This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json) Hash identifier: 7NJsCIFjWbqfiPk5ZKGvPaMAEF3ed4m73MDEQLHvJJ4= Subject key identifier: 59:E9:8D:BF:9E:A8:FC:13:17:DF:E8:6D:82:8F:97:B3:4A:7E:0C:53 Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Certificate serial: 019AF19B1DCA52B22459D8E3FE0004F23F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft Manifest number: 0F58 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: 9f1DS6Cs5mwbsSirLF1iMiPFwB4.roa (hash: laOVozjgpPVLFsRSwM+OxBsO79TXqDgtN3WvmKu3704=) 2: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: qw1HbGtAYyCu1kV/uf1kZn7Cxdp9ha6kidfMLjxYiTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1d:ca:52:b2:24:59:d8:e3:fe:00:04:f2:3f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=59e98dbf9ea8fc1317dfe86d828f97b34a7e0c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:b5:ca:2d:ec:46:78:4b:42:e7:ef:8b:3b: b2:c4:19:34:f0:d3:dc:8c:de:6f:10:8e:0e:a3:3f: 58:6c:f1:97:90:f7:0a:68:70:05:15:d3:86:b1:5e: e5:6b:19:1b:7b:e2:8b:4a:47:df:3d:04:79:23:b5: 12:39:91:0b:ae:d1:d7:61:f6:f6:9d:74:c0:aa:86: c0:2c:98:48:12:a7:27:c4:76:57:34:38:9d:cc:65: bf:de:5f:ca:c7:82:fa:8d:27:22:62:bb:91:6d:5b: 09:c3:cd:06:45:6a:19:23:d6:9e:ab:6d:80:7a:df: fb:20:15:4e:34:d6:29:d5:bf:8a:a5:3f:01:7e:f8: 4b:74:8e:21:43:88:d4:1f:74:39:67:bf:bc:ea:26: fe:b3:a0:f9:0b:60:91:0d:fe:8a:0d:16:e2:31:b3: 72:b1:b4:3e:ea:79:9c:42:55:6c:23:bd:ab:1a:d8: fd:3b:a0:1b:2c:aa:f1:c8:0d:b6:44:d1:19:fc:a5: 32:ed:9f:56:03:b3:cc:11:83:77:e8:22:7c:56:48: 54:91:56:41:93:b7:4b:38:c7:b1:32:09:f7:c1:86: ec:fc:95:31:34:75:35:47:94:a2:ba:b6:ed:c4:af: 6e:68:47:1b:1a:33:46:c4:0f:e1:93:57:78:07:e0: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E9:8D:BF:9E:A8:FC:13:17:DF:E8:6D:82:8F:97:B3:4A:7E:0C:53 X509v3 Authority Key Identifier: keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c0:ee:53:f1:e3:36:03:f5:f8:e3:bb:08:cc:20:e5:86:59: ed:8b:c5:0b:74:50:83:b5:54:13:ec:d9:ea:09:fe:ff:29:16: 50:1f:eb:d6:d5:23:2d:db:09:a0:35:6c:07:f7:a5:f4:a5:24: bc:5a:45:e6:78:18:7d:0d:8b:8c:af:17:c1:69:7e:02:8e:e3: 35:0b:c1:9c:f5:d2:c9:ec:0f:f5:f6:fd:d0:c0:75:5d:b4:6d: 1c:b3:30:1d:d2:fb:3a:bc:9e:de:40:01:bb:0a:a3:4f:37:b7: ac:af:67:11:28:f8:ef:9e:1f:f6:11:e5:0c:0e:88:28:e6:38: 0c:03:12:4c:b4:97:2b:33:f0:c5:03:7b:ad:4a:0b:b2:8c:3f: c6:5c:3e:0d:42:06:d7:d0:e6:17:ee:7e:b1:87:9e:01:1d:a2: 3d:fd:32:7c:f4:5a:af:95:21:9c:55:37:87:38:5a:50:4c:21: 4f:f2:75:b4:53:b0:77:75:4f:3a:f3:9f:88:8f:fc:e7:be:54: ae:6b:74:71:cd:d0:4e:f6:55:0a:a0:aa:8e:4e:86:93:76:4f: 2a:a1:a5:0c:64:30:c3:07:de:65:11:9f:29:50:cc:20:68:6a: 05:d5:12:05:89:f6:ef:6e:f1:ab:42:7f:83:34:1e:a6:5f:2b: 1a:75:7a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx3KUrIkWdjj/gAE8j9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz MmJjNDQwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD Eyg1OWU5OGRiZjllYThmYzEzMTdkZmU4NmQ4MjhmOTdiMzRhN2UwYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6m1yi3sRnhLQufvizuyxBk08NPc jN5vEI4Ooz9YbPGXkPcKaHAFFdOGsV7laxkbe+KLSkffPQR5I7USOZELrtHXYfb2 nXTAqobALJhIEqcnxHZXNDidzGW/3l/Kx4L6jSciYruRbVsJw80GRWoZI9aeq22A et/7IBVONNYp1b+KpT8BfvhLdI4hQ4jUH3Q5Z7+86ib+s6D5C2CRDf6KDRbiMbNy sbQ+6nmcQlVsI72rGtj9O6AbLKrxyA22RNEZ/KUy7Z9WA7PMEYN36CJ8VkhUkVZB k7dLOMexMgn3wYbs/JUxNHU1R5SiurbtxK9uaEcbGjNGxA/hk1d4B+BEtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnpjb+eqPwTF9/obYKPl7NKfgxTMB8GA1UdIwQY MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMDuU/Hj NgP1+OO7CMwg5YZZ7YvFC3RQg7VUE+zZ6gn+/ykWUB/r1tUjLdsJoDVsB/el9KUk vFpF5ngYfQ2LjK8XwWl+Ao7jNQvBnPXSyewP9fb90MB1XbRtHLMwHdL7Orye3kAB uwqjTze3rK9nESj4754f9hHlDA6IKOY4DAMSTLSXKzPwxQN7rUoLsow/xlw+DUIG 19DmF+5+sYeeAR2iPf0yfPRar5UhnFU3hzhaUEwhT/J1tFOwd3VPOvOfiI/8575U rmt0cc3QTvZVCqCqjk6Gk3ZPKqGlDGQwwwfeZRGfKVDMIGhqBdUSBYn2727xq0J/ gzQepl8rGnV6ew== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:09 2025 by rpki-client