This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft File: YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json) Hash identifier: EVj1vFcId0s8Fsfmo7dzBK4/Z0hS1pBu55L2AtTyjsU= Subject key identifier: C6:97:80:C8:9F:10:F0:CF:98:47:D6:60:DB:CF:2A:6A:3B:8C:3A:3F Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6 Certificate issuer: /CN=602f27fad92452a254b30a060ed383b13c758ed6 Certificate serial: 019B69C520A19F88045450455C75383EFD4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft Manifest number: 0A04 Signing time: Mon 29 Dec 2025 11:01:24 +0000 Manifest this update: Mon 29 Dec 2025 11:01:24 +0000 Manifest next update: Tue 30 Dec 2025 11:01:24 +0000 Files and hashes: 1: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (hash: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=) 2: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: B1rXEQkBKD71XlFY7TrScZ3aJOsLWAiusnVk8v7ruP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c5:20:a1:9f:88:04:54:50:45:5c:75:38:3e:fd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6 Validity Not Before: Dec 29 11:01:24 2025 GMT Not After : Dec 30 11:01:24 2025 GMT Subject: CN=c69780c89f10f0cf9847d660dbcf2a6a3b8c3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:48:f0:1b:e9:e1:9b:b9:4d:67:58:44:d1: 37:3f:87:c8:44:56:09:a2:6c:83:83:8a:c1:8e:c8: 3d:b7:e3:50:f2:23:6d:35:0e:4a:b6:a8:55:c8:eb: 64:7d:df:bb:dc:40:91:79:ef:a7:75:1a:34:cb:75: 93:81:fe:63:14:b3:95:bc:e3:8f:d5:44:ca:93:8b: f6:93:bd:77:d2:ce:3e:00:6e:b0:87:cf:05:e8:29: aa:aa:7e:5c:d3:b1:10:c3:8a:16:a1:18:64:e5:fa: d1:96:b3:53:2b:75:a1:54:d5:37:76:e5:52:d5:da: 0b:55:85:ae:e7:bf:d1:0f:f6:16:a0:2b:61:c0:2f: 48:0a:f0:bd:84:17:6b:44:9d:05:e4:da:0c:24:d2: 40:9a:1b:47:1b:5c:de:a9:4c:35:c2:6d:1e:83:20: b6:71:2b:27:f9:73:65:ef:f1:80:28:ba:8f:2c:a4: 2e:13:7a:15:2b:78:17:1c:06:2d:bb:fb:eb:31:05: 73:64:2e:ef:0a:e2:2d:7e:0a:1d:9b:a0:24:ee:d4: 4d:71:23:af:85:60:01:16:9b:b0:44:59:c0:a9:94: a5:84:4d:2e:d7:00:fb:b2:37:18:d1:c9:11:c8:5c: 02:75:ce:d4:74:8c:a0:5d:30:3f:fb:06:cd:4d:31: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:97:80:C8:9F:10:F0:CF:98:47:D6:60:DB:CF:2A:6A:3B:8C:3A:3F X509v3 Authority Key Identifier: keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c6:85:4f:80:8d:5d:cc:bc:77:cd:0c:fd:98:3e:22:b3:05: b8:e5:a9:d8:71:fc:81:5f:1b:17:38:8f:7e:c2:b2:11:ec:b2: c1:b6:c7:82:51:c7:19:fe:46:07:29:04:80:5b:7a:6e:98:f9: 97:b9:1c:dd:65:d9:a9:dd:0f:9a:44:0a:fd:a4:19:19:7f:4d: 30:a5:3b:8e:37:4e:79:e6:fa:c4:d0:f6:86:b0:2f:13:36:52: 0f:c6:e2:a3:e4:72:72:62:42:dc:2f:5e:46:d2:06:f9:a1:45: 53:56:c5:25:dc:8d:de:18:51:58:36:f5:8f:69:78:8b:f9:42: 1b:90:f0:60:1d:e7:40:f1:4a:a3:82:52:bc:0c:6f:30:06:4e: a5:46:5e:b1:84:8a:df:25:35:82:83:92:e6:5a:29:2a:4e:2c: b9:92:4e:fc:8f:e8:c0:e6:b8:f6:9c:03:70:0e:16:19:b0:e3: 04:a0:ff:14:41:9c:4e:83:c0:66:9c:64:d2:f7:cd:07:d6:27: aa:d9:ec:1b:03:ce:f4:26:7e:78:af:4d:12:f0:01:8d:97:8c: cb:10:78:86:cc:cb:41:c4:27:dc:79:69:19:bf:56:3e:2a:b6: 8c:d0:64:dc:d7:e2:18:3f:e5:c7:57:d8:a5:86:3e:ef:1c:d8: fd:be:ac:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxSChn4gEVFBFXHU4Pv1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMmYyN2ZhZDkyNDUyYTI1NGIzMGEwNjBlZDM4M2IxM2M3 NThlZDYwHhcNMjUxMjI5MTEwMTI0WhcNMjUxMjMwMTEwMTI0WjAzMTEwLwYDVQQD EyhjNjk3ODBjODlmMTBmMGNmOTg0N2Q2NjBkYmNmMmE2YTNiOGMzYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyJI8Bvp4Zu5TWdYRNE3P4fIRFYJ omyDg4rBjsg9t+NQ8iNtNQ5KtqhVyOtkfd+73ECRee+ndRo0y3WTgf5jFLOVvOOP 1UTKk4v2k7130s4+AG6wh88F6Cmqqn5c07EQw4oWoRhk5frRlrNTK3WhVNU3duVS 1doLVYWu57/RD/YWoCthwC9ICvC9hBdrRJ0F5NoMJNJAmhtHG1zeqUw1wm0egyC2 cSsn+XNl7/GAKLqPLKQuE3oVK3gXHAYtu/vrMQVzZC7vCuItfgodm6Ak7tRNcSOv hWABFpuwRFnAqZSlhE0u1wD7sjcY0ckRyFwCdc7UdIygXTA/+wbNTTHtnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaXgMifEPDPmEfWYNvPKmo7jDo/MB8GA1UdIwQY MBaAFGAvJ/rZJFKiVLMKBg7Tg7E8dY7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUM4bi10a2tVcUpVc3dvR0R0T0RzVHgxanRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yZjY3YjktNDkwYi00M2VmLWIwODgt NGFiMzk3MzUwMmZiLzEvWUM4bi10a2tVcUpVc3dvR0R0T0RzVHgxanRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8yZjY3YjktNDkwYi00M2VmLWIwODgtNGFiMzk3MzUwMmZi LzEvWUM4bi10a2tVcUpVc3dvR0R0T0RzVHgxanRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8aFT4CN Xcy8d80M/Zg+IrMFuOWp2HH8gV8bFziPfsKyEeyywbbHglHHGf5GBykEgFt6bpj5 l7kc3WXZqd0PmkQK/aQZGX9NMKU7jjdOeeb6xND2hrAvEzZSD8bio+RycmJC3C9e RtIG+aFFU1bFJdyN3hhRWDb1j2l4i/lCG5DwYB3nQPFKo4JSvAxvMAZOpUZesYSK 3yU1goOS5lopKk4suZJO/I/owOa49pwDcA4WGbDjBKD/FEGcToPAZpxk0vfNB9Yn qtnsGwPO9CZ+eK9NEvABjZeMyxB4hszLQcQn3HlpGb9WPiq2jNBk3NfiGD/lx1fY pYY+7xzY/b6stA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:40:56 2025 by rpki-client