This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json) Hash identifier: JkhTzdwNiuZUtjoXC5sYtrmM6m+1uOePSDgxFpa63ls= Subject key identifier: E7:A8:B4:B7:2A:5D:F3:FC:4A:69:A4:18:21:AA:F5:04:AF:B1:16:31 Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Certificate serial: 019B3EDA8E98A6C71572E30E8F8D1B40F4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft Manifest number: 0F80 Signing time: Sun 21 Dec 2025 03:01:09 +0000 Manifest this update: Sun 21 Dec 2025 03:01:09 +0000 Manifest next update: Mon 22 Dec 2025 03:01:09 +0000 Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=) 2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: rWlzj0+SoHYJ7o1IOjK+FwnQAh87Spn3FGiT048mlOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:8e:98:a6:c7:15:72:e3:0e:8f:8d:1b:40:f4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Validity Not Before: Dec 21 03:01:09 2025 GMT Not After : Dec 22 03:01:09 2025 GMT Subject: CN=e7a8b4b72a5df3fc4a69a41821aaf504afb11631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:e9:27:51:21:58:0f:0c:62:b0:a6:1b:a1: a3:d6:46:df:f1:ca:12:52:14:06:71:56:86:ac:87: 86:7d:7a:2d:bd:88:a8:4c:76:ea:21:01:11:41:c6: d8:46:66:1f:06:55:d5:94:a4:75:39:1c:59:6f:10: 13:53:9f:23:5d:c1:f6:5a:13:f2:61:79:bf:55:ba: 98:f6:29:14:a7:ae:46:5d:12:26:7a:d0:1f:89:28: 6a:a2:89:97:59:27:2d:a3:cb:91:7d:f2:3d:fb:e5: fe:c2:59:61:d4:c8:a0:4c:45:4c:79:bd:a2:10:62: 92:82:27:87:aa:07:82:cc:27:fb:1e:36:84:52:6a: ad:8e:44:26:4d:25:b5:b8:6f:84:a5:89:e1:8d:72: db:9c:b4:d7:eb:00:7b:a3:f3:d7:86:95:e9:ef:f8: 6e:e3:51:93:cf:4a:24:04:e5:e9:fb:d2:84:fd:2e: 03:5b:65:f8:4d:b7:f8:0d:28:1d:fe:cb:6e:08:2c: d7:7a:5a:ff:c3:7a:73:ce:d8:8f:2b:57:52:13:ac: 60:c2:09:a3:0d:c9:33:c6:d2:34:7c:06:8c:32:95: e0:a8:53:d1:86:b5:02:8f:f8:55:6b:96:39:07:61: 08:cb:f3:a1:c0:21:cc:af:2e:28:8b:64:bb:43:d2: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A8:B4:B7:2A:5D:F3:FC:4A:69:A4:18:21:AA:F5:04:AF:B1:16:31 X509v3 Authority Key Identifier: keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:76:d7:df:60:f1:33:33:c0:3e:d8:bf:5d:35:8a:78:e7:dd: a0:44:b5:2b:27:c8:5c:35:15:10:6f:36:4a:ec:5e:e4:14:17: 15:54:0e:94:d2:c3:3e:e2:cc:9e:b9:f9:22:33:93:37:37:22: 0a:2b:be:e4:98:88:77:24:fb:9d:1b:55:32:b7:7c:07:7b:ef: e2:5d:3a:5f:b7:41:68:40:1d:5c:95:f0:72:05:9a:49:98:4b: 39:36:63:6d:6a:bd:26:12:76:bb:ca:97:a7:03:75:b6:eb:9a: 1a:d1:df:2f:a2:30:0e:4d:60:d1:88:5c:ce:eb:15:cb:12:e1: 1e:c9:e2:e8:ea:0a:92:66:21:06:76:2d:e3:49:c4:d9:d6:c0: 60:14:b0:03:1a:ae:6e:a0:99:67:6e:8a:67:e8:e7:bb:dc:dc: a1:c5:5d:b4:ce:5d:4d:a4:5f:4c:01:98:80:12:74:8b:89:f2: 30:91:d6:43:89:b5:19:ef:6d:d1:84:11:6c:8e:9e:70:63:94: 70:ba:56:40:5e:96:d1:b2:5a:80:b7:dc:81:f3:86:6f:46:82: f0:14:57:4b:a7:06:71:cf:8c:0a:e6:63:79:e1:f5:d9:3d:09: ab:68:7b:e3:26:5f:79:a8:ab:66:6f:cd:ec:d4:02:94:17:02: e9:1b:42:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2o6YpscVcuMOj40bQPTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz MmJjNDQwHhcNMjUxMjIxMDMwMTA5WhcNMjUxMjIyMDMwMTA5WjAzMTEwLwYDVQQD EyhlN2E4YjRiNzJhNWRmM2ZjNGE2OWE0MTgyMWFhZjUwNGFmYjExNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAzpJ1EhWA8MYrCmG6Gj1kbf8coS UhQGcVaGrIeGfXotvYioTHbqIQERQcbYRmYfBlXVlKR1ORxZbxATU58jXcH2WhPy YXm/VbqY9ikUp65GXRImetAfiShqoomXWScto8uRffI9++X+wllh1MigTEVMeb2i EGKSgieHqgeCzCf7HjaEUmqtjkQmTSW1uG+EpYnhjXLbnLTX6wB7o/PXhpXp7/hu 41GTz0okBOXp+9KE/S4DW2X4Tbf4DSgd/stuCCzXelr/w3pzztiPK1dSE6xgwgmj DckzxtI0fAaMMpXgqFPRhrUCj/hVa5Y5B2EIy/OhwCHMry4oi2S7Q9LOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeotLcqXfP8SmmkGCGq9QSvsRYxMB8GA1UdIwQY MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXbX32Dx MzPAPti/XTWKeOfdoES1KyfIXDUVEG82Suxe5BQXFVQOlNLDPuLMnrn5IjOTNzci Ciu+5JiIdyT7nRtVMrd8B3vv4l06X7dBaEAdXJXwcgWaSZhLOTZjbWq9JhJ2u8qX pwN1tuuaGtHfL6IwDk1g0YhczusVyxLhHsni6OoKkmYhBnYt40nE2dbAYBSwAxqu bqCZZ26KZ+jnu9zcocVdtM5dTaRfTAGYgBJ0i4nyMJHWQ4m1Ge9t0YQRbI6ecGOU cLpWQF6W0bJagLfcgfOGb0aC8BRXS6cGcc+MCuZjeeH12T0Jq2h74yZfeairZm/N 7NQClBcC6RtC7A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:09:05 2025 by rpki-client