This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft File: YmC2AROb4BNWnr-OG-taaUuch-w.mft (raw, json) Hash identifier: IJisOlkdgloUsm75D6ysWN2dFo889pS08lzsDIc/Kzo= Subject key identifier: E5:9F:CC:81:CC:94:F9:3A:60:1B:CE:24:21:A3:F7:A4:60:61:9C:7E Authority key identifier: 62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC Certificate issuer: /CN=6260b601139be013569ebf8e1beb5a694b9c87ec Certificate serial: 019B2EFA99D0FF2A8C74771445646112F138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft Manifest number: 0469 Signing time: Thu 18 Dec 2025 01:02:13 +0000 Manifest this update: Thu 18 Dec 2025 01:02:13 +0000 Manifest next update: Fri 19 Dec 2025 01:02:13 +0000 Files and hashes: 1: MJiykAn66BwFdDhRkjnr3vy7VBE.roa (hash: tqEplVJJxxtIvLa3DZXrZRwoIF2P6+ZYgv+UgpAXwks=) 2: YmC2AROb4BNWnr-OG-taaUuch-w.crl (hash: IgdqN6clywZydWmhMPqIZGUB1iOWMpUDD50RIoyZv+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:99:d0:ff:2a:8c:74:77:14:45:64:61:12:f1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6260b601139be013569ebf8e1beb5a694b9c87ec Validity Not Before: Dec 18 01:02:13 2025 GMT Not After : Dec 19 01:02:13 2025 GMT Subject: CN=e59fcc81cc94f93a601bce2421a3f7a460619c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:0d:01:6a:9b:4d:e0:8d:6b:9d:37:e2:f1: 0e:85:f7:ae:46:44:5d:7b:7f:8b:dc:bc:92:24:f9: 6e:e1:06:46:be:72:f0:56:8a:07:a7:d0:36:41:67: f9:e8:18:d7:35:32:85:3d:a3:16:94:d1:bd:fd:ab: da:4d:45:98:b1:42:fe:c5:ff:e7:7d:31:ac:0e:0a: b1:c1:d8:ca:c2:95:4d:8d:e7:30:c9:d3:46:74:2f: 58:54:be:fc:d8:f6:1d:e8:57:02:f3:78:4c:52:e5: 5c:f5:96:a4:5f:5e:c4:af:4f:f9:60:41:da:e8:72: 17:65:8d:90:d3:12:95:0e:52:77:c4:6e:70:72:50: 5a:7b:4a:07:8e:7c:82:f3:72:25:2f:7a:42:74:47: 85:5a:cb:f1:3a:89:e5:3f:83:e8:a5:63:29:66:60: 27:31:8b:c8:74:20:fd:9d:19:69:68:b2:51:13:5c: 5b:ac:5c:ef:73:3e:8f:2e:1c:6d:0f:54:9d:9c:02: 2f:01:90:46:71:de:73:e4:c9:c1:b7:31:6e:38:57: 5c:e6:16:90:ad:b6:e2:93:a2:f8:37:75:26:ce:d7: fe:62:ec:f6:6d:ac:95:dc:4d:bd:2d:4d:8f:45:84: 68:e9:ba:c2:79:7d:3c:7f:2c:7e:61:b6:da:7b:2f: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9F:CC:81:CC:94:F9:3A:60:1B:CE:24:21:A3:F7:A4:60:61:9C:7E X509v3 Authority Key Identifier: keyid:62:60:B6:01:13:9B:E0:13:56:9E:BF:8E:1B:EB:5A:69:4B:9C:87:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmC2AROb4BNWnr-OG-taaUuch-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/991d3c-e338-4861-8ab1-29bb6ab2cf5c/1/YmC2AROb4BNWnr-OG-taaUuch-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f4:eb:23:d4:e4:44:8f:5d:d8:15:9a:98:a7:11:58:80:d9: