD2ihR8hSeXecXlER +gq1nl78a//ryHkL8v2TcJgtgTjBOyVkJS/FxrWmD49HegpxPxlGeMHUXVOPVGqX px0Lx7DNyxCcm70RMaE9X7VJ628DbgUmhKqVxLHHAOR6ULRimfOUDT2rH2mvqMEr cp6rJ15eCiUVVAHdByLNYmVcoYlDhEhgprt1YZwTfsHfkUcZFhK9hMjWXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNanTG+74eU/wY2ePhChKg8P6shMB8GA1UdIwQY MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5 LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArEjMOyIX RpPbprC+tFz4xlp+BCKmlQr/XaqkpN8mrWBgbBxY8TmRZ9SbsDB3gobJl78wvl0X 2LyOB8dHiSadzy6OY6P0590x64RoucsGwQSPtU0D6DYV7kO6iqJ2rQqUA4frWJ2n orWyFVkp6l7dBnxQsb8GDOsjjXM30Q1kKY7P+x99OjMSp39BgDoLjGh18tdsbNS9 XPrLpaKWfjGClvfSpgzRDKAC0NwgIZWBr+ZQIllVEvLk9v2PASp/NzpcDayGcbCK 5MiiT1hpSWbrqT4l0XMOycV+wavb+7eo3jLkqAbzSJqCsZJlNhsKq4r+OXdW9Zn9 1GPjxm84/ThHeA== -----END CERTIFICATE-----Generated at Thu Jan 1 04:34:40 2026 by rpki-client