This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft File: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json) Hash identifier: 6pvHem4CsxwnjeelIPgz1xow4so3/aq7eOocDK+Gxcc= Subject key identifier: E8:1C:63:4A:34:04:F1:F7:E2:2A:A4:50:82:56:97:63:24:8C:BD:6E Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c Certificate serial: 019B3C7FD25607C08C977AE45FDACCE519C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft Manifest number: 17A6 Signing time: Sat 20 Dec 2025 16:02:48 +0000 Manifest this update: Sat 20 Dec 2025 16:02:48 +0000 Manifest next update: Sun 21 Dec 2025 16:02:48 +0000 Files and hashes: 1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=) 2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: qB9FBK+r1fM1kD21dliU5vFWZAHYS3LtXMkbDLZBL/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:d2:56:07:c0:8c:97:7a:e4:5f:da:cc:e5:19:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c Validity Not Before: Dec 20 16:02:48 2025 GMT Not After : Dec 21 16:02:48 2025 GMT Subject: CN=e81c634a3404f1f7e22aa45082569763248cbd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:a3:09:a2:10:a5:b8:8d:5f:5e:c2:ef:84: 9d:d2:eb:6a:8a:98:44:6a:a0:7b:7f:f4:40:09:63: 44:8d:05:17:1a:b0:71:cc:4c:e0:2e:50:3a:9c:50: 3b:6a:30:65:20:be:68:3f:e4:14:f8:3a:e2:42:e8: 4e:ec:91:e8:00:eb:af:6c:06:3a:09:25:0e:23:93: 7f:74:69:2e:6d:10:b4:bc:ce:ed:ee:e1:66:89:56: a4:4c:a7:31:85:c8:d7:ea:20:c0:9f:b3:56:0b:15: 94:0d:5b:b7:0d:d4:53:21:06:9c:1d:c7:18:f8:d7: d3:e9:e9:9a:21:62:e0:6a:34:89:4a:ee:e8:0e:8b: 3c:2a:9e:a2:8d:d6:7d:a9:04:bd:22:5c:6e:d1:c7: 6b:88:9a:53:c6:49:17:89:e5:d7:3e:e0:54:30:3f: 73:13:db:fb:30:a3:c5:9e:99:4e:cf:04:f7:76:05: 28:83:bc:cc:ca:1b:13:9a:4b:db:e7:2a:a9:6a:ce: 35:c5:ab:7d:70:54:4a:cf:50:6b:80:4a:ff:58:fe: 11:94:f8:1a:36:62:f1:8e:e7:82:d9:e9:6c:9a:01: dd:27:e6:27:1d:30:57:7a:1a:80:9b:99:22:06:ad: cf:dd:69:44:9e:51:9c:35:4e:d2:b2:0d:be:26:b3: 0c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:63:4A:34:04:F1:F7:E2:2A:A4:50:82:56:97:63:24:8C:BD:6E X509v3 Authority Key Identifier: keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2b:7c:25:16:40:e7:4c:5c:f1:1e:ea:ec:2b:17:5f:0c:db: b0:d5:5f:8e:3a:b4:74:30:36:87:fb:68:b3:da:3e:49:c5:76: cf:4a:fa:38:21:97:89:b3:30:f7:ea:56:15:3b:4d:44:b3:8b: af:fa:b4:d1:95:37:25:46:bd:06:08:03:e4:cd:df:8e:5b:b4: c7:3b:fd:0f:d5:6a:e6:3b:d9:52:88:40:82:8c:f1:ae:6b:0c: 97:3a:e5:65:2f:31:90:ee:c2:7f:cf:03:3b:19:7f:4f:9d:af: fe:14:a4:d3:8d:22:71:cf:34:71:a1:a4:c1:63:50:54:cb:0d: a1:14:57:40:13:61:ab:39:33:1f:2f:3f:af:96:2a:d8:6b:6c: 71:43:ba:ba:ca:76:12:d8:d1:56:42:f7:27:64:bb:88:ce:df: e0:11:39:e1:15:7b:d9:87:11:c9:43:24:9f:39:c0:21:0d:79: 3d:5f:7a:86:67:e3:f6:2b:24:2a:e4:33:8c:1a:bd:0b:3e:3b: 9c:cd:58:1a:c2:ce:5c:86:67:43:27:b3:f9:84:b5:b6:15:a3: ad:3b:53:3f:dc:85:02:12:2e:c4:98:7d:0e:10:c0:b6:b3:95: 25:9c:c3:65:a0:3d:c5:e2:44:b9:5f:01:c0:a0:54:b0:d8:3a: e6:f6:cf:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9JWB8CMl3rkX9rM5RnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjQzMThjMWFhYTdjYTA2MDMxNTVhODgzZDQzOTI2ZWY5 N2U4N2MwHhcNMjUxMjIwMTYwMjQ4WhcNMjUxMjIxMTYwMjQ4WjAzMTEwLwYDVQQD EyhlODFjNjM0YTM0MDRmMWY3ZTIyYWE0NTA4MjU2OTc2MzI0OGNiZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiqjCaIQpbiNX17C74Sd0utqiphE aqB7f/RACWNEjQUXGrBxzEzgLlA6nFA7ajBlIL5oP+QU+DriQuhO7JHoAOuvbAY6 CSUOI5N/dGkubRC0vM7t7uFmiVakTKcxhcjX6iDAn7NWCxWUDVu3DdRTIQacHccY +NfT6emaIWLgajSJSu7oDos8Kp6ijdZ9qQS9Ilxu0cdriJpTxkkXieXXPuBUMD9z E9v7MKPFnplOzwT3dgUog7zMyhsTmkvb5yqpas41xat9cFRKz1BrgEr/WP4RlPga NmLxjueC2elsmgHdJ+YnHTBXehqAm5kiBq3P3WlEnlGcNU7Ssg2+JrMMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgcY0o0BPH34iqkUIJWl2MkjL1uMB8GA1UdIwQY MBaAFGJkMYwaqnygYDFVqIPUOSbvl+h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEt YjkxYTI3MDU1MjA0LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEtYjkxYTI3MDU1MjA0 LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyt8JRZA 50xc8R7q7CsXXwzbsNVfjjq0dDA2h/tos9o+ScV2z0r6OCGXibMw9+pWFTtNRLOL r/q00ZU3JUa9BggD5M3fjlu0xzv9D9Vq5jvZUohAgozxrmsMlzrlZS8xkO7Cf88D Oxl/T52v/hSk040icc80caGkwWNQVMsNoRRXQBNhqzkzHy8/r5Yq2GtscUO6usp2 EtjRVkL3J2S7iM7f4BE54RV72YcRyUMknznAIQ15PV96hmfj9iskKuQzjBq9Cz47 nM1YGsLOXIZnQyez+YS1thWjrTtTP9yFAhIuxJh9DhDAtrOVJZzDZaA9xeJEuV8B wKBUsNg65vbP6g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:41:10 2025 by rpki-client