This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft File: YGVg4D7ogzLu-_ppROvRA4rg6rg.mft (raw, json) Hash identifier: AnWhqmRNQE65pH5tHgAMHCqq346kJY94q+IZKhMChO8= Subject key identifier: 3B:FF:2F:95:2E:15:92:48:27:87:29:6F:51:AA:39:E3:85:97:DA:F7 Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8 Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8 Certificate serial: 019B32D79D744CAB3B71E210683EEA0BDF59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft Manifest number: 0F5C Signing time: Thu 18 Dec 2025 19:02:29 +0000 Manifest this update: Thu 18 Dec 2025 19:02:29 +0000 Manifest next update: Fri 19 Dec 2025 19:02:29 +0000 Files and hashes: 1: 6He2HCHOgYmFWCnJx-CHnw1DNw4.roa (hash: R/op20lcuNNKjtAV2ZxOf6+gcTn27jdjTjhCIstJEzU=) 2: YGVg4D7ogzLu-_ppROvRA4rg6rg.crl (hash: OYwMEE29wFk6ZH4eSVov572l6vqSXbZQg9PZZNem8nU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:9d:74:4c:ab:3b:71:e2:10:68:3e:ea:0b:df:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8 Validity Not Before: Dec 18 19:02:29 2025 GMT Not After : Dec 19 19:02:29 2025 GMT Subject: CN=3bff2f952e1592482787296f51aa39e38597daf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:4b:1b:d7:ee:9d:04:55:3c:a8:69:66:4c: 09:ee:b3:b1:5c:a6:52:6d:a9:3a:31:29:34:b8:5d: 16:8f:b6:51:c8:18:e4:8a:22:1f:cd:39:63:02:6e: 04:dd:72:00:94:dd:72:f2:a4:33:26:69:4c:3a:2b: a9:02:db:da:12:79:44:3d:6f:0b:35:a2:be:1e:54: 18:fc:68:3f:c8:56:22:bd:75:b0:a6:e7:25:4c:1c: 44:39:74:0b:41:12:4e:5b:6e:5e:5a:02:5d:99:98: 1b:84:af:46:2b:02:fa:c0:8b:19:2c:4f:73:12:c1: d6:69:2b:0f:e3:05:fc:f6:c1:91:c5:02:06:c5:27: 3d:41:2c:82:57:04:d4:87:45:c1:72:f3:86:b1:f4: 55:68:d0:11:7c:23:58:53:0f:5a:f6:3c:e4:56:e4: 7f:e8:bd:3a:12:f1:c9:34:f1:a1:75:df:b6:a0:50: 0f:86:4e:35:72:fd:c5:69:cd:13:39:1a:c2:6a:ba: 42:50:89:c5:f2:f7:6e:ea:d7:e8:01:86:f5:5c:aa: 29:2f:e0:e2:8e:e6:ff:46:5c:39:96:d0:93:2a:f0: 6e:74:c0:5b:46:00:fa:c5:e0:fc:7a:3a:61:3f:78: d2:60:e1:0f:59:f8:f3:38:a2:b2:34:16:4e:87:33: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:2F:95:2E:15:92:48:27:87:29:6F:51:AA:39:E3:85:97:DA:F7 X509v3 Authority Key Identifier: keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:12:a0:26:9e:0e:12:4a:37:3a:70:77:04:28:b6:32:2c: bf:9c:71:3d:21:30:02:21:02:de:70:fb:67:3c:1d:39:a3:c5: 8b:2b:89:bf:8c:68:37:a2:d2:7d:50:27:5c:02:47:8e:10:e7: 83:dc:d7:36:33:55:f8:09:ba:c7:98:68:4a:27:f8:f9:53:6f: cd:bc:ed:18:92:98:d4:33:fe:06:36:23:73:76:d8:49:8c:e8: 0e:16:e9:71:c1:1f:51:8f:8d:e0:19:97:16:52:ee:08:66:a8: 1a:da:0b:63:8e:de:4b:72:d7:ef:cc:aa:c6:e7:5f:e4:d8:8f: 6f:7f:75:1d:99:36:a5:30:00:a6:f6:f5:6b:5c:9d:6d:d1:48: f7:b8:4a:aa:78:94:69:3b:41:df:f0:86:f8:c1:38:b9:e1:c6: 74:6e:e4:bf:1f:ba:c3:cb:b7:ab:2f:9b:38:de:fd:66:07:29: ea:6e:ff:0e:07:ac:28:4a:6d:a0:7f:94:cd:e5:d4:16:b6:57: a8:5a:36:43:a2:26:a7:46:ae:ec:2e:0d:c5:f9:ab:37:a0:bf: 49:c3:08:03:97:e3:c6:d2:d8:79:80:f3:01:9c:0b:03:b6:a1: e7:c8:72:37:b2:3c:94:02:34:9a:2d:22:ca:6d:7a:1b:2f:32: dd:63:49:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1510TKs7ceIQaD7qC99ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjU2MGUwM2VlODgzMzJlZWZiZmE2OTQ0ZWJkMTAzOGFl MGVhYjgwHhcNMjUxMjE4MTkwMjI5WhcNMjUxMjE5MTkwMjI5WjAzMTEwLwYDVQQD EygzYmZmMmY5NTJlMTU5MjQ4Mjc4NzI5NmY1MWFhMzllMzg1OTdkYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1RLG9funQRVPKhpZkwJ7rOxXKZS bak6MSk0uF0Wj7ZRyBjkiiIfzTljAm4E3XIAlN1y8qQzJmlMOiupAtvaEnlEPW8L NaK+HlQY/Gg/yFYivXWwpuclTBxEOXQLQRJOW25eWgJdmZgbhK9GKwL6wIsZLE9z EsHWaSsP4wX89sGRxQIGxSc9QSyCVwTUh0XBcvOGsfRVaNARfCNYUw9a9jzkVuR/ 6L06EvHJNPGhdd+2oFAPhk41cv3Fac0TORrCarpCUInF8vdu6tfoAYb1XKopL+Di jub/Rlw5ltCTKvBudMBbRgD6xeD8ejphP3jSYOEPWfjzOKKyNBZOhzM6aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv/L5UuFZJIJ4cpb1GqOeOFl9r3MB8GA1UdIwQY MBaAFGBlYOA+6IMy7vv6aUTr0QOK4Oq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNGI3OGYtOGNiYi00ODQ2LTg2NmUt Y2Y5ZTcxNjRjMDdmLzEvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNGI3OGYtOGNiYi00ODQ2LTg2NmUtY2Y5ZTcxNjRjMDdm LzEvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlUSoCae DhJKNzpwdwQotjIsv5xxPSEwAiEC3nD7ZzwdOaPFiyuJv4xoN6LSfVAnXAJHjhDn g9zXNjNV+Am6x5hoSif4+VNvzbztGJKY1DP+BjYjc3bYSYzoDhbpccEfUY+N4BmX FlLuCGaoGtoLY47eS3LX78yqxudf5NiPb391HZk2pTAApvb1a1ydbdFI97hKqniU aTtB3/CG+ME4ueHGdG7kvx+6w8u3qy+bON79Zgcp6m7/DgesKEptoH+UzeXUFrZX qFo2Q6Imp0au7C4NxfmrN6C/ScMIA5fjxtLYeYDzAZwLA7ah58hyN7I8lAI0mi0i ym16Gy8y3WNJaw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:33 2025 by rpki-client