This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json) Hash identifier: FPFSBuoPZ8YL3Hr1H97LatrZQQTDpxocoFG7kjyYRw8= Subject key identifier: EE:5A:E0:D7:71:2A:D7:D4:EF:F1:54:75:E6:69:7F:5F:F8:2C:BA:B8 Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf Certificate serial: 019B3EA33B2F8D72900A402BC0B6744CCB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 02:00:43 +0000 Manifest this update: Sun 21 Dec 2025 02:00:43 +0000 Manifest next update: Mon 22 Dec 2025 02:00:43 +0000 Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=) 2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: m+oGqMQMrGKXK1R3wcwVRV9jQevFNGp+pD3yWCsA2cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3b:2f:8d:72:90:0a:40:2b:c0:b6:74:4c:cb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf Validity Not Before: Dec 21 02:00:43 2025 GMT Not After : Dec 22 02:00:43 2025 GMT Subject: CN=ee5ae0d7712ad7d4eff15475e6697f5ff82cbab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:ad:97:7b:04:90:2e:91:93:14:7b:ac:4f: 3c:91:16:23:e4:bb:d9:cb:33:2e:ae:56:e7:7d:11: fc:ab:a3:55:8c:51:0c:45:38:3d:a0:a2:15:15:dc: cb:f6:7c:bf:03:41:a0:b3:db:08:d5:69:5f:85:bf: cc:0b:55:d0:ec:cf:54:b7:39:7d:86:86:10:92:50: 00:6b:cb:db:24:47:5e:fd:d0:90:32:17:d3:7d:c4: 19:b0:18:30:2e:fc:f8:c0:3e:55:61:df:31:04:65: fc:95:89:38:a1:c7:87:b1:58:81:6d:21:fe:33:9d: de:f1:dd:e5:72:6f:f7:7e:11:5d:b7:04:40:f4:41: 8c:fb:f5:e8:01:a2:17:71:dc:fa:3f:17:53:1e:73: 6c:28:72:35:56:f3:21:06:39:3b:dc:60:97:84:f8: 6b:c6:dc:7b:92:30:b3:0c:e8:7d:7a:57:46:25:96: 4f:e6:18:fd:51:87:26:56:15:d4:4e:7d:69:a7:5b: 5c:b8:64:6b:a4:26:73:6e:70:06:f2:79:0f:7e:6f: d9:40:4a:d9:be:bf:61:30:ec:93:7d:62:49:88:81: 52:d0:5c:f0:13:f2:b1:a0:0a:5b:6f:f1:39:24:a0: 97:5a:95:50:63:39:f6:57:b2:d1:30:e8:cc:42:55: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5A:E0:D7:71:2A:D7:D4:EF:F1:54:75:E6:69:7F:5F:F8:2C:BA:B8 X509v3 Authority Key Identifier: keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f1:fc:08:cb:b0:fa:a1:c1:52:81:d5:fa:b0:a5:c5:61:69: 5f:ce:00:d5:1c:e4:98:65:84:8a:40:2f:4a:9f:6b:6c:c3:de: 83:9c:7d:a5:df:9c:07:0c:c6:a7:4a:e4:f5:02:46:49:37:52: 5f:35:5a:ea:03:dd:13:19:c4:9b:6f:a8:74:d3:c0:43:aa:56: 74:8b:c6:a9:6f:f3:1c:88:8a:cc:25:95:41:6a:c6:fa:90:55: e3:de:7b:9a:b9:16:63:a8:3c:3e:11:f0:1a:a4:51:96:10:b4: ea:a3:4f:2e:d8:d8:7f:41:07:4f:e6:a3:ec:8d:1d:59:b1:10: 0a:37:48:e9:71:9f:d1:c0:c1:46:d5:69:e7:e5:6a:3c:69:b4: b0:6e:35:41:86:ed:0f:6f:22:99:27:12:fd:63:1c:89:8c:9c: fd:25:c8:e6:bf:9c:8b:30:2c:99:37:8c:e6:c6:aa:56:1f:38: 0c:37:5f:73:0b:2b:1b:0c:aa:ef:f0:2b:5c:ce:4f:ca:22:8f: be:14:b5:7e:40:74:aa:2b:6d:2f:0b:56:36:f9:3a:d1:da:cd: 16:2d:c4:4c:41:79:b8:53:bb:78:93:22:81:f1:5e:7e:95:d5: 89:18:67:be:6f:21:94:47:8c:09:9a:7b:d7:0c:54:fa:82:f2: c2:65:67:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozsvjXKQCkArwLZ0TMsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi ZjYxY2YwHhcNMjUxMjIxMDIwMDQzWhcNMjUxMjIyMDIwMDQzWjAzMTEwLwYDVQQD EyhlZTVhZTBkNzcxMmFkN2Q0ZWZmMTU0NzVlNjY5N2Y1ZmY4MmNiYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfKtl3sEkC6RkxR7rE88kRYj5LvZ yzMurlbnfRH8q6NVjFEMRTg9oKIVFdzL9ny/A0Ggs9sI1Wlfhb/MC1XQ7M9Utzl9 hoYQklAAa8vbJEde/dCQMhfTfcQZsBgwLvz4wD5VYd8xBGX8lYk4oceHsViBbSH+ M53e8d3lcm/3fhFdtwRA9EGM+/XoAaIXcdz6PxdTHnNsKHI1VvMhBjk73GCXhPhr xtx7kjCzDOh9eldGJZZP5hj9UYcmVhXUTn1pp1tcuGRrpCZzbnAG8nkPfm/ZQErZ vr9hMOyTfWJJiIFS0FzwE/KxoApbb/E5JKCXWpVQYzn2V7LRMOjMQlXFkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5a4NdxKtfU7/FUdeZpf1/4LLq4MB8GA1UdIwQY MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5 LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/H8CMuw +qHBUoHV+rClxWFpX84A1RzkmGWEikAvSp9rbMPeg5x9pd+cBwzGp0rk9QJGSTdS XzVa6gPdExnEm2+odNPAQ6pWdIvGqW/zHIiKzCWVQWrG+pBV4957mrkWY6g8PhHw GqRRlhC06qNPLtjYf0EHT+aj7I0dWbEQCjdI6XGf0cDBRtVp5+VqPGm0sG41QYbt D28imScS/WMciYyc/SXI5r+cizAsmTeM5saqVh84DDdfcwsrGwyq7/ArXM5PyiKP vhS1fkB0qittLwtWNvk60drNFi3ETEF5uFO7eJMigfFefpXViRhnvm8hlEeMCZp7 1wxU+oLywmVnOg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:35 2025 by rpki-client