This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft (raw, json) Hash identifier: 6MItw9DuIGpeSF0d5RzXIHuzlMGr3nbAU8kkUvi4T60= Subject key identifier: 73:C8:35:0E:C8:5A:8A:D3:4D:FD:65:69:28:4C:52:41:5B:86:B8:13 Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d Certificate serial: 019B3D2358FF29336314F6AB6B0731F7A5B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft Manifest number: 067A Signing time: Sat 20 Dec 2025 19:01:25 +0000 Manifest this update: Sat 20 Dec 2025 19:01:25 +0000 Manifest next update: Sun 21 Dec 2025 19:01:25 +0000 Files and hashes: 1: 59_xhKD0T6uSuFEYj3I2uhiqG1c.roa (hash: MYVrtUe54xpHaYsIcVLfMIx5ZncQsO+bXIz8ZL41Ros=) 2: 9qqMkqBIjABklRo0TcvZzdRORAI.roa (hash: 2MCPGhcnLXE4oMEI7o6/tc2uu9oOZ9cwxOU5/mzOPUI=) 3: YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl (hash: b6zfHriXX7pQYij6TcVggqtfQS2iHVoB0Jz2cYInybE=) 4: wXfYanJeLekulCR6gXF4hFd0qi4.roa (hash: kVi1Jps4RtrSVg9+xQdU2e8mO6fPm3vlK9bwNs7JRMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:58:ff:29:33:63:14:f6:ab:6b:07:31:f7:a5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d Validity Not Before: Dec 20 19:01:25 2025 GMT Not After : Dec 21 19:01:25 2025 GMT Subject: CN=73c8350ec85a8ad34dfd6569284c52415b86b813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:03:8e:13:97:96:67:6a:b3:7d:89:00:bd: 34:d7:5c:6a:1f:85:ac:6e:25:fb:e2:6d:55:7a:01: 3a:7f:4b:f4:a4:9d:a0:7a:32:eb:5b:f8:0f:d0:51: 8c:cf:92:96:f2:80:c2:34:2f:7f:09:cb:fb:c4:ec: d6:f6:6b:07:3e:98:46:64:66:52:e8:3c:30:57:a4: 55:02:ec:b2:9e:3d:23:0c:0d:07:c9:40:7f:e4:03: a5:6d:3b:a1:bf:66:e2:b9:77:ed:1a:31:49:79:a3: 5d:a7:06:ee:77:c5:c4:c2:e6:9b:7e:15:71:41:a1: 03:96:ae:c7:c8:f1:c7:16:c5:47:ef:64:1b:77:25: 2f:64:71:f9:74:6a:7d:96:29:a8:93:ee:e3:8c:d0: 4c:59:48:a0:15:f7:a0:88:55:d0:47:7a:86:2f:b6: 8c:f2:2a:d4:b7:06:b8:e7:38:e2:53:a1:da:a3:f0: dc:3c:1e:02:d0:77:c2:13:25:a8:b1:4c:49:48:10: 3a:34:a3:a3:9d:30:d3:34:97:06:b5:1f:8d:cb:07: ff:14:f4:3e:7b:94:32:93:88:25:8d:95:cd:23:51: 27:45:91:58:ec:e4:1c:47:ed:ab:8d:68:c7:0c:a6: 06:43:d7:08:ae:31:3c:af:ea:6f:c4:53:ed:e2:5a: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C8:35:0E:C8:5A:8A:D3:4D:FD:65:69:28:4C:52:41:5B:86:B8:13 X509v3 Authority Key Identifier: keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:27:2a:92:f8:a2:1c:6c:46:1f:e2:41:db:b6:54:79:09:4a: