This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json) Hash identifier: 58tlHuwRri74kKkXfaMNmRHDd/b//Y0kcnHrIJivrwM= Subject key identifier: 96:DA:16:DC:EB:35:BC:6B:BB:8A:DF:B2:2B:F2:5F:71:6D:28:6B:03 Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b Certificate serial: 019B3A900163746930287F42190B6CCCB303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 07:01:14 +0000 Manifest this update: Sat 20 Dec 2025 07:01:14 +0000 Manifest next update: Sun 21 Dec 2025 07:01:14 +0000 Files and hashes: 1: FcPpw1IibzSy4BenkulclpDum4U.roa (hash: HSUDUncC0CCpqaUKBhWSJTD0GmSsEAzCocsfF6H1tqA=) 2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: bf0JVNKXxENfoXCMBcNyjG9TH2cHUcGAPY4h8gflbM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:01:63:74:69:30:28:7f:42:19:0b:6c:cc:b3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b Validity Not Before: Dec 20 07:01:14 2025 GMT Not After : Dec 21 07:01:14 2025 GMT Subject: CN=96da16dceb35bc6bbb8adfb22bf25f716d286b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:c5:bc:f5:90:29:f2:f3:5e:6f:fd:65:81: 3f:df:0b:70:da:5f:ff:7f:ff:c4:39:fa:72:2f:54: b3:99:64:df:a8:f7:b2:73:da:17:09:f3:6c:a3:b8: 32:bc:23:49:14:a2:1a:87:70:9f:19:1a:2e:38:03: bd:d1:ec:cb:11:95:8c:af:bb:b4:9f:b6:60:3f:84: 7f:d0:77:3a:b8:32:af:4d:70:19:34:b8:5e:60:6d: 20:64:35:ed:d3:4a:76:e9:4c:a1:7f:d0:d9:b9:cc: 30:58:65:15:5d:4a:6b:bf:0c:68:5d:ba:c9:14:97: bc:0e:ae:8f:df:24:29:b2:c3:2b:76:03:4a:7e:95: 06:27:7a:30:b6:f4:75:d4:d5:ad:f4:fd:e4:1b:36: 23:63:e0:2b:6f:a3:b7:b8:e3:48:aa:85:19:21:e5: a0:b4:d5:8b:ea:c1:a2:c9:58:35:18:f5:82:51:4b: c3:bb:28:8f:41:bf:54:a2:41:96:e3:0c:11:bb:ad: a0:db:36:02:a1:2a:43:99:01:50:54:8e:39:8b:5f: c2:52:ca:4c:0a:5e:3b:61:67:6f:76:86:3c:4f:67: d8:63:53:6f:d1:a4:e6:a9:c0:12:1d:6d:f7:07:5c: 33:bf:c6:27:61:40:cd:3f:a9:e3:2d:78:0d:96:30: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DA:16:DC:EB:35:BC:6B:BB:8A:DF:B2:2B:F2:5F:71:6D:28:6B:03 X509v3 Authority Key Identifier: keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:65:d0:5b:6c:c3:b5:5e:6d:1b:50:c9:25:53:c7:6d:3e:44: bd:29:bf:97:01:5e:90:68:0f:66:4b:8d:69:6b:ba:e3:65:e7: b1:a5:41:cd:d8:23:57:fd:2f:49:93:ca:b3:05:37:39:ec:13: 7f:49:cf:6c:04:c7:e7:d1:4b:b7:be:1c:8d:7d:21:d0:54:57: fe:ba:ae:fb:18:5f:9f:b1:27:c9:a2:e5:3d:bc:7c:e6:f1:46: b4:e3:12:6e:f6:aa:12:c8:a6:8d:56:de:63:f4:71:2c:d2:0a: 3b:1a:d0:ff:ee:84:18:e4:c5:01:e7:77:55:89:22:4d:f4:91: d1:f9:75:2f:ba:d6:af:be:11:79:77:36:69:ba:17:fe:57:17: 51:3c:25:10:32:f3:d3:28:83:c0:82:37:a3:17:b8:60:2b:b8: d3:d6:a2:6b:b2:b3:a3:48:36:96:40:9a:41:46:8d:7d:b0:ed: 94:29:17:92:cb:cc:55:e6:52:d1:ae:95:b8:50:0b:1a:a3:c1: a4:ab:cf:f3:a0:ac:41:18:7e:d4:33:d2:58:64:59:30:87:30: d2:21:97:88:13:07:75:ad:34:9f:45:b6:92:12:23:32:75:00: df:4f:d1:1d:3b:ae:5e:0f:51:23:e3:60:4c:41:93:13:6b:87: c4:4d:ba:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kAFjdGkwKH9CGQtszLMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmYzNzM2MjAxNDZlNmYyOThhZTgyZDJjOGE4MzcxY2Fj YjdiMWIwHhcNMjUxMjIwMDcwMTE0WhcNMjUxMjIxMDcwMTE0WjAzMTEwLwYDVQQD Eyg5NmRhMTZkY2ViMzViYzZiYmI4YWRmYjIyYmYyNWY3MTZkMjg2YjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4bFvPWQKfLzXm/9ZYE/3wtw2l// f//EOfpyL1SzmWTfqPeyc9oXCfNso7gyvCNJFKIah3CfGRouOAO90ezLEZWMr7u0 n7ZgP4R/0Hc6uDKvTXAZNLheYG0gZDXt00p26Uyhf9DZucwwWGUVXUprvwxoXbrJ FJe8Dq6P3yQpssMrdgNKfpUGJ3owtvR11NWt9P3kGzYjY+Arb6O3uONIqoUZIeWg tNWL6sGiyVg1GPWCUUvDuyiPQb9UokGW4wwRu62g2zYCoSpDmQFQVI45i1/CUspM Cl47YWdvdoY8T2fYY1Nv0aTmqcASHW33B1wzv8YnYUDNP6njLXgNljCsawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbaFtzrNbxru4rfsivyX3FtKGsDMB8GA1UdIwQY MBaAFGC/NzYgFG5vKYroLSyKg3HKy3sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTIt ZjBhODEyM2U3MGY5LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTItZjBhODEyM2U3MGY5 LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWXQW2zD tV5tG1DJJVPHbT5EvSm/lwFekGgPZkuNaWu642XnsaVBzdgjV/0vSZPKswU3OewT f0nPbATH59FLt74cjX0h0FRX/rqu+xhfn7EnyaLlPbx85vFGtOMSbvaqEsimjVbe Y/RxLNIKOxrQ/+6EGOTFAed3VYkiTfSR0fl1L7rWr74ReXc2aboX/lcXUTwlEDLz 0yiDwII3oxe4YCu409aia7Kzo0g2lkCaQUaNfbDtlCkXksvMVeZS0a6VuFALGqPB pKvP86CsQRh+1DPSWGRZMIcw0iGXiBMHda00n0W2khIjMnUA30/RHTuuXg9RI+Ng TEGTE2uHxE26Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:55 2025 by rpki-client