This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft File: YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json) Hash identifier: BJDOSjEt3lFOtdR62Uabo88WFLHvixa83J4Ufs47UVo= Subject key identifier: 6F:76:50:E8:48:C7:5D:8C:5B:7C:F7:BF:36:BF:57:2A:7E:F1:62:34 Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC Certificate issuer: /CN=603831a61bc8a8f4cb85887022fb6f86397345dc Certificate serial: 019B35A0B08130F9FDBE300D292399F9A57D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft Manifest number: 0E97 Signing time: Fri 19 Dec 2025 08:01:21 +0000 Manifest this update: Fri 19 Dec 2025 08:01:21 +0000 Manifest next update: Sat 20 Dec 2025 08:01:21 +0000 Files and hashes: 1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=) 2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=) 3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: IetDDMznVQHRgnWY4UoFD3d6hP3+POrdZnrstMwsOTM=) 4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=) 5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:b0:81:30:f9:fd:be:30:0d:29:23:99:f9:a5:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc Validity Not Before: Dec 19 08:01:21 2025 GMT Not After : Dec 20 08:01:21 2025 GMT Subject: CN=6f7650e848c75d8c5b7cf7bf36bf572a7ef16234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:81:89:43:8b:c2:af:f0:f2:b1:f9:0f:8d: c9:00:ae:48:c4:41:e5:a0:2d:28:88:3b:42:b6:a6: 88:93:3f:9f:75:4f:3b:76:ee:34:71:f4:32:a9:98: 7f:09:06:2a:ef:5c:78:8b:1c:b8:c4:7b:06:8f:cc: c3:a8:55:55:40:6f:04:ea:74:57:d8:b3:d4:49:03: 41:89:fb:a3:8c:ff:d9:1d:85:f4:40:c3:ee:c1:e8: 45:51:7c:2e:89:a9:fc:ad:cd:b4:9f:2d:b9:18:e5: 51:0c:cb:55:12:4a:dc:42:ee:e0:ff:16:22:09:b6: 90:2e:79:ed:75:53:ac:15:2b:83:77:3d:0e:19:d5: 25:29:2f:fa:2d:d9:8f:0d:24:f1:5c:3f:bc:62:34: 44:22:03:80:51:4b:03:c1:51:9f:56:b3:f4:4c:05: f7:3e:76:48:e7:c1:f7:c0:5e:83:44:21:39:3a:7e: 16:8e:ef:d6:86:2a:b1:90:61:33:18:25:83:96:b3: eb:86:f5:19:22:28:71:c1:ba:6a:fe:2c:bf:85:08: 2b:11:6c:bb:f3:db:4d:a6:1f:00:5e:04:93:ff:a5: 7c:51:e7:a0:31:a6:ef:3d:a3:7c:03:9e:2b:fe:47: bb:1e:1d:9b:b7:2e:bb:a0:fc:92:61:29:1f:3d:04: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:50:E8:48:C7:5D:8C:5B:7C:F7:BF:36:BF:57:2A:7E:F1:62:34 X509v3 Authority Key Identifier: keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:91:02:98:b7:41:c4:be:08:00:95:12:62:76:a2:53:28:88: ac:77:12:44:41:ce:07:5f:d9:25:23:d1:7e:70:57:4b:38:f4: 29:31:c6:b6:49:44:08:13:78:67:35:be:23:75:4c:5e:6f:cd: 0b:73:6d:0c:b6:81:99:6a:fa:9d:06:e2:8d:63:a2:03:26:dd: 70:c1:ee:ef:b8:d9:1d:70:c6:f2:99:4c:5e:73:12:7c:bc:d1: 8d:9f:cf:c6:db:38:b4:75:1f:1d:65:b8:9e:bb:46:e9:59:1e: 96:6f:a1:70:53:3f:57:62:63:ff:02:56:e8:1b:7a:04:a5:fe: d8:c9:58:39:5f:43:ae:31:58:68:e4:fa:13:50:f0:15:2a:e7: fb:43:e6:4d:94:36:8b:26:97:e0:e5:6a:35:d9:be:d8:cf:d4: 61:a1:b4:28:17:4f:fa:8e:6f:4d:90:de:47:3a:34:ed:20:a3: 04:76:f9:c5:88:07:fe:82:15:dd:38:2e:3e:47:4f:9f:f3:d7: 89:e3:d8:c1:ea:d3:5b:64:8e:4d:18:9e:49:05:ea:1a:20:5f: f7:14:01:a2:62:14:45:90:33:47:59:7f:4e:5b:7c:1d:25:83: 5c:71:c0:67:07:25:fb:96:a1:6e:1d:ad:c4:e2:bf:52:9c:77: aa:81:9a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oLCBMPn9vjANKSOZ+aV9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzgzMWE2MWJjOGE4ZjRjYjg1ODg3MDIyZmI2Zjg2Mzk3 MzQ1ZGMwHhcNMjUxMjE5MDgwMTIxWhcNMjUxMjIwMDgwMTIxWjAzMTEwLwYDVQQD Eyg2Zjc2NTBlODQ4Yzc1ZDhjNWI3Y2Y3YmYzNmJmNTcyYTdlZjE2MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXOBiUOLwq/w8rH5D43JAK5IxEHl oC0oiDtCtqaIkz+fdU87du40cfQyqZh/CQYq71x4ixy4xHsGj8zDqFVVQG8E6nRX 2LPUSQNBifujjP/ZHYX0QMPuwehFUXwuian8rc20ny25GOVRDMtVEkrcQu7g/xYi CbaQLnntdVOsFSuDdz0OGdUlKS/6LdmPDSTxXD+8YjREIgOAUUsDwVGfVrP0TAX3 PnZI58H3wF6DRCE5On4Wju/WhiqxkGEzGCWDlrPrhvUZIihxwbpq/iy/hQgrEWy7 89tNph8AXgST/6V8UeegMabvPaN8A54r/ke7Hh2bty67oPySYSkfPQQNowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG92UOhIx12MW3z3vza/Vyp+8WI0MB8GA1UdIwQY MBaAFGA4MaYbyKj0y4WIcCL7b4Y5c0XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzMyNzYtNTBhZC00ZWJjLWEyYTYt OTgwODU0NTkzM2M5LzEvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzMyNzYtNTBhZC00ZWJjLWEyYTYtOTgwODU0NTkzM2M5 LzEvWURneHBodklxUFRMaFlod0l2dHZoamx6UmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJECmLdB xL4IAJUSYnaiUyiIrHcSREHOB1/ZJSPRfnBXSzj0KTHGtklECBN4ZzW+I3VMXm/N C3NtDLaBmWr6nQbijWOiAybdcMHu77jZHXDG8plMXnMSfLzRjZ/Pxts4tHUfHWW4 nrtG6Vkelm+hcFM/V2Jj/wJW6Bt6BKX+2MlYOV9DrjFYaOT6E1DwFSrn+0PmTZQ2 iyaX4OVqNdm+2M/UYaG0KBdP+o5vTZDeRzo07SCjBHb5xYgH/oIV3TguPkdPn/PX iePYwerTW2SOTRieSQXqGiBf9xQBomIURZAzR1l/Tlt8HSWDXHHAZwcl+5ahbh2t xOK/Upx3qoGaCg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:41:44 2025 by rpki-client