This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json) Hash identifier: ZiYQqF1M6l8PCDeKURu5ljQ0/yydJdC2LjBDR6uFHG4= Subject key identifier: 0B:A1:5F:0D:E0:88:74:12:57:0A:40:45:5B:FF:AF:56:79:8D:9F:88 Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942 Certificate serial: 019B24E3A502A7212A4A56D1C23513D12D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft Manifest number: 15C3 Signing time: Tue 16 Dec 2025 02:00:57 +0000 Manifest this update: Tue 16 Dec 2025 02:00:57 +0000 Manifest next update: Wed 17 Dec 2025 02:00:57 +0000 Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: coF9e/qhne7aEUOsg28YpbRTCDvGrx6d2c0uG60H6aM=) 2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:a5:02:a7:21:2a:4a:56:d1:c2:35:13:d1:2d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942 Validity Not Before: Dec 16 02:00:57 2025 GMT Not After : Dec 17 02:00:57 2025 GMT Subject: CN=0ba15f0de0887412570a40455bffaf56798d9f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:c1:51:c4:fa:14:4b:3c:df:42:6a:bc:ca: bd:f4:15:3c:7a:35:97:0a:ef:55:50:57:00:7b:84: 71:8e:6c:99:3c:2d:27:e0:ff:eb:4c:e9:a9:47:ba: e6:51:f3:a9:42:11:cb:67:07:f8:ed:f3:ca:2c:3a: 62:5f:14:13:97:f6:ac:04:e0:87:45:ea:b8:19:1b: ba:9f:ce:ed:ce:ca:13:7b:4e:25:84:48:3c:d1:37: 56:b0:e0:22:fe:bb:ba:01:e6:5e:d7:56:5b:70:e4: 18:20:76:c7:40:12:7e:87:ea:39:5c:89:9f:00:90: f5:7a:33:b0:16:57:dd:18:d0:80:52:02:5b:d0:07: 43:aa:05:42:be:b2:9b:86:17:e6:8f:59:9c:a1:f6: 4f:54:2e:4a:62:af:94:5d:3f:7b:27:65:2f:9e:29: b5:b3:de:b3:5f:38:bb:91:ec:bf:54:81:65:51:63: 78:1a:e3:81:3a:d7:6f:1a:16:7d:44:9b:b5:8e:35: 78:47:14:d3:99:17:24:19:3d:b0:9c:65:48:8c:01: d0:b3:8e:00:cf:9d:34:1d:3c:9f:3e:cc:7c:67:d6: e3:87:56:b8:d7:5e:13:13:5e:f7:81:c8:6a:77:39: 17:39:71:1d:b3:b1:8e:4f:dc:49:bc:b5:f8:d7:bd: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A1:5F:0D:E0:88:74:12:57:0A:40:45:5B:FF:AF:56:79:8D:9F:88 X509v3 Authority Key Identifier: keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:30:66:21:33:c4:c9:3f:31:8d:c2:26:56:75:31:fb:60:c7: b2:4b:50:db:36:00:03:37:96:d7:fa:ca:9e:1d:03:5d:b1:ad: da:96:bd:6c:60:3f:88:aa:e3:89:22:a7:0a:c0:30:b6:3f:55: cf:7a:36:8d:59:c6:e2:94:30:92:50:39:cd:50:91:f3:f0:12: 10:74:7f:07:3c:ef:b8:1d:c7:66:02:d0:26:4d:a7:3f:47:64: ee:63:1d:ba:c5:8f:81:bb:63:a4:06:0d:57:0a:07:1d:86:c8: 91:95:bd:3d:fb:4a:bb:eb:ad:58:6c:5b:c9:7e:be:17:e8:78: 1b:1c:36:fb:10:ac:6d:8b:e2:c8:12:ec:ed:ba:34:01:0b:74: 42:03:e2:ab:c8:7e:3e:ac:df:58:0e:91:f4:9f:ea:71:1e:2e: 65:1e:3f:94:f5:09:bf:5c:54:ee:a8:f1:8f:c7:9d:2a:a0:4b: 69:cc:d9:6a:cd:b8:5a:fe:97:ee:50:19:6d:5e:02:41:b2:d0: cd:6a:54:4e:17:61:ed:dd:93:61:79:f1:78:e9:e1:b5:f0:3e: 0d:68:f2:2c:2d:84:25:dc:e5:45:be:8f:23:67:63:b3:33:fe: e5:07:0a:d6:a0:4d:2b:d3:fe:9e:78:33:75:c1:41:c2:25:99: a8:c9:a5:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk46UCpyEqSlbRwjUT0S2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx MWQ5NDIwHhcNMjUxMjE2MDIwMDU3WhcNMjUxMjE3MDIwMDU3WjAzMTEwLwYDVQQD EygwYmExNWYwZGUwODg3NDEyNTcwYTQwNDU1YmZmYWY1Njc5OGQ5Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncPBUcT6FEs830JqvMq99BU8ejWX Cu9VUFcAe4RxjmyZPC0n4P/rTOmpR7rmUfOpQhHLZwf47fPKLDpiXxQTl/asBOCH Req4GRu6n87tzsoTe04lhEg80TdWsOAi/ru6AeZe11ZbcOQYIHbHQBJ+h+o5XImf AJD1ejOwFlfdGNCAUgJb0AdDqgVCvrKbhhfmj1mcofZPVC5KYq+UXT97J2Uvnim1 s96zXzi7key/VIFlUWN4GuOBOtdvGhZ9RJu1jjV4RxTTmRckGT2wnGVIjAHQs44A z500HTyfPsx8Z9bjh1a4114TE173gchqdzkXOXEds7GOT9xJvLX4173CIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuhXw3giHQSVwpARVv/r1Z5jZ+IMB8GA1UdIwQY MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4 LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDBmITPE yT8xjcImVnUx+2DHsktQ2zYAAzeW1/rKnh0DXbGt2pa9bGA/iKrjiSKnCsAwtj9V z3o2jVnG4pQwklA5zVCR8/ASEHR/BzzvuB3HZgLQJk2nP0dk7mMdusWPgbtjpAYN VwoHHYbIkZW9PftKu+utWGxbyX6+F+h4Gxw2+xCsbYviyBLs7bo0AQt0QgPiq8h+ PqzfWA6R9J/qcR4uZR4/lPUJv1xU7qjxj8edKqBLaczZas24Wv6X7lAZbV4CQbLQ zWpUThdh7d2TYXnxeOnhtfA+DWjyLC2EJdzlRb6PI2djszP+5QcK1qBNK9P+nngz dcFBwiWZqMmldg== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:08 2025 by rpki-client