This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json) Hash identifier: Y3ZYL7ElUIjWDocVgvwZoktJlVzlD6HGFa1g4TEfAnI= Subject key identifier: E3:4E:4E:D7:3F:69:E8:D6:96:30:AC:0D:22:5F:4F:55:1F:6B:BB:E4 Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f Certificate serial: 019B3644EC738219D83EF792666370510FBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft Manifest number: 0C2E Signing time: Fri 19 Dec 2025 11:00:45 +0000 Manifest this update: Fri 19 Dec 2025 11:00:45 +0000 Manifest next update: Sat 20 Dec 2025 11:00:45 +0000 Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: 2MvBMix34wboAa39Er4YIhIfUA2lS8Toib0LWtzCNDY=) 2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:ec:73:82:19:d8:3e:f7:92:66:63:70:51:0f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f Validity Not Before: Dec 19 11:00:45 2025 GMT Not After : Dec 20 11:00:45 2025 GMT Subject: CN=e34e4ed73f69e8d69630ac0d225f4f551f6bbbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b0:fe:58:b1:6f:c7:54:31:6d:d9:a3:10:e4: bb:09:59:7f:71:e4:73:22:c3:04:1c:32:92:3e:57: e1:c1:f8:12:5b:6d:f4:51:59:77:15:0f:59:33:32: ed:ea:f6:ac:1a:c9:53:ce:9d:bb:7c:bb:e1:01:6d: 2e:cc:0c:f8:ad:52:7b:f0:dc:c6:80:f7:08:58:a3: ea:62:ad:19:86:45:9a:d5:eb:60:73:c0:9a:1a:d5: 21:14:d2:0b:90:25:61:df:45:fe:14:2b:d3:4a:bd: 2a:d1:d0:df:fd:6a:b1:47:ff:d1:31:c3:11:5c:4d: 0d:1d:2e:48:77:17:80:f2:19:6b:55:55:3d:55:b9: 33:19:93:a7:17:b9:85:f4:ac:0e:32:96:08:23:ff: 21:82:e5:38:1f:5e:0d:08:53:eb:5f:2b:d8:39:e4: 6b:95:e9:11:38:f3:c1:4a:ea:89:f4:0b:f8:50:75: 8b:65:dd:e4:55:99:52:d9:aa:5f:af:10:20:e7:ef: 7c:6e:33:76:b7:11:ea:ec:d7:35:91:71:31:1f:d3: 88:60:aa:ee:85:e1:9b:0c:76:ea:03:42:9d:7b:d0: c7:16:93:88:f9:e7:71:ad:d0:48:7b:60:56:84:32: 8c:a1:aa:29:cb:f5:8c:4e:1a:a4:5d:81:eb:72:67: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4E:4E:D7:3F:69:E8:D6:96:30:AC:0D:22:5F:4F:55:1F:6B:BB:E4 X509v3 Authority Key Identifier: keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:32:fc:93:4d:aa:f1:cd:f7:ea:52:78:11:76:f5:f0:bb:81: 58:4a:3b:ff:8a:2a:2c:ab:af:8f:60:a2:5a:7b:ff:36:fa:00: e4:f2:ec:f2:e2:5c:52:ea:4c:c5:9c:89:2d:f2:1b:2c:ce:3b: da:97:d5:3c:b6:6e:25:4a:d8:d6:fb:94:9d:89:d7:c0:22:46: 9f:f1:52:17:1a:77:71:e1:7a:44:e6:ec:e9:b4:10:c1:25:ef: 08:8a:c0:62:8c:ac:5f:08:49:9f:01:60:17:83:61:2d:fe:f4: 80:69:e2:b5:06:2b:e4:e7:eb:00:18:46:d9:70:8f:8f:ba:96: 4a:83:11:88:6f:fb:a7:7d:c4:d2:c4:64:25:c0:1b:12:e3:4c: bc:4e:29:c0:70:bd:e8:33:90:ba:2d:cd:04:33:a7:e7:48:e6: 6b:57:82:47:3a:2e:e2:c8:68:8d:b0:de:94:d6:80:1b:cf:0b: a9:c9:78:0b:1c:7e:e8:f1:ad:46:b3:d1:b5:9f:94:e0:45:0a: 52:07:32:81:e4:48:89:22:01:70:30:61:00:d7:ba:6b:cc:76: b8:3f:a5:9f:dd:0e:5c:08:e7:f3:5a:0b:e1:f2:9d:cf:6b:81: 40:2e:b1:fa:b6:d9:5a:f5:54:53:8c:e3:f5:33:9c:4f:38:eb: ce:3e:1a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2ROxzghnYPveSZmNwUQ+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTAwOTllMzM1NDA5ZGIwM2FjMTEzM2QxNjRmMDJhMGQ1 ZGM2NmYwHhcNMjUxMjE5MTEwMDQ1WhcNMjUxMjIwMTEwMDQ1WjAzMTEwLwYDVQQD EyhlMzRlNGVkNzNmNjllOGQ2OTYzMGFjMGQyMjVmNGY1NTFmNmJiYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrD+WLFvx1QxbdmjEOS7CVl/ceRz IsMEHDKSPlfhwfgSW230UVl3FQ9ZMzLt6vasGslTzp27fLvhAW0uzAz4rVJ78NzG gPcIWKPqYq0ZhkWa1etgc8CaGtUhFNILkCVh30X+FCvTSr0q0dDf/WqxR//RMcMR XE0NHS5IdxeA8hlrVVU9VbkzGZOnF7mF9KwOMpYII/8hguU4H14NCFPrXyvYOeRr lekROPPBSuqJ9Av4UHWLZd3kVZlS2apfrxAg5+98bjN2txHq7Nc1kXExH9OIYKru heGbDHbqA0Kde9DHFpOI+edxrdBIe2BWhDKMoaopy/WMThqkXYHrcmdqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONOTtc/aejWljCsDSJfT1Ufa7vkMB8GA1UdIwQY MBaAFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUt NGM2NWJkMzNkNmY2LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUtNGM2NWJkMzNkNmY2 LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjL8k02q 8c336lJ4EXb18LuBWEo7/4oqLKuvj2CiWnv/NvoA5PLs8uJcUupMxZyJLfIbLM47 2pfVPLZuJUrY1vuUnYnXwCJGn/FSFxp3ceF6RObs6bQQwSXvCIrAYoysXwhJnwFg F4NhLf70gGnitQYr5OfrABhG2XCPj7qWSoMRiG/7p33E0sRkJcAbEuNMvE4pwHC9 6DOQui3NBDOn50jma1eCRzou4shojbDelNaAG88Lqcl4Cxx+6PGtRrPRtZ+U4EUK UgcygeRIiSIBcDBhANe6a8x2uD+ln90OXAjn81oL4fKdz2uBQC6x+rbZWvVUU4zj 9TOcTzjrzj4adw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:42:22 2025 by rpki-client