This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft File: YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft (raw, json) Hash identifier: +dPjn7zPk9dQxXYER8MmdKMjOoiOM4Ft9CTicKuw5VA= Subject key identifier: 25:BD:79:DF:F3:66:51:9A:B6:19:9D:C7:77:92:A8:7C:E1:CA:D6:79 Authority key identifier: 62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77 Certificate issuer: /CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77 Certificate serial: 019AF42E48F153C3C5FBBD7B3F123F59B73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft Manifest number: 018D Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 15:01:05 +0000 Manifest next update: Sun 07 Dec 2025 15:01:05 +0000 Files and hashes: 1: YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl (hash: iQgXl2rsAKP4my9PAw/oGj+aPA5hYaSc1EXEbHCuwX8=) 2: yJ1HWDzaQf8_v_QIkEVeJhHUsNs.roa (hash: uRF7ZuSGISVIOWjvLjFgvjfyhiciNwgKOFC9/lRcs/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:48:f1:53:c3:c5:fb:bd:7b:3f:12:3f:59:b7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6278cb60f357d61cb98b4c7ca915a12818ef2c77 Validity Not Before: Dec 6 15:01:05 2025 GMT Not After : Dec 7 15:01:05 2025 GMT Subject: CN=25bd79dff366519ab6199dc77792a87ce1cad679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3c:9d:f3:2a:a4:a5:3b:e2:fe:3a:45:26:ac: 62:3b:fb:55:ac:68:a2:81:f5:8c:d1:00:f2:a5:b7: d0:28:26:d6:23:26:6c:65:f4:7f:c5:fc:11:7c:5f: aa:6b:82:15:68:98:07:9c:ea:44:2b:1b:3b:3c:81: 8a:60:65:ec:10:a8:78:c3:e3:ba:9a:3e:95:d8:4b: 37:24:7d:41:07:f4:89:a9:ed:fc:e9:3a:9f:46:5f: 1c:b9:96:63:7d:ec:a8:b5:7a:21:ba:1c:12:0a:04: 7d:1d:6d:c2:5e:be:8c:ad:05:9a:fb:18:b2:1f:51: 3f:cc:03:fb:86:a2:02:59:01:a3:77:05:74:9a:70: f7:0a:b1:72:94:26:da:ac:cd:20:23:12:8b:6f:7b: 34:d4:03:96:01:50:d1:ff:7a:bb:2a:0e:19:00:9d: 94:e0:1b:4e:5d:f1:d4:53:96:69:dd:0d:ee:b3:76: 21:46:77:ed:89:e1:5a:93:e0:b3:62:a8:41:7f:c8: 6f:59:4a:4f:23:91:7c:41:9a:92:19:5d:35:2a:cb: cb:77:8e:38:b9:6a:2f:ed:49:0a:b9:29:8a:89:f8: e7:47:e7:52:99:8c:49:9d:ec:32:61:ab:de:56:d6: 47:ac:45:16:99:67:a6:f3:51:7e:a7:ac:8d:9f:82: 2a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BD:79:DF:F3:66:51:9A:B6:19:9D:C7:77:92:A8:7C:E1:CA:D6:79 X509v3 Authority Key Identifier: keyid:62:78:CB:60:F3:57:D6:1C:B9:8B:4C:7C:A9:15:A1:28:18:EF:2C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnjLYPNX1hy5i0x8qRWhKBjvLHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d300de-c4ea-409f-a7a2-241e84c9a5d9/1/YnjLYPNX1hy5i0x8qRWhKBjvLHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:5d:a6:c1:d5:97:db:b2:4d:e0:2f:c1:c7:1b:4a:c6:ce:f9: 60:01:4f:70:2b:7e:ef:0d:f2:70:9f:4d:1d:d8:19:0a:76:9a: c7:93:99:d0:7c:61:b4:27:a2:af:1b:15:57:7c:95:c5:0c:3d: 00:0e:dc:5d:12:60:e9:8e:75:1a:8d:13:be:ed:19:e7:07:7f: 90:bf:d9:26:37:65:d7:75:9b:df:57:1e:04:9f:82:57:ef:af: 0b:bb:bd:58:a1:78:54:01:b4:16:7c:cc:2f:e5:9a:46:cc:65: 77:61:00:e5:90:f9:c6:2b:87:c9:04:19:2c:9e:53:ea:84:fb: 8e:ca:33:c8:95:d4:a7:f4:39:83:b8:81:b9:9b:e9:5e:32:65: 4e:02:34:3c:da:11:6e:26:c7:48:79:e7:60:8f:f7:12:ea:32: 23:62:a5:4e:15:33:a0:9c:25:d3:a6:f8:2d:7b:85:29:98:a7: 08:fd:7c:7c:8f:d6:0d:4a:a4:b8:0c:cf:7a:cc:0c:57:89:97: 78:d0:25:07:aa:ef:8e:c5:3a:8c:79:24:85:5d:ae:e6:47:f5: 0f:12:25:39:b0:70:89:d8:74:ca:2d:04:df:4e:32:a9:cc:4a: 5a:ef:ba:a4:6d:48:7f:da:22:fa:21:43:b6:51:96:12:84:bd: 2b:a7:a4:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkjxU8PF+717PxI/Wbc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNzhjYjYwZjM1N2Q2MWNiOThiNGM3Y2E5MTVhMTI4MThl ZjJjNzcwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD EygyNWJkNzlkZmYzNjY1MTlhYjYxOTlkYzc3NzkyYTg3Y2UxY2FkNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+zyd8yqkpTvi/jpFJqxiO/tVrGii gfWM0QDypbfQKCbWIyZsZfR/xfwRfF+qa4IVaJgHnOpEKxs7PIGKYGXsEKh4w+O6 mj6V2Es3JH1BB/SJqe386TqfRl8cuZZjfeyotXohuhwSCgR9HW3CXr6MrQWa+xiy H1E/zAP7hqICWQGjdwV0mnD3CrFylCbarM0gIxKLb3s01AOWAVDR/3q7Kg4ZAJ2U 4BtOXfHUU5Zp3Q3us3YhRnftieFak+CzYqhBf8hvWUpPI5F8QZqSGV01KsvLd444 uWov7UkKuSmKifjnR+dSmYxJnewyYaveVtZHrEUWmWem81F+p6yNn4IqFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW9ed/zZlGathmdx3eSqHzhytZ5MB8GA1UdIwQY MBaAFGJ4y2DzV9YcuYtMfKkVoSgY7yx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTIt MjQxZTg0YzlhNWQ5LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kMzAwZGUtYzRlYS00MDlmLWE3YTItMjQxZTg0YzlhNWQ5 LzEvWW5qTFlQTlgxaHk1aTB4OHFSV2hLQmp2TEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMl2mwdWX 27JN4C/BxxtKxs75YAFPcCt+7w3ycJ9NHdgZCnaax5OZ0HxhtCeirxsVV3yVxQw9 AA7cXRJg6Y51Go0Tvu0Z5wd/kL/ZJjdl13Wb31ceBJ+CV++vC7u9WKF4VAG0FnzM L+WaRsxld2EA5ZD5xiuHyQQZLJ5T6oT7jsozyJXUp/Q5g7iBuZvpXjJlTgI0PNoR bibHSHnnYI/3EuoyI2KlThUzoJwl06b4LXuFKZinCP18fI/WDUqkuAzPeswMV4mX eNAlB6rvjsU6jHkkhV2u5kf1DxIlObBwidh0yi0E304yqcxKWu+6pG1If9oi+iFD tlGWEoS9K6ekfg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:35 2025 by rpki-client