This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json) Hash identifier: Q23+KAgAVS+WB7Sa7V349WIFuaFu1+s0w0ejuSosoSY= Subject key identifier: FA:94:CC:CC:AB:9F:4B:5D:FD:4B:4C:67:D7:D8:C8:37:CA:F3:78:29 Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52 Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52 Certificate serial: 019B3CB4D2EBA5D44E2F7329C977B13847A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft Manifest number: 026D Signing time: Sat 20 Dec 2025 17:00:41 +0000 Manifest this update: Sat 20 Dec 2025 17:00:41 +0000 Manifest next update: Sun 21 Dec 2025 17:00:41 +0000 Files and hashes: 1: WJ8mDGp2R9SerzYw88vehn3HSik.roa (hash: h5SXKLsi4QXI6eIjbslnIuS0eoxKGY5pZRrkhG82mKM=) 2: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: 4kDUoSpu9+KFAcqtPPqoHIh+4D7Ol8asA6cv0//Abjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d2:eb:a5:d4:4e:2f:73:29:c9:77:b1:38:47:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52 Validity Not Before: Dec 20 17:00:41 2025 GMT Not After : Dec 21 17:00:41 2025 GMT Subject: CN=fa94ccccab9f4b5dfd4b4c67d7d8c837caf37829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:d7:07:c7:4d:77:bb:1e:f6:26:90:92:b6: 4a:5d:5f:c6:1b:fc:8a:7f:81:fa:61:df:9d:1d:c6: 25:90:f2:4b:aa:ec:ab:c3:2b:25:d2:8f:6f:28:ff: 73:e2:d4:6c:7b:07:aa:03:5d:97:85:43:7a:97:58: 4f:58:e9:39:1b:3f:cc:f3:ef:9b:b6:c5:04:ef:08: dc:5d:83:e0:99:64:c5:1c:23:2f:46:d8:a8:78:c7: 06:d1:37:a3:67:db:10:a1:51:2e:06:6d:de:69:96: c3:81:2d:01:d2:7c:2e:60:4d:d4:a2:45:ef:d3:d1: a3:3b:34:b9:81:96:81:c4:9c:4e:1e:75:52:4b:26: 00:f1:5a:aa:69:60:e8:85:e9:fa:e7:e1:f0:b2:a0: 31:bb:20:8b:07:77:bf:e3:25:80:16:bb:e7:f5:d9: 64:f3:f3:ca:62:2f:81:d7:e0:5d:f7:ff:16:a9:19: 7c:27:78:1a:00:34:b5:d0:60:2e:98:ed:a0:bd:a3: 30:3f:be:e4:dd:08:60:cf:8f:c4:42:25:87:45:af: 30:73:65:77:e7:36:42:35:38:96:3f:b9:a4:97:8e: e4:8f:89:cd:7a:66:30:11:d4:c1:c0:55:b4:e7:e6: 01:60:9e:98:5b:4c:c2:20:f2:05:ff:3e:20:84:3a: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:94:CC:CC:AB:9F:4B:5D:FD:4B:4C:67:D7:D8:C8:37:CA:F3:78:29 X509v3 Authority Key Identifier: keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:09:a9:3c:26:26:1d:6a:f3:56:99:65:b8:be:88:a3:41:38: d8:37:5b:73:a5:2b:9a:d9:6b:c3:66:11:e6:91:0f:b7:53:fa: 98:9c:d2:35:31:e4:e2:d1:60:78:d8:02:25:09:e1:05:55:9f: 2a:ca:f6:ae:2b:2e:d1:f0:39:93:ab:b0:9c:58:47:45:f7:3f: 48:e4:71:e7:34:9f:c3:b9:98:43:29:e8:35:34:06:82:17:0d: 11:ed:19:3f:33:cc:d3:0c:25:5a:79:eb:c6:23:4e:e2:29:4c: 23:2e:d6:50:4b:63:89:b8:fe:6d:00:60:2a:75:57:fb:d3:4e: b6:63:f6:47:86:fa:36:87:1d:99:ba:9a:6d:e7:29:75:43:44: 7a:ce:7a:5d:69:67:da:fd:ab:c9:62:67:1a:72:e1:c2:22:04: 89:a0:b9:53:3e:ac:10:7d:7a:28:0c:81:90:0d:eb:da:32:60: 57:8f:63:49:05:6a:23:52:e4:46:6d:6e:29:81:5c:93:cd:bc: c1:7b:1f:1c:4d:73:3b:7f:ac:62:4d:c8:fc:22:ac:25:be:2d: 47:ad:94:2a:e3:68:3b:9e:92:2f:d8:59:8d:36:db:9a:46:c2: 0c:bb:dd:85:a7:81:47:bc:09:49:0d:70:e1:c4:0a:73:97:1d: 3c:a6:fc:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNLrpdROL3MpyXexOEenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWY0YTE3YjhlZmY0NWJhMGIzOWQ0NzQ5NjU1N2UzODhm ZmZlNTIwHhcNMjUxMjIwMTcwMDQxWhcNMjUxMjIxMTcwMDQxWjAzMTEwLwYDVQQD EyhmYTk0Y2NjY2FiOWY0YjVkZmQ0YjRjNjdkN2Q4YzgzN2NhZjM3ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrXXB8dNd7se9iaQkrZKXV/GG/yK f4H6Yd+dHcYlkPJLquyrwysl0o9vKP9z4tRseweqA12XhUN6l1hPWOk5Gz/M8++b tsUE7wjcXYPgmWTFHCMvRtioeMcG0TejZ9sQoVEuBm3eaZbDgS0B0nwuYE3UokXv 09GjOzS5gZaBxJxOHnVSSyYA8VqqaWDohen65+HwsqAxuyCLB3e/4yWAFrvn9dlk 8/PKYi+B1+Bd9/8WqRl8J3gaADS10GAumO2gvaMwP77k3Qhgz4/EQiWHRa8wc2V3 5zZCNTiWP7mkl47kj4nNemYwEdTBwFW05+YBYJ6YW0zCIPIF/z4ghDrk7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqUzMyrn0td/UtMZ9fYyDfK83gpMB8GA1UdIwQY MBaAFGDvShe47/RboLOdR0llV+OI//5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU85S0Y3anY5RnVnczUxSFNXVlg0NGpfX2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81N2ZhZWUtNjhiMi00NjkzLTgxMzAt Y2U0MzRhNDAyNjE3LzEvWU85S0Y3anY5RnVnczUxSFNXVlg0NGpfX2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81N2ZhZWUtNjhiMi00NjkzLTgxMzAtY2U0MzRhNDAyNjE3 LzEvWU85S0Y3anY5RnVnczUxSFNXVlg0NGpfX2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgmpPCYm HWrzVplluL6Io0E42Ddbc6Urmtlrw2YR5pEPt1P6mJzSNTHk4tFgeNgCJQnhBVWf Ksr2risu0fA5k6uwnFhHRfc/SORx5zSfw7mYQynoNTQGghcNEe0ZPzPM0wwlWnnr xiNO4ilMIy7WUEtjibj+bQBgKnVX+9NOtmP2R4b6NocdmbqabecpdUNEes56XWln 2v2ryWJnGnLhwiIEiaC5Uz6sEH16KAyBkA3r2jJgV49jSQVqI1LkRm1uKYFck828 wXsfHE1zO3+sYk3I/CKsJb4tR62UKuNoO56SL9hZjTbbmkbCDLvdhaeBR7wJSQ1w 4cQKc5cdPKb8Yw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:40:15 2025 by rpki-client