This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json) Hash identifier: 3ry106yYZcOaI8jBoZ2TJXerhWsAL5jXCZ9b62aFLYk= Subject key identifier: A8:E1:48:0B:8C:D2:C7:CD:59:39:99:A1:2C:02:8E:C2:6B:19:F8:33 Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08 Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308 Certificate serial: 019AF49C657949D70AC84428279047FE935D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft Manifest number: 0A2F Signing time: Sat 06 Dec 2025 17:01:21 +0000 Manifest this update: Sat 06 Dec 2025 17:01:21 +0000 Manifest next update: Sun 07 Dec 2025 17:01:21 +0000 Files and hashes: 1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=) 2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: 12dqqe2KOSekKdAZk0GNK9FOj4XaFIx+xrknqkqxank=) 3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:65:79:49:d7:0a:c8:44:28:27:90:47:fe:93:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308 Validity Not Before: Dec 6 17:01:21 2025 GMT Not After : Dec 7 17:01:21 2025 GMT Subject: CN=a8e1480b8cd2c7cd593999a12c028ec26b19f833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:06:95:11:42:cc:49:e8:9e:79:21:b6:75:be: bd:ab:ac:c2:db:57:4b:7e:a7:18:8c:99:4e:de:62: 76:20:cb:c7:c7:d9:21:e8:1d:48:06:6b:57:bd:b7: c6:3f:f8:85:17:84:6a:8a:94:7d:fa:83:94:da:8c: 7d:3b:ae:d9:c2:83:98:31:e1:a0:50:80:e3:05:67: 08:03:e7:72:8c:98:50:ad:48:d6:7e:f8:e6:5b:78: f7:f2:f8:01:90:7d:d2:20:95:fb:24:5c:9d:0d:f4: af:d5:85:34:e0:6e:64:84:81:65:9b:c6:2d:65:be: bf:bb:a8:d5:58:59:00:6a:dd:bb:dc:ac:e6:25:2f: a5:ee:8a:0f:2c:98:98:e4:2b:89:b7:37:39:ef:58: a4:b0:da:2d:fb:eb:7a:3e:5e:92:12:02:4c:ea:05: 78:c3:5a:06:57:32:5b:eb:dd:a2:f5:c3:ee:43:3a: 35:8c:f7:47:7b:92:90:4a:60:c3:cb:0e:be:1b:24: c9:d0:a3:5f:48:76:63:09:03:40:93:08:3f:a1:e9: 66:5f:61:59:98:3b:f2:3d:ca:a2:4d:ac:10:48:bd: 37:e8:de:c9:03:28:0f:b4:55:0d:07:f5:49:99:c1: a3:0e:4f:b1:66:de:2d:0e:f9:f6:ef:ce:be:76:c0: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:48:0B:8C:D2:C7:CD:59:39:99:A1:2C:02:8E:C2:6B:19:F8:33 X509v3 Authority Key Identifier: keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:50:15:9e:20:6c:a7:4c:bf:52:7c:75:0e:1a:80:76:1a:f8: b4:07:69:a8:71:d7:3c:44:65:9f:c7:93:b4:c3:04:55:4a:0c: 36:5a:71:dc:4f:2d:45:dc:f3:92:71:2f:b0:fa:6c:bc:2e:53: a8:0c:5f:29:c4:5f:28:f6:ee:d0:ab:05:eb:4d:7e:7b:78:6f: 01:62:c7:08:2c:dc:6d:3e:55:38:78:a0:f2:93:00:cf:47:0e: d5:48:b7:d6:ce:24:2f:c0:c4:c1:7b:f1:1d:67:66:22:9d:0c: 84:fb:b4:f0:7e:ec:31:09:a0:47:73:f3:6c:66:33:b3:11:ff: be:01:c6:52:95:9a:84:60:35:26:8e:29:2f:03:e3:12:a7:8b: 9f:a6:e1:88:53:6f:bb:e6:44:21:9f:33:dd:b3:18:bd:ec:6b: c7:4f:34:5f:42:df:5e:29:69:78:15:ed:7b:86:3d:e0:71:58: 4f:03:c7:9e:79:b3:3c:f1:e3:22:84:51:c5:30:5f:5b:35:09: fa:d6:40:c6:92:b6:e1:c4:1d:44:14:cc:f9:08:92:3e:7b:4a: e6:cb:4d:f5:12:6a:a6:cb:a6:58:c8:12:33:e0:d6:11:28:be: b9:de:39:57:e6:d6:17:1b:13:15:eb:a7:b6:0e:68:10:d7:cd: ae:1a:e9:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGV5SdcKyEQoJ5BH/pNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTc3M2RiZmI3NTk1N2YwY2M1Yzg2M2ZjY2U3NmNhNThh MzkzMDgwHhcNMjUxMjA2MTcwMTIxWhcNMjUxMjA3MTcwMTIxWjAzMTEwLwYDVQQD EyhhOGUxNDgwYjhjZDJjN2NkNTkzOTk5YTEyYzAyOGVjMjZiMTlmODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gaVEULMSeieeSG2db69q6zC21dL fqcYjJlO3mJ2IMvHx9kh6B1IBmtXvbfGP/iFF4RqipR9+oOU2ox9O67ZwoOYMeGg UIDjBWcIA+dyjJhQrUjWfvjmW3j38vgBkH3SIJX7JFydDfSv1YU04G5khIFlm8Yt Zb6/u6jVWFkAat273KzmJS+l7ooPLJiY5CuJtzc571iksNot++t6Pl6SEgJM6gV4 w1oGVzJb692i9cPuQzo1jPdHe5KQSmDDyw6+GyTJ0KNfSHZjCQNAkwg/oelmX2FZ mDvyPcqiTawQSL036N7JAygPtFUNB/VJmcGjDk+xZt4tDvn2786+dsDetQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjhSAuM0sfNWTmZoSwCjsJrGfgzMB8GA1UdIwQY MBaAFGDnc9v7dZV/DMXIY/zOdspYo5MIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWIt NDc2ZDdlNjJjZWY2LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWItNDc2ZDdlNjJjZWY2 LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1AVniBs p0y/Unx1DhqAdhr4tAdpqHHXPERln8eTtMMEVUoMNlpx3E8tRdzzknEvsPpsvC5T qAxfKcRfKPbu0KsF601+e3hvAWLHCCzcbT5VOHig8pMAz0cO1Ui31s4kL8DEwXvx HWdmIp0MhPu08H7sMQmgR3PzbGYzsxH/vgHGUpWahGA1Jo4pLwPjEqeLn6bhiFNv u+ZEIZ8z3bMYvexrx080X0LfXilpeBXte4Y94HFYTwPHnnmzPPHjIoRRxTBfWzUJ +tZAxpK24cQdRBTM+QiSPntK5stN9RJqpsumWMgSM+DWESi+ud45V+bWFxsTFeun tg5oENfNrhrpQw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:09 2025 by rpki-client