This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft File: YDM81vG1nAtoLh2jiSN-2j6dqRg.mft (raw, json) Hash identifier: 1bLKwEU2WicKK6hIAUkZpQNg3v9c7b//ikFbz76PndE= Subject key identifier: FF:D6:B6:B6:D4:E6:54:13:66:D6:5C:C9:D1:2E:A7:48:2C:0D:51:EB Authority key identifier: 60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 Certificate issuer: /CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Certificate serial: 019AF12EEAAEE8D07629E2491D63D6308ED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: YDM81vG1nAtoLh2jiSN-2j6dqRg.crl (hash: qyjuf2MBxquHHNzQdf9n5W1U/TjMxgX9O5h1VDnEIy4=) 2: YvGTICIQPtclpMrYwq9cvhdFKOI.roa (hash: VRRExLjeFp73/0IARjKER20GFoe2YDaIzWUGvE6p51I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ea:ae:e8:d0:76:29:e2:49:1d:63:d6:30:8e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60333cd6f1b59c0b682e1da389237eda3e9da918 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=ffd6b6b6d4e6541366d65cc9d12ea7482c0d51eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:da:85:b5:6c:48:32:46:15:0b:8b:f4:1d: db:64:18:e9:60:fc:a2:8a:1b:6e:27:03:ed:c5:5d: 7b:ae:21:09:02:d0:28:86:16:a2:14:c3:9e:fc:02: 21:f5:1b:b0:44:15:e3:69:3d:f1:58:12:ba:d0:39: a7:18:b9:7e:2f:47:74:95:e9:fc:53:ea:27:e5:74: 15:74:5a:26:5a:28:08:c6:86:cc:03:43:16:62:b5: c8:b7:f9:4f:99:2d:7b:9d:a5:e4:e1:1e:ed:6a:e0: 82:5d:dd:74:af:28:25:63:eb:90:49:b7:8e:79:12: 06:8e:5d:18:29:82:31:6f:79:ca:15:54:be:69:34: 0e:8d:91:82:2b:f5:fb:4b:4e:b9:b3:6b:ee:41:70: f4:14:0b:69:51:42:5c:2a:66:01:98:61:95:27:96: ab:87:b3:5e:37:42:08:32:c8:13:a6:b5:d6:34:e7: ed:2b:9b:e6:56:a1:c3:db:6c:d0:6b:8a:fa:b9:87: 22:53:df:fb:43:a2:2f:bb:e8:1b:ae:32:70:b1:ef: b1:19:e4:4d:6f:af:0d:94:01:c9:79:34:57:b4:65: e9:12:f0:4b:5b:32:83:83:01:a0:08:22:02:25:c8: ca:fb:ac:dc:8e:32:4f:f9:81:dd:53:e9:39:a7:0b: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:B6:B6:D4:E6:54:13:66:D6:5C:C9:D1:2E:A7:48:2C:0D:51:EB X509v3 Authority Key Identifier: keyid:60:33:3C:D6:F1:B5:9C:0B:68:2E:1D:A3:89:23:7E:DA:3E:9D:A9:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDM81vG1nAtoLh2jiSN-2j6dqRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4222b2-c79c-4d5e-99d7-cdb281a2b3a8/1/YDM81vG1nAtoLh2jiSN-2j6dqRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6b:17:6d:17:d4:29:93:96:f0:c7:38:fd:ea:7e:99:da:a5: 19:c4:3f:4c:7b:bd:98:0f:1e:4a:42:ec:4d:ef:da:bd:39:0d: 18:55:d7:09:f5:e6:4a:94:8c:ad:78:6c:4a:2d:dc:2d:bb:d2: 68:f4:3d:83:18:f8:a3:a7:11:14:48:5e:35:c3:1f:ac:6b:ab: cb:ba:7e:05:b6:a0:32:0d:bc:c3:f0:de:29:5a:e0:77:94:1c: 8f:19:47:de:c9:73:07:6e:3c:0c:f4:0d:7e:e5:bb:53:fe:94: 11:0e:c6:51:63:c3:e5:f6:b2:33:91:da:59:9c:7c:2f:b9:a6: 01:c7:26:9a:50:74:38:35:f5:1e:15:9a:02:84:3d:93:24:a1: 4d:58:30:6c:33:9e:ba:09:c8:e5:6e:5a:1e:0c:16:c5:f0:d2: 04:44:b7:6b:5f:67:b6:9d:a0:91:a6:13:5c:b1:65:03:f0:33: d0:be:72:3a:39:e0:cf:33:3f:20:bd:74:26:24:52:96:ce:4c: a3:de:29:6f:0b:77:89:97:51:55:da:ea:e6:90:8f:98:dd:d9: 5a:bc:be:42:41:3e:b6:5d:37:85:24:75:06:f3:87:30:31:b5: 69:a3:4a:bd:9f:c7:9b:73:97:68:2a:b8:d7:ca:87:34:ef:4d: c3:82:a6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuqu6NB2KeJJHWPWMI7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzMzY2Q2ZjFiNTljMGI2ODJlMWRhMzg5MjM3ZWRhM2U5 ZGE5MTgwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD EyhmZmQ2YjZiNmQ0ZTY1NDEzNjZkNjVjYzlkMTJlYTc0ODJjMGQ1MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldLahbVsSDJGFQuL9B3bZBjpYPyi ihtuJwPtxV17riEJAtAohhaiFMOe/AIh9RuwRBXjaT3xWBK60DmnGLl+L0d0len8 U+on5XQVdFomWigIxobMA0MWYrXIt/lPmS17naXk4R7tauCCXd10ryglY+uQSbeO eRIGjl0YKYIxb3nKFVS+aTQOjZGCK/X7S065s2vuQXD0FAtpUUJcKmYBmGGVJ5ar h7NeN0IIMsgTprXWNOftK5vmVqHD22zQa4r6uYciU9/7Q6Ivu+gbrjJwse+xGeRN b68NlAHJeTRXtGXpEvBLWzKDgwGgCCICJcjK+6zcjjJP+YHdU+k5pwv86wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/WtrbU5lQTZtZcydEup0gsDVHrMB8GA1UdIwQY MBaAFGAzPNbxtZwLaC4do4kjfto+nakYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDct Y2RiMjgxYTJiM2E4LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MjIyYjItYzc5Yy00ZDVlLTk5ZDctY2RiMjgxYTJiM2E4 LzEvWURNODF2RzFuQXRvTGgyamlTTi0yajZkcVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2sXbRfU KZOW8Mc4/ep+mdqlGcQ/THu9mA8eSkLsTe/avTkNGFXXCfXmSpSMrXhsSi3cLbvS aPQ9gxj4o6cRFEheNcMfrGury7p+BbagMg28w/DeKVrgd5QcjxlH3slzB248DPQN fuW7U/6UEQ7GUWPD5fayM5HaWZx8L7mmAccmmlB0ODX1HhWaAoQ9kyShTVgwbDOe ugnI5W5aHgwWxfDSBES3a19ntp2gkaYTXLFlA/Az0L5yOjngzzM/IL10JiRSls5M o94pbwt3iZdRVdrq5pCPmN3ZWry+QkE+tl03hSR1BvOHMDG1aaNKvZ/Hm3OXaCq4 18qHNO9Nw4KmAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:37 2025 by rpki-client