This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json) Hash identifier: dgBrLBCUZlm6Ojl4Dq8riTZE0UHP2Q+v1Z2kFFP6qTI= Subject key identifier: DA:E8:86:35:5F:CB:0C:1B:C6:FE:D8:D1:D6:B5:10:57:83:74:C1:9C Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Certificate serial: 019B3A5890AB35F3AB77BFD18103A4FC04B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft Manifest number: 06EA Signing time: Sat 20 Dec 2025 06:00:41 +0000 Manifest this update: Sat 20 Dec 2025 06:00:41 +0000 Manifest next update: Sun 21 Dec 2025 06:00:41 +0000 Files and hashes: 1: VAzYkQRTgwiJaHwxuivv8ZFztSM.roa (hash: JX1t8tGMn8nyq5oj+S/xubK6nVg6WbHVtaOCdwSyvtE=) 2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: qdhliwWZH8cm/vYOLcO/SpFZjwkEGSw1fiHXgr8cc4A=) 3: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:90:ab:35:f3:ab:77:bf:d1:81:03:a4:fc:04:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb Validity Not Before: Dec 20 06:00:41 2025 GMT Not After : Dec 21 06:00:41 2025 GMT Subject: CN=dae886355fcb0c1bc6fed8d1d6b510578374c19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:6d:6f:c8:3f:50:d0:cc:cb:d4:2c:50:d4: ed:4a:a0:6e:cb:ba:94:a0:0e:94:59:11:8b:20:89: 3d:ea:b2:0c:8c:5a:e8:ed:1d:51:2b:5f:5d:14:a9: a0:07:c7:64:1d:5f:67:0a:4a:23:1c:c0:41:0f:38: b7:c1:07:19:2e:79:34:30:41:0f:d8:f3:58:90:d1: e5:bd:d6:84:6a:7b:ce:c5:d6:62:6e:5c:b7:4d:92: 9b:c0:85:36:66:fc:a8:09:21:9e:7b:51:91:5f:6a: 94:e0:04:e9:f1:2e:db:c1:01:16:f8:88:e1:63:60: ba:59:aa:33:b9:d7:ec:2b:ae:04:6e:28:ae:fe:40: ee:b6:3e:66:fd:53:12:dd:0f:08:c2:ec:7f:ed:17: c4:82:f6:ad:0c:f6:96:3d:19:b8:3d:7d:c6:8a:d7: 1c:aa:5d:31:42:51:d4:01:d3:2d:c0:b7:2f:81:d7: 0e:3c:2d:c9:eb:a7:cc:7a:7f:aa:07:2b:e7:89:9c: 7e:17:b6:0e:95:8c:b1:db:54:be:69:37:b4:15:4f: 98:e8:22:70:ec:3b:6a:7c:50:7a:6a:6d:30:94:68: fb:bc:bf:e1:88:53:e2:8e:25:4c:0a:23:e6:5f:8c: 7d:1e:59:db:71:82:a6:1b:dc:e5:02:e1:82:f4:0a: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E8:86:35:5F:CB:0C:1B:C6:FE:D8:D1:D6:B5:10:57:83:74:C1:9C X509v3 Authority Key Identifier: keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6f:22:13:c5:e9:20:c2:c1:f0:d8:84:0c:19:84:e8:b2:3b: 82:e8:f7:1e:08:7f:cf:7a:ed:4f:c5:1f:ab:e1:ca:7d:c9:52: 6d:ab:59:ac:51:3d:f1:bb:54:74:c4:42:ee:6c:19:0e:ff:9b: 7d:e6:8b:cf:b1:a5:e2:f8:0b:95:4b:99:08:de:50:35:bb:84: ad:7f:56:61:d3:f4:54:b8:3f:06:1d:48:23:ab:66:dc:c0:94: 0e:6a:4f:89:47:52:ed:f6:60:3d:ab:c4:58:58:90:e1:a0:6e: 6d:de:fb:9a:e4:34:39:ee:27:f2:28:9f:8d:8d:66:6d:73:cf: 9a:81:c3:c1:04:ef:e0:a9:4d:75:e5:67:c9:e9:fd:33:26:f7: 7b:5e:5c:e0:37:a4:80:5e:4b:ff:97:7d:a9:73:99:33:8f:e0: 47:6e:d2:28:70:49:34:f8:38:a7:f7:e6:de:d6:96:1b:01:6c: bd:70:c3:73:04:fd:a0:b1:ef:5c:42:ec:d5:ca:1b:54:d2:ec: 82:18:69:e8:9e:5e:b3:09:56:d4:6a:65:cd:5a:b2:e2:61:7d: 61:7a:1f:58:cb:01:89:de:8f:60:a9:17:a1:a0:a1:a4:f7:7d: 24:44:c2:94:8c:bf:0d:6b:d1:52:01:cd:48:1c:55:b6:5c:5e: 32:14:0f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJCrNfOrd7/RgQOk/ASwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjBiZGJhNDZjZTUwYzBhYTBjNDFmMGIxYjQ5ZmE3ZWQ2 ODEwY2IwHhcNMjUxMjIwMDYwMDQxWhcNMjUxMjIxMDYwMDQxWjAzMTEwLwYDVQQD EyhkYWU4ODYzNTVmY2IwYzFiYzZmZWQ4ZDFkNmI1MTA1NzgzNzRjMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAhtb8g/UNDMy9QsUNTtSqBuy7qU oA6UWRGLIIk96rIMjFro7R1RK19dFKmgB8dkHV9nCkojHMBBDzi3wQcZLnk0MEEP 2PNYkNHlvdaEanvOxdZibly3TZKbwIU2ZvyoCSGee1GRX2qU4ATp8S7bwQEW+Ijh Y2C6WaozudfsK64Ebiiu/kDutj5m/VMS3Q8Iwux/7RfEgvatDPaWPRm4PX3Gitcc ql0xQlHUAdMtwLcvgdcOPC3J66fMen+qByvniZx+F7YOlYyx21S+aTe0FU+Y6CJw 7DtqfFB6am0wlGj7vL/hiFPijiVMCiPmX4x9HlnbcYKmG9zlAuGC9AowfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrohjVfywwbxv7Y0da1EFeDdMGcMB8GA1UdIwQY MBaAFGAgvbpGzlDAqgxB8LG0n6ftaBDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2Yt YjMwOTExMmQyZWVjLzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83Njk1OTYtMmM0YS00YWQ4LTg2Y2YtYjMwOTExMmQyZWVj LzEvWUNDOXVrYk9VTUNxREVId3NiU2ZwLTFvRU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApG8iE8Xp IMLB8NiEDBmE6LI7guj3Hgh/z3rtT8Ufq+HKfclSbatZrFE98btUdMRC7mwZDv+b feaLz7Gl4vgLlUuZCN5QNbuErX9WYdP0VLg/Bh1II6tm3MCUDmpPiUdS7fZgPavE WFiQ4aBubd77muQ0Oe4n8iifjY1mbXPPmoHDwQTv4KlNdeVnyen9Myb3e15c4Dek gF5L/5d9qXOZM4/gR27SKHBJNPg4p/fm3taWGwFsvXDDcwT9oLHvXELs1cobVNLs ghhp6J5eswlW1GplzVqy4mF9YXofWMsBid6PYKkXoaChpPd9JETClIy/DWvRUgHN SBxVtlxeMhQPNw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:07:24 2025 by rpki-client