This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft File: YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json) Hash identifier: 4m0aD+Y6Ys0X4nZWjiMntg0pojw04QT1+xjFS8tjyrI= Subject key identifier: 22:B4:B2:76:79:51:E6:0C:7F:CA:93:5C:F3:83:F6:D2:E1:03:B2:F3 Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35 Certificate issuer: /CN=60026525fd44a4fc75b2244f80d022634f5f7635 Certificate serial: 019AF240010E88F28FA3DF204F47FF6FD82E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft Manifest number: 0159 Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: rSr9bjPSlSaWLXaOrPGksxbRqyniPE5mb9Twk+I7rZI=) 2: g9nWnsJ4s0Q4AdnedyFGxQkezGU.roa (hash: BaThYpCk19U9MWT3c8G8+GXTTA8NVbJPkga6Sb96+1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:01:0e:88:f2:8f:a3:df:20:4f:47:ff:6f:d8:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635 Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=22b4b2767951e60c7fca935cf383f6d2e103b2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:ca:91:5b:1d:2b:e5:04:92:5e:36:2e:8f: b6:cc:f3:e3:8e:2d:dd:2c:17:84:24:2d:ce:6d:ab: 2b:8d:0d:6b:f0:5b:fd:b5:50:94:3c:35:d8:5c:69: e7:e1:38:af:1f:f9:d7:0a:78:70:3c:c8:8e:f7:dc: 83:e2:1e:d6:83:65:d3:94:2e:8d:9b:19:e2:82:fd: 1e:48:b9:6e:c4:1c:40:27:36:6d:1c:94:04:c5:5f: 07:be:cb:5a:8c:75:12:63:6a:13:85:35:5a:e9:0a: ce:8e:4a:7c:7a:9d:d2:9c:b8:8e:d0:35:51:55:e2: fb:bd:9c:f9:44:52:42:a4:2a:3a:4c:8c:d5:05:05: 09:b6:48:20:7f:61:f4:8d:30:06:6d:9d:2a:fa:d6: 4d:a1:47:f5:b7:0a:6f:36:db:d4:3c:06:20:6c:44: 40:ed:41:9c:0d:33:b9:09:36:96:67:51:d7:1c:cf: 50:72:fa:a6:43:62:7e:26:a2:c8:4c:e5:06:e3:ce: d5:d3:83:d3:11:5d:ab:cd:3c:51:26:08:14:72:05: 34:66:da:85:0e:85:cc:a8:79:12:49:2b:13:99:8f: 56:72:2d:e6:12:1a:b0:45:6b:1c:22:70:b7:3c:bb: de:7b:62:5c:f3:99:ef:b6:21:9a:f4:ab:c6:6a:36: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B4:B2:76:79:51:E6:0C:7F:CA:93:5C:F3:83:F6:D2:E1:03:B2:F3 X509v3 Authority Key Identifier: keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:64:f5:6b:eb:76:e7:7d:e3:62:b0:18:99:35:70:09:72:cb: 83:fc:f5:11:58:bf:a6:b9:af:13:6d:52:4c:c0:1f:b0:aa:85: 51:62:2f:34:75:43:31:7a:1f:0e:a8:89:49:b5:66:dc:d0:cf: 30:ca:5e:76:49:ef:81:23:ee:c9:b1:92:b0:36:4b:4f:a8:05: 36:ed:44:81:9b:31:a1:fa:07:11:45:4f:e8:ff:14:87:d9:09: a2:30:13:d2:b8:56:df:3a:d2:a9:b2:a2:1f:04:34:c2:51:df: fc:d6:f0:64:6a:13:e5:93:64:0a:a3:76:be:80:fc:77:87:8c: ef:30:45:79:0d:dc:b2:e0:54:5a:e2:85:af:60:18:89:78:bd: 6a:42:74:bf:06:13:c4:b6:01:01:08:b0:18:e0:22:e8:92:2d: 07:ef:4e:b7:4b:e6:f5:8f:ca:a0:9f:82:38:c5:d5:31:71:dc: 06:eb:54:25:2e:1d:6b:bb:12:15:90:87:dd:65:9b:55:65:95: 18:95:e6:b3:36:5a:fe:d5:99:ee:30:21:fd:83:5f:b5:fb:c3: ab:11:ec:91:95:f3:f1:6b:7d:45:70:3f:18:65:ab:c0:e8:93: 68:34:a9:95:c2:c3:58:f9:6c:b2:d8:bc:e4:ec:38:ce:9f:c7: 25:b5:cd:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAEOiPKPo98gT0f/b9guMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDI2NTI1ZmQ0NGE0ZmM3NWIyMjQ0ZjgwZDAyMjYzNGY1 Zjc2MzUwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD EygyMmI0YjI3Njc5NTFlNjBjN2ZjYTkzNWNmMzgzZjZkMmUxMDNiMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kPKkVsdK+UEkl42Lo+2zPPjji3d LBeEJC3ObasrjQ1r8Fv9tVCUPDXYXGnn4TivH/nXCnhwPMiO99yD4h7Wg2XTlC6N mxnigv0eSLluxBxAJzZtHJQExV8HvstajHUSY2oThTVa6QrOjkp8ep3SnLiO0DVR VeL7vZz5RFJCpCo6TIzVBQUJtkggf2H0jTAGbZ0q+tZNoUf1twpvNtvUPAYgbERA 7UGcDTO5CTaWZ1HXHM9QcvqmQ2J+JqLITOUG487V04PTEV2rzTxRJggUcgU0ZtqF DoXMqHkSSSsTmY9Wci3mEhqwRWscInC3PLvee2Jc85nvtiGa9KvGajaqaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK0snZ5UeYMf8qTXPOD9tLhA7LzMB8GA1UdIwQY MBaAFGACZSX9RKT8dbIkT4DQImNPX3Y1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMt ZmE5MjMzNTM1ZmYxLzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMtZmE5MjMzNTM1ZmYx LzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWT1a+t2 533jYrAYmTVwCXLLg/z1EVi/prmvE21STMAfsKqFUWIvNHVDMXofDqiJSbVm3NDP MMpedknvgSPuybGSsDZLT6gFNu1EgZsxofoHEUVP6P8Uh9kJojAT0rhW3zrSqbKi HwQ0wlHf/NbwZGoT5ZNkCqN2voD8d4eM7zBFeQ3csuBUWuKFr2AYiXi9akJ0vwYT xLYBAQiwGOAi6JItB+9Ot0vm9Y/KoJ+COMXVMXHcButUJS4da7sSFZCH3WWbVWWV GJXmszZa/tWZ7jAh/YNftfvDqxHskZXz8Wt9RXA/GGWrwOiTaDSplcLDWPlssti8 5Ow4zp/HJbXN1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:47 2025 by rpki-client