This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft File: YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json) Hash identifier: vNJ8c95zvBWpUJDOnji/saAAxSoDq95g8uPyzQ9v7M8= Subject key identifier: 91:EC:1A:DD:DB:15:9F:78:DE:FB:67:91:50:2A:8B:D6:BC:E1:7F:39 Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39 Certificate serial: 019AF19AD800EFC205374053B7F53DB898EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft Manifest number: 0EE3 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: 067eNclGefF3m0OGTTUCn5XCP1g.roa (hash: z/3AKsQAeqaVo2VPZhi3t2S+PnoUgF4Iq5PxcFGv6Xo=) 2: 8IhOWpd8I4qCuNB3n2bpSQcTecg.roa (hash: BJCQpncNk1VfXWg6OSAZx6yCtw7TpjPtf43EPZiu5hE=) 3: JDhzUY8WggyEjl77dFyKfNTuttI.roa (hash: 2S4K0CW+p18ThxzBHKCsi6J4U1ECSCVbd5SXljt7NEI=) 4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=) 5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: fHvbGf74yQGpxgyz1QKfZcqqIJ2HoUNj9qZ2ELdtH2s=) 6: cUYhPVjNmTBmzUb7xN5IV7T0kbw.roa (hash: 7JSpQM7fg/Wm3cK+nXnCFmbDZn7wkYovB4/4v14s1zE=) 7: e1wZ773J_IwnQvW8HmcdAEsfbmk.roa (hash: /Hb9wRohhE6DgKG34thBOanjq8+9uKXnY/XXzkRgSyQ=) 8: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=) 9: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=) 10: lKvxXzte52N3Ng01d6-NvDpgCuA.roa (hash: URH25gScaq1xuzdQE3vtOXMbAip/Q6NtEBsaLOid0tI=) 11: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d8:00:ef:c2:05:37:40:53:b7:f5:3d:b8:98:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=91ec1adddb159f78defb6791502a8bd6bce17f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:ca:ed:e7:3b:6d:0a:b5:8a:a1:9f:96:2f: 3a:44:c4:01:df:17:a3:b5:db:95:94:47:c2:68:d7: 00:67:9c:6c:71:ef:97:21:52:69:79:bc:dc:13:65: 7f:77:ac:11:e4:fd:da:29:0f:3d:32:a1:d6:70:f0: bf:fc:0f:c9:b3:9d:48:56:01:bd:72:53:6c:e0:ff: f1:16:86:87:1b:24:70:8f:50:82:eb:47:9d:1d:c8: c3:ef:a4:d9:28:e2:a8:a5:b8:65:c4:35:10:19:fb: 52:fb:f0:e6:c0:c2:1f:70:91:ff:c3:86:36:8f:b7: ca:17:09:14:19:29:04:2c:d8:28:6a:02:64:db:e9: 77:42:6e:5b:06:bf:eb:6c:87:03:2d:dc:9c:37:f3: fb:72:24:21:68:0d:37:8d:3d:1d:04:0b:9e:fa:0c: b0:a1:e6:42:4e:e2:71:60:a1:56:bd:7a:7a:af:76: 4a:23:ba:5d:38:04:94:38:39:93:ce:00:b1:d2:16: 15:21:99:c4:18:8e:f8:6d:c2:18:8c:c6:1f:0b:be: a1:64:68:fa:8b:32:31:63:df:bb:35:a0:86:91:14: 52:f8:b1:33:c0:ad:ec:0d:85:81:a5:2a:f2:4f:86: ee:cd:b9:af:86:bd:7b:fb:4b:83:e6:f6:53:13:e5: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:1A:DD:DB:15:9F:78:DE:FB:67:91:50:2A:8B:D6:BC:E1:7F:39 X509v3 Authority Key Identifier: keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ac:00:74:0e:5e:89:17:35:24:47:59:ae:02:24:25:3b:c4: 1a:89:96:77:81:93:f4:12:96:fc:22:b3:99:49:39:74:b6:d0: 9f:38:4f:ed:da:67:2e:4e:b7:f6:53:6c:6e:e7:0b:f6:2f:c3: e3:32:a3:0c:71:40:48:52:82:bc:c6:1a:6e:b0:ad:64:ce:68: 85:5e:fd:01:9f:77:74:01:d8:60:a9:af:94:ed:d6:e0:21:ad: 21:dc:e2:ad:96:b0:b5:36:2c:66:32:11:63:c4:50:89:ee:3b: 4e:f6:9f:c9:59:d2:74:25:e8:48:87:a0:f3:ba:34:bd:a4:d9: 95:81:7d:87:e4:9b:4d:63:94:f1:fd:f8:28:ae:e4:33:54:3f: 1e:f7:bf:c2:6f:ad:7b:3d:d2:e5:69:ee:c1:c8:45:bc:44:f2: b3:d9:a2:10:47:4a:45:d2:34:cc:34:2d:ce:30:8c:35:10:f0: 2f:fd:e9:cc:d9:cf:57:0a:54:b4:ea:59:e9:9e:5f:ec:e5:a8: ce:3c:d3:a6:34:ed:2b:ad:84:ed:69:8f:e7:4c:bc:53:1f:cb: 73:f2:05:d3:8f:d9:59:d4:51:eb:19:c2:81:44:26:9e:55:d7: 81:85:9a:a3:7e:a6:1b:6b:07:83:8e:8b:00:21:2b:27:09:69: db:4d:4d:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtgA78IFN0BTt/U9uJjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx NGRiMzkwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD Eyg5MWVjMWFkZGRiMTU5Zjc4ZGVmYjY3OTE1MDJhOGJkNmJjZTE3ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3rK7ec7bQq1iqGfli86RMQB3xej tduVlEfCaNcAZ5xsce+XIVJpebzcE2V/d6wR5P3aKQ89MqHWcPC//A/Js51IVgG9 clNs4P/xFoaHGyRwj1CC60edHcjD76TZKOKopbhlxDUQGftS+/DmwMIfcJH/w4Y2 j7fKFwkUGSkELNgoagJk2+l3Qm5bBr/rbIcDLdycN/P7ciQhaA03jT0dBAue+gyw oeZCTuJxYKFWvXp6r3ZKI7pdOASUODmTzgCx0hYVIZnEGI74bcIYjMYfC76hZGj6 izIxY9+7NaCGkRRS+LEzwK3sDYWBpSryT4buzbmvhr17+0uD5vZTE+VoQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHsGt3bFZ943vtnkVAqi9a84X85MB8GA1UdIwQY MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt ZWQzMGI5YmIxMmQ1LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1 LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmawAdA5e iRc1JEdZrgIkJTvEGomWd4GT9BKW/CKzmUk5dLbQnzhP7dpnLk639lNsbucL9i/D 4zKjDHFASFKCvMYabrCtZM5ohV79AZ93dAHYYKmvlO3W4CGtIdzirZawtTYsZjIR Y8RQie47TvafyVnSdCXoSIeg87o0vaTZlYF9h+SbTWOU8f34KK7kM1Q/Hve/wm+t ez3S5WnuwchFvETys9miEEdKRdI0zDQtzjCMNRDwL/3pzNnPVwpUtOpZ6Z5f7OWo zjzTpjTtK62E7WmP50y8Ux/Lc/IF04/ZWdRR6xnCgUQmnlXXgYWao36mG2sHg46L ACErJwlp201Njg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:55:59 2025 by rpki-client