This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json) Hash identifier: g7pnwlz5tuQvQv9ObVwquo/K9QwHpeaFUn61HvjnuP8= Subject key identifier: E3:38:E0:D1:6E:85:63:63:D7:6B:64:CF:F1:72:AC:70:27:71:DC:54 Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942 Certificate serial: 019AF2AD6DB145ED46BAD5D2BFA29A3328CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft Manifest number: 15A9 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: 29tanHCZ0/OgQUHzcT/dOvlE1V+xp+FfwZPMavqZz+M=) 2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6d:b1:45:ed:46:ba:d5:d2:bf:a2:9a:33:28:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=e338e0d16e856363d76b64cff172ac702771dc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:0b:de:f4:9c:0f:d3:be:55:f5:3b:1a:d1: 61:2f:35:18:c7:ff:72:ef:17:30:f8:ae:5c:43:0f: 50:40:aa:8c:16:1d:b8:e7:4f:3a:b4:a8:9b:68:3d: cc:9e:df:f6:ba:33:7c:1a:65:19:24:fa:e8:39:59: 15:e1:50:e9:5c:27:23:8c:ab:9c:b8:2b:98:bb:12: 9f:b8:2c:7c:e2:41:4f:40:0c:18:47:33:9a:c8:fa: bf:a0:5c:19:10:ec:46:2a:7b:e0:b2:39:19:95:a4: 20:fd:3b:60:c1:cd:61:08:88:df:fe:50:b7:43:63: 71:3b:db:05:4e:88:9a:74:13:60:70:90:10:57:21: 1f:e6:55:13:34:e2:a0:bd:8e:44:dc:ff:8f:c0:19: 34:66:f4:d9:84:06:94:82:1f:e4:e6:b5:de:79:0e: 43:85:64:2c:42:8e:c8:58:74:95:77:85:b6:d7:be: 63:1b:63:f9:53:bd:18:d0:ac:07:cf:a2:3e:fe:23: 9e:71:b1:32:c1:4a:a9:eb:cd:be:d7:a2:52:c9:07: df:77:4b:23:7b:6c:01:9c:6e:ea:46:13:09:f4:9a: 72:56:55:c8:0f:bd:88:fc:92:a2:ed:d2:53:a3:86: 10:80:3e:25:9e:98:02:3f:ec:0e:77:88:6b:a8:94: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:38:E0:D1:6E:85:63:63:D7:6B:64:CF:F1:72:AC:70:27:71:DC:54 X509v3 Authority Key Identifier: keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c7:4a:5a:d5:56:a7:30:a8:9f:53:ed:c1:7e:64:85:c7:8e: 58:88:55:3b:b6:82:44:33:84:1e:e4:c8:c7:eb:67:88:70:36: b8:fd:48:9d:3d:70:60:91:7d:1d:3e:09:10:4a:1f:cf:9b:48: be:61:52:48:be:25:91:5e:dd:33:9b:54:b0:e4:c4:5c:68:42: 73:6a:bb:e1:b5:84:f7:54:a3:23:fd:4f:8f:42:3f:e4:ea:a5: 55:1c:00:47:e9:84:63:11:dc:ef:6d:10:c6:24:0d:85:40:01: ef:4e:6b:33:3c:01:02:28:93:53:0f:17:4a:b5:b0:5f:76:6b: 1b:90:5a:00:22:d0:76:a2:7d:7a:8f:03:b2:b4:f1:4f:2a:ca: 54:29:c8:1b:aa:f8:b1:04:c8:f1:56:f8:3e:93:e5:33:6b:89: d2:37:1f:22:b5:3c:d0:f4:82:de:5f:a4:e4:e7:b1:b6:1e:40: e8:8e:ff:1a:d0:12:73:0b:c5:19:d7:74:34:37:d1:b5:22:b4: 2a:80:c1:f7:18:2f:83:c0:ea:af:74:43:97:ba:08:d7:87:72: 83:9b:ee:d8:2f:59:81:09:79:89:a1:7f:c8:bb:8e:b5:88:d5: 2b:11:a2:6c:71:1c:1a:f8:60:bb:d3:dd:f3:54:e4:8c:2e:5c: 2b:24:54:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW2xRe1GutXSv6KaMyjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx MWQ5NDIwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EyhlMzM4ZTBkMTZlODU2MzYzZDc2YjY0Y2ZmMTcyYWM3MDI3NzFkYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluoL3vScD9O+VfU7GtFhLzUYx/9y 7xcw+K5cQw9QQKqMFh245086tKibaD3Mnt/2ujN8GmUZJProOVkV4VDpXCcjjKuc uCuYuxKfuCx84kFPQAwYRzOayPq/oFwZEOxGKnvgsjkZlaQg/Ttgwc1hCIjf/lC3 Q2NxO9sFToiadBNgcJAQVyEf5lUTNOKgvY5E3P+PwBk0ZvTZhAaUgh/k5rXeeQ5D hWQsQo7IWHSVd4W2175jG2P5U70Y0KwHz6I+/iOecbEywUqp682+16JSyQffd0sj e2wBnG7qRhMJ9JpyVlXID72I/JKi7dJTo4YQgD4lnpgCP+wOd4hrqJTvAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM44NFuhWNj12tkz/FyrHAncdxUMB8GA1UdIwQY MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4 LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMdKWtVW pzCon1PtwX5khceOWIhVO7aCRDOEHuTIx+tniHA2uP1InT1wYJF9HT4JEEofz5tI vmFSSL4lkV7dM5tUsOTEXGhCc2q74bWE91SjI/1Pj0I/5OqlVRwAR+mEYxHc720Q xiQNhUAB705rMzwBAiiTUw8XSrWwX3ZrG5BaACLQdqJ9eo8DsrTxTyrKVCnIG6r4 sQTI8Vb4PpPlM2uJ0jcfIrU80PSC3l+k5Oexth5A6I7/GtAScwvFGdd0NDfRtSK0 KoDB9xgvg8Dqr3RDl7oI14dyg5vu2C9ZgQl5iaF/yLuOtYjVKxGibHEcGvhgu9Pd 81TkjC5cKyRUgw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:22 2025 by rpki-client