This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json) Hash identifier: 5mSEvaWkbfAW4pbXley9xjvf7wChmsizeMcRRYaCf4U= Subject key identifier: 25:31:13:AC:B2:EF:D4:46:17:3B:CF:D4:28:05:1E:49:DD:FF:BC:BC Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f Certificate serial: 019AF12DD5DF44A274CA87AC23917DB7DE93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft Manifest number: 0333 Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: IbGcUG2GdASqUOii6piNQb/PvyqdkNbmZTlD39h9zh4=) 2: wK5U0OA4so9Bb6LaTOAhvYcrZbw.roa (hash: i3F3Ec/aHEk6lLvyEsCOnZPx8LpXq7mO54DzXI/2qs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d5:df:44:a2:74:ca:87:ac:23:91:7d:b7:de:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=253113acb2efd446173bcfd428051e49ddffbcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:15:df:42:3c:a1:2e:73:66:b0:74:c8:fc: a1:5c:7c:b3:84:67:7e:1a:bc:44:c2:e6:08:31:0c: c7:40:31:82:e6:0c:0f:22:9c:c8:c7:4a:6f:51:61: 8c:9e:d7:09:e9:de:2c:1b:ef:0f:3d:21:a0:f6:2b: 7f:77:c1:91:d8:c1:61:ed:a7:8b:f9:07:94:00:79: 31:23:37:e6:9d:86:59:5c:85:39:ff:5d:d3:1d:39: a8:06:0b:4e:8b:0e:45:a5:05:ac:52:70:fb:ae:88: c3:e7:53:7d:3d:54:66:06:06:17:1b:2b:bd:86:74: a9:cc:62:9a:ed:bc:d9:41:d9:26:56:15:6e:09:e8: 0b:b0:ef:f8:eb:b7:dc:ca:9f:bc:c8:7b:82:db:3b: e8:ac:c6:67:6b:f2:6e:32:1c:93:27:05:ae:2f:44: 3f:2a:97:59:46:1e:b2:85:64:f9:1a:5f:a4:4e:9d: 5e:0b:b1:02:c7:8d:9c:0f:01:c0:5b:2d:5b:97:2d: ea:b8:5c:66:ac:c5:56:70:e8:fa:2e:56:da:38:50: 54:e6:9d:13:30:7b:c5:5f:05:45:76:5d:92:b1:3f: 5e:16:55:76:77:67:97:1c:bd:5e:8c:2c:44:d5:ae: 4f:71:1c:1e:64:33:e1:bf:43:89:ce:90:36:ca:ef: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:13:AC:B2:EF:D4:46:17:3B:CF:D4:28:05:1E:49:DD:FF:BC:BC X509v3 Authority Key Identifier: keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a5:84:b0:0e:76:34:06:cf:1d:11:58:83:d4:a2:96:a7:2d: 7b:04:d6:2c:46:83:27:f1:6b:fe:ac:a3:aa:6e:0c:9e:25:ca: d5:36:e7:31:f7:b6:9f:5b:84:50:2b:1d:ed:97:67:3d:ca:4e: af:ee:96:c8:d1:50:17:58:1d:20:3d:f2:b5:ee:f7:b5:b9:95: f3:7a:42:a6:fd:09:49:45:ac:04:e7:cf:aa:5f:cb:95:e3:1f: 5c:e0:59:48:92:0f:02:aa:74:be:31:6f:d9:48:66:e7:4c:cd: 0a:82:d9:de:da:77:fd:b3:c7:da:23:9f:b7:50:e2:49:33:3e: 64:ec:e2:c1:87:92:88:fc:d9:99:42:ad:86:a2:7f:b2:c6:ad: 21:fc:32:56:e2:1e:33:20:0a:6a:7b:47:dd:68:3d:d8:63:58: 69:a5:fb:22:f0:8e:b4:37:9e:35:bc:e6:1b:c1:d8:33:b1:2b: 16:2b:98:0e:6e:13:63:34:63:c1:7e:c0:df:05:52:74:82:0f: 33:47:5b:04:83:8e:fa:55:a6:60:5c:2a:a6:fa:c7:5c:a4:21: 0d:4e:df:91:89:0f:5d:13:cd:8b:2c:c7:68:9c:b6:03:f6:b6: 07:ef:b5:3c:6b:81:16:47:3f:42:c0:c5:c0:82:49:cc:16:23: 23:ca:81:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdXfRKJ0yoesI5F9t96TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjVhYWM3NmZlNmJmMjkxMzM1ZDE5YTY1OGU2NDg5MTA1 Yjg2OWYwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD EygyNTMxMTNhY2IyZWZkNDQ2MTczYmNmZDQyODA1MWU0OWRkZmZiY2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOUV30I8oS5zZrB0yPyhXHyzhGd+ GrxEwuYIMQzHQDGC5gwPIpzIx0pvUWGMntcJ6d4sG+8PPSGg9it/d8GR2MFh7aeL +QeUAHkxIzfmnYZZXIU5/13THTmoBgtOiw5FpQWsUnD7rojD51N9PVRmBgYXGyu9 hnSpzGKa7bzZQdkmVhVuCegLsO/467fcyp+8yHuC2zvorMZna/JuMhyTJwWuL0Q/ KpdZRh6yhWT5Gl+kTp1eC7ECx42cDwHAWy1bly3quFxmrMVWcOj6LlbaOFBU5p0T MHvFXwVFdl2SsT9eFlV2d2eXHL1ejCxE1a5PcRweZDPhv0OJzpA2yu/quwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUxE6yy79RGFzvP1CgFHknd/7y8MB8GA1UdIwQY MBaAFGD1qsdv5r8pEzXRmmWOZIkQW4afMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEt MmJmYjZhZGRjZjQ1LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMTJiMDAtYWY4Mi00NzM1LWFhYzEtMmJmYjZhZGRjZjQ1 LzEvWVBXcXgyX212eWtUTmRHYVpZNWtpUkJiaHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6WEsA52 NAbPHRFYg9SilqctewTWLEaDJ/Fr/qyjqm4MniXK1TbnMfe2n1uEUCsd7ZdnPcpO r+6WyNFQF1gdID3yte73tbmV83pCpv0JSUWsBOfPql/LleMfXOBZSJIPAqp0vjFv 2Uhm50zNCoLZ3tp3/bPH2iOft1DiSTM+ZOziwYeSiPzZmUKthqJ/ssatIfwyVuIe MyAKantH3Wg92GNYaaX7IvCOtDeeNbzmG8HYM7ErFiuYDm4TYzRjwX7A3wVSdIIP M0dbBIOO+lWmYFwqpvrHXKQhDU7fkYkPXRPNiyzHaJy2A/a2B++1PGuBFkc/QsDF wIJJzBYjI8qB9w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:35 2025 by rpki-client