This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json) Hash identifier: Vmi6uzDTqwk5e+TqpP6BuNvLXWhw5CB/TE9ZVhHpDXQ= Subject key identifier: B4:E0:BB:53:89:F3:EF:F8:EB:C9:3D:18:6C:FC:31:FA:08:DA:24:FA Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f Certificate serial: 019B3CB53DE60FB6CF1B1C404B4A983B1AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft Manifest number: E8 Signing time: Sat 20 Dec 2025 17:01:09 +0000 Manifest this update: Sat 20 Dec 2025 17:01:09 +0000 Manifest next update: Sun 21 Dec 2025 17:01:09 +0000 Files and hashes: 1: R3nIJXfkLuuHtzC01LNQ4csbV9c.roa (hash: 2UAzqJkEQaJ/zes9bFjleD0zd5Rzn35uxEBaqQdnoYo=) 2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: uY7ap1rDA8ocC1kXVekkd8TOaqWPnj7fH6AyB/8KJOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3d:e6:0f:b6:cf:1b:1c:40:4b:4a:98:3b:1a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f Validity Not Before: Dec 20 17:01:09 2025 GMT Not After : Dec 21 17:01:09 2025 GMT Subject: CN=b4e0bb5389f3eff8ebc93d186cfc31fa08da24fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:96:e3:c2:c8:22:a8:0e:e0:37:ae:09:24: e6:d2:c9:36:8e:54:21:c2:52:16:19:93:2c:af:54: 80:8b:04:41:6f:60:8f:f4:ed:21:04:7a:dd:fe:d3: f9:7c:72:58:2f:ae:ef:ad:f0:80:e9:66:63:a2:56: 98:54:0e:27:1a:20:4a:26:b8:dd:95:f4:b0:ec:91: 3b:ea:62:a7:68:b6:7e:38:32:dd:ca:d4:cd:18:c7: f1:88:c7:37:10:8f:a6:4d:ae:cc:4d:6d:88:8c:2a: 64:42:e7:eb:28:fd:7f:66:6e:fe:d6:de:79:4f:a3: 2c:08:3f:cc:fa:89:18:72:a1:a7:8b:e0:70:7a:67: 0b:b4:58:6c:9e:51:bb:41:96:d1:5a:4e:47:41:77: 42:f1:ec:b9:e9:55:47:1e:ff:93:9e:0b:32:19:45: 7c:71:d0:fa:b2:7a:c4:5d:52:75:af:75:d5:32:be: 9c:d6:aa:d2:a1:00:80:92:5d:9d:c7:31:03:30:b5: 4d:5f:5a:7c:f4:8a:f9:de:02:6a:1c:f0:25:5a:44: 0e:eb:8a:7b:60:60:22:a6:5c:1d:c7:c5:87:6f:3e: 81:4f:74:b1:51:da:b1:10:09:9b:44:c5:22:cf:e2: dc:c0:c2:6f:d8:b8:bf:5f:d5:49:a0:e1:55:31:81: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:BB:53:89:F3:EF:F8:EB:C9:3D:18:6C:FC:31:FA:08:DA:24:FA X509v3 Authority Key Identifier: keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:33:1c:f2:c9:de:50:3b:49:26:b8:91:99:7c:45:57:62:df: 0e:a1:f0:30:fc:a1:a7:0d:42:60:ce:e0:ae:41:56:65:08:cb: 93:e3:5b:6b:2b:ae:d1:d3:e2:73:8a:e3:1e:c0:ca:e7:eb:6e: 1b:1a:6a:e3:70:3a:fa:e4:c9:80:d2:93:32:ce:d9:72:65:ee: 1f:31:59:c6:29:c2:b0:a6:bf:8d:8c:65:c3:e5:ed:e7:5b:47: 2c:9a:82:54:40:4b:89:d6:6c:4c:4e:01:b4:f3:bd:14:a1:d3: 6c:3c:ec:e2:07:a4:ec:57:ba:bf:a9:0b:8a:d3:11:1d:30:29: a8:15:0d:7a:01:b1:89:08:e4:d8:16:2b:e3:11:8c:8e:8e:01: e2:04:e8:94:53:38:84:83:e5:fa:b5:43:83:aa:e9:08:02:d7: 89:3a:cf:04:bf:a0:60:8a:94:8c:24:49:ba:a5:33:d3:92:51: 23:cc:3e:66:81:b4:75:26:a3:02:52:d3:e3:f8:a3:4a:e5:30: 39:2e:ef:f8:54:5e:e8:63:d2:4a:80:2c:5a:ca:96:87:07:4d: fa:89:44:fd:9b:9b:a9:c7:45:d0:37:1a:c0:ff:84:d7:d8:2d: a9:68:14:c1:e0:18:81:ba:fe:23:27:1b:1e:fd:92:6a:b7:e5: e3:41:4a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tT3mD7bPGxxAS0qYOxq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzBiMTRjZTc0ZjYwYThlYTRhYmI2ZWFhNjBlZTQ0NzBm NDNhN2YwHhcNMjUxMjIwMTcwMTA5WhcNMjUxMjIxMTcwMTA5WjAzMTEwLwYDVQQD EyhiNGUwYmI1Mzg5ZjNlZmY4ZWJjOTNkMTg2Y2ZjMzFmYTA4ZGEyNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6W48LIIqgO4DeuCSTm0sk2jlQh wlIWGZMsr1SAiwRBb2CP9O0hBHrd/tP5fHJYL67vrfCA6WZjolaYVA4nGiBKJrjd lfSw7JE76mKnaLZ+ODLdytTNGMfxiMc3EI+mTa7MTW2IjCpkQufrKP1/Zm7+1t55 T6MsCD/M+okYcqGni+BwemcLtFhsnlG7QZbRWk5HQXdC8ey56VVHHv+TngsyGUV8 cdD6snrEXVJ1r3XVMr6c1qrSoQCAkl2dxzEDMLVNX1p89Ir53gJqHPAlWkQO64p7 YGAiplwdx8WHbz6BT3SxUdqxEAmbRMUiz+LcwMJv2Li/X9VJoOFVMYGdkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTgu1OJ8+/468k9GGz8MfoI2iT6MB8GA1UdIwQY MBaAFGMwsUznT2Co6kq7bqpg7kRw9Dp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMt ZjEwYWQ4MmM4NTU3LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMtZjEwYWQ4MmM4NTU3 LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjMc8sne UDtJJriRmXxFV2LfDqHwMPyhpw1CYM7grkFWZQjLk+Nbayuu0dPic4rjHsDK5+tu Gxpq43A6+uTJgNKTMs7ZcmXuHzFZxinCsKa/jYxlw+Xt51tHLJqCVEBLidZsTE4B tPO9FKHTbDzs4gek7Fe6v6kLitMRHTApqBUNegGxiQjk2BYr4xGMjo4B4gTolFM4 hIPl+rVDg6rpCALXiTrPBL+gYIqUjCRJuqUz05JRI8w+ZoG0dSajAlLT4/ijSuUw OS7v+FRe6GPSSoAsWsqWhwdN+olE/ZubqcdF0DcawP+E19gtqWgUweAYgbr+Iycb Hv2Sarfl40FK6g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:16 2025 by rpki-client