This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft File: YKJkfN14VQ6ywqe6QpLadGnwr7E.mft (raw, json) Hash identifier: uZS9i4+CpmAj95SMKltictTFrjTDOzpuVJdIH+88Bz8= Subject key identifier: DD:42:0A:0D:6D:64:0B:7C:2C:C3:07:77:0D:6F:5E:FE:36:DD:C7:F5 Authority key identifier: 60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1 Certificate issuer: /CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1 Certificate serial: 019AF12E003C5FCBABCCB90414C3CB6CEF53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft Manifest number: 0F37 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: YKJkfN14VQ6ywqe6QpLadGnwr7E.crl (hash: PwlYaZ5mP8zX7uQMdSlplv61zS8EOBEbVXarGaiy7zY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:00:3c:5f:cb:ab:cc:b9:04:14:c3:cb:6c:ef:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a2647cdd78550eb2c2a7ba4292da7469f0afb1 Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=dd420a0d6d640b7c2cc307770d6f5efe36ddc7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:b1:1b:4c:82:7c:ee:8f:ad:ca:65:3f:86: 78:83:9f:44:ec:04:27:89:c3:8b:10:ca:76:34:72: 5c:86:08:e9:dd:1f:5e:de:55:4d:ff:cd:31:07:c9: e5:87:97:fe:80:77:15:73:b0:5f:8d:98:9a:60:e1: e1:9c:1a:9b:38:62:f4:d8:5e:79:83:71:81:7f:dd: d8:95:7e:eb:f3:ed:62:8b:f2:27:19:cc:5d:c2:80: 69:d8:d4:1f:0f:df:be:44:03:bb:bc:0f:a0:52:0c: 63:b8:41:a9:4c:35:dd:bf:ed:01:17:27:72:3c:ea: 5d:2b:b0:9c:b9:61:48:c7:c9:80:f5:e8:bc:f6:04: 09:76:43:e0:e6:51:18:90:12:70:38:df:4d:02:84: 5d:e2:64:d5:1c:0d:28:e6:7f:4b:e9:51:94:2a:ad: ad:7d:b4:61:05:54:c7:ea:25:c6:a9:54:68:d3:25: 63:02:e2:d0:d9:b6:1b:22:11:70:e5:b7:b2:4f:68: d2:9d:cb:ad:d8:a9:74:a8:6b:76:43:4d:d3:66:b3: 2d:1c:ef:6f:35:06:36:58:95:00:5e:86:80:8e:b2: 8f:3b:1b:68:83:6e:90:98:6b:6b:19:89:a1:26:a6: 3f:49:14:22:93:d9:a1:b7:a4:05:ad:9d:75:2c:4a: 97:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:42:0A:0D:6D:64:0B:7C:2C:C3:07:77:0D:6F:5E:FE:36:DD:C7:F5 X509v3 Authority Key Identifier: keyid:60:A2:64:7C:DD:78:55:0E:B2:C2:A7:BA:42:92:DA:74:69:F0:AF:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKJkfN14VQ6ywqe6QpLadGnwr7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9048e2-5f03-4611-86d6-10ce7eb1fdfa/1/YKJkfN14VQ6ywqe6QpLadGnwr7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a8:d5:e3:6f:ce:f7:c2:c8:43:75:ee:f0:ec:57:66:a2:d0: e1:41:f1:3f:38:c3:e1:21:49:84:a8:a8:8e:3a:d8:55:0f:97: e3:a8:75:4e:59:1f:ec:1b:8e:3b:3c:09:3b:48:a0:a0:76:02: 49:ee:81:bb:c4:d8:28:a0:da:e6:e2:0b:95:88:a0:86:55:44: d1:d0:29:81:04:90:c8:30:6c:7d:b3:12:fe:f4:7f:53:2b:f2: 42:82:ef:32:6a:a1:ad:6c:b6:90:5f:32:ce:ed:3b:b2:92:6f: 46:4a:44:da:3b:ae:ba:0f:d5:3d:2b:a5:b7:7c:75:97:64:d2: ae:e3:ba:2a:de:95:91:48:0e:2e:f8:52:06:c0:6f:1c:dd:b0: eb:67:b0:5c:6d:a6:78:ed:ba:f3:16:6a:ea:80:01:96:c0:a9: 99:34:40:e4:d8:cc:ca:0a:54:f4:9e:da:75:2b:db:c0:e3:13: 7b:97:e2:2e:f6:95:46:97:8f:a6:fa:67:82:df:a2:7c:e5:2d: 0c:1f:1a:a1:f1:bd:8d:21:43:f8:1b:72:bf:96:a1:0a:71:46: be:ac:33:07:5b:34:08:30:10:6d:aa:b9:94:23:e5:dd:5b:88: 0e:b9:a6:13:df:f2:32:9e:29:79:08:4e:0e:49:2d:05:e0:d4: a8:23:49:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgA8X8urzLkEFMPLbO9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTI2NDdjZGQ3ODU1MGViMmMyYTdiYTQyOTJkYTc0Njlm MGFmYjEwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD EyhkZDQyMGEwZDZkNjQwYjdjMmNjMzA3NzcwZDZmNWVmZTM2ZGRjN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOxG0yCfO6PrcplP4Z4g59E7AQn icOLEMp2NHJchgjp3R9e3lVN/80xB8nlh5f+gHcVc7BfjZiaYOHhnBqbOGL02F55 g3GBf93YlX7r8+1ii/InGcxdwoBp2NQfD9++RAO7vA+gUgxjuEGpTDXdv+0BFydy POpdK7CcuWFIx8mA9ei89gQJdkPg5lEYkBJwON9NAoRd4mTVHA0o5n9L6VGUKq2t fbRhBVTH6iXGqVRo0yVjAuLQ2bYbIhFw5beyT2jSncut2Kl0qGt2Q03TZrMtHO9v NQY2WJUAXoaAjrKPOxtog26QmGtrGYmhJqY/SRQik9mht6QFrZ11LEqXowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1CCg1tZAt8LMMHdw1vXv423cf1MB8GA1UdIwQY MBaAFGCiZHzdeFUOssKnukKS2nRp8K+xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtKa2ZOMTRWUTZ5d3FlNlFwTGFkR253cjdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85MDQ4ZTItNWYwMy00NjExLTg2ZDYt MTBjZTdlYjFmZGZhLzEvWUtKa2ZOMTRWUTZ5d3FlNlFwTGFkR253cjdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85MDQ4ZTItNWYwMy00NjExLTg2ZDYtMTBjZTdlYjFmZGZh LzEvWUtKa2ZOMTRWUTZ5d3FlNlFwTGFkR253cjdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6jV42/O 98LIQ3Xu8OxXZqLQ4UHxPzjD4SFJhKiojjrYVQ+X46h1Tlkf7BuOOzwJO0igoHYC Se6Bu8TYKKDa5uILlYighlVE0dApgQSQyDBsfbMS/vR/UyvyQoLvMmqhrWy2kF8y zu07spJvRkpE2juuug/VPSult3x1l2TSruO6Kt6VkUgOLvhSBsBvHN2w62ewXG2m eO268xZq6oABlsCpmTRA5NjMygpU9J7adSvbwOMTe5fiLvaVRpePpvpngt+ifOUt DB8aofG9jSFD+Btyv5ahCnFGvqwzB1s0CDAQbaq5lCPl3VuIDrmmE9/yMp4peQhO DkktBeDUqCNJfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:29 2025 by rpki-client