This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json) Hash identifier: I2EhnGkQ61lMRuBvXA+KmQRKq5FDrlZX/KI57FxdMxU= Subject key identifier: C6:5E:0E:1D:85:3B:84:97:BD:D9:40:E0:40:29:C4:64:32:D4:F9:BC Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e Certificate serial: 019AF3C06E905BBD2BF9B342A7A5366F03AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft Manifest number: 04F2 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: 2iKXYErMC+03yvohQQcVqZooMS2yIvfgMmeiHqaGavo=) 2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6e:90:5b:bd:2b:f9:b3:42:a7:a5:36:6f:03:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=c65e0e1d853b8497bdd940e04029c46432d4f9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:b5:ae:96:3e:85:c5:c9:e9:b4:af:28:09: 31:89:f1:85:54:b5:3c:dc:6a:ce:8c:21:33:07:67: 03:ea:84:bc:7a:b8:24:07:3a:89:cb:de:43:ba:56: 49:6a:ed:98:58:fc:e4:fb:bc:2d:a5:89:69:89:33: eb:7c:6b:d7:5f:9b:16:13:bf:38:9a:48:8d:08:c4: 3f:29:36:76:12:7b:61:02:e6:21:a7:ae:82:15:0f: 74:70:a6:2d:21:fe:73:bc:73:6e:75:9d:cf:53:d4: 72:e9:8f:9e:03:12:e4:52:bd:6e:34:da:07:9d:5b: 07:39:71:ec:2c:7b:44:b5:f9:bd:e3:61:fc:45:9e: 8a:d8:a4:ae:df:ca:0d:09:d2:61:5f:3f:47:74:6b: 68:6b:87:d0:16:37:b7:fe:2e:db:69:c6:4d:87:41: a6:c7:5e:4a:2a:29:f9:39:86:f3:ec:ab:f5:66:4c: 15:6a:c0:3e:04:ab:fc:8f:72:06:88:39:2d:64:84: 9a:b6:e1:54:d0:5e:11:22:15:3f:7e:b6:1f:ec:a8: 09:78:5c:4f:39:ef:5e:9b:de:fe:33:76:3a:c6:a0: 3e:15:2e:0d:2b:d5:25:b0:55:f6:e0:37:5d:6c:e7: 6b:59:a0:59:ec:4f:f9:f0:24:53:e8:cb:94:ef:7b: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5E:0E:1D:85:3B:84:97:BD:D9:40:E0:40:29:C4:64:32:D4:F9:BC X509v3 Authority Key Identifier: keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:96:7f:70:9f:ca:ea:37:9b:97:65:b8:23:6c:31:ba:a6:d7: a3:e1:b8:ab:35:b4:25:96:7d:e3:51:88:10:6a:9c:bf:0f:9c: 6d:95:68:4e:02:16:a1:a1:d1:7f:9b:0d:0f:dd:1b:8c:e3:ce: fd:2d:3d:ec:b4:0b:1a:68:de:f3:a5:7c:f7:aa:5d:9d:df:4b: 6d:36:71:2e:4e:9a:40:a1:3f:64:c5:e2:bb:90:a1:04:16:18: 96:4e:ac:77:19:95:c8:a3:0a:9a:7f:62:44:22:04:3a:56:e6: b0:cf:93:93:df:6d:e1:af:51:79:76:cf:7b:b3:9d:73:13:91: fc:0b:94:39:89:db:cd:f0:ee:26:b1:4e:32:57:e0:11:8d:8d: e1:9d:7c:1c:a0:2b:57:8b:1a:51:96:40:48:65:8e:e7:b9:57: 48:87:0a:ea:34:cf:39:bc:64:bb:5e:62:74:41:1a:0d:1c:e9: 0b:77:6c:32:cb:ba:5c:58:71:e2:2c:4b:09:4d:3d:63:9a:1f: ad:39:fb:d9:3e:06:bb:17:e3:d6:a1:10:84:2d:8f:e0:61:81: 0a:f3:bf:96:9a:5e:7c:7d:c1:3f:df:44:a9:6e:21:f6:10:bf: ea:60:fc:0f:8a:7d:38:a8:bb:2f:c6:3f:d1:36:9d:5f:fc:dd: 64:0c:e1:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwG6QW70r+bNCp6U2bwOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMmRjMjQ3OGE0YmRkZTRjNDQwYmI1ODgwMjQxMGQyMzQw YTQ5MGUwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD EyhjNjVlMGUxZDg1M2I4NDk3YmRkOTQwZTA0MDI5YzQ2NDMyZDRmOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzS1rpY+hcXJ6bSvKAkxifGFVLU8 3GrOjCEzB2cD6oS8ergkBzqJy95DulZJau2YWPzk+7wtpYlpiTPrfGvXX5sWE784 mkiNCMQ/KTZ2EnthAuYhp66CFQ90cKYtIf5zvHNudZ3PU9Ry6Y+eAxLkUr1uNNoH nVsHOXHsLHtEtfm942H8RZ6K2KSu38oNCdJhXz9HdGtoa4fQFje3/i7bacZNh0Gm x15KKin5OYbz7Kv1ZkwVasA+BKv8j3IGiDktZISatuFU0F4RIhU/frYf7KgJeFxP Oe9em97+M3Y6xqA+FS4NK9UlsFX24DddbOdrWaBZ7E/58CRT6MuU73tuCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZeDh2FO4SXvdlA4EApxGQy1Pm8MB8GA1UdIwQY MBaAFGAtwkeKS93kxEC7WIAkENI0CkkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMt NWY3MTNkZmZmMTE0LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMtNWY3MTNkZmZmMTE0 LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopZ/cJ/K 6jebl2W4I2wxuqbXo+G4qzW0JZZ941GIEGqcvw+cbZVoTgIWoaHRf5sND90bjOPO /S097LQLGmje86V896pdnd9LbTZxLk6aQKE/ZMXiu5ChBBYYlk6sdxmVyKMKmn9i RCIEOlbmsM+Tk99t4a9ReXbPe7OdcxOR/AuUOYnbzfDuJrFOMlfgEY2N4Z18HKAr V4saUZZASGWO57lXSIcK6jTPObxku15idEEaDRzpC3dsMsu6XFhx4ixLCU09Y5of rTn72T4Guxfj1qEQhC2P4GGBCvO/lppefH3BP99EqW4h9hC/6mD8D4p9OKi7L8Y/ 0TadX/zdZAzhew== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:24 2025 by rpki-client