This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft File: YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json) Hash identifier: WnjFrnBEIKx7x7/hBdtHh36uxaoFqllIKvZfAx9xdZc= Subject key identifier: A3:90:66:34:A3:FC:83:1A:E6:01:A6:BA:80:18:95:D3:83:36:E4:83 Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49 Certificate issuer: /CN=60096e374092cc300bd0bb06c41640932ecf8b49 Certificate serial: 019AF31CB0C9EC6F68A201452133EEF19B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:02:14 +0000 Manifest this update: Sat 06 Dec 2025 10:02:14 +0000 Manifest next update: Sun 07 Dec 2025 10:02:14 +0000 Files and hashes: 1: 526G98YrX5YRgU8kSVFlOR-68SU.roa (hash: EfmIyH+1frBE08mLPE+N4lUdJCEbw7QSSljLZgrUP1M=) 2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: yZHYfwNMu+kYHFviRQECEpSMYZvmxpWBS0zB1bkl87I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b0:c9:ec:6f:68:a2:01:45:21:33:ee:f1:9b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49 Validity Not Before: Dec 6 10:02:14 2025 GMT Not After : Dec 7 10:02:14 2025 GMT Subject: CN=a3906634a3fc831ae601a6ba801895d38336e483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:fc:35:66:ac:f3:6e:9f:86:42:a7:94:ac: 8a:24:30:82:a5:7d:fa:f8:e3:f7:15:66:5f:b8:e7: ce:51:9c:e8:14:96:02:f6:47:11:08:b4:6a:56:a4: f8:a7:e4:e3:66:38:56:ca:cb:8b:6d:59:48:68:6c: 09:43:f3:3f:61:76:90:5d:7e:ee:79:ab:17:6b:27: 7b:7e:a8:cd:53:07:78:69:7c:03:e0:98:94:69:94: 13:b0:17:88:35:2c:01:43:31:ae:9a:85:65:54:34: 99:d5:e4:f0:0e:aa:ae:f8:06:85:43:e6:d4:91:56: 08:5b:f9:ac:67:69:4c:81:76:28:35:cf:ad:20:a4: 66:33:16:dc:66:43:59:3c:77:c2:c2:33:98:f8:4c: 52:19:62:6a:9a:b1:1b:68:b1:2d:3a:11:fd:be:2e: fb:03:58:3b:dd:95:c9:15:04:08:3a:ab:28:df:54: 4d:e9:69:78:a3:50:b4:ee:02:a5:36:54:12:47:9c: 92:28:92:99:1b:71:60:c5:6f:3a:77:13:eb:84:c0: 19:04:75:a1:b4:61:4c:a3:81:ef:2b:4a:c8:4c:a2: e6:c2:9b:ac:7d:84:87:3f:a4:62:9d:3c:5a:85:fd: 7c:ad:a1:48:51:01:e0:d0:1b:26:ca:31:76:3b:04: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:90:66:34:A3:FC:83:1A:E6:01:A6:BA:80:18:95:D3:83:36:E4:83 X509v3 Authority Key Identifier: keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:6b:82:55:50:9a:fa:02:3d:ee:33:58:a4:c0:58:73:11: 38:b6:93:3c:ac:d5:c4:81:e5:9f:14:dd:57:b3:56:3b:69:d5: 10:db:4f:59:85:f9:cf:32:dc:fa:29:c0:e5:e2:32:38:00:8d: 03:ab:65:83:dd:b8:6d:4f:54:ea:8f:8f:17:a3:0c:f9:bc:07: a8:5c:18:4c:9c:8a:0c:d6:07:43:45:d8:45:77:34:1d:ed:c3: d1:af:90:45:d4:51:95:d9:bb:e0:ba:11:d6:06:18:f3:af:69: 59:78:8e:7d:6f:22:13:bd:1f:0e:9a:57:bf:b9:35:b2:66:8e: fe:8a:ef:1a:bd:19:a9:55:e7:19:85:e5:12:15:4c:9a:d8:d7: 6d:3f:b5:12:21:a7:5e:87:d5:3f:9f:6e:94:fa:b3:1e:62:cf: 00:45:a5:c3:5a:98:28:45:3e:f6:05:cc:16:bc:8d:1c:aa:d4: e7:ee:c7:7a:32:4c:fc:5b:dd:49:5f:66:e8:09:61:5c:78:e1: 82:01:6c:eb:9e:99:d0:30:d9:81:00:f9:44:c2:bb:10:ae:0f: 7e:e7:3e:40:d9:b9:66:16:50:52:61:90:76:25:85:26:fa:19: a6:c8:a5:fa:4d:3f:17:2a:6f:7b:55:50:72:e5:c1:9d:f0:be: 6e:3f:00:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLDJ7G9oogFFITPu8Zs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDk2ZTM3NDA5MmNjMzAwYmQwYmIwNmM0MTY0MDkzMmVj ZjhiNDkwHhcNMjUxMjA2MTAwMjE0WhcNMjUxMjA3MTAwMjE0WjAzMTEwLwYDVQQD EyhhMzkwNjYzNGEzZmM4MzFhZTYwMWE2YmE4MDE4OTVkMzgzMzZlNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZv8NWas826fhkKnlKyKJDCCpX36 +OP3FWZfuOfOUZzoFJYC9kcRCLRqVqT4p+TjZjhWysuLbVlIaGwJQ/M/YXaQXX7u easXayd7fqjNUwd4aXwD4JiUaZQTsBeINSwBQzGumoVlVDSZ1eTwDqqu+AaFQ+bU kVYIW/msZ2lMgXYoNc+tIKRmMxbcZkNZPHfCwjOY+ExSGWJqmrEbaLEtOhH9vi77 A1g73ZXJFQQIOqso31RN6Wl4o1C07gKlNlQSR5ySKJKZG3FgxW86dxPrhMAZBHWh tGFMo4HvK0rITKLmwpusfYSHP6RinTxahf18raFIUQHg0BsmyjF2OwR6YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOQZjSj/IMa5gGmuoAYldODNuSDMB8GA1UdIwQY MBaAFGAJbjdAkswwC9C7BsQWQJMuz4tJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODct YzQ1ODUyYzdiZTIwLzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85MWNmZTctNWMyZC00NzRhLWI1ODctYzQ1ODUyYzdiZTIw LzEvWUFsdU4wQ1N6REFMMExzR3hCWkFreTdQaTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpVrglVQ mvoCPe4zWKTAWHMROLaTPKzVxIHlnxTdV7NWO2nVENtPWYX5zzLc+inA5eIyOACN A6tlg924bU9U6o+PF6MM+bwHqFwYTJyKDNYHQ0XYRXc0He3D0a+QRdRRldm74LoR 1gYY869pWXiOfW8iE70fDppXv7k1smaO/orvGr0ZqVXnGYXlEhVMmtjXbT+1EiGn XofVP59ulPqzHmLPAEWlw1qYKEU+9gXMFryNHKrU5+7HejJM/FvdSV9m6AlhXHjh ggFs656Z0DDZgQD5RMK7EK4Pfuc+QNm5ZhZQUmGQdiWFJvoZpsil+k0/Fypve1VQ cuXBnfC+bj8Adg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:29 2025 by rpki-client