This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File: YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier: L8tDcW31frpgBhKgGGnHNZe0QfJQhOi4ECwhUiJzv4Y=
Subject key identifier: F6:1D:F9:41:41:9C:B3:8C:83:1B:27:FC:7E:28:0A:6C:42:43:67:A6
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019AF0BEF662FCE55D48CFFEF3B18FA4BD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number: 05C1
Signing time: Fri 05 Dec 2025 23:00:38 +0000
Manifest this update: Fri 05 Dec 2025 23:00:38 +0000
Manifest next update: Sat 06 Dec 2025 23:00:38 +0000
Files and hashes: 1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: iB1BOePRQoSq43opoWp5ezYiXsuKW4SIZSVmWn0w8m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:be:f6:62:fc:e5:5d:48:cf:fe:f3:b1:8f:a4:bd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Dec 5 23:00:38 2025 GMT
Not After : Dec 6 23:00:38 2025 GMT
Subject: CN=f61df941419cb38c831b27fc7e280a6c424367a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:e1:f2:f3:33:ee:47:00:81:05:db:01:2a:
c3:54:17:40:36:fe:f5:8f:8f:47:e5:39:af:e5:fb:
e6:92:13:3e:b2:24:f9:25:bf:b4:46:a5:fb:a4:3f:
bd:34:68:dd:40:21:f0:53:44:52:ca:18:e1:fb:75:
59:1d:c1:bb:45:6d:a8:dd:10:ed:62:e4:ba:d5:f2:
04:96:fe:62:75:16:dc:33:9c:b5:ec:e9:96:d2:d7:
ea:30:03:14:fb:cf:a9:be:5e:62:85:a0:7c:ae:80:
6d:16:04:8f:a5:6d:38:7e:b1:71:cd:ab:fc:5b:15:
d4:f7:b6:95:47:c2:32:74:5e:0f:5c:a1:7d:dc:27:
2a:cc:4d:57:c4:2e:d4:f3:a4:b2:a3:4a:d8:5c:6f:
03:63:a6:05:bd:f3:1c:c2:5d:40:86:54:fe:0d:be:
d1:05:5e:03:35:97:88:9e:d6:fc:e9:89:10:51:eb:
ca:a6:ab:28:70:c7:ee:4a:c7:b1:34:e2:f4:4b:6f:
ee:86:05:7e:f5:cb:cc:0d:51:bd:1e:6d:e6:4a:25:
66:84:0d:d2:01:d9:b4:92:55:74:9d:f6:77:79:a0:
fd:28:bc:48:d3:f6:76:d8:9f:58:67:a9:e9:f7:95:
50:99:67:58:9e:2f:8e:86:25:17:1d:fb:21:53:ce:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1D:F9:41:41:9C:B3:8C:83:1B:27:FC:7E:28:0A:6C:42:43:67:A6
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:fe:76:74:3f:65:95:df:fa:ee:db:ca:2a:95:20:f8:49:39:
86:4a:9c:94:9b:8c:e9:04:5e:35:97:4f:a4:8b:dd:96:4b:1d:
c7:d7:63:3a:c7:3a:c3:50:a2:31:b2:b5:de:b3:4c:19:f7:cb:
09:1c:c1:59:5f:5d:31:75:53:f6:1f:22:a8:ec:11:7b:7e:cc:
92:f0:bc:b0:cc:21:ed:a0:0f:be:ca:4f:c7:1f:47:ca:b3:b3:
05:6b:e6:ca:16:73:e4:c0:f6:02:85:88:ea:c2:18:88:6e:26:
c8:87:8a:9d:43:06:25:2b:80:16:3c:e9:a5:1d:a8:b4:3e:c9:
c1:81:ce:e3:c5:a7:ce:ec:e9:81:90:7a:47:18:36:2d:45:33:
81:e3:96:95:72:7e:bc:ee:7f:02:17:9d:f7:67:53:3f:0e:d9:
6b:5b:49:ca:4c:26:17:ac:29:eb:4b:27:2e:ef:68:e4:1c:56:
87:01:08:59:f3:0b:67:24:95:a5:dd:94:a7:99:de:92:24:d9:
44:e4:b6:be:a1:a3:3b:03:de:8c:7d:9b:d6:2d:78:66:b5:17:
1a:40:64:50:6f:d4:42:d7:96:94:02:c3:a4:af:08:42:94:4a:
38:5d:2c:db:7f:6f:18:22:d8:19:b3:46:0c:3a:5d:b5:80:e9:
b2:27:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:19:18 2025 by rpki-client