This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json) Hash identifier: Wl3AtiLC7T35b8Blw4KbEOCbH66xCobV18KchNtR7ng= Subject key identifier: 3D:34:40:35:A7:8E:4F:C4:05:95:27:6B:7F:36:0C:75:A0:17:A9:07 Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97 Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397 Certificate serial: 019AF19B4E8AACBBBAAC870B6CBFA93C8F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft Manifest number: 162A Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: 1VADO_17q_s1vi4sUX8qvyaTKS8.roa (hash: mWvBqtGQDs1pA/HxiZ8AHfsR4oNjr1Yi2fZMV/jNGTc=) 2: QXkpqlLeH0lSYY0nblkHSzaO1Ew.roa (hash: IjUEjsO2mbnzmz7vjeL8ZIzctqSaR82F+Efqt7aXfAU=) 3: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: muDlnSMKDn6tw51YHHhrwBINZpurpb22PObMpI3knKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4e:8a:ac:bb:ba:ac:87:0b:6c:bf:a9:3c:8f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=3d344035a78e4fc40595276b7f360c75a017a907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:5b:11:51:5b:9d:eb:cf:02:8f:84:8f:71: 2f:15:33:80:f3:4d:f6:63:c0:a7:0b:2c:82:36:42: 8d:d1:40:86:5b:2f:aa:6e:8c:61:2c:64:71:55:a0: 34:00:8c:42:3c:01:ce:19:b7:d0:18:bd:08:10:d9: 52:5e:a3:ab:ef:ea:2f:40:62:97:46:03:e5:57:e6: 8b:0b:1f:c8:3f:72:6b:d4:cd:5d:05:97:9f:0f:d1: 7f:94:2b:a3:99:66:5e:eb:9e:a3:c1:cd:35:a4:18: 43:51:fb:7b:19:d6:bd:d5:5e:98:00:1b:7a:83:d8: a9:13:4a:ba:8e:78:05:96:21:9f:0f:04:66:e7:7e: 7f:3a:9d:06:9e:47:ef:5e:ea:e2:7f:57:d9:49:07: 3e:27:4d:2b:ad:eb:7f:b0:84:b5:a2:b2:6f:b2:b1: 1a:2b:85:b5:82:25:e1:8f:34:90:de:b6:33:14:24: e5:97:d5:61:89:d2:59:a0:04:bb:ae:8a:2e:dc:c8: 6c:7f:af:75:d5:74:e1:d0:bf:5d:07:f2:2a:4f:74: c9:a7:96:14:7a:c3:78:79:69:fa:f4:73:02:ff:63: ec:33:08:f7:32:32:9e:24:e4:e6:19:65:07:b6:7a: 50:31:7c:5b:ca:09:7a:2c:20:e4:84:ca:c0:13:3c: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:40:35:A7:8E:4F:C4:05:95:27:6B:7F:36:0C:75:A0:17:A9:07 X509v3 Authority Key Identifier: keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a0:43:7a:c7:96:91:ff:ff:16:3c:c0:c6:72:fd:aa:63:51: a0:51:1c:6b:66:f6:6d:e8:f1:f2:b8:ab:d4:70:c0:c3:8b:6b: 15:f4:65:a9:7e:42:ed:bb:0e:70:3d:91:bd:19:d4:05:98:23: 89:2f:c9:c6:bb:bc:30:86:33:0d:23:aa:54:86:5c:9c:9d:2c: d6:c4:4a:8f:ed:e3:e4:42:8e:0d:44:ef:1d:3c:54:39:57:2b: 66:de:4e:c7:52:05:eb:5b:ca:43:3d:70:89:0c:c6:56:14:52: ef:20:c8:a0:16:b5:41:f8:bc:d1:ce:dd:11:37:24:7a:d5:10: fd:19:59:3e:17:b3:c7:c6:ef:11:44:f9:4a:c7:74:43:a5:82: 41:5c:2e:6b:fd:19:69:c5:b7:69:72:f2:e9:79:e8:52:f5:87: c3:36:b8:f3:ae:e6:99:a2:b8:76:6d:ab:5c:91:44:3a:5a:1d: c7:14:85:cd:2b:05:ef:25:f3:81:40:03:ba:6e:11:58:e6:02: 75:e0:56:62:d5:12:1d:85:e6:ab:61:08:3a:f1:7f:d1:b1:e0: 6b:98:4b:fb:f5:5a:b9:db:95:49:c1:b8:42:f1:44:2e:2e:09: bb:05:fb:37:af:85:8f:6f:d9:44:cb:28:0e:b4:5e:ca:c0:b6: 8a:66:3c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm06KrLu6rIcLbL+pPI+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwY2VlYjI1Mzg0NWM2ZGNhMTkwZDM2MTZkYmEyM2YzN2Q4 YjYzOTcwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygzZDM0NDAzNWE3OGU0ZmM0MDU5NTI3NmI3ZjM2MGM3NWEwMTdhOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ihbEVFbnevPAo+Ej3EvFTOA8032 Y8CnCyyCNkKN0UCGWy+qboxhLGRxVaA0AIxCPAHOGbfQGL0IENlSXqOr7+ovQGKX RgPlV+aLCx/IP3Jr1M1dBZefD9F/lCujmWZe656jwc01pBhDUft7Gda91V6YABt6 g9ipE0q6jngFliGfDwRm535/Op0GnkfvXurif1fZSQc+J00rret/sIS1orJvsrEa K4W1giXhjzSQ3rYzFCTll9VhidJZoAS7roou3Mhsf6911XTh0L9dB/IqT3TJp5YU esN4eWn69HMC/2PsMwj3MjKeJOTmGWUHtnpQMXxbygl6LCDkhMrAEzy2FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD00QDWnjk/EBZUna382DHWgF6kHMB8GA1UdIwQY MBaAFGDO6yU4RcbcoZDTYW26I/N9i2OXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUt OWY5MzIyZDY3MzJiLzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yNjE1MTQtYTE1ZC00NjYxLTljNTUtOWY5MzIyZDY3MzJi LzEvWU03ckpUaEZ4dHloa05OaGJib2o4MzJMWTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6BDeseW kf//FjzAxnL9qmNRoFEca2b2bejx8rir1HDAw4trFfRlqX5C7bsOcD2RvRnUBZgj iS/Jxru8MIYzDSOqVIZcnJ0s1sRKj+3j5EKODUTvHTxUOVcrZt5Ox1IF61vKQz1w iQzGVhRS7yDIoBa1Qfi80c7dETcketUQ/RlZPhezx8bvEUT5Ssd0Q6WCQVwua/0Z acW3aXLy6XnoUvWHwza4867mmaK4dm2rXJFEOlodxxSFzSsF7yXzgUADum4RWOYC deBWYtUSHYXmq2EIOvF/0bHga5hL+/VauduVScG4QvFELi4JuwX7N6+Fj2/ZRMso DrReysC2imY8UA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:04 2025 by rpki-client