This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json) Hash identifier: 2Du5e0zx6v0zrvT0pxn5KbgeQTe39cfaWHxrCA4y4i4= Subject key identifier: C9:16:2B:EC:07:C6:F3:54:61:B7:BF:30:75:20:0A:D3:99:CA:EB:8C Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59 Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959 Certificate serial: 019B33B20A97F1793B7A7F91F2E3CD7E3CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft Manifest number: 0AE1 Signing time: Thu 18 Dec 2025 23:01:04 +0000 Manifest this update: Thu 18 Dec 2025 23:01:04 +0000 Manifest next update: Fri 19 Dec 2025 23:01:04 +0000 Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=) 2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: Vbq4bViYd2o42YYGx5ouLxQ25iLSRSME4FUkAyrqsq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:0a:97:f1:79:3b:7a:7f:91:f2:e3:cd:7e:3c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959 Validity Not Before: Dec 18 23:01:04 2025 GMT Not After : Dec 19 23:01:04 2025 GMT Subject: CN=c9162bec07c6f35461b7bf3075200ad399caeb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:69:fe:6b:8e:08:01:36:25:11:2d:fb:86: 68:a6:39:29:87:67:35:55:0a:34:2f:0c:83:93:99: 2b:fe:b1:aa:72:2e:42:7a:c5:1b:9d:03:7b:cd:ed: bc:b0:5d:e8:7c:c3:6c:11:6d:b7:0c:23:95:1f:7b: bd:04:9d:2b:67:08:48:58:93:58:d8:16:a2:db:b6: 21:a0:42:00:56:84:56:f8:10:2c:16:04:ff:b2:9e: f0:d5:fd:5d:df:c6:86:db:bb:09:f0:c8:c9:21:01: 60:7a:83:f9:b0:f3:08:b9:02:c4:bd:7d:e7:f3:cc: b2:91:11:ac:c9:da:a1:bd:26:2a:78:52:92:0b:3f: 88:02:78:70:0c:6d:f9:f7:87:80:fb:3a:ed:3b:b4: 03:50:02:6d:03:89:fa:c8:e8:63:64:c1:bc:55:18: 43:c0:a8:b7:26:f8:93:00:ae:f1:5e:fb:4c:4a:a9: 65:61:57:12:3c:43:9f:3c:bf:cf:ad:a6:2e:59:f0: 54:3c:65:fe:f5:56:0d:55:e2:2e:c4:c4:a2:48:2a: 70:75:0b:5b:6f:06:51:c0:ad:a1:ca:27:d2:51:cc: 4c:71:eb:9c:87:10:09:4c:e5:55:42:5d:6d:d7:07: ee:d5:1f:04:a8:4c:85:e4:27:3b:d9:0b:b5:08:da: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:16:2B:EC:07:C6:F3:54:61:B7:BF:30:75:20:0A:D3:99:CA:EB:8C X509v3 Authority Key Identifier: keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:db:35:fa:8b:46:0e:13:76:9f:cd:5b:8c:4d:7f:7f:d7:89: be:26:ea:ad:33:03:6b:68:a4:15:6a:61:f2:ea:be:16:88:14: ad:03:22:b7:37:a5:67:1c:5b:cf:86:ca:e0:f5:51:22:fb:a5: 54:18:d2:11:ad:2a:98:6a:4f:92:96:68:68:b6:a7:73:fd:f8: af:dd:e6:8d:59:fa:1e:cb:b6:86:6c:ef:ee:a5:dc:b2:64:57: ac:d0:cc:55:d9:a5:46:d1:7f:41:83:3e:f6:15:53:15:47:ce: 4c:c7:94:f4:28:9d:06:7a:b8:1f:e8:c5:11:52:fb:2b:fc:fd: 4d:bf:d3:45:96:07:d4:6b:71:9c:f9:51:a5:ef:bf:42:1c:81: fb:d6:da:e2:6f:66:2e:30:dd:59:d5:a5:72:2d:52:7b:99:3b: 39:8d:06:03:93:78:2c:98:6d:c8:8d:87:7b:87:0d:fb:c8:9d: 90:e9:bf:da:95:06:1b:8d:59:d2:90:46:91:03:2d:5f:14:7d: bf:80:75:3d:82:df:eb:88:99:bb:16:29:b6:a2:9d:e3:62:fd: be:bf:4d:66:a2:19:11:2f:ad:59:98:c6:e1:63:29:63:39:d4: de:4e:d6:5f:a3:eb:a9:38:28:32:05:90:0c:3d:0d:bb:5a:bb: 49:92:b4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsgqX8Xk7en+R8uPNfjy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDczNjVlMGNmMzBjYThmY2U5OGM2MjY2MGQxODZhOTc5 YmM5NTkwHhcNMjUxMjE4MjMwMTA0WhcNMjUxMjE5MjMwMTA0WjAzMTEwLwYDVQQD EyhjOTE2MmJlYzA3YzZmMzU0NjFiN2JmMzA3NTIwMGFkMzk5Y2FlYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGVp/muOCAE2JREt+4Zopjkph2c1 VQo0LwyDk5kr/rGqci5CesUbnQN7ze28sF3ofMNsEW23DCOVH3u9BJ0rZwhIWJNY 2Bai27YhoEIAVoRW+BAsFgT/sp7w1f1d38aG27sJ8MjJIQFgeoP5sPMIuQLEvX3n 88yykRGsydqhvSYqeFKSCz+IAnhwDG3594eA+zrtO7QDUAJtA4n6yOhjZMG8VRhD wKi3JviTAK7xXvtMSqllYVcSPEOfPL/PraYuWfBUPGX+9VYNVeIuxMSiSCpwdQtb bwZRwK2hyifSUcxMceuchxAJTOVVQl1t1wfu1R8EqEyF5Cc72Qu1CNqvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkWK+wHxvNUYbe/MHUgCtOZyuuMMB8GA1UdIwQY MBaAFGAHNl4M8wyo/OmMYmYNGGqXm8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTIt Yjc1YjQ5MDQ5ODJmLzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTItYjc1YjQ5MDQ5ODJm LzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENs1+otG DhN2n81bjE1/f9eJvibqrTMDa2ikFWph8uq+FogUrQMitzelZxxbz4bK4PVRIvul VBjSEa0qmGpPkpZoaLanc/34r93mjVn6Hsu2hmzv7qXcsmRXrNDMVdmlRtF/QYM+ 9hVTFUfOTMeU9CidBnq4H+jFEVL7K/z9Tb/TRZYH1GtxnPlRpe+/QhyB+9ba4m9m LjDdWdWlci1Se5k7OY0GA5N4LJhtyI2He4cN+8idkOm/2pUGG41Z0pBGkQMtXxR9 v4B1PYLf64iZuxYptqKd42L9vr9NZqIZES+tWZjG4WMpYznU3k7WX6PrqTgoMgWQ DD0Nu1q7SZK03w== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:46 2025 by rpki-client