This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json) Hash identifier: FKvjvMTRg6GRi8ZbkXGF4U8zWptf44su6O+tadraAmQ= Subject key identifier: 11:DB:3B:48:66:50:E0:5C:C1:CB:BE:85:9E:BF:7E:5D:BA:41:54:A3 Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Certificate serial: 019AF208E18597DA741E9558D2F00FAFB80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=) 2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: JibVNGNZRea5WhhI5vuZc1KU0y2paVS1HVxEhV20+7c=) 3: xrWOE_nW0Gwg8_uXXdLjv5S3bsk.roa (hash: LG+6VKhGHvSGTVuGjhuxo2fqbg4w3RjW0n+axpRLJ0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e1:85:97:da:74:1e:95:58:d2:f0:0f:af:b8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=11db3b486650e05cc1cbbe859ebf7e5dba4154a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:ca:6d:a7:f9:8e:eb:1f:05:9b:32:da:27: 54:64:3a:7c:89:6f:2d:43:0a:ab:17:6e:87:80:8d: 61:fb:bf:1a:f4:b4:89:d7:48:5a:11:e3:db:1b:19: 4f:73:6b:86:2f:a9:c0:f4:24:9e:1d:fd:c9:3e:44: 89:bc:30:03:a5:73:80:17:a1:12:4b:ee:ca:e5:72: 77:3c:9d:1e:ad:0b:5f:27:7d:3c:d9:62:e9:35:53: 32:35:b7:97:36:9a:bc:ea:db:31:9d:59:03:39:04: cd:a7:ee:73:d3:d2:79:5e:cf:07:9a:d0:81:00:3a: 2f:77:a1:be:4f:f9:b6:d2:2a:33:5a:46:2b:a0:7a: 5a:73:90:6f:e7:f1:69:ea:ec:30:48:0d:4d:41:c0: e3:2a:67:ca:0c:44:7e:22:5c:97:3f:b4:33:12:3f: 2f:bc:28:6f:1f:fe:c7:d6:60:b4:8c:fd:60:95:b3: f7:c6:df:91:aa:92:b7:d8:d9:0c:0f:61:e8:c6:e4: bf:a7:c9:d3:10:a0:5d:34:ca:16:b2:10:0b:5d:44: 73:d6:44:33:49:a8:f2:7d:88:44:cf:56:9c:f1:04: 9b:f9:94:1f:9a:be:da:8b:70:c9:2c:69:81:6f:66: 4b:85:2e:3c:78:1e:52:a8:73:1a:7a:f8:1c:7c:39: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DB:3B:48:66:50:E0:5C:C1:CB:BE:85:9E:BF:7E:5D:BA:41:54:A3 X509v3 Authority Key Identifier: keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ab:35:3b:b5:89:22:21:00:f2:4a:04:33:36:66:26:de:c4: 67:70:27:e2:fd:e5:16:2c:bc:98:7d:12:c3:29:6b:80:21:55: 0e:67:39:1d:1e:a1:26:27:89:a0:06:bf:ae:1e:4a:ab:fa:da: d0:fc:41:de:4e:9a:c5:84:0e:37:c5:61:0e:3c:51:3f:38:c5: a9:87:be:37:33:6d:6f:bf:3f:ee:ed:65:8b:94:6b:42:89:1c: 0a:92:94:d3:9d:06:d7:65:58:bb:c3:41:71:41:8d:4f:58:7b: 1c:ab:a5:bb:b0:71:33:1d:73:02:70:42:da:9e:93:7d:86:97: 15:24:03:97:04:e4:11:8f:dd:f7:3b:97:d7:b8:1f:06:cb:7d: db:1e:9f:e6:a8:60:8a:87:50:07:1a:68:0b:95:76:4c:a5:80: 63:fd:0b:54:b2:43:0b:9b:78:0c:83:d3:1a:c4:df:75:28:cc: d1:73:68:0f:c1:88:ee:e6:75:54:30:dd:03:bb:bb:86:be:af: 50:ab:08:8d:25:01:81:3d:e8:e9:d9:39:58:a3:50:77:6a:a7: 16:81:c0:14:35:7d:34:0d:03:60:33:09:f7:1f:63:78:db:fa: 94:59:15:a0:fd:ac:51:0f:ce:5e:a7:de:52:89:6d:59:d6:87: 6d:ed:e6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOGFl9p0HpVY0vAPr7gOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz NzNlMmEwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygxMWRiM2I0ODY2NTBlMDVjYzFjYmJlODU5ZWJmN2U1ZGJhNDE1NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqnKbaf5jusfBZsy2idUZDp8iW8t QwqrF26HgI1h+78a9LSJ10haEePbGxlPc2uGL6nA9CSeHf3JPkSJvDADpXOAF6ES S+7K5XJ3PJ0erQtfJ3082WLpNVMyNbeXNpq86tsxnVkDOQTNp+5z09J5Xs8HmtCB ADovd6G+T/m20iozWkYroHpac5Bv5/Fp6uwwSA1NQcDjKmfKDER+IlyXP7QzEj8v vChvH/7H1mC0jP1glbP3xt+RqpK32NkMD2HoxuS/p8nTEKBdNMoWshALXURz1kQz SajyfYhEz1ac8QSb+ZQfmr7ai3DJLGmBb2ZLhS48eB5SqHMaevgcfDlabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHbO0hmUOBcwcu+hZ6/fl26QVSjMB8GA1UdIwQY MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct NjJkODgxYWE5MDZmLzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxas1O7WJ IiEA8koEMzZmJt7EZ3An4v3lFiy8mH0SwylrgCFVDmc5HR6hJieJoAa/rh5Kq/ra 0PxB3k6axYQON8VhDjxRPzjFqYe+NzNtb78/7u1li5RrQokcCpKU050G12VYu8NB cUGNT1h7HKulu7BxMx1zAnBC2p6TfYaXFSQDlwTkEY/d9zuX17gfBst92x6f5qhg iodQBxpoC5V2TKWAY/0LVLJDC5t4DIPTGsTfdSjM0XNoD8GI7uZ1VDDdA7u7hr6v UKsIjSUBgT3o6dk5WKNQd2qnFoHAFDV9NA0DYDMJ9x9jeNv6lFkVoP2sUQ/OXqfe UoltWdaHbe3mYA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:38 2025 by rpki-client