This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json) Hash identifier: ComtgNGgVUkHFDZz+owSGD67XwyghQ5Ga+hHpq8rnQY= Subject key identifier: 6C:B7:4E:AE:B4:C9:DE:13:2F:97:4F:FE:89:45:58:1D:BF:67:33:50 Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b Certificate serial: 019B34FB5EE2B179CC975AD78422913AD8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 05:00:47 +0000 Manifest this update: Fri 19 Dec 2025 05:00:47 +0000 Manifest next update: Sat 20 Dec 2025 05:00:47 +0000 Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: kX84106P/h4Zi8vi9RRj7x27x46HOGnEs18m3ggE/h0=) 2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:5e:e2:b1:79:cc:97:5a:d7:84:22:91:3a:d8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b Validity Not Before: Dec 19 05:00:47 2025 GMT Not After : Dec 20 05:00:47 2025 GMT Subject: CN=6cb74eaeb4c9de132f974ffe8945581dbf673350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:da:51:2b:3c:ee:bd:28:29:c0:6c:28:8e: e2:7f:3e:3f:be:e1:9f:33:5b:a9:b1:a6:ad:ee:af: 0d:33:3e:6a:d0:c7:66:2f:d5:85:7d:31:6c:b8:cd: 00:ca:bd:eb:bf:ec:70:df:f6:80:2a:64:a7:7c:27: 79:62:e3:05:0d:0f:9a:ce:4c:84:f1:cc:bf:28:fe: e4:6f:88:77:78:c1:3c:77:24:dd:d5:e4:7b:cb:81: ba:80:8b:ce:97:55:42:64:5f:b4:12:5d:87:2c:f1: 68:cc:1e:b5:34:82:a0:55:58:04:14:09:ad:29:dc: a5:05:75:95:7d:06:77:c4:51:d7:ee:ea:20:5d:1c: d6:9b:e3:39:bd:6a:64:4c:19:d3:09:78:ea:36:f7: ff:af:ed:14:5c:58:69:e9:ac:39:57:7a:6b:e3:41: eb:dc:ea:92:aa:b4:7e:96:25:ce:da:d2:d4:3e:1e: 74:b4:71:e5:fc:4b:86:34:bd:c8:50:c2:ee:02:23: 46:87:c6:38:22:aa:a5:ba:bb:8a:d6:3c:11:f4:1b: 18:71:a0:40:4f:c7:fb:e4:bb:4a:9f:22:c8:54:c1: 1b:29:ed:c7:f5:17:a1:96:f1:43:25:73:6d:3b:d0: f3:ac:a4:72:6d:7e:47:4d:54:a2:14:41:83:5e:91: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B7:4E:AE:B4:C9:DE:13:2F:97:4F:FE:89:45:58:1D:BF:67:33:50 X509v3 Authority Key Identifier: keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:11:87:e9:82:54:60:7a:1c:bf:ef:94:07:dd:29:2f:f0:df: 16:14:f5:bc:61:8f:6a:56:1b:76:59:a0:3a:9d:27:73:da:f8: 0e:fa:ae:46:4e:8e:76:bf:74:e4:58:8e:39:04:89:f0:5c:58: 72:08:46:54:13:87:2e:7e:16:f4:cd:66:ba:c0:ed:80:08:d6: 95:03:de:d1:b3:cb:dc:47:be:21:e4:81:5b:93:f3:6d:87:3f: 7f:36:a9:88:97:31:9d:f9:18:68:3d:66:31:23:3c:86:65:a8: 32:9b:86:8e:5f:91:12:f2:a0:69:49:0e:37:11:e4:3d:e9:25: b9:5f:37:04:3f:e3:ab:17:4e:1c:8b:77:66:43:d7:55:9f:5f: 27:cf:45:94:dc:92:55:77:70:de:3e:2e:85:d3:35:14:1f:c9: 2e:c3:66:8d:47:f3:1f:0a:23:79:1f:1e:bb:9f:70:14:d5:7b: 91:13:49:b5:56:43:74:2d:c8:cb:36:86:d5:97:74:a3:ac:c9: 74:3d:0c:c0:d8:18:6d:aa:7a:e2:84:5e:59:b1:78:2f:90:e9: 1f:7d:e0:2a:fa:39:72:b3:37:b1:b6:5b:95:db:ec:ff:41:84: 14:83:fc:0c:24:ad:a9:7a:91:0e:6f:8a:1a:47:9b:a3:f5:da: e3:38:45:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+17isXnMl1rXhCKROtijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMGU4NWY1ODFjNzUxMzkwOGVhMDQ2NjVmZDIzNzI2ZmQ3 MGU2MmIwHhcNMjUxMjE5MDUwMDQ3WhcNMjUxMjIwMDUwMDQ3WjAzMTEwLwYDVQQD Eyg2Y2I3NGVhZWI0YzlkZTEzMmY5NzRmZmU4OTQ1NTgxZGJmNjczMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h7aUSs87r0oKcBsKI7ifz4/vuGf M1upsaat7q8NMz5q0MdmL9WFfTFsuM0Ayr3rv+xw3/aAKmSnfCd5YuMFDQ+azkyE 8cy/KP7kb4h3eME8dyTd1eR7y4G6gIvOl1VCZF+0El2HLPFozB61NIKgVVgEFAmt KdylBXWVfQZ3xFHX7uogXRzWm+M5vWpkTBnTCXjqNvf/r+0UXFhp6aw5V3pr40Hr 3OqSqrR+liXO2tLUPh50tHHl/EuGNL3IUMLuAiNGh8Y4IqqluruK1jwR9BsYcaBA T8f75LtKnyLIVMEbKe3H9RehlvFDJXNtO9DzrKRybX5HTVSiFEGDXpESGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy3Tq60yd4TL5dP/olFWB2/ZzNQMB8GA1UdIwQY MBaAFGAOhfWBx1E5COoEZl/SNyb9cOYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDIt NGNkYTc4OGZlODk5LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8yNWMwMTctODZlMi00Y2MzLWEyMDItNGNkYTc4OGZlODk5 LzEvWUE2RjlZSEhVVGtJNmdSbVg5STNKdjF3NWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBGH6YJU YHocv++UB90pL/DfFhT1vGGPalYbdlmgOp0nc9r4DvquRk6Odr905FiOOQSJ8FxY cghGVBOHLn4W9M1musDtgAjWlQPe0bPL3Ee+IeSBW5PzbYc/fzapiJcxnfkYaD1m MSM8hmWoMpuGjl+REvKgaUkONxHkPekluV83BD/jqxdOHIt3ZkPXVZ9fJ89FlNyS VXdw3j4uhdM1FB/JLsNmjUfzHwojeR8eu59wFNV7kRNJtVZDdC3IyzaG1Zd0o6zJ dD0MwNgYbap64oReWbF4L5DpH33gKvo5crM3sbZbldvs/0GEFIP8DCStqXqRDm+K Gkebo/Xa4zhFag== -----END CERTIFICATE-----Generated at Fri Dec 19 14:17:29 2025 by rpki-client