This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json) Hash identifier: Fp9sOb8dN0nlaSZ92XZEWA4o0KNMeJZYITdIULO6EnA= Subject key identifier: F8:CA:FC:80:CE:69:33:E2:94:9A:13:F1:50:4C:7D:36:41:FA:A8:FD Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43 Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643 Certificate serial: 019AF163EED8706CDADA1610FE91B9E722FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft Manifest number: 0442 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: Bncgc9xVkml9Lzy39aDuzd3ztfJlvE955ahVDPqAo20=) 2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:d8:70:6c:da:da:16:10:fe:91:b9:e7:22:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=f8cafc80ce6933e2949a13f1504c7d3641faa8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:a0:ad:4b:6b:5a:dd:e2:db:50:ae:17:d3: 48:39:a8:2a:3b:b4:14:96:f2:27:cd:b8:2c:7f:8c: 7e:41:cb:d2:93:4a:6a:f4:ac:fd:f1:d2:5d:1d:be: 5a:ba:7a:de:78:2d:63:69:73:88:42:45:5c:ac:9f: dd:6a:19:89:bd:9e:83:2e:b6:2a:6d:d5:a7:9e:a6: 7b:d6:0d:9c:d2:dc:cc:6c:3a:46:da:cf:52:2b:9a: dd:f2:29:88:64:fb:a8:e7:1d:32:c7:2c:89:86:ce: d0:04:81:73:10:35:8e:4f:ab:26:bf:aa:28:2f:1f: 1f:63:5c:c9:b7:1e:e2:78:5d:e1:e3:27:ce:ec:22: 83:91:36:f0:0e:45:0f:d2:94:4b:d2:de:5c:67:b6: e7:35:63:91:70:f9:cc:44:8f:55:ee:88:17:64:44: 47:82:95:37:05:61:23:f5:d0:24:64:64:87:42:7c: 86:f7:8d:12:91:d8:c7:08:59:85:ce:01:21:4c:d5: 8e:c8:f7:27:35:84:17:3e:f9:f1:25:84:ac:be:f9: d1:b3:4c:4f:cb:28:88:bd:9f:00:bc:b6:85:45:fb: 2e:b2:0f:89:1b:1a:5b:08:4a:46:ce:39:5f:b9:42: c9:be:c8:65:f4:de:31:84:16:ca:79:78:4f:64:ee: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:FC:80:CE:69:33:E2:94:9A:13:F1:50:4C:7D:36:41:FA:A8:FD X509v3 Authority Key Identifier: keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:65:01:a6:0d:8d:96:5d:3c:06:31:30:1f:4b:64:5c:ef:70: 4a:df:8d:ad:fa:94:c9:f3:0e:7e:70:56:1e:6b:47:7a:db:3c: 97:e5:55:77:7d:31:f8:34:9c:56:1a:e7:d1:05:db:44:ee:6f: 6c:61:70:51:74:c5:4e:de:52:d7:f3:11:19:f6:98:bb:b2:41: af:b8:19:d5:c0:68:dc:db:b2:30:0c:af:a6:47:9a:c1:11:b0: 62:92:6a:8a:df:66:40:62:92:ce:a9:85:b3:cd:ca:97:97:02: 2b:4c:98:92:06:48:5f:a3:ac:c6:99:f7:73:d4:84:92:1d:0b: d9:5d:15:0b:93:e4:77:ad:c9:b7:3d:fc:ea:c3:af:d1:90:69: cf:90:45:c9:01:db:10:fb:04:bd:2e:50:09:9b:e8:db:fd:12: 95:2e:1a:ac:c9:14:6f:d0:2f:9e:ac:b4:87:c8:99:3f:1a:92: 0f:f3:ce:f4:c4:2d:f3:5f:78:65:a0:4d:41:78:bd:47:83:3d: cd:31:bb:fc:10:4d:22:bc:62:37:ae:27:d1:85:a8:83:cb:4d: cc:a4:e4:5a:4b:2e:ed:47:76:ee:0b:35:6f:7c:fb:31:d8:5a: 6f:1f:60:1a:ef:15:8a:2f:db:39:66:c9:d5:a3:2d:c3:d6:6d: 8c:55:cf:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+7YcGza2hYQ/pG55yL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjFhNGRhYTdkY2Y0YTRjYjA4YWM0NzQ3Mzc1ZjY5OGFh ZTg2NDMwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhmOGNhZmM4MGNlNjkzM2UyOTQ5YTEzZjE1MDRjN2QzNjQxZmFhOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZKgrUtrWt3i21CuF9NIOagqO7QU lvInzbgsf4x+QcvSk0pq9Kz98dJdHb5aunreeC1jaXOIQkVcrJ/dahmJvZ6DLrYq bdWnnqZ71g2c0tzMbDpG2s9SK5rd8imIZPuo5x0yxyyJhs7QBIFzEDWOT6smv6oo Lx8fY1zJtx7ieF3h4yfO7CKDkTbwDkUP0pRL0t5cZ7bnNWORcPnMRI9V7ogXZERH gpU3BWEj9dAkZGSHQnyG940SkdjHCFmFzgEhTNWOyPcnNYQXPvnxJYSsvvnRs0xP yyiIvZ8AvLaFRfsusg+JGxpbCEpGzjlfuULJvshl9N4xhBbKeXhPZO7hjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjK/IDOaTPilJoT8VBMfTZB+qj9MB8GA1UdIwQY MBaAFGAhpNqn3PSkywisR0c3X2mKroZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDct NGQyYTYzMzRkZTc3LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDctNGQyYTYzMzRkZTc3 LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGUBpg2N ll08BjEwH0tkXO9wSt+NrfqUyfMOfnBWHmtHets8l+VVd30x+DScVhrn0QXbRO5v bGFwUXTFTt5S1/MRGfaYu7JBr7gZ1cBo3NuyMAyvpkeawRGwYpJqit9mQGKSzqmF s83Kl5cCK0yYkgZIX6Osxpn3c9SEkh0L2V0VC5Pkd63Jtz386sOv0ZBpz5BFyQHb EPsEvS5QCZvo2/0SlS4arMkUb9Avnqy0h8iZPxqSD/PO9MQt8194ZaBNQXi9R4M9 zTG7/BBNIrxiN64n0YWog8tNzKTkWksu7Ud27gs1b3z7Mdhabx9gGu8Vii/bOWbJ 1aMtw9ZtjFXPKw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:06 2025 by rpki-client