This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json) Hash identifier: lrHbh5RlBItnhwmX/1JGMWkcuKow2n4Q4jxNCRBuGSc= Subject key identifier: 3D:16:33:86:E0:F6:2F:85:D2:53:C3:84:84:AF:AC:7F:C6:55:7F:B9 Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Certificate serial: 019B390FED6F9069DF47C4FA5C9440685E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft Manifest number: 1359 Signing time: Sat 20 Dec 2025 00:01:43 +0000 Manifest this update: Sat 20 Dec 2025 00:01:43 +0000 Manifest next update: Sun 21 Dec 2025 00:01:43 +0000 Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=) 2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=) 3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=) 4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: WHJqnHg4zc8LtaVrd51vUKr874YSrehpHumtrp7VsQo=) 5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=) 6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=) 7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=) 8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:ed:6f:90:69:df:47:c4:fa:5c:94:40:68:5e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Validity Not Before: Dec 20 00:01:43 2025 GMT Not After : Dec 21 00:01:43 2025 GMT Subject: CN=3d163386e0f62f85d253c38484afac7fc6557fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:32:5f:4e:e7:55:2b:fa:83:7e:7e:bf:a5: bd:eb:11:08:fd:60:8e:d5:c9:75:8b:3b:53:dd:c2: 51:ba:ee:21:20:7d:5d:0c:45:55:75:7f:52:bc:87: cd:8f:63:8b:51:9e:cf:09:43:a2:c1:2e:80:58:85: 40:af:df:ee:45:c7:59:b6:25:cb:79:ef:4c:0b:4f: 01:da:e3:46:ab:50:01:e1:7f:bc:4e:61:c1:2e:7b: f4:35:e8:cd:66:71:94:5f:ab:c9:4e:b5:eb:8f:da: 51:41:c3:90:cd:1f:e1:e0:c9:6e:da:7e:ea:23:4d: 77:f9:b3:cc:91:82:a9:33:73:42:6a:6f:31:40:e0: f9:7b:b6:ba:f5:23:55:05:71:e1:1c:ea:c2:47:8c: 10:a3:d1:39:e7:9a:83:6b:7e:f1:0d:15:fc:64:c1: ef:a4:90:ed:58:27:9a:d3:62:38:21:bf:7d:6f:77: 81:34:51:e4:6c:5c:5b:2e:30:ef:4b:72:0e:db:67: 4d:74:9f:d3:c0:e2:ad:c5:27:86:32:cc:9a:99:ed: 12:bf:19:87:1a:21:d3:03:d8:5e:f1:0f:4e:6f:16: 7c:a8:6e:52:db:63:b9:b0:ed:56:13:47:b1:63:8d: e8:1c:50:61:69:32:aa:39:90:61:a4:c0:1d:86:2c: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:33:86:E0:F6:2F:85:D2:53:C3:84:84:AF:AC:7F:C6:55:7F:B9 X509v3 Authority Key Identifier: keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f4:1b:a4:de:fa:f5:f8:9d:65:d9:e5:e8:b5:60:db:af:cc: 98:6a:14:90:7f:cd:74:59:ea:c2:44:d6:a6:55:cc:54:90:a3: ad:00:2f:cc:17:db:80:37:48:51:8f:a4:e5:07:c6:31:41:cd: 42:ac:a9:ff:35:a9:d9:7d:6b:3d:89:23:70:dd:7b:77:70:e6: 98:5a:83:25:14:40:f5:cc:c8:fc:65:de:59:ca:04:9a:cb:4b: 6a:7a:de:d9:87:c1:e8:77:0a:c7:28:69:97:36:ec:ec:38:4f: f5:c7:94:b7:3f:a2:3f:fc:6f:90:c8:ae:ff:d9:d8:ea:e2:5e: b9:0f:a2:f4:cc:86:b0:40:5b:2c:72:1f:37:6f:4a:5c:ce:73: 45:1a:84:68:fe:f5:ee:13:77:b1:46:67:38:9a:a2:fd:cd:4e: 02:43:60:6c:f3:1d:d3:64:3e:be:84:bc:72:20:c5:cc:50:c4: 50:06:f2:0b:09:4b:6b:99:92:ac:cc:4e:87:3b:7a:f6:75:21: 9b:53:6b:29:44:17:05:41:ff:06:64:65:fd:1a:b3:5b:01:70: 07:ee:1a:69:ef:33:5a:7b:4c:71:ba:fe:bf:46:c7:4e:a6:81: db:ea:1a:f4:02:a4:b1:af:3f:2f:89:f6:df:f2:3c:f7:7f:d7: e4:d0:29:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D+1vkGnfR8T6XJRAaF6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5 YWQwNzgwHhcNMjUxMjIwMDAwMTQzWhcNMjUxMjIxMDAwMTQzWjAzMTEwLwYDVQQD EygzZDE2MzM4NmUwZjYyZjg1ZDI1M2MzODQ4NGFmYWM3ZmM2NTU3ZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFsyX07nVSv6g35+v6W96xEI/WCO 1cl1iztT3cJRuu4hIH1dDEVVdX9SvIfNj2OLUZ7PCUOiwS6AWIVAr9/uRcdZtiXL ee9MC08B2uNGq1AB4X+8TmHBLnv0NejNZnGUX6vJTrXrj9pRQcOQzR/h4Mlu2n7q I013+bPMkYKpM3NCam8xQOD5e7a69SNVBXHhHOrCR4wQo9E555qDa37xDRX8ZMHv pJDtWCea02I4Ib99b3eBNFHkbFxbLjDvS3IO22dNdJ/TwOKtxSeGMsyame0SvxmH GiHTA9he8Q9ObxZ8qG5S22O5sO1WE0exY43oHFBhaTKqOZBhpMAdhixLfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0WM4bg9i+F0lPDhISvrH/GVX+5MB8GA1UdIwQY MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt ODdkM2IwMjNkOTE5LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5 LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvQbpN76 9fidZdnl6LVg26/MmGoUkH/NdFnqwkTWplXMVJCjrQAvzBfbgDdIUY+k5QfGMUHN Qqyp/zWp2X1rPYkjcN17d3DmmFqDJRRA9czI/GXeWcoEmstLanre2YfB6HcKxyhp lzbs7DhP9ceUtz+iP/xvkMiu/9nY6uJeuQ+i9MyGsEBbLHIfN29KXM5zRRqEaP71 7hN3sUZnOJqi/c1OAkNgbPMd02Q+voS8ciDFzFDEUAbyCwlLa5mSrMxOhzt69nUh m1NrKUQXBUH/BmRl/RqzWwFwB+4aae8zWntMcbr+v0bHTqaB2+oa9AKksa8/L4n2 3/I893/X5NApBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:51 2025 by rpki-client