This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json) Hash identifier: RcufPGQbfrRjdoopdHR5MzbzQ0WeBFH78s9UXm88fso= Subject key identifier: 4A:8B:A3:F5:49:9A:9A:46:34:2F:AD:1C:2F:1A:8B:39:21:E7:7C:4D Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Certificate serial: 019B4DDFB1F5DE30ABD7BA636897C7CBA107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft Manifest number: 0BD1 Signing time: Wed 24 Dec 2025 01:01:04 +0000 Manifest this update: Wed 24 Dec 2025 01:01:04 +0000 Manifest next update: Thu 25 Dec 2025 01:01:04 +0000 Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=) 2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: HlXRkMRCJxRxHK3AN8OFRs43t7EwOqy1ldq8F3/HWgY=) 3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=) 4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:b1:f5:de:30:ab:d7:ba:63:68:97:c7:cb:a1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Validity Not Before: Dec 24 01:01:04 2025 GMT Not After : Dec 25 01:01:04 2025 GMT Subject: CN=4a8ba3f5499a9a46342fad1c2f1a8b3921e77c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:5e:c0:90:9e:be:fb:18:1c:3d:6b:6c:4b: d0:35:de:75:b1:e2:1d:5d:66:78:ff:ed:fe:4e:51: d7:fc:a4:e2:5d:f2:58:45:89:5d:83:3e:e7:41:45: 6c:37:b3:08:49:65:62:80:4e:12:73:5a:39:b8:ff: f2:2d:a3:89:62:01:1b:31:44:86:00:e1:d5:53:ab: 89:12:89:e1:bf:64:40:66:47:08:b1:98:46:47:e7: df:cc:23:fe:ae:50:68:cf:bc:fc:82:2a:d3:cf:11: f0:32:52:cd:bf:50:b2:0d:6f:2c:bd:9d:ab:af:e4: ed:7a:e2:16:6b:a5:6f:e6:0e:29:e5:22:b7:b0:ba: 52:ca:3f:18:2e:20:f5:e4:30:81:40:ac:81:8f:01: 55:80:5f:23:08:36:87:d5:94:7d:e6:83:8b:9e:75: 87:ea:fd:23:4f:06:cd:e8:95:71:3b:8d:3c:aa:52: 40:4c:06:84:ca:7a:ea:77:2b:44:a7:1d:38:fc:a1: 41:55:4c:a5:08:34:ec:28:ea:cb:c0:50:c8:0f:65: a2:78:a4:e0:07:28:e4:e4:8f:2c:24:62:71:14:a8: 4c:24:5f:23:73:93:bb:30:ff:94:00:16:7d:dc:a4: 06:2d:63:c6:d1:b0:ca:3a:ae:2e:45:fc:29:63:95: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:A3:F5:49:9A:9A:46:34:2F:AD:1C:2F:1A:8B:39:21:E7:7C:4D X509v3 Authority Key Identifier: keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:46:f0:e6:d9:30:0e:c7:9a:e9:26:79:61:63:14:ab:e9:a9: fd:a3:1f:69:95:27:33:4a:d1:78:22:12:39:a7:f4:6b:6a:f3: 63:65:f8:3d:f8:a6:65:4b:37:2b:4f:35:ea:36:f4:03:52:9c: a3:7f:5e:e0:8b:1e:c5:05:14:db:09:12:82:d9:97:a0:96:1f: 82:ae:13:96:a3:b4:e7:98:39:7e:d2:d0:2a:d0:dd:d7:fe:62: 93:5a:3d:64:3a:b3:24:34:a6:06:01:f1:5b:d2:b6:86:f2:70: e3:e8:1e:61:79:2d:29:72:ae:e6:cc:d6:74:10:30:11:72:7d: cb:22:47:5f:53:aa:c3:0e:44:c9:78:c6:af:17:f2:3e:85:de: d1:7d:8f:4b:97:7b:9e:2c:0b:e4:25:6e:43:5f:d1:4b:dd:6e: 29:22:7a:3c:12:7e:9e:6c:f4:45:3c:94:1a:89:ba:12:58:10: 80:ed:81:bb:e1:74:88:d7:43:d2:a7:36:ea:99:6f:46:86:50: 4a:cb:6c:e7:7b:a1:06:e6:7b:db:6f:69:e1:18:56:af:5e:24: 5c:d0:1c:ee:74:90:0f:0b:3e:2f:6e:6e:5d:54:4b:be:4a:6a: 85:6e:7b:7d:e1:c5:a4:02:80:00:29:5c:76:24:1e:98:17:56: a9:db:f7:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN37H13jCr17pjaJfHy6EHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4 YzNiZjEwHhcNMjUxMjI0MDEwMTA0WhcNMjUxMjI1MDEwMTA0WjAzMTEwLwYDVQQD Eyg0YThiYTNmNTQ5OWE5YTQ2MzQyZmFkMWMyZjFhOGIzOTIxZTc3YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjhewJCevvsYHD1rbEvQNd51seId XWZ4/+3+TlHX/KTiXfJYRYldgz7nQUVsN7MISWVigE4Sc1o5uP/yLaOJYgEbMUSG AOHVU6uJEonhv2RAZkcIsZhGR+ffzCP+rlBoz7z8girTzxHwMlLNv1CyDW8svZ2r r+TteuIWa6Vv5g4p5SK3sLpSyj8YLiD15DCBQKyBjwFVgF8jCDaH1ZR95oOLnnWH 6v0jTwbN6JVxO408qlJATAaEynrqdytEpx04/KFBVUylCDTsKOrLwFDID2WieKTg Byjk5I8sJGJxFKhMJF8jc5O7MP+UABZ93KQGLWPG0bDKOq4uRfwpY5XzNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqLo/VJmppGNC+tHC8aizkh53xNMB8GA1UdIwQY MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0bw5tkw Dsea6SZ5YWMUq+mp/aMfaZUnM0rReCISOaf0a2rzY2X4PfimZUs3K0816jb0A1Kc o39e4IsexQUU2wkSgtmXoJYfgq4TlqO055g5ftLQKtDd1/5ik1o9ZDqzJDSmBgHx W9K2hvJw4+geYXktKXKu5szWdBAwEXJ9yyJHX1Oqww5EyXjGrxfyPoXe0X2PS5d7 niwL5CVuQ1/RS91uKSJ6PBJ+nmz0RTyUGom6ElgQgO2Bu+F0iNdD0qc26plvRoZQ Ssts53uhBuZ7229p4RhWr14kXNAc7nSQDws+L25uXVRLvkpqhW57feHFpAKAAClc diQemBdWqdv38A== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:51 2025 by rpki-client