This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json) Hash identifier: 3CSm3E0gNOzB/v+jRkLLV1RVWRv/vu+5rC6bUe1cr54= Subject key identifier: 87:36:01:5C:73:7B:89:B3:2E:8D:10:40:C9:BB:D8:F6:3E:40:B1:B4 Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Certificate serial: 019AF19B57A05D8441F6C8973FFFB0D2D6FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:20 +0000 Manifest this update: Sat 06 Dec 2025 03:01:20 +0000 Manifest next update: Sun 07 Dec 2025 03:01:20 +0000 Files and hashes: 1: IbhrSRL4bnUd7cnSOKRsJzgkJxM.roa (hash: b/cViJlJxKUPbwFvpzqTCCVlNXv5JOZkWmVOeYB/zSc=) 2: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: LC8wM1m2mlQWkAIhbxhaFtr2bOtUoqfl/mKKwNimE/A=) 3: t987O0pDHzvcsP9c7cARqX9qeU4.roa (hash: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:57:a0:5d:84:41:f6:c8:97:3f:ff:b0:d2:d6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a Validity Not Before: Dec 6 03:01:20 2025 GMT Not After : Dec 7 03:01:20 2025 GMT Subject: CN=8736015c737b89b32e8d1040c9bbd8f63e40b1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:5e:e1:f7:ef:28:f8:d4:98:10:6f:f7:65: e0:d4:ef:55:0d:cf:43:93:f6:ad:0d:54:5d:8d:4e: f8:20:02:14:a8:a9:96:b6:f1:fe:5d:7d:e3:d5:ee: 6d:de:cc:12:80:9a:1f:35:71:4c:04:73:9a:44:64: 4c:c4:48:d1:5b:17:71:13:2f:5a:8c:a1:2c:1f:d9: b9:8c:9a:db:54:23:e7:01:f8:75:cd:6c:47:f0:01: f3:57:cf:bd:91:66:a1:8d:d8:74:df:b1:0a:ec:05: f6:e0:5e:48:69:97:86:17:37:cb:ec:f5:05:24:b5: fb:be:8a:4d:01:82:ba:ef:da:1e:20:44:ae:fb:a7: 2a:3f:9c:ab:50:63:47:00:6d:8a:77:95:f1:03:be: d5:15:6e:d9:a0:f8:e3:08:84:b1:bc:8c:fd:21:96: 78:cf:8f:5a:29:15:f1:1a:2f:d4:e7:38:e6:3e:dd: d0:4e:07:66:93:68:7c:b8:f8:b8:6d:57:36:b1:a8: 9c:7a:18:9c:a6:51:ee:07:72:bd:76:65:86:51:22: de:65:87:96:90:70:af:7e:cc:8e:02:50:92:50:48: 5a:b6:98:21:8e:7c:f0:fa:6c:f6:f1:e0:64:5e:a1: f6:1e:86:61:44:9e:a6:86:77:ab:f4:49:50:83:40: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:36:01:5C:73:7B:89:B3:2E:8D:10:40:C9:BB:D8:F6:3E:40:B1:B4 X509v3 Authority Key Identifier: keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:96:49:05:ff:61:1a:61:4d:77:0c:cc:8f:60:49:f7:60:ce: 6e:cc:6d:ee:b5:a9:86:6c:59:bb:3e:6e:e2:c8:1c:d4:1c:bb: c7:53:39:b2:77:17:bc:24:b9:c1:1d:9e:8d:e2:bb:3b:71:eb: 63:1b:c6:10:fb:fc:1b:41:1d:b9:1a:04:9d:c9:b9:24:68:84: 47:25:cb:01:1c:02:ed:02:16:69:6a:bd:1d:a7:43:48:1f:53: 72:15:09:c6:2d:66:65:3d:65:8c:8e:24:ae:3c:cc:a4:e2:39: d9:8f:2e:19:e7:16:e6:ef:69:4e:ee:d8:ce:66:c7:a9:4a:a4: 28:07:83:ae:3d:df:b0:bb:8b:e8:29:e5:2b:3b:eb:0c:0c:58: f3:0f:cd:08:8f:f2:cf:76:9a:9c:f6:99:18:b4:e5:16:fa:88: fd:b8:68:55:b0:8a:bb:69:19:16:13:93:cb:35:f2:84:c3:3f: 15:38:b1:3d:6b:9e:0e:3d:99:52:95:56:15:c3:e6:7a:75:26: 64:db:a0:ac:4f:b8:96:9e:74:c5:e0:45:36:6a:7b:4d:5f:db: 5a:d9:75:c3:d8:8a:37:7a:98:f3:bc:c3:0d:f3:de:d0:f4:bf: 9a:4a:4f:50:56:b5:f1:11:4f:0f:bc:09:61:c0:c6:2b:85:7a: 41:87:29:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1egXYRB9siXP/+w0tb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTg1MWQ1OTM1NmNhOTVkNGFlNzhmYTY5MzZiYTFiOGEy YjFjN2EwHhcNMjUxMjA2MDMwMTIwWhcNMjUxMjA3MDMwMTIwWjAzMTEwLwYDVQQD Eyg4NzM2MDE1YzczN2I4OWIzMmU4ZDEwNDBjOWJiZDhmNjNlNDBiMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F5e4ffvKPjUmBBv92Xg1O9VDc9D k/atDVRdjU74IAIUqKmWtvH+XX3j1e5t3swSgJofNXFMBHOaRGRMxEjRWxdxEy9a jKEsH9m5jJrbVCPnAfh1zWxH8AHzV8+9kWahjdh037EK7AX24F5IaZeGFzfL7PUF JLX7vopNAYK679oeIESu+6cqP5yrUGNHAG2Kd5XxA77VFW7ZoPjjCISxvIz9IZZ4 z49aKRXxGi/U5zjmPt3QTgdmk2h8uPi4bVc2saicehicplHuB3K9dmWGUSLeZYeW kHCvfsyOAlCSUEhatpghjnzw+mz28eBkXqH2HoZhRJ6mhner9ElQg0BwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc2AVxze4mzLo0QQMm72PY+QLG0MB8GA1UdIwQY MBaAFGCoUdWTVsqV1K54+mk2uhuKKxx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYt NTQ4ZTdiN2ZhNGUxLzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jOTc4OTgtNWU3Mi00NTRhLWJlMmYtNTQ4ZTdiN2ZhNGUx LzEvWUtoUjFaTld5cFhVcm5qNmFUYTZHNG9ySEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpZJBf9h GmFNdwzMj2BJ92DObsxt7rWphmxZuz5u4sgc1By7x1M5sncXvCS5wR2ejeK7O3Hr YxvGEPv8G0EduRoEncm5JGiERyXLARwC7QIWaWq9HadDSB9TchUJxi1mZT1ljI4k rjzMpOI52Y8uGecW5u9pTu7YzmbHqUqkKAeDrj3fsLuL6CnlKzvrDAxY8w/NCI/y z3aanPaZGLTlFvqI/bhoVbCKu2kZFhOTyzXyhMM/FTixPWueDj2ZUpVWFcPmenUm ZNugrE+4lp50xeBFNmp7TV/bWtl1w9iKN3qY87zDDfPe0PS/mkpPUFa18RFPD7wJ YcDGK4V6QYcprQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:38 2025 by rpki-client