This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft File: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json) Hash identifier: VxRgsTsf4H2w4ddkU5LoY35V8xSNinm32/MFx94voQo= Subject key identifier: 25:F0:90:B9:46:58:C8:AA:1D:42:10:D7:AD:FC:6A:15:F1:C3:BE:FE Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a Certificate serial: 019AF5786FC613E2E02F3CC4213B2B395E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 21:01:42 +0000 Manifest this update: Sat 06 Dec 2025 21:01:42 +0000 Manifest next update: Sun 07 Dec 2025 21:01:42 +0000 Files and hashes: 1: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (hash: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=) 2: XXUXKaNBLjG2zXes3zUz4pT_p2E.roa (hash: V04szlA87zJPQWBTLBTTrCqtzJ6gxyAZvxuUSuhQTGs=) 3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: kPnxTx5QFd3j7GacCoRgRYzS4io5MLOH3rcxKvA3U1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:6f:c6:13:e2:e0:2f:3c:c4:21:3b:2b:39:5e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a Validity Not Before: Dec 6 21:01:42 2025 GMT Not After : Dec 7 21:01:42 2025 GMT Subject: CN=25f090b94658c8aa1d4210d7adfc6a15f1c3befe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:b3:f1:51:b1:86:6e:ef:fc:77:03:76:b6: 3d:f6:89:71:fb:fa:82:84:47:21:a6:40:45:14:b9: 74:cd:0e:ba:97:b1:86:9b:e3:17:b6:78:24:1d:22: 0b:f2:88:c4:18:d1:e5:75:35:a0:25:da:a0:2f:9a: 27:73:76:92:3e:8d:23:5e:7f:a7:8a:97:47:1a:5f: 0a:5e:c2:55:ec:c7:a7:d6:d5:67:ae:34:be:a1:01: e7:71:be:d6:28:72:b0:79:05:86:4a:2f:ee:50:f8: d6:ba:8d:f9:05:47:e6:19:31:46:0e:01:ab:bc:d8: 0e:af:2d:58:c8:6c:61:0c:2d:48:ef:94:fd:01:b8: a2:45:b2:b0:61:d7:d9:ec:d3:be:30:d6:87:c2:4f: b9:d6:5b:51:ba:d4:a4:09:31:ea:3f:67:ea:98:14: f1:c5:1e:11:ab:62:72:7d:1b:e8:4d:12:37:23:2f: 0d:ed:e4:b1:ad:74:53:9f:15:9f:60:3a:12:5c:86: a0:9c:a3:3d:a6:ed:9c:0b:db:ac:04:76:62:74:f1: e3:53:39:8e:f2:dc:e1:f5:2d:88:ff:b7:55:fe:2d: 53:63:ec:fd:cf:bd:cf:89:0b:22:59:b6:0c:b2:e6: b1:a0:7a:9e:6d:17:ac:27:fb:ad:b2:08:69:9d:eb: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F0:90:B9:46:58:C8:AA:1D:42:10:D7:AD:FC:6A:15:F1:C3:BE:FE X509v3 Authority Key Identifier: keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:79:39:ba:65:13:20:d1:29:47:57:76:9f:fd:51:71:cc: 5a:97:23:3d:51:71:0b:47:e3:2b:fe:1b:4f:dd:13:c9:79:c8: 7f:66:89:26:24:6d:97:af:cf:0e:60:be:2a:aa:17:c4:8a:33: 94:10:7c:4c:9f:30:e8:31:6f:2c:1f:f9:92:8e:af:7c:c5:52: 9b:ef:af:b2:26:00:51:e3:ef:21:63:42:5b:c5:1b:ec:0a:96: 57:80:10:0b:8e:38:37:69:ef:38:92:4d:44:f1:42:59:75:43: 62:4c:a2:30:71:db:17:27:2f:ac:ca:f8:37:9f:22:3f:d6:3a: e9:c5:55:2e:b0:d2:42:4e:cd:d0:5a:a5:73:10:49:80:2e:c8: ec:94:c3:cc:a1:de:a1:85:3f:31:04:67:65:18:11:1f:f0:e8: a5:6a:50:12:6d:29:c9:ac:df:85:db:53:0e:5f:cf:3a:c7:82: 2d:1a:7b:b9:18:09:2b:fa:1a:13:1f:65:20:28:51:b2:0a:31: 7f:14:55:11:b5:77:5e:1f:e9:72:7b:46:b2:5c:ca:6e:a4:e7: 98:09:a4:99:0a:73:59:25:ac:21:7d:62:bc:78:1e:72:ec:8b: e7:ca:7b:60:4e:97:a8:63:16:4e:22:69:53:3f:d0:74:3c:4f: 0e:b3:c3:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eG/GE+LgLzzEITsrOV6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWE4Mzg1YTE0ZmQ5OTY3OTc4YWU3ZjA2ZWM0ZGQ1MjIy OWE0NGEwHhcNMjUxMjA2MjEwMTQyWhcNMjUxMjA3MjEwMTQyWjAzMTEwLwYDVQQD EygyNWYwOTBiOTQ2NThjOGFhMWQ0MjEwZDdhZGZjNmExNWYxYzNiZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/mz8VGxhm7v/HcDdrY99olx+/qC hEchpkBFFLl0zQ66l7GGm+MXtngkHSIL8ojEGNHldTWgJdqgL5onc3aSPo0jXn+n ipdHGl8KXsJV7Men1tVnrjS+oQHncb7WKHKweQWGSi/uUPjWuo35BUfmGTFGDgGr vNgOry1YyGxhDC1I75T9AbiiRbKwYdfZ7NO+MNaHwk+51ltRutSkCTHqP2fqmBTx xR4Rq2JyfRvoTRI3Iy8N7eSxrXRTnxWfYDoSXIagnKM9pu2cC9usBHZidPHjUzmO 8tzh9S2I/7dV/i1TY+z9z73PiQsiWbYMsuaxoHqebResJ/utsghpnesS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXwkLlGWMiqHUIQ1638ahXxw77+MB8GA1UdIwQY MBaAFGDqg4WhT9mWeXiufwbsTdUiKaRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEt ZjU0NTc3ZjdjYzBmLzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEtZjU0NTc3ZjdjYzBm LzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI55Obpl EyDRKUdXdp/9UXHMWpcjPVFxC0fjK/4bT90TyXnIf2aJJiRtl6/PDmC+KqoXxIoz lBB8TJ8w6DFvLB/5ko6vfMVSm++vsiYAUePvIWNCW8Ub7AqWV4AQC444N2nvOJJN RPFCWXVDYkyiMHHbFycvrMr4N58iP9Y66cVVLrDSQk7N0FqlcxBJgC7I7JTDzKHe oYU/MQRnZRgRH/DopWpQEm0pyazfhdtTDl/POseCLRp7uRgJK/oaEx9lIChRsgox fxRVEbV3Xh/pcntGslzKbqTnmAmkmQpzWSWsIX1ivHgecuyL58p7YE6XqGMWTiJp Uz/QdDxPDrPDKA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:55 2025 by rpki-client