This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft File: yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json) Hash identifier: mRESSF+X6iKB0NuNQYiJxZQ+Ze4BzH32GoeZgMvmINs= Subject key identifier: 05:1E:BB:11:08:3C:D0:D4:A1:40:B9:DB:44:92:4B:20:0F:87:43:6D Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5 Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5 Certificate serial: 019AF2AD7C476B4ECFC70858011AB7E0867B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft Manifest number: 13F6 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa (hash: FllvrAA0IFuRu04U/PVVcunONsM/J0wPDkjc5E97TCo=) 2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: /wtxaalya1UMmL0IPeOjFuya/7xhs+rAdUdow9OagbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7c:47:6b:4e:cf:c7:08:58:01:1a:b7:e0:86:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=051ebb11083cd0d4a140b9db44924b200f87436d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:86:fb:1b:aa:e2:9a:c0:47:20:97:ad:c1:44: 26:bf:4b:41:c8:ea:c3:bf:02:fa:56:b0:3f:27:d7: 6d:f7:54:68:ca:95:ec:63:9c:73:d7:68:c6:d4:05: 70:d8:e2:95:ea:3d:37:fa:1b:b1:ca:6f:d9:64:4b: 58:9f:26:a8:a5:21:b6:d2:f2:6e:c9:d6:92:8f:01: 68:bb:5b:76:03:ad:5f:89:b7:ec:e8:36:5a:3a:5d: f7:08:b1:ae:32:29:79:b4:94:53:ee:53:70:41:27: 89:37:e5:d1:06:cb:22:cc:04:82:f4:2d:bb:2d:9b: 64:64:c3:36:36:4c:99:53:d4:e9:6b:af:7e:07:20: ea:46:c9:dc:75:fd:83:b3:e9:da:51:de:78:ed:e9: 2f:8f:f5:58:a0:54:80:8c:28:45:0d:9c:a0:b3:c9: e4:8b:5d:01:f0:c0:fa:68:d3:0b:fb:04:70:54:a0: 66:56:6f:0f:4b:26:e7:06:96:d1:d5:b1:d0:e4:25: 8f:df:01:ba:95:cc:c8:b3:12:78:b8:6b:06:ea:83: 55:53:50:b2:46:d0:ea:f8:d2:d1:d1:42:98:45:52: cd:31:7a:18:b5:59:36:c6:3f:7f:43:b6:c7:8e:06: e5:3e:67:bf:a6:82:ac:49:02:13:3a:3e:2f:13:9c: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1E:BB:11:08:3C:D0:D4:A1:40:B9:DB:44:92:4B:20:0F:87:43:6D X509v3 Authority Key Identifier: keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3c:07:d6:af:cf:e6:5a:40:83:ec:f4:c7:7e:f9:d4:ed:6f: d0:f8:4a:8a:e1:89:40:46:3a:17:c4:f9:d9:5e:a6:ef:b9:2f: fd:1a:c6:47:78:83:2c:26:6b:b2:7d:25:f8:1e:c6:75:03:db: 96:3a:a5:ec:0d:ea:3d:23:0f:f7:38:42:46:22:7f:49:58:e6: fd:28:cb:8b:e0:b1:ee:68:9b:4e:d5:d4:87:b4:5d:bc:ba:2c: 74:08:0a:01:44:c2:ac:a5:e6:fb:75:83:1c:c5:44:5b:45:7b: 24:bc:39:65:9d:3d:43:62:98:55:a5:6c:4b:f6:2e:b8:31:87: 7b:71:50:ae:32:a7:be:ad:c2:4b:67:ba:96:7b:aa:1a:08:48: 42:d3:88:3e:19:4f:cc:8e:6f:00:77:fe:bd:18:ff:6f:27:18: 68:36:1d:a3:b2:78:5b:ad:d0:92:df:3e:a4:b8:42:3b:6f:c5: e3:38:a5:52:63:dd:bc:d4:9f:c6:24:96:03:1c:e0:34:3e:4f: 45:47:de:dd:8c:bb:59:08:b6:5a:5d:bd:3f:e5:a5:f5:d7:ca: b0:b1:86:45:d3:a9:89:3f:48:2b:4f:20:74:3b:b8:e7:86:3e: c2:6c:0c:61:91:3b:e8:52:57:b4:35:61:e2:06:47:40:2c:da: d7:f1:44:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXxHa07PxwhYARq34IZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWIzYzViNjlhZjVjMjE4ZGQ0YWY3NjRjOTQzNjZjNjQ2 ZjgzYTUwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygwNTFlYmIxMTA4M2NkMGQ0YTE0MGI5ZGI0NDkyNGIyMDBmODc0MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIb7G6rimsBHIJetwUQmv0tByOrD vwL6VrA/J9dt91RoypXsY5xz12jG1AVw2OKV6j03+huxym/ZZEtYnyaopSG20vJu ydaSjwFou1t2A61fibfs6DZaOl33CLGuMil5tJRT7lNwQSeJN+XRBssizASC9C27 LZtkZMM2NkyZU9Tpa69+ByDqRsncdf2Ds+naUd547ekvj/VYoFSAjChFDZygs8nk i10B8MD6aNML+wRwVKBmVm8PSybnBpbR1bHQ5CWP3wG6lczIsxJ4uGsG6oNVU1Cy RtDq+NLR0UKYRVLNMXoYtVk2xj9/Q7bHjgblPme/poKsSQITOj4vE5xI+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUeuxEIPNDUoUC520SSSyAPh0NtMB8GA1UdIwQY MBaAFMirPFtpr1whjdSvdkyUNmxkb4OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAt MTE4NDU0Y2NkNDEyLzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjZiMGYtMzM1My00ZTU5LWJmNzAtMTE4NDU0Y2NkNDEy LzEveUtzOFcybXZYQ0dOMUs5MlRKUTJiR1J2ZzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljwH1q/P 5lpAg+z0x3751O1v0PhKiuGJQEY6F8T52V6m77kv/RrGR3iDLCZrsn0l+B7GdQPb ljql7A3qPSMP9zhCRiJ/SVjm/SjLi+Cx7mibTtXUh7RdvLosdAgKAUTCrKXm+3WD HMVEW0V7JLw5ZZ09Q2KYVaVsS/YuuDGHe3FQrjKnvq3CS2e6lnuqGghIQtOIPhlP zI5vAHf+vRj/bycYaDYdo7J4W63Qkt8+pLhCO2/F4zilUmPdvNSfxiSWAxzgND5P RUfe3Yy7WQi2Wl29P+Wl9dfKsLGGRdOpiT9IK08gdDu454Y+wmwMYZE76FJXtDVh 4gZHQCza1/FEVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:15 2025 by rpki-client