This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft File: YE6Z8sS9AZ63cxUmRSbdauHWK00.mft (raw, json) Hash identifier: xzpP6p8VJRr8CScI9/j5rfPIGBIsyZ1GZGnc0Hu60S4= Subject key identifier: B9:0A:21:3F:98:2C:AE:DF:A0:D5:68:AD:4C:B0:77:DC:56:39:CD:FF Authority key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D Certificate issuer: /CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d Certificate serial: 019B2B1E22BCB40DCED8167D2DD7469D32FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft Manifest number: 0234 Signing time: Wed 17 Dec 2025 07:02:33 +0000 Manifest this update: Wed 17 Dec 2025 07:02:33 +0000 Manifest next update: Thu 18 Dec 2025 07:02:33 +0000 Files and hashes: 1: 5z3VvkRy-ZxRlwDulpmyqBpJyjo.roa (hash: T1LPS9QQuOzTlUB1i+/0lZXM72ThKtsE6hI3w4YjKAE=) 2: YE6Z8sS9AZ63cxUmRSbdauHWK00.crl (hash: sNOyq4nojltvGyVKyIH/GKco/VXd/pKOmfLCrX0C9As=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:22:bc:b4:0d:ce:d8:16:7d:2d:d7:46:9d:32:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d Validity Not Before: Dec 17 07:02:33 2025 GMT Not After : Dec 18 07:02:33 2025 GMT Subject: CN=b90a213f982caedfa0d568ad4cb077dc5639cdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:1c:6f:d2:05:98:dc:01:56:7c:97:a2:e8: bd:51:ea:a9:a8:78:9e:3a:2c:bd:ac:25:9c:e8:6c: 64:9f:8b:90:2d:83:bf:00:5c:54:37:9e:5b:e8:d7: d9:ff:1e:1f:5f:2d:c8:fc:74:47:1a:3f:f3:8a:38: c2:db:8f:7f:d4:92:ad:83:2e:2e:3f:23:0a:ea:ca: 1f:2c:58:5f:00:1c:03:56:d3:0c:58:a9:26:5d:4f: 26:2e:53:45:4b:d2:8b:06:d1:ee:2a:d0:6c:d4:08: e0:ae:2b:c7:9f:9c:f1:94:00:8d:e9:4a:20:6d:dc: 8d:09:34:75:0b:4f:5c:a3:6a:31:ce:ba:21:2e:45: a6:25:19:3f:96:04:ad:03:d0:55:5c:44:ce:63:1c: f4:d8:3f:bd:b4:15:d4:5d:b3:3a:7d:a0:a8:79:3e: 9d:4c:8a:da:bc:b5:21:25:e5:41:34:7d:04:8c:34: db:ef:23:fd:d0:db:e0:15:a0:ec:45:b6:09:d2:33: be:72:bc:15:a5:e4:11:2c:51:2f:7e:cf:ad:28:99: b6:37:67:0c:4c:06:40:4b:88:32:ac:bb:4e:e5:61: 20:01:09:34:17:ed:4c:b2:9a:42:cf:a6:74:1e:b2: e4:06:24:6c:fe:b6:8f:fd:b8:bb:4f:83:e2:d5:77: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0A:21:3F:98:2C:AE:DF:A0:D5:68:AD:4C:B0:77:DC:56:39:CD:FF X509v3 Authority Key Identifier: keyid:60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:17:c4:97:72:62:40:f5:a2:70:ad:cf:c5:ba:e4:b3:6f:b4: 57:6d:84:96:68:de:d2:4f:e9:6f:01:49:76:5b:06:9c:05:9f: 2a:bd:24:b5:5b:70:8b:29:c2:44:9f:e1:18:97:e9:96:b5:f1: 56:bf:5d:d2:63:e7:87:8e:3c:b5:56:4c:a9:c5:01:d7:ff:f4: e3:2a:48:e1:de:33:90:f9:07:8a:4f:a8:79:2b:0f:76:a2:bc: 2c:7d:e9:27:d5:46:4a:c6:0b:be:37:76:8d:c9:9f:51:cb:22: e3:49:cc:5d:cd:fb:34:c1:bc:b0:33:39:db:e7:49:b1:ab:07: 54:57:bb:45:ae:38:13:9a:f4:d7:5e:a9:77:c1:83:56:2e:1a: 46:a1:77:49:a2:e2:e5:6b:1c:de:b9:90:8b:29:6d:15:fe:0c: 36:8e:97:9a:e1:62:36:34:e3:a8:41:59:6a:42:87:b1:4e:50: 4f:8a:37:d9:71:cd:e8:52:7d:cc:8e:8c:45:ce:b4:aa:69:64: 6c:9a:9d:54:a2:69:62:d0:56:a9:a9:7d:c0:24:fc:b1:16:75: e4:28:e0:81:e6:97:48:ee:f6:f6:46:6a:b9:ec:13:16:3e:72: b5:88:ad:c0:7b:91:08:e4:96:72:e2:12:06:1a:c8:54:1a:0b: 95:4c:95:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHiK8tA3O2BZ9LddGnTL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNGU5OWYyYzRiZDAxOWViNzczMTUyNjQ1MjZkZDZhZTFk NjJiNGQwHhcNMjUxMjE3MDcwMjMzWhcNMjUxMjE4MDcwMjMzWjAzMTEwLwYDVQQD EyhiOTBhMjEzZjk4MmNhZWRmYTBkNTY4YWQ0Y2IwNzdkYzU2MzljZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx8cb9IFmNwBVnyXoui9UeqpqHie Oiy9rCWc6Gxkn4uQLYO/AFxUN55b6NfZ/x4fXy3I/HRHGj/zijjC249/1JKtgy4u PyMK6sofLFhfABwDVtMMWKkmXU8mLlNFS9KLBtHuKtBs1AjgrivHn5zxlACN6Uog bdyNCTR1C09co2oxzrohLkWmJRk/lgStA9BVXETOYxz02D+9tBXUXbM6faCoeT6d TIravLUhJeVBNH0EjDTb7yP90NvgFaDsRbYJ0jO+crwVpeQRLFEvfs+tKJm2N2cM TAZAS4gyrLtO5WEgAQk0F+1MsppCz6Z0HrLkBiRs/raP/bi7T4Pi1XcQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkKIT+YLK7foNVorUywd9xWOc3/MB8GA1UdIwQY MBaAFGBOmfLEvQGet3MVJkUm3Wrh1itNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmY1YzMtZTA5YS00ODJiLTgxNGUt YjI1NjBlYWIxNTBmLzEvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83NmY1YzMtZTA5YS00ODJiLTgxNGUtYjI1NjBlYWIxNTBm LzEvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBfEl3Ji QPWicK3Pxbrks2+0V22Elmje0k/pbwFJdlsGnAWfKr0ktVtwiynCRJ/hGJfplrXx Vr9d0mPnh448tVZMqcUB1//04ypI4d4zkPkHik+oeSsPdqK8LH3pJ9VGSsYLvjd2 jcmfUcsi40nMXc37NMG8sDM52+dJsasHVFe7Ra44E5r0116pd8GDVi4aRqF3SaLi 5Wsc3rmQiyltFf4MNo6XmuFiNjTjqEFZakKHsU5QT4o32XHN6FJ9zI6MRc60qmlk bJqdVKJpYtBWqal9wCT8sRZ15CjggeaXSO729kZquewTFj5ytYitwHuRCOSWcuIS BhrIVBoLlUyV5g== -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:17 2025 by rpki-client