This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json) Hash identifier: tkMhMzsJvqPueqvU3oFzCZsNjYhhMK3k8Cr/ia8wTPQ= Subject key identifier: D6:51:7D:FF:E9:EE:A6:CA:C4:FD:8F:A3:B9:CD:E9:44:87:1C:7C:68 Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Certificate serial: 019B2F68000206EFF1A82CDEC100784CE7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft Manifest number: 1354 Signing time: Thu 18 Dec 2025 03:01:43 +0000 Manifest this update: Thu 18 Dec 2025 03:01:43 +0000 Manifest next update: Fri 19 Dec 2025 03:01:43 +0000 Files and hashes: 1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=) 2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=) 3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=) 4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: GQ8kPilBkMa6DOUegpZYEJLEvwjwLBsxPST3bibXaME=) 5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=) 6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=) 7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=) 8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:68:00:02:06:ef:f1:a8:2c:de:c1:00:78:4c:e7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078 Validity Not Before: Dec 18 03:01:43 2025 GMT Not After : Dec 19 03:01:43 2025 GMT Subject: CN=d6517dffe9eea6cac4fd8fa3b9cde944871c7c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:96:1c:c7:b6:ed:3d:a6:bd:0f:99:5a:6d: 24:d2:00:7a:e5:74:0c:33:6a:de:1b:83:32:17:cb: 7c:38:44:27:70:9f:b5:aa:8b:8c:3b:2b:2b:21:62: a1:6b:0c:b1:c3:13:44:11:9a:e9:10:48:3c:1f:f6: 4a:61:76:d5:aa:a2:64:0e:a1:e5:03:ca:ff:e0:7b: 1e:27:8b:35:4b:8b:fb:9e:6b:cc:b3:b2:00:65:d1: 0c:17:dc:52:02:37:1c:2b:c0:f2:8c:71:35:a1:b6: 82:c1:0a:ed:3c:8e:78:25:d2:97:90:9a:bb:24:ae: 50:cc:c2:9c:5e:00:a7:a4:6a:43:7e:84:5c:ce:03: de:35:c7:e2:49:e2:6a:b5:3f:cd:71:2a:9c:43:49: 0f:5c:5b:97:f4:0e:ae:36:07:f7:ec:6e:ed:d1:9c: c7:81:7a:ea:d1:b7:fc:65:74:84:a4:3b:3b:38:92: 49:1d:f1:8b:98:db:18:87:f3:36:df:ff:52:03:bb: a8:79:55:1a:3b:b5:a0:44:67:2f:92:12:98:b3:03: 24:61:af:b1:cd:8c:9b:43:12:6a:13:5a:51:0c:00: 1d:0d:04:cf:91:e7:50:ed:11:2d:af:31:29:8c:d3: c7:dd:e9:96:e6:b4:6d:7c:19:81:81:9b:fe:7d:95: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:51:7D:FF:E9:EE:A6:CA:C4:FD:8F:A3:B9:CD:E9:44:87:1C:7C:68 X509v3 Authority Key Identifier: keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:9f:3c:84:b0:29:39:0b:5f:5b:4f:49:81:83:ec:5a:41:5e: bd:b4:e4:fd:49:37:e1:bd:2a:5b:79:ca:62:d5:fc:a0:95:82: 31:2b:39:7a:61:79:b4:33:7e:a9:20:7c:38:9c:b4:9f:84:ae: 2e:f2:bb:d0:74:7e:76:4d:9a:45:1e:bc:54:67:1a:9c:00:75: 04:3d:3b:2c:db:ed:98:32:3e:19:2e:14:37:e6:de:fe:6a:d7: cf:e0:00:35:27:63:bb:b8:d7:32:1d:b3:b0:2d:41:95:23:e9: f6:ec:36:12:fb:dd:61:3d:c8:71:76:19:79:e9:6c:88:ad:ef: 11:a7:33:23:ff:b5:c7:8f:46:cb:c1:db:db:cd:19:4a:a3:59: 90:4b:c4:76:3b:99:f5:85:b0:8e:95:46:3c:9d:84:a4:d0:f9: 8a:68:c4:30:d4:6d:a4:9b:5e:ce:64:90:d2:63:06:14:61:f1: dd:8a:61:d3:78:cb:81:37:82:b7:f1:6e:19:d5:cd:22:27:45: f4:58:76:5b:5f:d8:30:fa:e4:58:56:53:b6:04:31:6d:b4:03: 20:3a:e9:72:a4:94:2d:ab:4f:be:d0:c6:90:39:26:68:46:c5: 76:6d:93:f5:94:b3:62:a5:83:ee:fb:c7:37:ae:15:66:38:12: a9:26:4e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvaAACBu/xqCzewQB4TOf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZWJkNGY3YWMzZDI0OTIwZGUxYzFmZjExODVkOTUwN2U5 YWQwNzgwHhcNMjUxMjE4MDMwMTQzWhcNMjUxMjE5MDMwMTQzWjAzMTEwLwYDVQQD EyhkNjUxN2RmZmU5ZWVhNmNhYzRmZDhmYTNiOWNkZTk0NDg3MWM3YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhKWHMe27T2mvQ+ZWm0k0gB65XQM M2reG4MyF8t8OEQncJ+1qouMOysrIWKhawyxwxNEEZrpEEg8H/ZKYXbVqqJkDqHl A8r/4HseJ4s1S4v7nmvMs7IAZdEMF9xSAjccK8DyjHE1obaCwQrtPI54JdKXkJq7 JK5QzMKcXgCnpGpDfoRczgPeNcfiSeJqtT/NcSqcQ0kPXFuX9A6uNgf37G7t0ZzH gXrq0bf8ZXSEpDs7OJJJHfGLmNsYh/M23/9SA7uoeVUaO7WgRGcvkhKYswMkYa+x zYybQxJqE1pRDAAdDQTPkedQ7REtrzEpjNPH3emW5rRtfBmBgZv+fZXHPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZRff/p7qbKxP2Po7nN6USHHHxoMB8GA1UdIwQY MBaAFGDr1PesPSSSDeHB/xGF2VB+mtB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgt ODdkM2IwMjNkOTE5LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85MDUzNzgtMjI4YS00MWI0LWJjZTgtODdkM2IwMjNkOTE5 LzEvWU92VTk2dzlKSklONGNIX0VZWFpVSDZhMEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ88hLAp OQtfW09JgYPsWkFevbTk/Uk34b0qW3nKYtX8oJWCMSs5emF5tDN+qSB8OJy0n4Su LvK70HR+dk2aRR68VGcanAB1BD07LNvtmDI+GS4UN+be/mrXz+AANSdju7jXMh2z sC1BlSPp9uw2EvvdYT3IcXYZeelsiK3vEaczI/+1x49Gy8Hb280ZSqNZkEvEdjuZ 9YWwjpVGPJ2EpND5imjEMNRtpJtezmSQ0mMGFGHx3Yph03jLgTeCt/FuGdXNIidF 9Fh2W1/YMPrkWFZTtgQxbbQDIDrpcqSULatPvtDGkDkmaEbFdm2T9ZSzYqWD7vvH N64VZjgSqSZOuQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:25 2025 by rpki-client