This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft File: YEEHLuGhscBoQS37A1XSdZkyxfU.mft (raw, json) Hash identifier: fE2rZ52m7gs229VGO0sB6i7sjvquH506/XyUCHdgdro= Subject key identifier: E3:27:FD:EB:78:36:76:81:88:B8:86:DA:F3:0F:00:93:91:EB:49:EA Authority key identifier: 60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 Certificate issuer: /CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Certificate serial: 019AFCC3B7609C449CE2CA151FC358F08ACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft Manifest number: 0FC1 Signing time: Mon 08 Dec 2025 07:01:16 +0000 Manifest this update: Mon 08 Dec 2025 07:01:16 +0000 Manifest next update: Tue 09 Dec 2025 07:01:16 +0000 Files and hashes: 1: Vfen33v1zrF1U4W1eWwhHEsbqGA.roa (hash: w3PxgtpxD6a285bTjcEiEC6QMtVVhaLBfzodaIOYwng=) 2: YEEHLuGhscBoQS37A1XSdZkyxfU.crl (hash: WdeePbhVOZJTrAOi+lc1xntGBWEDqrocaCD/OtfQ4jA=) 3: zDAAlCK7aNqx_xV31r_7I0TLQt8.roa (hash: wCsE2W/8Vmk86XbGn3m0t7wCPnTYvf+LtPGnsGB75Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:b7:60:9c:44:9c:e2:ca:15:1f:c3:58:f0:8a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6041072ee1a1b1c068412dfb0355d2759932c5f5 Validity Not Before: Dec 8 07:01:16 2025 GMT Not After : Dec 9 07:01:16 2025 GMT Subject: CN=e327fdeb7836768188b886daf30f009391eb49ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:4b:63:08:ad:81:19:2c:8f:4f:65:b3:fe: 7a:ec:1c:83:d1:a0:2a:63:73:24:e0:b0:9a:1b:eb: e2:6a:a4:ab:ac:63:ee:e9:6d:31:17:78:01:11:61: d7:1e:ad:ae:dc:1d:12:b2:e9:0f:df:eb:ca:87:ba: 78:ff:34:ef:27:21:52:91:4f:5b:97:46:40:cd:d6: 87:14:61:7b:36:2a:3f:cd:8c:86:f4:8c:e6:4c:7e: 08:ad:55:7a:d0:76:f6:e5:7b:cf:ea:fa:cb:94:be: 0d:7b:e4:bd:af:45:ec:36:e8:4a:58:4e:71:e9:6c: 77:8b:c0:35:07:47:2f:9b:e7:9a:b3:a5:c5:37:0c: 1f:d2:f4:63:1d:b7:1e:b8:b2:bf:75:0f:82:d5:3a: b7:ea:be:30:ab:74:81:6e:93:7e:d3:1d:a1:be:f3: ff:39:a0:0a:71:c9:e7:28:a6:75:7d:8f:76:4c:f5: 18:50:5f:89:88:6a:ef:d8:79:ca:65:5d:77:4e:d2: 1e:ec:18:6a:3a:21:c8:a5:eb:7f:23:64:3e:9a:2e: 33:cc:f3:aa:c4:63:80:74:f4:46:9c:03:31:c5:18: 51:36:03:fa:90:f2:6c:d6:4a:11:46:f6:dd:83:e3: 62:d6:87:ae:58:10:d1:6c:63:0a:e0:63:7d:6f:1f: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:FD:EB:78:36:76:81:88:B8:86:DA:F3:0F:00:93:91:EB:49:EA X509v3 Authority Key Identifier: