This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json) Hash identifier: WuoGiqsRYfjcXFfZjnw4a6dm81kmY/Bv5olYPLWhxB8= Subject key identifier: 89:F8:74:C2:E2:26:E9:2D:89:9A:B0:E7:F7:9F:34:4B:AA:27:0D:A7 Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5 Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5 Certificate serial: 019B43CA093925FDBE9B12B96D52E92806F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft Manifest number: 1420 Signing time: Mon 22 Dec 2025 02:01:12 +0000 Manifest this update: Mon 22 Dec 2025 02:01:12 +0000 Manifest next update: Tue 23 Dec 2025 02:01:12 +0000 Files and hashes: 1: SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa (hash: FllvrAA0IFuRu04U/PVVcunONsM/J0wPDkjc5E97TCo=) 2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: T5zXE11WWjHkD5OBcd/oI8o9bHD/BHX+lvyCJjGiZqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:09:39:25:fd:be:9b:12:b9:6d:52:e9:28:06:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5 Validity Not Before: Dec 22 02:01:12 2025 GMT Not After : Dec 23 02:01:12 2025 GMT Subject: CN=89f874c2e226e92d899ab0e7f79f344baa270da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:ef:18:91:ba:e0:bc:5b:c4:ea:87:eb:ce: fd:ea:10:37:1a:81:18:ce:3d:32:1b:4d:b5:4e:8a: 63:3b:87:4c:75:4c:81:88:7a:0d:9c:bd:08:38:aa: f9:04:03:0f:51:1a:e6:97:1a:59:15:fa:88:5d:53: 2f:68:32:57:c1:8e:20:b1:be:de:76:47:d5:23:4f: 1a:67:d7:3e:5f:e9:29:e1:b8:67:ba:9a:a1:cf:69: 5a:5e:41:be:6d:73:21:af:c9:16:c1:5c:83:b4:33: 32:78:3f:c7:27:35:7b:86:84:33:63:fd:28:2e:06: b1:62:75:4b:69:73:09:9a:77:fc:5b:ff:a9:85:94: 37:c7:b8:b7:9f:17:67:07:2b:fd:3b:88:90:42:9d: ee:89:55:f4:08:5c:e9:6b:d0:b8:14:a9:ae:21:bd: 2c:e2:4c:94:ab:cf:f4:78:21:13:29:b7:09:72:a5: 43:91:f5:01:0f:67:9b:bd:31:e5:e6:10:1e:5f:4e: b0:95:89:38:73:ee:dd:da:cd:34:0a:80:58:ce:0c: 96:a8:6b:c6:ba:91:20:08:bd:9f:aa:94:6c:0a:6d: 61:39:de:bb:3f:39:55:0c:a5:50:cc:ba:1a:3e:c4: cf:67:41:87:ab:bb:e1:6d:46:53:9b:42:e5:5b:f9: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F8:74:C2:E2:26:E9:2D:89:9A:B0:E7:F7:9F:34:4B:AA:27:0D:A7 X509v3 Authority Key Identifier: keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9a:9a:f5:76:9f:c4:03:c3:4c:c7:a5:71:ad:29:a5:97:70: 49:7f:fb:dc:a9:10:81:a7:65:13:f4:fc:0c:36:57:71:df:b4: 3b:0d:75:3a:15:41:f0:84:96:6f:51:a6:ec:ee:81:cf:53:dd: e4:cd:07:4b:2a:24:f2:e2:35:6a:24:32:e1:a1:7b:50:e5:66: 13:7f:74:b4:aa:89:b4:eb:2c:c8:76:da:3b:aa:65:fa:72:74: 6b:6b:f2:85:9e:d5:1f:ee:02:a2:05:3c:1e:04:fe:4d:61:dc: b1:ce:fe:81:97:4e:bb:aa:6f:4d:36:31:db:71:5e:e1:9e:18: 0d:b5:25:18:72:d4:8e:84:fc:e3:fb:fa:8a:e3:b0:d4:44:f5: 99:57:a1:54:3f:9b:6f:ae:25:aa:a6:1a:b1:28:73:28:49:36: 26:5e:23:1d:fb:d0:b9:86:4a:c9:98:bf:bf:eb:22:7b:3a:4c: 47:f5:c1:99:72:b4:b4:2f:cb:49:4e:20:cf:90:51:41:b8:81: d5:72:48:95:5e:1d:0d:1f:04:d4:2b:47:f7:ff:3b:e4:9f:bf: 22:45:22:0b:03:78:a9:79:ce:e0:ce:32:b4:a1:0c:04:5d:d6: 0f:b7:0b:a6:a0:69:7c:47:87:e9:ef:13:d8:7a:32:bf:7c:f7: fb:ef:b3:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDygk5Jf2+mxK5bVLpKAbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWIzYzViNjlhZjVjMjE4ZGQ0YWY3NjRjOTQzNjZjNjQ2 ZjgzYTUwHhcNMjUxMjIyMDIwMTEyWhcNMjUxMjIzMDIwMTEyWjAzMTEwLwYDVQQD Eyg4OWY4NzRjMmUyMjZlOTJkODk5YWIwZTdmNzlmMzQ0YmFhMjcwZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BDvGJG64LxbxOqH68796hA3GoEY zj0yG021TopjO4dMdUyBiHoNnL0IOKr5BAMPURrmlxpZFfqIXVMvaDJXwY4gsb7e dkfVI08aZ9c+X+kp4bhnupqhz2laXkG+bXMhr8kWwVyDtDMyeD/HJzV7hoQzY/0o LgaxYnVLaXMJmnf8W/+phZQ3x7i3nxdnByv9O4iQQp3uiVX0CFzpa9C4FKmuIb0s 4kyUq8/0eCETKbcJcqVDkfUBD2ebvTHl5hAeX06wlYk4c+7d2s00CoBYzgyWqGvG upEgCL2fqpRsCm1hOd67PzlVDKVQzLoaPsTPZ0GHq7vhbUZTm0LlW/kStwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn4dMLiJuktiZqw5/efNEuqJw2nMB8GA1UdIwQY MBaAFMirPFtpr1whjdSvdkyUNmxkb4OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAt MTE4NDU0Y2NkNDEyLzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAtMTE4NDU0Y2NkNDEy LzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5qa9Xaf xAPDTMelca0ppZdwSX/73KkQgadlE/T8DDZXcd+0Ow11OhVB8ISWb1Gm7O6Bz1Pd 5M0HSyok8uI1aiQy4aF7UOVmE390tKqJtOssyHbaO6pl+nJ0a2vyhZ7VH+4CogU8 HgT+TWHcsc7+gZdOu6pvTTYx23Fe4Z4YDbUlGHLUjoT84/v6iuOw1ET1mVehVD+b b64lqqYasShzKEk2Jl4jHfvQuYZKyZi/v+siezpMR/XBmXK0tC/LSU4gz5BRQbiB 1XJIlV4dDR8E1CtH9/875J+/IkUiCwN4qXnO4M4ytKEMBF3WD7cLpqBpfEeH6e8T 2Hoyv3z3+++zhQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:47:30 2025 by rpki-client