This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json) Hash identifier: Ayep0UuTqJH3uyKmHEk49QDyhRi59DWGZOJfbm66ygU= Subject key identifier: 89:8A:60:55:2B:ED:5C:1A:1F:F4:9D:BD:48:3D:2C:78:4E:43:CF:4B Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Certificate serial: 019B3A900DEB365EFAE102B8C60653CB4EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft Manifest number: 0FE1 Signing time: Sat 20 Dec 2025 07:01:17 +0000 Manifest this update: Sat 20 Dec 2025 07:01:17 +0000 Manifest next update: Sun 21 Dec 2025 07:01:17 +0000 Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=) 2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: 8tgpXeBgAytrmLwooABZr12mxFGgfdeyly3r8SJHb5Q=) 3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:0d:eb:36:5e:fa:e1:02:b8:c6:06:53:cb:4e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Validity Not Before: Dec 20 07:01:17 2025 GMT Not After : Dec 21 07:01:17 2025 GMT Subject: CN=898a60552bed5c1a1ff49dbd483d2c784e43cf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:42:01:3e:61:45:f1:b2:ef:e2:22:df:a9: 1f:5d:de:f0:51:9b:59:69:5a:cd:23:d3:05:67:15: a6:ab:ea:18:50:0b:c5:be:a5:27:b6:9f:93:b6:c6: 53:b3:26:1c:ae:63:34:c7:aa:c5:ea:de:57:63:bc: 5f:5a:81:3f:ed:b9:23:b6:94:20:4a:66:d6:eb:ca: 50:e1:6b:70:9b:ce:d6:f0:ca:73:89:b2:23:74:b4: 94:30:23:2a:df:9c:43:17:29:ac:5a:58:9e:6e:42: d7:da:fc:e0:b9:ea:b8:90:bf:03:c3:9c:02:4b:72: c2:87:19:7d:6a:73:00:fa:e5:47:7c:41:96:4c:5c: f2:64:23:12:60:a0:d3:3c:54:78:d9:39:86:6a:02: 9b:be:9e:f9:4c:1c:24:f7:c6:f4:b2:03:a9:e3:51: af:99:6d:62:46:c2:b4:fe:c6:7c:cb:59:7b:b2:1b: 86:e1:be:28:5d:4e:7d:a1:3b:f1:24:e9:d4:2f:97: bb:1c:c8:2e:ce:5c:8b:24:6c:9d:4a:3c:40:a5:e8: f9:ae:a7:ef:6d:6a:03:3c:44:fb:19:84:af:19:d7: 89:9f:41:8a:31:75:9d:90:55:b2:1d:a7:b0:f5:d3: 41:ff:8d:fa:72:67:3f:75:2b:e8:34:75:f6:56:93: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:60:55:2B:ED:5C:1A:1F:F4:9D:BD:48:3D:2C:78:4E:43:CF:4B X509v3 Authority Key Identifier: keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e3:f4:43:62:6d:c2:0d:79:91:5e:ea:82:e2:fa:44:d7:ff: e2:5d:30:83:02:98:33:74:9a:dc:9b:30:73:83:f7:db:76:50: a6:d6:e6:4b:e4:f4:ba:65:aa:0a:e3:cd:7c:ff:e3:30:a5:dd: f2:09:f6:7f:4b:4d:dc:a0:ca:f0:39:74:51:ef:6d:ad:5c:c9: 94:b7:11:10:00:f3:ab:cb:f3:da:08:42:da:7e:42:f9:3f:eb: 08:fd:1c:3c:e3:31:ad:d1:bd:63:7c:b0:7f:b4:1b:6b:5d:78: 1c:3f:70:49:07:ae:45:78:88:fc:10:aa:b7:28:1b:d8:5a:97: 60:d8:d8:a6:1c:d1:36:8f:9d:7d:6c:0c:35:8f:fd:d8:ab:c9: d3:7b:0b:26:f9:7d:90:5f:89:41:71:35:3c:e8:a1:f6:db:08: 13:d2:93:42:9d:1f:0f:0d:9a:3e:67:33:0c:a8:bf:ca:dd:34: 49:12:62:20:ae:b4:84:66:c3:4e:fa:3b:cb:a9:ee:5c:38:25: c7:07:88:29:c3:b0:e2:c2:6f:cf:80:05:31:d2:0c:0f:0f:bf: d2:4c:9d:13:79:d2:12:ff:69:c6:a4:1a:e1:cb:42:f5:c4:8a: 21:34:de:69:5f:47:70:b6:9a:20:f0:e5:66:85:32:71:96:34: 6c:8d:5f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kA3rNl764QK4xgZTy06tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz MmM1ZjUwHhcNMjUxMjIwMDcwMTE3WhcNMjUxMjIxMDcwMTE3WjAzMTEwLwYDVQQD Eyg4OThhNjA1NTJiZWQ1YzFhMWZmNDlkYmQ0ODNkMmM3ODRlNDNjZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRtCAT5hRfGy7+Ii36kfXd7wUZtZ aVrNI9MFZxWmq+oYUAvFvqUntp+TtsZTsyYcrmM0x6rF6t5XY7xfWoE/7bkjtpQg SmbW68pQ4Wtwm87W8MpzibIjdLSUMCMq35xDFymsWliebkLX2vzgueq4kL8Dw5wC S3LChxl9anMA+uVHfEGWTFzyZCMSYKDTPFR42TmGagKbvp75TBwk98b0sgOp41Gv mW1iRsK0/sZ8y1l7shuG4b4oXU59oTvxJOnUL5e7HMguzlyLJGydSjxApej5rqfv bWoDPET7GYSvGdeJn0GKMXWdkFWyHaew9dNB/436cmc/dSvoNHX2VpOb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImKYFUr7VwaH/SdvUg9LHhOQ89LMB8GA1UdIwQY MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt NGQ1Zjc2MzdlZmNlLzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+P0Q2Jt wg15kV7qguL6RNf/4l0wgwKYM3Sa3Jswc4P323ZQptbmS+T0umWqCuPNfP/jMKXd 8gn2f0tN3KDK8Dl0Ue9trVzJlLcREADzq8vz2ghC2n5C+T/rCP0cPOMxrdG9Y3yw f7Qba114HD9wSQeuRXiI/BCqtygb2FqXYNjYphzRNo+dfWwMNY/92KvJ03sLJvl9 kF+JQXE1POih9tsIE9KTQp0fDw2aPmczDKi/yt00SRJiIK60hGbDTvo7y6nuXDgl xweIKcOw4sJvz4AFMdIMDw+/0kydE3nSEv9pxqQa4ctC9cSKITTeaV9HcLaaIPDl ZoUycZY0bI1f8g== -----END CERTIFICATE-----Generated at Sat Dec 20 08:19:58 2025 by rpki-client