This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft File: Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json) Hash identifier: dMkVsEw5cE0BnIWXLD4BfGRP6QtvQjkzkq3iBpXw+Hk= Subject key identifier: 82:C6:EC:06:E0:24:9F:0D:0E:2D:1F:14:F5:C8:BB:08:BC:ED:25:A0 Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22 Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722 Certificate serial: 019AF3F78191652BBFDE8425E01D48550714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft Manifest number: 0720 Signing time: Sat 06 Dec 2025 14:01:15 +0000 Manifest this update: Sat 06 Dec 2025 14:01:15 +0000 Manifest next update: Sun 07 Dec 2025 14:01:15 +0000 Files and hashes: 1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: 8tKvCg3nzrebVL5KVFQn68w2cR0Dg9U7g7DEBGfb3+A=) 2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:81:91:65:2b:bf:de:84:25:e0:1d:48:55:07:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722 Validity Not Before: Dec 6 14:01:15 2025 GMT Not After : Dec 7 14:01:15 2025 GMT Subject: CN=82c6ec06e0249f0d0e2d1f14f5c8bb08bced25a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:54:c7:cd:9f:4c:5e:23:91:65:96:9e:86: 39:2a:89:b4:d1:5f:b8:71:1f:55:cd:3f:c1:dd:25: 0e:36:08:db:d5:6b:19:d7:ff:3f:4c:10:fc:57:89: 07:bd:5e:62:71:8d:8d:30:77:06:cc:9c:f8:70:31: 9b:da:bd:3b:1a:39:1a:22:51:16:66:1c:87:ac:03: 60:d9:5e:28:fa:2e:7e:0d:49:51:fe:4f:8d:d0:35: 03:43:a8:2a:e3:ba:e4:d3:32:fa:ed:25:3c:89:f7: 97:51:8e:37:c9:f8:35:52:06:bb:07:5a:89:b1:b5: 6d:b5:b4:52:7c:c1:a6:ab:19:e8:55:7c:57:17:c2: 1b:fd:44:aa:11:c3:07:99:50:8d:d2:cd:d9:eb:40: 62:f3:c8:41:2c:9a:1e:af:33:87:9a:f0:35:62:29: b6:e8:ad:b2:92:63:8e:4a:e9:47:56:49:fb:85:f2: f8:58:41:b6:e0:0a:fc:ce:98:84:cd:64:ff:33:6b: a4:57:c2:92:eb:cc:02:6f:37:27:da:9b:88:4b:8e: a9:37:c9:f6:96:2c:e8:77:9e:ff:af:97:c2:35:32: af:07:af:09:5b:0c:d4:1e:06:e8:7e:60:65:18:c9: cf:2a:ab:09:3d:5f:82:05:5f:b4:c5:01:36:3a:54: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C6:EC:06:E0:24:9F:0D:0E:2D:1F:14:F5:C8:BB:08:BC:ED:25:A0 X509v3 Authority Key Identifier: keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e3:7e:91:ae:6b:5e:4c:20:f1:af:dc:f6:31:e2:80:f5:eb: ac:67:58:b3:cc:28:c5:c9:55:b4:00:fe:2d:66:81:eb:b2:75: 14:15:cd:7b:1a:5d:ce:0b:95:e0:bd:aa:aa:5d:ff:c2:3b:6e: ad:77:d0:d3:ac:2b:33:0e:1f:e6:6d:cc:69:52:56:cd:5e:cc: 03:9f:49:3f:5b:bf:0a:c6:88:77:4a:08:98:99:9a:67:66:d7: 9a:49:31:83:11:8e:5f:78:a4:6b:41:2e:9f:43:93:c5:c3:57: 3c:ef:e4:43:a0:f3:8e:f9:0e:6c:2c:d0:10:f8:63:f1:49:86: cd:e6:26:34:fb:80:f4:6c:60:c3:67:f6:97:42:c8:a2:91:d4: 37:b5:75:c6:70:e1:82:30:49:cd:08:89:b2:97:82:7a:72:90: d2:e3:6e:ae:c0:f6:dc:33:aa:49:0b:26:2c:92:4c:ff:38:14: 15:6d:91:74:79:4f:4d:d9:31:44:2e:a9:40:a5:1a:87:a3:13: 4c:31:b7:d3:9e:28:cc:64:5d:a8:0c:b4:6f:e2:87:7a:f3:4f: a3:0a:a8:a9:fc:59:7b:89:fb:a8:26:74:09:56:5b:ce:f2:87: 63:66:d5:8e:bf:f6:ad:f9:18:47:6f:06:9f:d5:9c:81:18:9b: bb:91:c8:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94GRZSu/3oQl4B1IVQcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc3ZWUwOGY0YmIyMTk4MDRiNjczMzQ3YzNhMGI2YTMz MmQ3MjIwHhcNMjUxMjA2MTQwMTE1WhcNMjUxMjA3MTQwMTE1WjAzMTEwLwYDVQQD Eyg4MmM2ZWMwNmUwMjQ5ZjBkMGUyZDFmMTRmNWM4YmIwOGJjZWQyNWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDpUx82fTF4jkWWWnoY5Kom00V+4 cR9VzT/B3SUONgjb1WsZ1/8/TBD8V4kHvV5icY2NMHcGzJz4cDGb2r07GjkaIlEW ZhyHrANg2V4o+i5+DUlR/k+N0DUDQ6gq47rk0zL67SU8ifeXUY43yfg1Uga7B1qJ sbVttbRSfMGmqxnoVXxXF8Ib/USqEcMHmVCN0s3Z60Bi88hBLJoerzOHmvA1Yim2 6K2ykmOOSulHVkn7hfL4WEG24Ar8zpiEzWT/M2ukV8KS68wCbzcn2puIS46pN8n2 lizod57/r5fCNTKvB68JWwzUHgbofmBlGMnPKqsJPV+CBV+0xQE2OlSB4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILG7AbgJJ8NDi0fFPXIuwi87SWgMB8GA1UdIwQY MBaAFGJnfuCPS7IZgEtnM0fDoLajMtciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2Mt NWYxMGVlNWZkMTAwLzEvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2MtNWYxMGVlNWZkMTAw LzEvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeN+ka5r Xkwg8a/c9jHigPXrrGdYs8woxclVtAD+LWaB67J1FBXNexpdzguV4L2qql3/wjtu rXfQ06wrMw4f5m3MaVJWzV7MA59JP1u/CsaId0oImJmaZ2bXmkkxgxGOX3ika0Eu n0OTxcNXPO/kQ6DzjvkObCzQEPhj8UmGzeYmNPuA9Gxgw2f2l0LIopHUN7V1xnDh gjBJzQiJspeCenKQ0uNursD23DOqSQsmLJJM/zgUFW2RdHlPTdkxRC6pQKUah6MT TDG3054ozGRdqAy0b+KHevNPowqoqfxZe4n7qCZ0CVZbzvKHY2bVjr/2rfkYR28G n9WcgRibu5HIXA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:58 2025 by rpki-client