This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json) Hash identifier: LEeFXfHpNBeNlTzm1Wah6O2GMDx/dG/LuWGjqwPHXhM= Subject key identifier: 94:0A:94:79:C8:29:FF:24:D6:4A:C5:23:DE:6D:AC:81:14:ED:64:F7 Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49 Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49 Certificate serial: 019B2D0B831452CB71ECF231AD733D5C0F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft Manifest number: 1712 Signing time: Wed 17 Dec 2025 16:01:27 +0000 Manifest this update: Wed 17 Dec 2025 16:01:27 +0000 Manifest next update: Thu 18 Dec 2025 16:01:27 +0000 Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=) 2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: Mp46yDac4uSZ6xaFV+7hKJGqbxRdZRQLZuGdeKEZmDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:83:14:52:cb:71:ec:f2:31:ad:73:3d:5c:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49 Validity Not Before: Dec 17 16:01:27 2025 GMT Not After : Dec 18 16:01:27 2025 GMT Subject: CN=940a9479c829ff24d64ac523de6dac8114ed64f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4f:02:5b:9c:fd:03:a0:c5:0d:4c:c2:32:79: 8c:af:b6:d3:2e:09:06:39:04:38:1b:e0:9e:67:05: 9e:b9:7b:66:fe:71:ec:da:59:25:3a:b2:0e:52:44: ba:64:4f:75:07:17:57:88:ae:2d:79:c1:f0:ea:8f: f9:7e:17:c9:5b:2d:20:e2:ae:ab:18:12:d9:52:8f: 1a:04:5b:c9:42:0f:f3:55:db:d2:fb:91:63:c0:df: f9:e4:62:a5:38:50:de:62:24:f3:ec:02:6b:ab:93: 87:63:81:3c:82:02:bf:06:2e:88:05:84:35:0e:36: fb:8b:a8:c9:93:6b:e0:7c:0b:86:b7:4d:17:e7:ba: 11:c5:e4:81:11:48:ad:5f:53:8c:79:38:64:e1:87: 9f:90:ca:4f:7a:4b:66:e4:41:79:93:38:68:b2:3a: be:ee:1a:33:98:1a:f3:87:c6:7f:9d:65:ec:00:51: 7f:10:4c:f2:02:3f:1b:6e:91:46:a5:8b:51:81:00: 8d:06:7f:d7:ce:fb:b8:2d:22:2d:98:5a:dc:52:90: 2d:90:c8:f4:5d:60:01:d4:9d:66:63:f9:f9:37:7d: 8b:28:14:74:0d:8f:6d:96:1d:9a:50:77:03:ea:81: 37:26:ad:e6:63:67:59:50:27:40:4d:b5:1d:f5:87: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0A:94:79:C8:29:FF:24:D6:4A:C5:23:DE:6D:AC:81:14:ED:64:F7 X509v3 Authority Key Identifier: keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c8:91:74:64:70:b5:b2:83:3d:78:2a:2c:95:fd:f1:d8:24: 9f:04:37:82:61:7f:b6:6d:ab:88:57:3e:b6:ae:0b:d0:1d:99: f1:ab:cd:60:19:a6:6e:44:77:b0:14:7e:a3:6c:aa:02:1e:09: 26:f7:cd:ed:80:c7:02:9d:27:86:fc:f4:38:56:31:c4:4a:f9: f5:a0:46:a6:c4:73:b0:04:5b:3d:7c:c1:92:3d:f1:a2:a2:eb: b2:dc:04:76:bb:4d:94:3a:2d:48:36:13:27:66:56:2e:4b:e1: 01:fe:8e:93:5b:af:d1:84:c0:6b:95:17:07:f5:29:15:7d:15: cb:3d:18:14:bf:a9:41:a8:d7:20:7d:f5:68:16:5f:6a:2b:7b: 32:55:66:0f:89:93:3b:87:45:9c:7a:1e:79:82:6b:54:49:1b: 63:af:8e:73:d5:27:23:4b:3f:82:85:8e:72:65:af:55:9a:a4: 97:e8:81:77:bb:a2:af:f2:0c:c8:bc:5e:97:5a:fe:c1:8b:0c: c6:65:df:00:d0:11:9e:f0:e6:92:9d:06:05:d9:1d:71:e3:ea: 4e:09:ad:f2:ff:93:75:74:ab:17:47:b4:63:79:54:b1:fe:7b: f6:ff:d7:b6:2c:d1:b1:dd:0b:4e:1e:fd:bb:1b:c6:d0:33:99: cf:4c:0c:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC4MUUstx7PIxrXM9XA8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDk2ZTM3NDA5MmNjMzAwYmQwYmIwNmM0MTY0MDkzMmVj ZjhiNDkwHhcNMjUxMjE3MTYwMTI3WhcNMjUxMjE4MTYwMTI3WjAzMTEwLwYDVQQD Eyg5NDBhOTQ3OWM4MjlmZjI0ZDY0YWM1MjNkZTZkYWM4MTE0ZWQ2NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k8CW5z9A6DFDUzCMnmMr7bTLgkG OQQ4G+CeZwWeuXtm/nHs2lklOrIOUkS6ZE91BxdXiK4tecHw6o/5fhfJWy0g4q6r GBLZUo8aBFvJQg/zVdvS+5FjwN/55GKlOFDeYiTz7AJrq5OHY4E8ggK/Bi6IBYQ1 Djb7i6jJk2vgfAuGt00X57oRxeSBEUitX1OMeThk4YefkMpPektm5EF5kzhosjq+ 7hozmBrzh8Z/nWXsAFF/EEzyAj8bbpFGpYtRgQCNBn/Xzvu4LSItmFrcUpAtkMj0 XWAB1J1mY/n5N32LKBR0DY9tlh2aUHcD6oE3Jq3mY2dZUCdATbUd9YeVdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQKlHnIKf8k1krFI95trIEU7WT3MB8GA1UdIwQY MBaAFGAJbjdAkswwC9C7BsQWQJMuz4tJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODct YzQ1ODUyYzdiZTIwLzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODctYzQ1ODUyYzdiZTIw LzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8iRdGRw tbKDPXgqLJX98dgknwQ3gmF/tm2riFc+tq4L0B2Z8avNYBmmbkR3sBR+o2yqAh4J JvfN7YDHAp0nhvz0OFYxxEr59aBGpsRzsARbPXzBkj3xoqLrstwEdrtNlDotSDYT J2ZWLkvhAf6Ok1uv0YTAa5UXB/UpFX0Vyz0YFL+pQajXIH31aBZfait7MlVmD4mT O4dFnHoeeYJrVEkbY6+Oc9UnI0s/goWOcmWvVZqkl+iBd7uir/IMyLxel1r+wYsM xmXfANARnvDmkp0GBdkdcePqTgmt8v+TdXSrF0e0Y3lUsf579v/XtizRsd0LTh79 uxvG0DOZz0wMBQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:35 2025 by rpki-client