c7:02:bc:01:30:da:3e:32:7c:d9:e4:71:44:33:8f:10:2c:bc: 0a:87:1f:99:06:be:90:17:e1:44:8b:c0:97:05:d1:55:ce:e9: fc:a3:9d:ba:cb:e2:e3:78:6e:57:8b:20:16:ac:3f:be:14:14: 1d:de:b5:27:46:2c:ba:a1:4d:15:ad:dd:4a:81:82:84:29:9f: 55:a5:68:56:aa:cd:64:ce:26:e7:1a:79:71:b5:bb:06:05:08: 1e:ca:23:7a:25:dd:00:b8:81:a4:63:88:32:a9:9e:50:d4:10: 0e:a4:c2:b8:c6:d5:00:0e:a1:b4:de:ff:ec:6a:18:40:e5:52: eb:9e:20:a4:f1:6d:57:c0:9c:47:8f:cc:ad:fb:c4:6d:bc:25: df:5b:f4:16:5a:99:ef:0a:a8:45:76:52:bc:cc:f4:84:39:75: 97:4a:d2:c3:82:87:57:49:52:3f:7f:dc:6b:3d:17:23:66:17: 18:93:85:a0:6f:64:70:a0:26:a4:43:e6:41:5b:75:aa:e8:b9: 3f:27:a5:fa:28:82:dd:d1:97:7d:53:97:dd:23:9c:50:0f:a1: 9b:2e:cb:06:93:e9:a6:e9:bc:c5:68:6f:12:e8:c8:72:49:ed: 38:a0:7c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1j/KTNjFParawcx96WyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwM2IzMWJjNmU3ZjQyZjYzMDM4NzBmMDIzNGI0MGRlZjcx ZmEwM2QwHhcNMjUxMjIwMTkwMTI1WhcNMjUxMjIxMTkwMTI1WjAzMTEwLwYDVQQD Eyg3M2M4MzUwZWM4NWE4YWQzNGRmZDY1NjkyODRjNTI0MTViODZiODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ4DjhOXlmdqs32JAL0011xqH4Ws biX74m1VegE6f0v0pJ2gejLrW/gP0FGMz5KW8oDCNC9/Ccv7xOzW9msHPphGZGZS 6DwwV6RVAuyynj0jDA0HyUB/5AOlbTuhv2biuXftGjFJeaNdpwbud8XEwuabfhVx QaEDlq7HyPHHFsVH72QbdyUvZHH5dGp9limok+7jjNBMWUigFfegiFXQR3qGL7aM 8irUtwa45zjiU6Hao/DcPB4C0HfCEyWosUxJSBA6NKOjnTDTNJcGtR+Nywf/FPQ+ e5Qyk4gljZXNI1EnRZFY7OQcR+2rjWjHDKYGQ9cIrjE8r+pvxFPt4loYwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPINQ7IWorTTf1laShMUkFbhrgTMB8GA1UdIwQY MBaAFGA7Mbxuf0L2MDhw8CNLQN73H6A9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMt Njc5MzI2NTZlNTk0LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wZjIyNjYtYjRmMS00OGZjLWIyOTMtNjc5MzI2NTZlNTk0 LzEvWURzeHZHNV9Rdll3T0hEd0kwdEEzdmNmb0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKycqkvii HGxGH+JB27ZUeQlKxwK8ATDaPjJ82eRxRDOPECy8CocfmQa+kBfhRIvAlwXRVc7p /KOdusvi43huV4sgFqw/vhQUHd61J0YsuqFNFa3dSoGChCmfVaVoVqrNZM4m5xp5 cbW7BgUIHsojeiXdALiBpGOIMqmeUNQQDqTCuMbVAA6htN7/7GoYQOVS654gpPFt V8CcR4/MrfvEbbwl31v0FlqZ7wqoRXZSvMz0hDl1l0rSw4KHV0lSP3/caz0XI2YX GJOFoG9kcKAmpEPmQVt1qui5Pyel+iiC3dGXfVOX3SOcUA+hmy7LBpPppum8xWhv EujIckntOKB8Fw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:30:13 2025 by rpki-client