This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json) Hash identifier: WGH+bWU0uoJKMQ3ozWNuMp/73laeydW4+RqdthgVLhY= Subject key identifier: 58:93:63:5A:B2:D6:40:61:A3:23:3F:43:F1:18:A2:A5:6C:5E:0F:6E Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Certificate serial: 019AF6F8105EFDC2F112DCB6CED53197E459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft Manifest number: 0F85 Signing time: Sun 07 Dec 2025 04:00:43 +0000 Manifest this update: Sun 07 Dec 2025 04:00:43 +0000 Manifest next update: Mon 08 Dec 2025 04:00:43 +0000 Files and hashes: 1: 1ZXZrb7_KMMAffteaFQez59OJV0.roa (hash: qoGAFlDhNoBjbRdWcrJQCoTnOEYR10v5Gl4Yr+NRQu4=) 2: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: YFqOfow2xm22x3NvhmliAM4SksEEDz4XHwd6VqX8J0w=) 3: kIZJFU9FE0sowBjI7e7IPS7NRgU.roa (hash: 9Wc+e5T27oPhVr20geXtNISFlzFCv5eieNsW873OfKo=) 4: pDSqiruHTrt5wT6tXenOPgXVrZ8.roa (hash: dRSuxcEHLCbEbcETL0Q2NrXwBwARtdUXwOtoy1/PE/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:10:5e:fd:c2:f1:12:dc:b6:ce:d5:31:97:e4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa Validity Not Before: Dec 7 04:00:43 2025 GMT Not After : Dec 8 04:00:43 2025 GMT Subject: CN=5893635ab2d64061a3233f43f118a2a56c5e0f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:1b:9d:7d:08:9a:f2:aa:64:89:8d:92:29: 4e:b0:f5:42:d2:7d:fb:e7:cf:79:17:80:29:0a:89: 29:92:e9:40:08:fc:5a:88:58:f1:b3:96:8b:fd:62: b0:cf:95:de:85:bd:af:86:46:ad:91:11:26:38:29: 64:e2:02:cc:93:e0:62:a7:02:8c:f0:78:6b:3e:1b: 12:89:6c:13:e6:5b:84:2f:32:e5:95:ae:51:1a:3c: ef:2c:57:52:61:0e:bc:79:4f:1c:60:bc:9b:98:b2: 33:24:d7:31:93:43:28:6d:01:66:e7:99:d1:30:87: c5:f8:e4:ab:17:e4:97:ba:0f:b5:e3:2f:b7:0f:38: 1d:b6:83:28:f9:ab:27:f7:52:e6:a2:cb:f8:a6:75: 64:7c:cb:07:ce:ca:96:45:6b:f3:d2:57:d8:82:b7: bc:bf:44:a6:16:26:98:f7:40:18:ea:21:89:b4:5c: 16:e4:55:28:ec:6b:5a:e5:18:88:3f:4b:41:5f:a2: f1:a0:30:11:38:a9:c2:a2:a3:81:95:13:b7:8d:b4: 2a:e8:72:32:13:5d:8f:d0:46:c9:5a:a1:85:f3:cb: 23:81:0a:87:22:c6:d8:8b:7a:36:16:f3:64:87:d0: e7:ed:ef:ff:ff:ae:5a:15:39:92:c4:ac:58:49:2a: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:93:63:5A:B2:D6:40:61:A3:23:3F:43:F1:18:A2:A5:6C:5E:0F:6E X509v3 Authority Key Identifier: keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:05:fe:2e:3f:44:67:cc:be:0c:19:37:d5:5d:9a:ac:43:35: 80:2e:fa:42:2c:bb:a8:56:2d:13:7b:5a:73:a1:70:bd:35:b3: 97:ea:b0:2e:17:de:2d:48:cc:52:d5:b8:58:aa:a4:6c:d8:0f: 2d:05:27:81:93:d5:6d:42:98:40:fa:21:b4:9d:7b:35:c8:02: 1b:4c:41:a4:c7:6f:85:ac:24:fb:d9:ad:d5:c9:1c:12:71:e2: 7d:f2:84:23:f6:0d:8b:99:7f:1a:3b:3b:1e:74:c2:1a:96:d1: 63:37:72:b8:46:f5:f1:a9:52:6f:26:f6:68:41:21:ce:17:35: a7:01:5f:e4:43:7b:5f:85:18:3e:cf:4e:81:f0:d2:65:18:8a: 9d:27:aa:15:72:bf:a0:ee:0d:69:4d:97:16:11:a8:bd:13:5f: 41:5a:c0:07:87:99:60:4b:af:84:0e:17:bd:e5:6e:8d:e9:cc: 7e:f1:03:7d:17:8b:c8:ba:c1:3e:ea:62:7a:ae:6c:82:b5:97: 11:3a:d0:69:83:5b:4d:46:3d:42:16:f4:70:0e:e0:d7:69:78: f9:f8:f6:c3:56:d2:49:e9:a6:18:60:97:1d:cd:39:b8:1c:1d: 53:2d:74:3d:af:e0:9f:8e:dc:cd:aa:b0:fa:7e:6d:d3:41:d4: 26:01:a6:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+BBe/cLxEty2ztUxl+RZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh NGVhZmEwHhcNMjUxMjA3MDQwMDQzWhcNMjUxMjA4MDQwMDQzWjAzMTEwLwYDVQQD Eyg1ODkzNjM1YWIyZDY0MDYxYTMyMzNmNDNmMTE4YTJhNTZjNWUwZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfwbnX0ImvKqZImNkilOsPVC0n37 5895F4ApCokpkulACPxaiFjxs5aL/WKwz5Xehb2vhkatkREmOClk4gLMk+BipwKM 8HhrPhsSiWwT5luELzLlla5RGjzvLFdSYQ68eU8cYLybmLIzJNcxk0MobQFm55nR MIfF+OSrF+SXug+14y+3DzgdtoMo+asn91Lmosv4pnVkfMsHzsqWRWvz0lfYgre8 v0SmFiaY90AY6iGJtFwW5FUo7Gta5RiIP0tBX6LxoDAROKnCoqOBlRO3jbQq6HIy E12P0EbJWqGF88sjgQqHIsbYi3o2FvNkh9Dn7e///65aFTmSxKxYSSqynwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiTY1qy1kBhoyM/Q/EYoqVsXg9uMB8GA1UdIwQY MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQX+Lj9E Z8y+DBk31V2arEM1gC76Qiy7qFYtE3tac6FwvTWzl+qwLhfeLUjMUtW4WKqkbNgP LQUngZPVbUKYQPohtJ17NcgCG0xBpMdvhawk+9mt1ckcEnHiffKEI/YNi5l/Gjs7 HnTCGpbRYzdyuEb18alSbyb2aEEhzhc1pwFf5EN7X4UYPs9OgfDSZRiKnSeqFXK/ oO4NaU2XFhGovRNfQVrAB4eZYEuvhA4XveVujenMfvEDfReLyLrBPupieq5sgrWX ETrQaYNbTUY9Qhb0cA7g12l4+fj2w1bSSemmGGCXHc05uBwdUy10Pa/gn47czaqw +n5t00HUJgGmJA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:37 2025 by rpki-client