This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json) Hash identifier: +CQtI3KEbWl83LNAc11AOz0XOdfVD0czictWMpP1LRo= Subject key identifier: 86:D9:D8:08:7E:89:C4:34:0A:10:05:A6:91:B2:44:0D:92:2B:6A:3F Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b Certificate serial: 019B53AB062DD905508D681DF6CA3F43CDB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 04:01:15 +0000 Manifest this update: Thu 25 Dec 2025 04:01:15 +0000 Manifest next update: Fri 26 Dec 2025 04:01:15 +0000 Files and hashes: 1: FcPpw1IibzSy4BenkulclpDum4U.roa (hash: HSUDUncC0CCpqaUKBhWSJTD0GmSsEAzCocsfF6H1tqA=) 2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: KuuSolAtgLGxPPs6Zr/PGuHT26hXffgu7FTVEmYnmgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:06:2d:d9:05:50:8d:68:1d:f6:ca:3f:43:cd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b Validity Not Before: Dec 25 04:01:15 2025 GMT Not After : Dec 26 04:01:15 2025 GMT Subject: CN=86d9d8087e89c4340a1005a691b2440d922b6a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:70:30:43:43:e1:e6:50:0e:12:9f:49:2d: 6e:f8:56:a6:57:90:c4:8a:f2:73:41:61:b2:90:ae: 12:27:f0:69:6f:17:0c:72:0e:d2:ac:f4:85:29:83: 90:9f:93:80:7c:0c:2c:9d:51:0b:d6:0d:b4:d0:1d: d9:96:46:1c:2d:21:54:c2:5b:34:f8:e4:f0:9c:fd: e1:b8:23:18:c1:94:7b:ad:36:00:9f:d9:82:d6:0c: 7e:40:99:1f:12:e5:8f:ac:89:59:d6:f9:75:b2:0e: 23:92:04:8e:b2:92:2f:e0:8c:28:e2:4b:37:3e:5e: e9:53:70:5e:e2:55:43:35:bd:18:15:32:da:9c:20: f3:48:c0:12:9b:26:f4:c7:f6:9d:80:4c:99:6a:1c: c5:0e:42:4a:4f:e5:98:82:01:69:5c:ea:f4:17:c6: 02:1a:84:96:ec:01:31:8a:44:32:19:6b:fe:00:a6: f1:df:4a:1e:ee:0f:fc:db:b8:17:51:e3:af:81:87: 74:09:62:ec:63:50:2a:6e:ea:87:10:54:ac:5b:49: 0b:2d:78:62:b1:46:58:7e:c8:e3:f9:bb:7b:41:d6: f7:d7:38:85:fb:bf:f8:3a:2c:f2:13:68:1c:b6:e3: 58:58:f4:a1:94:27:e7:01:b7:1c:3f:29:02:f3:bd: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:D8:08:7E:89:C4:34:0A:10:05:A6:91:B2:44:0D:92:2B:6A:3F X509v3 Authority Key Identifier: keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a8:10:63:c5:b3:97:0f:01:cb:d8:8f:13:b0:0d:aa:da:26: 04:67:9c:db:45:cd:1d:7f:05:65:cf:6b:e5:d1:25:53:d5:7f: 0b:a8:5b:81:05:2c:34:51:1e:b2:55:3d:9a:9a:62:45:68:bf: a6:34:55:62:5d:6c:39:7a:23:c7:5f:88:5c:85:71:d0:0e:af: 09:eb:36:d0:09:47:61:25:cf:ff:31:81:23:0d:60:47:a6:65: ea:7e:59:20:c6:75:58:82:63:b4:94:c5:d9:26:b1:08:f1:37: 31:c8:3f:3c:1c:b0:45:56:08:8e:ea:55:20:9e:e2:dc:e6:11: d4:d6:58:25:1b:24:b9:52:47:9e:84:8b:72:b8:5c:dc:fe:f8: 58:90:aa:e8:ba:27:c5:c6:b5:ea:f1:46:02:79:6f:4f:11:30: 22:4e:3b:19:9b:6f:ce:c5:3b:1d:bf:15:5d:7a:09:e3:4e:c0: 94:20:6a:4d:6a:ba:fb:1f:40:fd:17:ce:92:f3:b4:25:9e:b3: c7:0a:9e:0e:9d:0b:49:43:7b:be:c0:34:c7:78:ec:67:46:09: cc:5e:61:4c:53:d3:a2:d1:cc:84:04:fd:7e:c0:13:3b:ee:83: 11:2a:45:27:8e:c6:9e:9f:e3:92:a4:88:72:c8:3c:33:eb:86: 82:9f:25:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqwYt2QVQjWgd9so/Q82xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmYzNzM2MjAxNDZlNmYyOThhZTgyZDJjOGE4MzcxY2Fj YjdiMWIwHhcNMjUxMjI1MDQwMTE1WhcNMjUxMjI2MDQwMTE1WjAzMTEwLwYDVQQD Eyg4NmQ5ZDgwODdlODljNDM0MGExMDA1YTY5MWIyNDQwZDkyMmI2YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwlwMEND4eZQDhKfSS1u+FamV5DE ivJzQWGykK4SJ/BpbxcMcg7SrPSFKYOQn5OAfAwsnVEL1g200B3ZlkYcLSFUwls0 +OTwnP3huCMYwZR7rTYAn9mC1gx+QJkfEuWPrIlZ1vl1sg4jkgSOspIv4Iwo4ks3 Pl7pU3Be4lVDNb0YFTLanCDzSMASmyb0x/adgEyZahzFDkJKT+WYggFpXOr0F8YC GoSW7AExikQyGWv+AKbx30oe7g/827gXUeOvgYd0CWLsY1AqbuqHEFSsW0kLLXhi sUZYfsjj+bt7Qdb31ziF+7/4OizyE2gctuNYWPShlCfnAbccPykC871iLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbZ2Ah+icQ0ChAFppGyRA2SK2o/MB8GA1UdIwQY MBaAFGC/NzYgFG5vKYroLSyKg3HKy3sbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTIt ZjBhODEyM2U3MGY5LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kZWNkZTMtMjc3YS00OTU2LWJmOTItZjBhODEyM2U3MGY5 LzEvWUw4M05pQVVibThwaXVndExJcURjY3JMZXhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6gQY8Wz lw8By9iPE7ANqtomBGec20XNHX8FZc9r5dElU9V/C6hbgQUsNFEeslU9mppiRWi/ pjRVYl1sOXojx1+IXIVx0A6vCes20AlHYSXP/zGBIw1gR6Zl6n5ZIMZ1WIJjtJTF 2SaxCPE3Mcg/PBywRVYIjupVIJ7i3OYR1NZYJRskuVJHnoSLcrhc3P74WJCq6Lon xca16vFGAnlvTxEwIk47GZtvzsU7Hb8VXXoJ407AlCBqTWq6+x9A/RfOkvO0JZ6z xwqeDp0LSUN7vsA0x3jsZ0YJzF5hTFPTotHMhAT9fsATO+6DESpFJ47Gnp/jkqSI csg8M+uGgp8l5Q== -----END CERTIFICATE-----Generated at Thu Dec 25 12:48:10 2025 by rpki-client