This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json) Hash identifier: QqnTQg7j9t8/FeHCWP+XFjiYP6jiXzdvEhJPSLBzo2A= Subject key identifier: AD:36:D1:EC:88:55:4D:A3:D9:24:F8:F8:51:34:44:93:A4:E2:BD:E8 Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18 Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18 Certificate serial: 019B44A53E8294D056CCF46CE393AF3A563A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft Manifest number: 14B6 Signing time: Mon 22 Dec 2025 06:00:38 +0000 Manifest this update: Mon 22 Dec 2025 06:00:38 +0000 Manifest next update: Tue 23 Dec 2025 06:00:38 +0000 Files and hashes: 1: PPDcjsjoszwTm8EI4XbGMJZozgI.roa (hash: 7Lx0Qx1q5+o5Xi1eI3iJhMLtFTgxseeHLhiTQPfBYeo=) 2: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: eufsVCweg+MWvoC8ggpyPX0YOFVj2HVSeIx6iHdi47U=) 3: tedYlf87S78MkPQe8A70plM_Ngw.roa (hash: R2UtbWccTfdmsOnpPUNeRj+D5AnPyUqgeXRoHV5PeK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:3e:82:94:d0:56:cc:f4:6c:e3:93:af:3a:56:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18 Validity Not Before: Dec 22 06:00:38 2025 GMT Not After : Dec 23 06:00:38 2025 GMT Subject: CN=ad36d1ec88554da3d924f8f851344493a4e2bde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:b0:38:9f:2b:4c:3f:26:90:28:7f:e3:05: 08:92:5a:6c:db:0d:d3:24:29:a8:e1:ee:94:09:c5: 14:6d:06:a9:38:49:5e:11:28:23:7b:77:fe:f8:88: 52:16:28:35:de:d6:69:fc:c4:34:e4:d2:d9:63:8e: d5:59:ef:d1:e1:0e:2a:03:80:1c:54:6d:ee:53:21: bd:4c:09:69:41:b6:bf:14:fb:bc:93:2f:c9:35:2f: 22:68:9d:64:d3:bf:22:3b:f0:55:1d:bb:77:c0:bf: 96:57:d5:2e:1c:11:65:45:28:c0:9f:24:33:e8:24: 1d:d0:85:eb:bd:c9:53:67:70:d2:0b:45:84:75:00: a7:db:c8:8a:92:3c:c1:5a:0e:23:88:d7:d6:59:ff: 4d:bd:9b:cb:56:57:71:f4:ec:a9:eb:3d:02:aa:68: 78:31:d9:19:07:2e:50:7c:18:85:99:88:d4:d4:ad: 67:6f:a2:bc:65:51:e4:77:36:e6:62:db:7f:b3:9d: 41:3b:66:ef:12:53:ae:8d:9d:f1:69:29:47:7e:9b: f7:d8:a7:f0:ed:ef:88:20:bb:28:5e:56:1a:2e:ed: 4e:c4:40:38:24:a8:07:49:5d:ce:1a:7e:4d:0a:f6: 5f:e6:71:6b:8b:79:3a:35:e2:ee:a2:f9:48:77:9d: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:36:D1:EC:88:55:4D:A3:D9:24:F8:F8:51:34:44:93:A4:E2:BD:E8 X509v3 Authority Key Identifier: keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:75:3d:a4:c7:66:06:66:c3:7e:8f:18:ee:9d:41:e2:95:dd: 8a:61:1f:ec:79:6e:dc:71:02:65:20:b7:91:de:e4:1f:1a:94: f4:5c:f7:6d:4b:a2:b2:5e:ec:88:2a:26:d7:1e:d2:ce:b9:37: 27:43:f3:96:84:53:ce:22:df:bf:76:37:c0:12:17:ca:e0:29: 5e:e0:96:13:61:40:e9:35:8e:7b:df:c0:a2:54:ce:c8:0d:35: 00:05:13:8f:66:ec:2e:ed:aa:33:62:c0:ca:14:a3:62:45:c5: 9b:4b:3e:38:ea:74:16:96:c7:85:02:98:82:4f:ef:54:d0:f5: a4:7c:12:f7:8b:89:8d:e5:70:09:f9:18:ff:1a:3b:42:4e:34: 37:32:fb:da:69:21:67:89:28:b4:23:3e:c3:21:e1:22:ea:82: 33:d0:00:8d:7f:12:d0:ac:9d:33:11:36:21:dd:09:df:e9:aa: e9:07:6f:a4:88:50:16:77:af:8b:ef:b3:56:16:4d:c9:b7:85: a9:bb:2c:ab:b3:c0:00:86:c2:02:2f:21:2e:e0:d0:49:f7:26: 11:e3:ba:5f:fa:58:2a:b3:27:54:af:1e:90:8a:ad:eb:58:08: b4:b3:5f:c4:40:eb:f7:39:f5:84:59:f4:b2:28:7c:60:80:64: 93:f6:c0:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpT6ClNBWzPRs45OvOlY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGM0OTRmNTYxOTNiNGU5YWRmM2RiNzJlNGYwMTk3OGM1 ODdmMTgwHhcNMjUxMjIyMDYwMDM4WhcNMjUxMjIzMDYwMDM4WjAzMTEwLwYDVQQD EyhhZDM2ZDFlYzg4NTU0ZGEzZDkyNGY4Zjg1MTM0NDQ5M2E0ZTJiZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7awOJ8rTD8mkCh/4wUIklps2w3T JCmo4e6UCcUUbQapOEleESgje3f++IhSFig13tZp/MQ05NLZY47VWe/R4Q4qA4Ac VG3uUyG9TAlpQba/FPu8ky/JNS8iaJ1k078iO/BVHbt3wL+WV9UuHBFlRSjAnyQz 6CQd0IXrvclTZ3DSC0WEdQCn28iKkjzBWg4jiNfWWf9NvZvLVldx9Oyp6z0Cqmh4 MdkZBy5QfBiFmYjU1K1nb6K8ZVHkdzbmYtt/s51BO2bvElOujZ3xaSlHfpv32Kfw 7e+IILsoXlYaLu1OxEA4JKgHSV3OGn5NCvZf5nFri3k6NeLuovlId51i+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK020eyIVU2j2ST4+FE0RJOk4r3oMB8GA1UdIwQY MBaAFGJMSU9WGTtOmt89ty5PAZeMWH8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2Mt N2FhYjZlZjk1NWExLzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wOTg4YWYtOGQ3Zi00YzI5LWI1Y2MtN2FhYjZlZjk1NWEx LzEvWWt4SlQxWVpPMDZhM3oyM0xrOEJsNHhZZnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3U9pMdm BmbDfo8Y7p1B4pXdimEf7Hlu3HECZSC3kd7kHxqU9Fz3bUuisl7siCom1x7Szrk3 J0PzloRTziLfv3Y3wBIXyuApXuCWE2FA6TWOe9/AolTOyA01AAUTj2bsLu2qM2LA yhSjYkXFm0s+OOp0FpbHhQKYgk/vVND1pHwS94uJjeVwCfkY/xo7Qk40NzL72mkh Z4kotCM+wyHhIuqCM9AAjX8S0KydMxE2Id0J3+mq6QdvpIhQFnevi++zVhZNybeF qbssq7PAAIbCAi8hLuDQSfcmEeO6X/pYKrMnVK8ekIqt61gItLNfxEDr9zn1hFn0 sih8YIBkk/bAqA== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:27 2025 by rpki-client