keyid:60:41:07:2E:E1:A1:B1:C0:68:41:2D:FB:03:55:D2:75:99:32:C5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEEHLuGhscBoQS37A1XSdZkyxfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8dfa30-2a85-4b46-9533-4d5f7637efce/1/YEEHLuGhscBoQS37A1XSdZkyxfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ab:66:67:f3:95:57:b0:95:7b:8b:98:57:3c:62:b3:b0:d0: bb:54:aa:ef:6e:25:bd:89:1f:b3:85:9d:b5:7d:cd:e3:a4:70: ce:3c:2d:da:20:bb:26:61:9e:cf:70:3c:6d:af:3e:94:3a:ff: ee:d6:d5:bf:14:86:33:88:87:90:53:0c:f5:49:1c:91:c4:ee: eb:31:bf:21:1a:fa:7f:16:6a:a9:3a:8a:cc:39:40:5f:2d:d2: e4:0b:51:64:21:0e:a9:10:38:a7:3b:09:4e:7f:5f:fe:df:98: 8a:a0:8f:74:a6:d4:14:db:3b:c3:ed:6b:98:37:fc:3c:bb:cf: ed:b7:23:5d:6b:95:4d:01:5b:8c:90:78:e2:68:23:b7:cf:7c: fc:9f:52:04:01:f9:a4:06:6c:36:a6:e6:ad:b7:2c:9a:4e:5d: 0c:a3:fc:a8:a2:f9:53:58:22:f8:d6:17:3f:7a:f3:16:93:98: d4:96:36:53:f5:b1:0d:6e:2f:12:f0:42:f9:7f:66:43:54:33: 71:00:07:5b:2d:3c:8a:91:e8:e1:45:da:e3:2f:ad:11:67:32: 55:ad:7c:92:b1:0e:24:47:28:2e:58:e0:33:74:4e:ed:42:47: ce:26:2d:ae:1c:76:44:55:45:45:8e:37:eb:a7:da:d0:4d:4f: 22:e8:d8:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w7dgnESc4soVH8NY8IrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNDEwNzJlZTFhMWIxYzA2ODQxMmRmYjAzNTVkMjc1OTkz MmM1ZjUwHhcNMjUxMjA4MDcwMTE2WhcNMjUxMjA5MDcwMTE2WjAzMTEwLwYDVQQD EyhlMzI3ZmRlYjc4MzY3NjgxODhiODg2ZGFmMzBmMDA5MzkxZWI0OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mJLYwitgRksj09ls/567ByD0aAq Y3Mk4LCaG+viaqSrrGPu6W0xF3gBEWHXHq2u3B0SsukP3+vKh7p4/zTvJyFSkU9b l0ZAzdaHFGF7Nio/zYyG9IzmTH4IrVV60Hb25XvP6vrLlL4Ne+S9r0XsNuhKWE5x 6Wx3i8A1B0cvm+eas6XFNwwf0vRjHbceuLK/dQ+C1Tq36r4wq3SBbpN+0x2hvvP/ OaAKccnnKKZ1fY92TPUYUF+JiGrv2HnKZV13TtIe7BhqOiHIpet/I2Q+mi4zzPOq xGOAdPRGnAMxxRhRNgP6kPJs1koRRvbdg+Ni1oeuWBDRbGMK4GN9bx+arwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMn/et4NnaBiLiG2vMPAJOR60nqMB8GA1UdIwQY MBaAFGBBBy7hobHAaEEt+wNV0nWZMsX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMt NGQ1Zjc2MzdlZmNlLzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84ZGZhMzAtMmE4NS00YjQ2LTk1MzMtNGQ1Zjc2MzdlZmNl LzEvWUVFSEx1R2hzY0JvUVMzN0ExWFNkWmt5eGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqtmZ/OV V7CVe4uYVzxis7DQu1Sq724lvYkfs4WdtX3N46Rwzjwt2iC7JmGez3A8ba8+lDr/ 7tbVvxSGM4iHkFMM9UkckcTu6zG/IRr6fxZqqTqKzDlAXy3S5AtRZCEOqRA4pzsJ Tn9f/t+YiqCPdKbUFNs7w+1rmDf8PLvP7bcjXWuVTQFbjJB44mgjt898/J9SBAH5 pAZsNqbmrbcsmk5dDKP8qKL5U1gi+NYXP3rzFpOY1JY2U/WxDW4vEvBC+X9mQ1Qz cQAHWy08ipHo4UXa4y+tEWcyVa18krEOJEcoLljgM3RO7UJHziYtrhx2RFVFRY43 66fa0E1PIujYaA== -----END CERTIFICATE-----Generated at Mon Dec 8 17:20:49 2025 by rpki-client