This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json) Hash identifier: Hc3lzdY/+4vtk1WZvzZ/p8xplU7ChF1d42DnHZldzxA= Subject key identifier: 4A:56:C8:DA:D6:EB:80:29:A5:2A:11:94:D4:19:5E:1C:4D:53:F7:B2 Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf Certificate serial: 019AF54112CEA4CFAAB3B4B6DA70BCA51B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:01:13 +0000 Manifest this update: Sat 06 Dec 2025 20:01:13 +0000 Manifest next update: Sun 07 Dec 2025 20:01:13 +0000 Files and hashes: 1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=) 2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: q1E1kZHT6FpKULPET+jMMlKPF95TE8TYvaGc54pyPvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:12:ce:a4:cf:aa:b3:b4:b6:da:70:bc:a5:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf Validity Not Before: Dec 6 20:01:13 2025 GMT Not After : Dec 7 20:01:13 2025 GMT Subject: CN=4a56c8dad6eb8029a52a1194d4195e1c4d53f7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:b2:66:94:e5:b7:f3:bd:1b:e5:e6:83:6f: 86:b3:b8:83:20:64:69:70:61:81:a7:20:8f:fa:8d: cf:6c:9c:02:eb:e1:39:39:b4:63:47:1e:5d:f6:9b: 4f:3b:dd:3f:43:78:fb:8e:9f:80:f8:3f:94:da:32: 33:c0:1f:60:e7:c9:bd:91:05:56:91:e4:27:12:67: 57:82:a8:0b:78:a8:d5:9b:9a:3b:81:2d:80:ce:6c: 03:3d:37:af:86:ef:78:6c:f9:1f:cb:98:45:8c:36: fc:78:03:ac:94:fd:44:37:62:58:61:ca:98:38:41: b8:84:0d:3c:84:d4:fa:f4:a6:3d:11:b9:17:5a:10: a2:64:85:97:eb:9b:d9:99:ab:a0:15:eb:42:29:7c: c2:03:0b:c1:8f:37:f8:c3:fa:73:be:a0:0f:c2:ba: 20:f9:7a:ef:8a:b3:fa:bd:21:dd:de:2b:73:3a:dd: 46:b0:da:29:a7:21:31:62:9e:88:a5:69:ac:c4:4f: 95:b5:78:2c:cf:fd:b5:17:69:02:cc:d9:2b:ae:d6: e8:de:e6:69:e9:36:42:cc:cb:35:e8:b0:c3:60:0c: cf:14:65:42:ca:be:41:b3:a8:bc:8f:fc:98:b0:c7: 3a:e8:87:e6:bb:b3:9b:59:01:17:db:d7:f2:38:b8: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:56:C8:DA:D6:EB:80:29:A5:2A:11:94:D4:19:5E:1C:4D:53:F7:B2 X509v3 Authority Key Identifier: keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6f:36:7f:94:fb:67:b1:2b:42:66:2f:99:c2:41:66:1c:77: a5:49:6c:61:46:1d:ae:24:a2:72:e2:10:8c:f6:85:8e:c6:a7: 3a:5d:11:db:d2:c9:15:56:3b:ea:aa:e3:13:96:b4:77:a7:1f: da:06:22:ce:08:a8:1a:29:4e:85:f3:4a:c5:95:87:f8:28:b1: cf:04:dc:b0:0a:b2:0f:35:14:b8:1b:2c:75:50:c0:b8:15:64: ef:12:9c:4b:f2:41:65:74:0b:19:ac:4d:9b:e2:1d:7c:50:0b: 61:8e:d9:99:32:8e:ae:f7:56:ab:2e:21:e3:91:78:13:b2:13: 5b:10:b1:21:9b:e5:4c:82:ab:6a:b5:62:4b:0e:24:27:6d:cc: ec:0f:15:39:61:73:73:47:b9:3e:a7:69:e0:ea:47:e4:79:f2: e1:9b:13:aa:2a:47:0b:1c:4b:06:fb:81:c0:16:81:29:87:50: bb:07:fc:32:c2:f1:ee:23:da:3c:0c:30:7f:f8:3b:6b:d2:d2: 12:a0:24:36:02:0d:7b:f6:58:95:e2:67:39:87:34:eb:24:b3: 45:90:93:fa:41:b8:de:c8:76:87:9e:7b:82:22:70:25:c5:55: ca:ed:5e:6e:e0:46:ce:bd:f7:b8:07:bb:8c:e5:56:59:b9:40: 40:0c:98:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRLOpM+qs7S22nC8pRuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDc3ZjIyYzY0MjhiYzg4OWIzNjViMDA2Y2I1MjQ4ZDRi ZjYxY2YwHhcNMjUxMjA2MjAwMTEzWhcNMjUxMjA3MjAwMTEzWjAzMTEwLwYDVQQD Eyg0YTU2YzhkYWQ2ZWI4MDI5YTUyYTExOTRkNDE5NWUxYzRkNTNmN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxuyZpTlt/O9G+Xmg2+Gs7iDIGRp cGGBpyCP+o3PbJwC6+E5ObRjRx5d9ptPO90/Q3j7jp+A+D+U2jIzwB9g58m9kQVW keQnEmdXgqgLeKjVm5o7gS2AzmwDPTevhu94bPkfy5hFjDb8eAOslP1EN2JYYcqY OEG4hA08hNT69KY9EbkXWhCiZIWX65vZmaugFetCKXzCAwvBjzf4w/pzvqAPwrog +XrvirP6vSHd3itzOt1GsNoppyExYp6IpWmsxE+VtXgsz/21F2kCzNkrrtbo3uZp 6TZCzMs16LDDYAzPFGVCyr5Bs6i8j/yYsMc66Ifmu7ObWQEX29fyOLhJ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpWyNrW64AppSoRlNQZXhxNU/eyMB8GA1UdIwQY MBaAFGAHfyLGQovIibNlsAbLUkjUv2HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDct ODdmZTJlNTRiYTc5LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC84NDdlZTAtYmEyYS00ZmQyLTg5ZDctODdmZTJlNTRiYTc5 LzEvWUFkX0lzWkNpOGlKczJXd0JzdFNTTlNfWWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJW82f5T7 Z7ErQmYvmcJBZhx3pUlsYUYdriSicuIQjPaFjsanOl0R29LJFVY76qrjE5a0d6cf 2gYizgioGilOhfNKxZWH+CixzwTcsAqyDzUUuBssdVDAuBVk7xKcS/JBZXQLGaxN m+IdfFALYY7ZmTKOrvdWqy4h45F4E7ITWxCxIZvlTIKrarViSw4kJ23M7A8VOWFz c0e5Pqdp4OpH5Hny4ZsTqipHCxxLBvuBwBaBKYdQuwf8MsLx7iPaPAwwf/g7a9LS EqAkNgINe/ZYleJnOYc06ySzRZCT+kG43sh2h557giJwJcVVyu1ebuBGzr33uAe7 jOVWWblAQAyYjw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:26 2025 by rpki-client