This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: +GD+bOawmgrHkGDNXiOnprMORC7tkXnjImuPNTJR6Xc= Subject key identifier: C5:86:D4:5F:C9:0F:ED:47:0D:D5:8C:53:D7:2A:04:9D:36:9C:11:B8 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019B3AFD7A957A21C81DB61D7CAE32B071B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0F09 Signing time: Sat 20 Dec 2025 09:00:49 +0000 Manifest this update: Sat 20 Dec 2025 09:00:49 +0000 Manifest next update: Sun 21 Dec 2025 09:00:49 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: yfj3wD/TfWDs3payP7Kyz6uHO1yXT/xFGV/Wf6mh+B8=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:7a:95:7a:21:c8:1d:b6:1d:7c:ae:32:b0:71:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Dec 20 09:00:49 2025 GMT Not After : Dec 21 09:00:49 2025 GMT Subject: CN=c586d45fc90fed470dd58c53d72a049d369c11b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0a:e8:16:52:7f:e2:b5:6f:43:e9:c4:39:06: 6e:07:ae:a7:e7:f1:2d:0e:c8:55:e7:c2:f8:e3:c5: 4d:29:49:c7:71:bd:6f:0f:47:20:7f:01:a0:26:5a: bd:62:86:d9:9b:de:fd:d5:aa:3b:d5:59:79:c9:e5: 0d:34:10:0d:ca:a7:50:56:34:b4:3b:2d:c5:cc:b3: 66:28:26:5b:6b:86:b3:0b:e3:9c:b9:75:cb:73:db: 5a:5b:97:c1:d6:a5:5d:d3:b8:5a:ad:ef:5d:cc:56: 13:a4:a6:81:99:7a:eb:df:6a:e1:57:57:77:d5:dc: cb:c7:d8:7c:32:4a:7b:36:84:e4:5a:bb:cc:51:ee: 1b:30:f2:42:65:9d:d2:bf:66:ea:74:71:64:3d:35: b4:4a:ca:b3:8e:af:5b:b3:5b:34:5c:dc:bf:25:fa: 1b:5c:6e:84:a0:a1:9d:b8:0f:e8:c3:9c:fe:f7:3e: f2:73:59:05:59:92:33:62:13:d3:04:9d:c2:48:81: 35:80:e7:c6:3a:3d:f0:85:ca:3d:81:43:a0:62:4f: 2c:97:22:f0:a9:03:6a:5a:34:61:b1:86:43:86:fe: e7:26:e6:a1:6a:0a:cd:88:15:4d:eb:d4:58:1b:a0: 81:62:09:5d:c3:79:e7:d4:96:fa:c5:33:4b:ee:e1: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:86:D4:5F:C9:0F:ED:47:0D:D5:8C:53:D7:2A:04:9D:36:9C:11:B8 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9d:5a:56:f4:1b:c9:25:5a:fa:d8:4a:22:33:3e:d3:d5:fe: 15:13:49:74:2d:f4:af:ad:81:33:02:57:9e:bf:3d:b0:d5:12: fc:ff:7d:a6:a4:5b:b1:e0:6a:a2:0b:38:c5:89:fe:e4:37:e3: 0e:df:93:b6:db:7c:df:85:06:a4:d5:4c:a2:34:55:6d:7c:31: 0c:16:bc:83:f5:41:17:42:c2:14:34:32:38:84:6d:ac:39:35: 45:3b:d2:3c:91:27:e8:4c:f8:88:41:67:95:24:0b:f4:92:c6: 6a:dd:ac:1c:39:78:bf:54:6b:1c:ae:75:c7:d2:cc:0a:af:1b: 50:9a:54:c1:c2:c8:16:6d:7a:a2:e4:19:24:b6:31:84:4e:83: d4:95:d2:76:43:6c:50:80:c6:c1:aa:bf:08:00:69:8a:4a:fd: 82:ff:4c:c4:88:d2:e0:2e:bc:f0:da:17:b5:9c:73:31:2a:d5: 74:bb:f7:10:ce:5f:6c:fe:db:27:90:88:0b:e4:7c:c2:37:b0: 5c:b5:ed:85:da:fc:1d:5b:a4:e7:10:12:81:ea:11:09:2d:8b: c8:f6:34:da:e8:5e:fb:6f:de:c8:97:75:d7:61:bc:c5:e6:37: 77:17:f8:88:06:99:32:a0:44:ba:76:f0:87:f3:1f:0b:90:c3: 97:a6:e2:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/XqVeiHIHbYdfK4ysHG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUxMjIwMDkwMDQ5WhcNMjUxMjIxMDkwMDQ5WjAzMTEwLwYDVQQD EyhjNTg2ZDQ1ZmM5MGZlZDQ3MGRkNThjNTNkNzJhMDQ5ZDM2OWMxMWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwroFlJ/4rVvQ+nEOQZuB66n5/Et DshV58L448VNKUnHcb1vD0cgfwGgJlq9YobZm9791ao71Vl5yeUNNBANyqdQVjS0 Oy3FzLNmKCZba4azC+OcuXXLc9taW5fB1qVd07hare9dzFYTpKaBmXrr32rhV1d3 1dzLx9h8Mkp7NoTkWrvMUe4bMPJCZZ3Sv2bqdHFkPTW0Ssqzjq9bs1s0XNy/Jfob XG6EoKGduA/ow5z+9z7yc1kFWZIzYhPTBJ3CSIE1gOfGOj3whco9gUOgYk8slyLw qQNqWjRhsYZDhv7nJuahagrNiBVN69RYG6CBYgldw3nn1Jb6xTNL7uEa1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWG1F/JD+1HDdWMU9cqBJ02nBG4MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJ1aVvQb ySVa+thKIjM+09X+FRNJdC30r62BMwJXnr89sNUS/P99pqRbseBqogs4xYn+5Dfj Dt+Tttt834UGpNVMojRVbXwxDBa8g/VBF0LCFDQyOIRtrDk1RTvSPJEn6Ez4iEFn lSQL9JLGat2sHDl4v1RrHK51x9LMCq8bUJpUwcLIFm16ouQZJLYxhE6D1JXSdkNs UIDGwaq/CABpikr9gv9MxIjS4C688NoXtZxzMSrVdLv3EM5fbP7bJ5CIC+R8wjew XLXthdr8HVuk5xASgeoRCS2LyPY02uhe+2/eyJd112G8xeY3dxf4iAaZMqBEunbw h/MfC5DDl6biRA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:00:43 2025 by rpki-client