This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft File: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json) Hash identifier: S7/b2AakmIWJf3C0wC998wGZhTynIhZtNAnCE9iUQxU= Subject key identifier: FE:29:82:61:13:5D:D3:58:A0:6E:29:B6:48:26:5C:A0:78:DC:21:A2 Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Certificate serial: 019B3A8FD1227DD54204EE8BB03A8F155078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft Manifest number: 0BC7 Signing time: Sat 20 Dec 2025 07:01:02 +0000 Manifest this update: Sat 20 Dec 2025 07:01:02 +0000 Manifest next update: Sun 21 Dec 2025 07:01:02 +0000 Files and hashes: 1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=) 2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: X9W+jRy8HlHBWh0kYAHqLg7BD8XSoaphqnqDBqgBT7E=) 3: flT0rlNauOXStzroCqDwedgvmO8.roa (hash: 8zjBPUweiTtjRooUddXczYMKyn0J34pB87VyPU3GTV8=) 4: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (hash: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:d1:22:7d:d5:42:04:ee:8b:b0:3a:8f:15:50:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Validity Not Before: Dec 20 07:01:02 2025 GMT Not After : Dec 21 07:01:02 2025 GMT Subject: CN=fe298261135dd358a06e29b648265ca078dc21a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:9f:5e:f3:d2:3b:26:a6:f7:b2:82:cd:ae: 9a:e0:e1:f4:c5:58:a3:c2:54:b0:60:8c:10:95:30: 4f:e7:e7:c5:f3:47:80:a1:3b:7b:7e:47:f7:b5:4f: 2c:16:14:57:c4:5d:9e:a2:67:db:75:cc:77:8e:cc: 18:4d:d7:72:09:71:ca:3e:2e:9a:8e:5b:87:f4:0d: c5:61:07:45:fe:ef:f8:5d:81:34:9c:22:31:9a:b9: 21:0e:7d:b7:22:5f:a0:bd:b1:4b:ac:77:8a:c8:9c: ee:9b:47:ae:78:ff:a6:0a:a4:2f:17:b0:b9:d3:71: a6:cf:a3:52:c5:3b:59:1d:f9:3d:ca:fb:77:b6:2a: da:b0:28:eb:ba:b0:de:20:bb:70:42:cf:84:20:70: f5:87:63:b9:ab:34:1f:95:0a:27:02:dc:b9:56:4a: 1c:df:54:a0:95:34:cc:0f:1b:c1:b4:52:55:04:5e: 6f:2b:df:5f:bf:38:0c:b2:a5:64:b9:74:01:93:6f: 9c:6d:94:4a:12:0e:ba:7c:73:7f:22:b5:78:bd:bc: 91:f7:28:29:96:8c:b1:29:2f:ba:46:9d:23:20:cc: a1:47:98:91:c0:9a:cb:56:aa:b6:9b:fe:08:2e:5c: 8e:e6:37:0b:86:68:59:db:ca:fb:cf:75:dd:25:27: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:29:82:61:13:5D:D3:58:A0:6E:29:B6:48:26:5C:A0:78:DC:21:A2 X509v3 Authority Key Identifier: keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:02:70:39:20:aa:2f:16:41:14:ed:81:1e:a3:68:55:34:c5: 4d:2a:fa:43:64:3d:ba:99:e4:60:b5:e8:03:0e:70:01:d8:26: 92:58:a4:6f:57:6a:c0:e6:19:7f:13:db:d6:08:f9:a3:70:b7: 3a:d5:e1:0d:1c:bd:e7:ca:5a:8c:62:02:82:7a:eb:5e:21:9b: 79:23:55:ff:11:2f:9d:a0:28:39:97:eb:16:41:e2:ae:df:cb: 9f:09:37:06:06:e7:d5:79:c0:e3:50:77:50:46:e9:2b:a0:74: 09:4e:25:ba:b1:0b:7b:f7:25:fe:64:1e:90:27:60:61:0c:cc: 5c:86:f3:60:52:d4:18:47:32:65:44:95:7b:e6:20:96:de:00: d3:a3:e0:0b:aa:43:fa:bf:04:40:27:28:8b:9c:0a:c5:c8:90: 13:fe:26:d8:6b:0d:a8:80:09:d7:40:53:a7:b6:17:90:cc:92: de:82:fd:84:2c:bb:df:3d:92:39:ef:83:67:dc:1d:49:1d:c1: f4:69:19:88:0d:65:7e:fe:be:20:6c:68:d3:7f:28:57:1d:4b: 08:99:f1:52:99:d6:a9:4b:f8:ea:64:cb:a0:06:36:90:58:cc: 99:45:4e:0e:ea:ae:b1:e6:ef:4f:8d:a3:46:cc:ef:38:6a:54: fb:5a:1d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9EifdVCBO6LsDqPFVB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4 YzNiZjEwHhcNMjUxMjIwMDcwMTAyWhcNMjUxMjIxMDcwMTAyWjAzMTEwLwYDVQQD EyhmZTI5ODI2MTEzNWRkMzU4YTA2ZTI5YjY0ODI2NWNhMDc4ZGMyMWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomafXvPSOyam97KCza6a4OH0xVij wlSwYIwQlTBP5+fF80eAoTt7fkf3tU8sFhRXxF2eomfbdcx3jswYTddyCXHKPi6a jluH9A3FYQdF/u/4XYE0nCIxmrkhDn23Il+gvbFLrHeKyJzum0eueP+mCqQvF7C5 03Gmz6NSxTtZHfk9yvt3tirasCjrurDeILtwQs+EIHD1h2O5qzQflQonAty5Vkoc 31SglTTMDxvBtFJVBF5vK99fvzgMsqVkuXQBk2+cbZRKEg66fHN/IrV4vbyR9ygp loyxKS+6Rp0jIMyhR5iRwJrLVqq2m/4ILlyO5jcLhmhZ28r7z3XdJSfz6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4pgmETXdNYoG4ptkgmXKB43CGiMB8GA1UdIwQY MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAJwOSCq LxZBFO2BHqNoVTTFTSr6Q2Q9upnkYLXoAw5wAdgmklikb1dqwOYZfxPb1gj5o3C3 OtXhDRy958pajGICgnrrXiGbeSNV/xEvnaAoOZfrFkHirt/Lnwk3Bgbn1XnA41B3 UEbpK6B0CU4lurELe/cl/mQekCdgYQzMXIbzYFLUGEcyZUSVe+Yglt4A06PgC6pD +r8EQCcoi5wKxciQE/4m2GsNqIAJ10BTp7YXkMyS3oL9hCy73z2SOe+DZ9wdSR3B 9GkZiA1lfv6+IGxo038oVx1LCJnxUpnWqUv46mTLoAY2kFjMmUVODuqusebvT42j RszvOGpU+1od4A== -----END CERTIFICATE-----Generated at Sat Dec 20 11:40:53 2025 by rpki-client