This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json) Hash identifier: snpWnTrdhOMo3hI9qbKht8v6XyPe99hzCi5zhQ3yFKE= Subject key identifier: FC:3E:70:AC:E6:76:D9:54:CB:F3:EE:0E:EB:CD:0E:A8:21:9A:D8:CF Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5 Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5 Certificate serial: 019B6D6AD0E69E949F46E7505B2E94EDBBFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft Manifest number: 0C23 Signing time: Tue 30 Dec 2025 04:01:15 +0000 Manifest this update: Tue 30 Dec 2025 04:01:15 +0000 Manifest next update: Wed 31 Dec 2025 04:01:15 +0000 Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: J40E/1ugSXLFDJZ1Damx1Tr6RTp9Cz4pth9sW63Mk3k=) 2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:d0:e6:9e:94:9f:46:e7:50:5b:2e:94:ed:bb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5 Validity Not Before: Dec 30 04:01:15 2025 GMT Not After : Dec 31 04:01:15 2025 GMT Subject: CN=fc3e70ace676d954cbf3ee0eebcd0ea8219ad8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d6:93:8e:af:27:3d:d9:9f:fe:b0:bf:a0:f8: 87:b4:ba:81:a6:b8:68:af:72:0a:7d:d5:53:bf:43: a8:c4:4f:b9:18:e7:f4:bc:75:0b:98:5c:02:1a:2a: 90:bb:5d:1f:fd:56:85:9c:4c:5d:c2:b5:ec:3a:5e: 11:34:14:3d:76:88:f1:02:e7:33:d4:ed:46:7d:5c: c7:50:df:40:e6:d1:21:e2:4f:74:d5:2f:26:04:8a: 70:25:78:4c:6e:e6:11:c2:30:4c:b7:44:cc:de:f4: 8a:22:08:2b:bb:ba:d7:b0:f0:de:7e:df:b9:c7:2d: aa:cd:eb:a6:f0:f5:90:ce:93:cb:17:8f:7e:94:ba: 13:de:11:00:f6:27:90:c9:54:c1:5c:1f:2a:ad:cc: 02:46:f6:05:49:09:b9:b5:58:46:72:3d:8c:f5:38: 4e:53:98:66:04:41:79:e9:b1:15:08:a5:4a:de:31: dc:fa:d7:9f:3a:b3:37:8f:8f:aa:a1:05:6e:97:ef: 23:43:8b:99:5a:9c:7b:55:2c:ae:f4:8e:66:4a:ba: 21:5a:d3:32:79:27:62:32:25:39:a4:81:89:9e:1b: 6e:a1:35:11:49:e2:68:cd:b6:c4:ef:34:6e:98:64: 20:d4:2f:b2:12:b7:1d:13:9d:68:e4:65:8d:f2:0f: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:70:AC:E6:76:D9:54:CB:F3:EE:0E:EB:CD:0E:A8:21:9A:D8:CF X509v3 Authority Key Identifier: keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b2:bb:83:8d:63:7f:0e:37:cf:a4:b8:4c:26:54:5b:79:8e: 3f:36:5e:0c:69:24:09:a8:33:e9:de:be:34:d3:3c:04:81:85: fd:ae:6d:44:23:b6:63:9c:cc:15:43:4f:40:4d:ea:44:83:9c: 7a:5b:f3:d3:18:b6:e9:13:bf:b8:5c:54:53:0c:c1:e8:40:71: 08:b5:93:c2:45:f8:25:42:9e:51:c5:60:d8:5e:d6:1b:09:b8: 01:40:99:c2:98:b4:72:ab:5e:cb:f5:ab:1d:51:0e:26:27:41: d2:95:ce:2b:cd:f1:5e:cd:7b:59:68:5e:2b:82:fe:f4:07:75: a9:69:3e:01:03:c1:5a:b8:e7:a4:19:af:52:dc:75:d8:95:d0: bf:2e:26:40:53:43:8d:ff:79:09:4a:68:35:4e:af:2f:b3:1e: b1:db:a3:59:f8:f2:cb:59:86:11:79:d0:bc:3e:99:b0:27:dd: c3:29:85:5c:26:7d:31:23:ca:f4:ad:c9:1c:7a:45:f8:95:1a: 03:ab:c0:f9:c2:87:19:f9:64:86:d5:8b:24:80:d2:1d:e1:ba: d8:92:da:31:dd:05:24:21:12:7b:92:0d:cb:14:38:28:c3:55: 3f:ef:d7:21:87:78:40:12:1a:55:98:79:0c:29:3c:6a:b9:6a: f7:bc:85:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttatDmnpSfRudQWy6U7bv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjZiY2Y2ZTJiMTA5YmEyYTE0YTczYjk3NWFkOTU0NDg0 YjRiYTUwHhcNMjUxMjMwMDQwMTE1WhcNMjUxMjMxMDQwMTE1WjAzMTEwLwYDVQQD EyhmYzNlNzBhY2U2NzZkOTU0Y2JmM2VlMGVlYmNkMGVhODIxOWFkOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1taTjq8nPdmf/rC/oPiHtLqBprho r3IKfdVTv0OoxE+5GOf0vHULmFwCGiqQu10f/VaFnExdwrXsOl4RNBQ9dojxAucz 1O1GfVzHUN9A5tEh4k901S8mBIpwJXhMbuYRwjBMt0TM3vSKIggru7rXsPDeft+5 xy2qzeum8PWQzpPLF49+lLoT3hEA9ieQyVTBXB8qrcwCRvYFSQm5tVhGcj2M9ThO U5hmBEF56bEVCKVK3jHc+tefOrM3j4+qoQVul+8jQ4uZWpx7VSyu9I5mSrohWtMy eSdiMiU5pIGJnhtuoTURSeJozbbE7zRumGQg1C+yErcdE51o5GWN8g+PKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw+cKzmdtlUy/PuDuvNDqghmtjPMB8GA1UdIwQY MBaAFGD2vPbisQm6KhSnO5da2VRIS0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2Qt YWI0MDI1M2I1ZTJiLzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2QtYWI0MDI1M2I1ZTJi LzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbK7g41j fw43z6S4TCZUW3mOPzZeDGkkCagz6d6+NNM8BIGF/a5tRCO2Y5zMFUNPQE3qRIOc elvz0xi26RO/uFxUUwzB6EBxCLWTwkX4JUKeUcVg2F7WGwm4AUCZwpi0cqtey/Wr HVEOJidB0pXOK83xXs17WWheK4L+9Ad1qWk+AQPBWrjnpBmvUtx12JXQvy4mQFND jf95CUpoNU6vL7MesdujWfjyy1mGEXnQvD6ZsCfdwymFXCZ9MSPK9K3JHHpF+JUa A6vA+cKHGflkhtWLJIDSHeG62JLaMd0FJCESe5INyxQ4KMNVP+/XIYd4QBIaVZh5 DCk8arlq97yF7A== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:08 2025 by rpki-client