This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft File: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json) Hash identifier: mO2zltkyhbP7KBQMkhzRwmcsLg8XBE9nP/o5GPwJc98= Subject key identifier: C0:E5:9F:17:4B:80:46:37:C4:38:61:1F:52:76:B7:22:B3:40:AE:42 Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55 Certificate issuer: /CN=60c7647b728f7c59f613e89047542fa7855fa355 Certificate serial: 019AF3F7566DE026E9834A74E43E685D6704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft Manifest number: 0D44 Signing time: Sat 06 Dec 2025 14:01:04 +0000 Manifest this update: Sat 06 Dec 2025 14:01:04 +0000 Manifest next update: Sun 07 Dec 2025 14:01:04 +0000 Files and hashes: 1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: P3yAOh5YVUMl49oupIpLySUalJ5g+NhtQKvI+rSWNLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:56:6d:e0:26:e9:83:4a:74:e4:3e:68:5d:67:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355 Validity Not Before: Dec 6 14:01:04 2025 GMT Not After : Dec 7 14:01:04 2025 GMT Subject: CN=c0e59f174b804637c438611f5276b722b340ae42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:eb:67:d0:e4:88:31:ed:62:88:56:d1:9c: 71:90:75:89:4f:c0:dd:ce:59:ce:e0:e1:51:ba:2b: e9:65:1f:6d:db:49:66:69:6b:ba:0b:d5:6b:f8:7b: 5b:87:70:2c:1f:5c:3b:55:d2:b2:db:54:15:fd:63: 46:19:fa:70:b9:87:4b:6f:0d:34:96:60:0e:d4:14: 4f:97:f3:c0:f4:f5:a0:1d:9d:75:66:76:4d:ea:62: ee:df:64:75:7d:10:34:06:15:c2:62:52:3c:60:9d: 80:46:6c:61:00:54:a0:c4:3d:65:bc:01:7b:53:09: d3:bf:6d:48:44:8f:48:a8:ce:3a:6c:11:e7:bc:f6: dc:cb:29:ed:02:31:60:0f:96:88:cc:6e:4b:67:3b: 02:9b:72:e0:61:37:e2:36:ad:7c:e1:ae:80:ad:dd: 26:15:c6:e4:0a:5d:79:9e:75:16:3d:91:f0:e3:e2: 8a:23:67:bc:53:b0:18:79:d2:16:3f:3b:ac:67:dc: 0b:7d:df:70:f1:6c:bd:3d:2e:4a:4a:6a:15:d5:81: 07:da:33:14:20:a2:bc:e2:1b:48:00:8a:f0:96:50: e1:73:a6:db:fa:70:fd:5b:70:00:93:b5:10:f1:44: 6a:e0:4e:3d:37:a4:e7:cf:2d:be:48:36:0a:02:5d: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E5:9F:17:4B:80:46:37:C4:38:61:1F:52:76:B7:22:B3:40:AE:42 X509v3 Authority Key Identifier: keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:dd:4d:53:da:60:61:9c:e4:ef:f9:e1:83:a2:83:59:90:6d: 15:5e:a5:b9:48:0f:aa:da:b6:fe:d9:fc:ec:5b:6b:76:2b:d6: ba:f7:65:7f:0e:f1:57:f5:cd:38:9c:81:31:5c:36:99:19:f7: bf:82:a7:e5:e3:8e:f5:91:17:e6:22:a5:33:a6:1c:8a:40:79: b1:9c:54:c0:c4:c5:d2:19:5e:02:4a:05:89:e8:0a:6d:09:31: 41:3f:aa:dd:9b:83:69:1e:f6:cb:50:d8:1c:ba:07:b9:47:f3: 75:e0:ae:be:04:4d:c3:ae:2c:d5:b7:6c:e2:f6:e6:0e:c9:d0: cb:81:a0:47:19:97:78:bb:f8:cb:b7:ed:0e:12:e6:03:5f:38: 3f:c0:7a:4d:ee:83:fe:74:51:4b:d0:44:f2:a9:2d:1f:0f:2c: 70:a0:c9:f5:40:a7:43:e1:f9:e5:bc:26:64:b0:29:47:b0:d0: 02:71:56:ee:4a:a2:0b:ce:f7:59:b2:de:6e:89:bc:ec:cf:5d: e5:a6:31:49:05:18:61:3b:9b:95:e7:a3:f6:c3:ac:24:99:95: ee:cd:17:20:6c:a1:e9:78:44:51:33:d6:8f:52:b2:7d:a2:cf: 23:ab:60:4a:ea:f2:c9:86:3e:21:2b:48:70:11:4e:68:68:4e: dd:21:98:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91Zt4Cbpg0p05D5oXWcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzc2NDdiNzI4ZjdjNTlmNjEzZTg5MDQ3NTQyZmE3ODU1 ZmEzNTUwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD EyhjMGU1OWYxNzRiODA0NjM3YzQzODYxMWY1Mjc2YjcyMmIzNDBhZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXTrZ9DkiDHtYohW0ZxxkHWJT8Dd zlnO4OFRuivpZR9t20lmaWu6C9Vr+Htbh3AsH1w7VdKy21QV/WNGGfpwuYdLbw00 lmAO1BRPl/PA9PWgHZ11ZnZN6mLu32R1fRA0BhXCYlI8YJ2ARmxhAFSgxD1lvAF7 UwnTv21IRI9IqM46bBHnvPbcyyntAjFgD5aIzG5LZzsCm3LgYTfiNq184a6Ard0m FcbkCl15nnUWPZHw4+KKI2e8U7AYedIWPzusZ9wLfd9w8Wy9PS5KSmoV1YEH2jMU IKK84htIAIrwllDhc6bb+nD9W3AAk7UQ8URq4E49N6Tnzy2+SDYKAl13AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDlnxdLgEY3xDhhH1J2tyKzQK5CMB8GA1UdIwQY MBaAFGDHZHtyj3xZ9hPokEdUL6eFX6NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEt YTlkZTRhMzFmZTExLzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wZmY2OTAtODE2Ni00M2IyLTk4YTEtYTlkZTRhMzFmZTEx LzEvWU1ka2UzS1BmRm4yRS1pUVIxUXZwNFZmbzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd1NU9pg YZzk7/nhg6KDWZBtFV6luUgPqtq2/tn87FtrdivWuvdlfw7xV/XNOJyBMVw2mRn3 v4Kn5eOO9ZEX5iKlM6YcikB5sZxUwMTF0hleAkoFiegKbQkxQT+q3ZuDaR72y1DY HLoHuUfzdeCuvgRNw64s1bds4vbmDsnQy4GgRxmXeLv4y7ftDhLmA184P8B6Te6D /nRRS9BE8qktHw8scKDJ9UCnQ+H55bwmZLApR7DQAnFW7kqiC873WbLebom87M9d 5aYxSQUYYTubleej9sOsJJmV7s0XIGyh6XhEUTPWj1KyfaLPI6tgSuryyYY+IStI cBFOaGhO3SGYIw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:22 2025 by rpki-client