This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json) Hash identifier: OPLTM6UzTuWisyxhrEzwnshG52chRJNB2rUpCfxq5IA= Subject key identifier: 92:39:A1:9C:2D:95:DA:4F:20:70:87:A1:DB:A0:25:31:E3:FA:7C:D3 Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a Certificate serial: 019B3CEB97BD7E99F74F14A3C274F9FC71D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft Manifest number: 0934 Signing time: Sat 20 Dec 2025 18:00:31 +0000 Manifest this update: Sat 20 Dec 2025 18:00:31 +0000 Manifest next update: Sun 21 Dec 2025 18:00:31 +0000 Files and hashes: 1: 2eWTXc6MdHH3SvAeJM9n6ydZI5Y.roa (hash: XnJT5JSjqE4Adj+ylm025sl/JK+1c1iwTV7Ra2tEO8w=) 2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: 8lijzs/mAVJoYlXEC5frVqJgpEn3uR/vf/gRR1iqBMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:97:bd:7e:99:f7:4f:14:a3:c2:74:f9:fc:71:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a Validity Not Before: Dec 20 18:00:31 2025 GMT Not After : Dec 21 18:00:31 2025 GMT Subject: CN=9239a19c2d95da4f207087a1dba02531e3fa7cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:00:d8:34:b8:d7:bc:9c:a8:e8:4c:11:f8: b6:23:b5:af:1a:02:5d:8d:e4:5e:01:e4:77:06:48: 73:cf:d6:7b:51:1a:dd:a7:a9:13:9c:90:36:01:a3: 43:88:b0:c6:c5:77:44:3e:0e:af:d2:ab:c2:4a:aa: 47:03:3f:9a:7a:f2:30:58:0e:2d:9a:74:05:3f:84: b8:bd:57:4d:b4:53:a9:58:ca:8b:3f:4c:1d:64:87: ff:fb:2d:1c:3c:b9:c7:33:b5:44:23:46:88:7e:d1: 1b:ed:ff:f1:cd:ba:d8:13:09:71:55:b8:30:ab:e1: 8c:c5:6c:f8:a0:2e:5f:e3:de:ed:41:f4:97:50:7e: 49:a7:3e:0e:c8:55:af:ac:16:00:a5:13:4b:11:4d: c7:f6:4f:15:28:3f:c1:d8:5f:5a:d8:34:7e:d7:1f: 54:a9:a8:28:dc:4d:0a:1a:2e:bc:7b:0a:33:85:27: 08:b9:39:89:d8:6b:63:48:54:f3:02:05:b1:4b:6e: bf:c0:d6:8b:c2:f0:f3:11:f5:45:95:bb:ec:4d:40: 04:f2:3f:2a:97:c1:a6:7e:52:6e:fb:93:ec:da:9e: 36:b1:b2:ab:ff:4d:0a:79:82:97:1e:b3:76:48:cc: e1:1a:33:11:c2:94:de:f5:c9:d4:74:36:06:9a:7e: 3c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:39:A1:9C:2D:95:DA:4F:20:70:87:A1:DB:A0:25:31:E3:FA:7C:D3 X509v3 Authority Key Identifier: keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:78:05:36:b8:e4:92:ca:ad:2a:ed:9b:58:eb:d9:6d:17:c1: 4e:f0:2f:57:d4:b7:88:88:de:59:79:a9:8b:d3:fe:9b:06:cc: a8:f4:67:81:17:bf:24:70:b5:59:58:9e:b7:db:6d:97:29:5d: 8f:7c:5f:1d:3b:5d:96:7d:61:9b:0f:b2:6c:75:1f:f6:94:c4: cf:17:ba:60:af:69:d7:4e:f2:99:c9:95:4c:48:ab:42:0d:ee: b9:39:b0:e1:46:9e:45:1b:3f:99:e4:a4:20:3a:f8:be:9a:44: be:24:90:a0:a3:ce:7a:f1:74:7d:fa:b3:55:00:2f:32:cd:6c: 64:76:b3:c7:1d:cb:cd:87:56:3e:8e:e1:1f:7a:d7:2d:c2:b7: 46:ab:65:82:e4:63:c0:d9:55:2b:fd:36:d3:ce:ab:4c:a2:c6: 54:86:52:b5:fd:74:03:ab:55:d1:34:a8:01:04:d7:19:59:cd: 3b:d1:88:33:88:41:9d:3f:d8:75:c2:f6:c8:8c:cb:53:98:6b: 7d:c7:0a:ec:1b:68:90:f8:e3:3f:01:cd:a9:cd:49:cc:db:63: 8d:cd:71:83:1b:fe:be:53:32:c0:2c:5d:93:7d:b2:36:61:f9: d6:6a:85:6b:e5:29:d3:cd:eb:69:6c:d3:c2:80:4a:b7:03:1c: 12:ab:e1:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865e9fpn3TxSjwnT5/HHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGM1YTAwMzY4ZDhhZTFmYmE5OTU0MzFmMDNhNDEzMWFk ZDhhOWEwHhcNMjUxMjIwMTgwMDMxWhcNMjUxMjIxMTgwMDMxWjAzMTEwLwYDVQQD Eyg5MjM5YTE5YzJkOTVkYTRmMjA3MDg3YTFkYmEwMjUzMWUzZmE3Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c4A2DS417ycqOhMEfi2I7WvGgJd jeReAeR3Bkhzz9Z7URrdp6kTnJA2AaNDiLDGxXdEPg6v0qvCSqpHAz+aevIwWA4t mnQFP4S4vVdNtFOpWMqLP0wdZIf/+y0cPLnHM7VEI0aIftEb7f/xzbrYEwlxVbgw q+GMxWz4oC5f497tQfSXUH5Jpz4OyFWvrBYApRNLEU3H9k8VKD/B2F9a2DR+1x9U qago3E0KGi68ewozhScIuTmJ2GtjSFTzAgWxS26/wNaLwvDzEfVFlbvsTUAE8j8q l8GmflJu+5Ps2p42sbKr/00KeYKXHrN2SMzhGjMRwpTe9cnUdDYGmn48SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI5oZwtldpPIHCHodugJTHj+nzTMB8GA1UdIwQY MBaAFGDcWgA2jYrh+6mVQx8DpBMa3YqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYt ZWJiMzk4MmMyZWIwLzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80M2Q2M2EtYTkzNi00NTkzLTg4MjYtZWJiMzk4MmMyZWIw LzEvWU54YUFEYU5pdUg3cVpWREh3T2tFeHJkaXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEngFNrjk ksqtKu2bWOvZbRfBTvAvV9S3iIjeWXmpi9P+mwbMqPRngRe/JHC1WViet9ttlyld j3xfHTtdln1hmw+ybHUf9pTEzxe6YK9p107ymcmVTEirQg3uuTmw4UaeRRs/meSk IDr4vppEviSQoKPOevF0ffqzVQAvMs1sZHazxx3LzYdWPo7hH3rXLcK3RqtlguRj wNlVK/02086rTKLGVIZStf10A6tV0TSoAQTXGVnNO9GIM4hBnT/YdcL2yIzLU5hr fccK7BtokPjjPwHNqc1JzNtjjc1xgxv+vlMywCxdk32yNmH51mqFa+Up083raWzT woBKtwMcEqvhJw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:53 2025 by rpki-client