This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json) Hash identifier: Cb9XXxgFpNjg+ShSsuo5sk9rywnCchD+uNDxzbFaoYA= Subject key identifier: 6E:32:DD:F0:8A:53:CC:13:49:FD:BD:81:8E:D8:D4:E3:05:86:14:69 Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a Certificate serial: 019B4C95F5D3313C06C37990D3C71184CF1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 19:00:54 +0000 Manifest this update: Tue 23 Dec 2025 19:00:54 +0000 Manifest next update: Wed 24 Dec 2025 19:00:54 +0000 Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=) 2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: XMI+omWsGkT7yd1Rn4I6inHrmNxYf/wBsd33fyZzgZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:f5:d3:31:3c:06:c3:79:90:d3:c7:11:84:cf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a Validity Not Before: Dec 23 19:00:54 2025 GMT Not After : Dec 24 19:00:54 2025 GMT Subject: CN=6e32ddf08a53cc1349fdbd818ed8d4e305861469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:c8:ff:d7:4a:b8:b4:1b:d3:44:5f:1c:72: 1e:31:d3:ce:82:44:a2:f0:b1:88:fe:10:1c:1e:7f: 91:06:fc:36:eb:70:0e:38:88:22:ec:0c:68:9e:18: 85:b6:3d:87:ba:ef:65:4a:f6:21:3e:30:6e:be:b0: 87:4d:54:fa:08:40:4b:6f:35:5e:58:7f:8c:5a:8a: d8:ca:c9:5e:4c:f2:dd:dc:ae:25:bf:64:f2:34:ca: 8d:ad:54:af:41:8f:39:89:f2:f7:b5:ce:fd:75:05: 67:19:2d:29:bf:4f:ef:8c:f6:48:d2:25:c9:30:d4: 58:6e:b1:0e:6f:96:20:07:89:11:e5:6f:c5:11:a7: 1d:83:7f:0b:f9:42:90:b9:d9:ca:ef:09:6f:c0:8b: 14:47:96:5d:1d:a1:1e:96:e9:34:71:fe:00:e3:42: 76:29:7d:6e:ab:af:1e:d2:c5:84:22:64:bb:3c:72: 21:2b:d6:ba:a0:04:cd:3c:e7:60:3c:19:90:a7:af: 3a:2e:f8:16:4b:47:ea:6f:a5:91:98:66:c6:c6:49: bb:4e:f2:60:fb:f7:45:95:06:cd:db:4a:97:54:75: 5c:af:82:87:d2:6c:c9:ab:f8:3f:1d:53:c6:3c:1c: 67:07:bc:55:24:3e:e5:ab:11:b7:42:12:7c:3e:ab: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:32:DD:F0:8A:53:CC:13:49:FD:BD:81:8E:D8:D4:E3:05:86:14:69 X509v3 Authority Key Identifier: keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:c1:75:89:69:1f:6c:df:c2:a1:32:63:e8:45:4c:21:0f:83: a9:73:de:5f:12:d9:31:65:69:d2:df:8e:71:97:72:36:8e:9d: 36:5e:01:ec:d5:1c:e6:fd:cc:bf:bf:0e:17:1b:23:74:c0:b3: 9c:50:e5:38:3c:14:e8:0d:bd:99:d6:65:65:56:39:20:17:db: fe:df:8b:8d:86:d0:37:ae:27:c8:da:21:4f:4c:4c:46:43:22: ad:b5:e5:31:43:24:ed:87:e5:59:79:b4:b7:c3:ff:f0:d9:c9: 48:a5:55:e6:af:2d:45:c7:de:47:b9:07:41:4b:e8:b3:3d:19: ee:58:27:a4:dd:1c:b3:b1:2d:f2:e3:89:d9:5e:50:ee:26:f5: 78:8b:18:e7:03:15:aa:1c:28:aa:1c:f5:46:d4:2d:e5:dd:42: bb:cb:40:34:af:79:4b:ce:01:31:b5:58:05:e3:85:73:f6:d5: 22:f5:f6:cf:54:1b:d1:63:a6:d8:8d:70:e1:a5:77:ee:30:a1: 14:23:4e:25:84:6a:3e:89:0b:bb:34:aa:74:5e:1e:e7:fa:d7: d8:0d:4a:f5:93:e3:e9:f6:a4:1d:af:bf:b3:3c:9b:91:d1:c8: 06:7d:5f:c3:35:3c:96:2f:79:74:f8:33:98:08:54:06:57:9f: 12:f6:83:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlfXTMTwGw3mQ08cRhM8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi ODg4MWEwHhcNMjUxMjIzMTkwMDU0WhcNMjUxMjI0MTkwMDU0WjAzMTEwLwYDVQQD Eyg2ZTMyZGRmMDhhNTNjYzEzNDlmZGJkODE4ZWQ4ZDRlMzA1ODYxNDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFvI/9dKuLQb00RfHHIeMdPOgkSi 8LGI/hAcHn+RBvw263AOOIgi7AxonhiFtj2Huu9lSvYhPjBuvrCHTVT6CEBLbzVe WH+MWorYysleTPLd3K4lv2TyNMqNrVSvQY85ifL3tc79dQVnGS0pv0/vjPZI0iXJ MNRYbrEOb5YgB4kR5W/FEacdg38L+UKQudnK7wlvwIsUR5ZdHaEeluk0cf4A40J2 KX1uq68e0sWEImS7PHIhK9a6oATNPOdgPBmQp686LvgWS0fqb6WRmGbGxkm7TvJg +/dFlQbN20qXVHVcr4KH0mzJq/g/HVPGPBxnB7xVJD7lqxG3QhJ8PqtMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4y3fCKU8wTSf29gY7Y1OMFhhRpMB8GA1UdIwQY MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6MF1iWkf bN/CoTJj6EVMIQ+DqXPeXxLZMWVp0t+OcZdyNo6dNl4B7NUc5v3Mv78OFxsjdMCz nFDlODwU6A29mdZlZVY5IBfb/t+LjYbQN64nyNohT0xMRkMirbXlMUMk7YflWXm0 t8P/8NnJSKVV5q8tRcfeR7kHQUvosz0Z7lgnpN0cs7Et8uOJ2V5Q7ib1eIsY5wMV qhwoqhz1RtQt5d1Cu8tANK95S84BMbVYBeOFc/bVIvX2z1Qb0WOm2I1w4aV37jCh FCNOJYRqPokLuzSqdF4e5/rX2A1K9ZPj6fakHa+/szybkdHIBn1fwzU8li95dPgz mAhUBlefEvaDMA== -----END CERTIFICATE-----Generated at Tue Dec 23 20:44:44 2025 by rpki-client