c2:37:94:91:af:80:00:c7:bb:56:6e:da:d9:fd:14:4e:44:96: 19:f4:b0:23:d7:0f:a8:cd:f6:75:80:4d:76:f8:21:61:9c:ba: 9d:96:c7:12:e9:39:37:49:af:2b:f7:c2:cf:1a:38:f7:01:18: 0e:52:86:e2:0e:0b:2e:a4:b7:d6:3e:51:8a:2b:2d:ab:b9:66: 65:d6:2b:ba:c8:80:39:4f:4d:e5:77:69:a7:89:55:4a:cb:b7: 45:5f:de:d4:a5:1c:0a:b3:61:fb:1a:7b:e9:81:3c:81:f1:bf: d3:9b:ba:44:b9:de:a8:be:9e:9c:d4:d8:09:8a:30:41:92:80: 98:b3:c0:26:7f:c5:ae:cf:c9:0e:e5:05:2f:95:0e:87:cd:20: 79:ab:66:7e:22:a0:47:d6:d2:3a:4f:95:89:1c:e8:40:b5:7c: d1:bd:e2:51:ad:e2:99:ba:df:0b:70:dd:09:61:02:e0:68:21: 74:c8:11:2a:56:86:c7:20:7b:bf:14:1b:05:2a:0c:40:97:8c: 9d:e8:b9:ab:22:89:88:29:9e:7e:b9:0f:87:f2:fa:1a:d9:72: 15:8b:bd:91:dd:c9:90:15:1e:3c:3c:d2:2a:d7:52:07:d4:90: 8a:f1:f5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pnQ/yqMdHcURWRhEvE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjBiNjAxMTM5YmUwMTM1NjllYmY4ZTFiZWI1YTY5NGI5 Yzg3ZWMwHhcNMjUxMjE4MDEwMjEzWhcNMjUxMjE5MDEwMjEzWjAzMTEwLwYDVQQD EyhlNTlmY2M4MWNjOTRmOTNhNjAxYmNlMjQyMWEzZjdhNDYwNjE5YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsQNAWqbTeCNa5034vEOhfeuRkRd e3+L3LySJPlu4QZGvnLwVooHp9A2QWf56BjXNTKFPaMWlNG9/avaTUWYsUL+xf/n fTGsDgqxwdjKwpVNjecwydNGdC9YVL782PYd6FcC83hMUuVc9ZakX17Er0/5YEHa 6HIXZY2Q0xKVDlJ3xG5wclBae0oHjnyC83IlL3pCdEeFWsvxOonlP4PopWMpZmAn MYvIdCD9nRlpaLJRE1xbrFzvcz6PLhxtD1SdnAIvAZBGcd5z5MnBtzFuOFdc5haQ rbbik6L4N3Umztf+Yuz2bayV3E29LU2PRYRo6brCeX08fyx+Ybbaey+wfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWfzIHMlPk6YBvOJCGj96RgYZx+MB8GA1UdIwQY MBaAFGJgtgETm+ATVp6/jhvrWmlLnIfsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEt MjliYjZhYjJjZjVjLzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85OTFkM2MtZTMzOC00ODYxLThhYjEtMjliYjZhYjJjZjVj LzEvWW1DMkFST2I0Qk5XbnItT0ctdGFhVXVjaC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/TrI9Tk RI9d2BWamKcRWIDZwjeUka+AAMe7Vm7a2f0UTkSWGfSwI9cPqM32dYBNdvghYZy6 nZbHEuk5N0mvK/fCzxo49wEYDlKG4g4LLqS31j5Riistq7lmZdYrusiAOU9N5Xdp p4lVSsu3RV/e1KUcCrNh+xp76YE8gfG/05u6RLneqL6enNTYCYowQZKAmLPAJn/F rs/JDuUFL5UOh80geatmfiKgR9bSOk+ViRzoQLV80b3iUa3imbrfC3DdCWEC4Ggh dMgRKlaGxyB7vxQbBSoMQJeMnei5qyKJiCmefrkPh/L6GtlyFYu9kd3JkBUePDzS KtdSB9SQivH1Sw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:39:18 2025 by rpki-client