This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft File: YAc2XgzzDKj86YxiZg0YapebyVk.mft (raw, json) Hash identifier: HGqRBjH2Ykx7zNhPNvC5HDrf3/pjlN8uvlLrDloK75I= Subject key identifier: E7:CB:1F:61:26:4F:64:1F:28:F1:38:1C:C1:35:72:22:F2:F5:9E:6F Authority key identifier: 60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59 Certificate issuer: /CN=6007365e0cf30ca8fce98c62660d186a979bc959 Certificate serial: 019AF3F7E66AD6C42C119B8AF50372B59BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft Manifest number: 0AC0 Signing time: Sat 06 Dec 2025 14:01:41 +0000 Manifest this update: Sat 06 Dec 2025 14:01:41 +0000 Manifest next update: Sun 07 Dec 2025 14:01:41 +0000 Files and hashes: 1: Oc_LJaADC2cknQ1kKmCdsTOaMZk.roa (hash: JMTbvNQOvHmoLJzyFa8UDUWlgTHr2CpWgpqDOMIvsck=) 2: YAc2XgzzDKj86YxiZg0YapebyVk.crl (hash: wQ1+ibDZtJDQNb1zUzAVVtSTpvLalmRkvKAcymoaWCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e6:6a:d6:c4:2c:11:9b:8a:f5:03:72:b5:9b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6007365e0cf30ca8fce98c62660d186a979bc959 Validity Not Before: Dec 6 14:01:41 2025 GMT Not After : Dec 7 14:01:41 2025 GMT Subject: CN=e7cb1f61264f641f28f1381cc1357222f2f59e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:7e:74:90:a6:da:70:93:67:7d:55:3c:f6: 76:25:05:07:7d:47:c6:ca:1e:f6:ae:fe:5a:21:00: 49:79:2e:58:b0:1f:42:27:fa:07:4e:a0:dc:c4:2a: 1d:14:ec:38:6d:ed:2a:ae:9d:b8:44:5d:ec:8a:a4: a6:bd:fa:8f:26:9e:d4:83:88:ed:71:bb:19:26:f8: 58:39:0b:cd:bf:68:48:92:fe:74:c0:8a:d6:2e:bc: 48:2e:c9:fa:59:b9:f9:a9:fb:de:34:bb:61:d0:73: dc:57:e5:53:03:20:8d:fa:39:89:74:7f:ba:86:a9: 42:ea:8c:ec:09:07:90:6a:d4:7a:3e:e0:96:9a:ee: c1:c5:1a:9f:09:c3:bf:27:d4:5d:fe:dd:65:84:79: e5:79:1e:a6:ab:47:2b:af:74:5a:ae:36:28:54:7b: 5b:52:96:52:6c:bd:e9:b9:36:02:49:63:de:b7:04: 28:83:27:91:f9:73:fd:58:f7:9c:b3:98:f3:4e:5b: 50:0c:d8:61:d7:2a:2c:3e:8f:0d:fb:55:71:50:82: a1:a7:11:cc:3f:ad:16:54:0b:e4:c6:00:40:f7:bb: 76:4c:4d:93:41:33:eb:fb:30:21:13:a9:ca:23:27: b2:5f:06:82:ef:0b:41:66:63:93:3c:b9:59:0a:50: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CB:1F:61:26:4F:64:1F:28:F1:38:1C:C1:35:72:22:F2:F5:9E:6F X509v3 Authority Key Identifier: keyid:60:07:36:5E:0C:F3:0C:A8:FC:E9:8C:62:66:0D:18:6A:97:9B:C9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAc2XgzzDKj86YxiZg0YapebyVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/826eeb-0bb2-42a8-84e2-b75b4904982f/1/YAc2XgzzDKj86YxiZg0YapebyVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0a:4b:75:07:cd:a1:96:89:15:d8:42:b4:90:1f:30:a1:58: d9:6a:37:b6:bd:37:b6:bb:ef:18:1d:39:80:2b:4d:ea:8a:13: d3:5b:38:a2:25:d3:d6:a6:39:d5:8c:84:ce:86:4d:00:0e:3d: 17:15:0e:2d:6d:5b:05:60:f4:f2:9e:ea:ce:cf:0d:64:86:48: cf:29:96:ac:db:4a:a7:55:9f:19:74:b4:6c:37:ae:23:0e:b5: aa:bd:ba:24:01:b5:09:8d:ed:68:7c:f5:92:96:7d:59:0b:f0: 59:42:63:54:d4:39:d1:7e:37:f1:4c:b7:81:3b:2b:c2:23:38: 56:46:f4:1d:0f:17:bc:98:7d:0a:7d:65:87:80:c0:02:ae:67: 3e:60:ec:0e:cf:e6:4b:8d:a3:db:e4:f1:df:67:c1:1d:fd:02: cf:7b:f9:bd:0e:b4:d8:a6:20:7c:b3:a7:59:d9:4e:ef:d2:16: 85:d5:4f:92:6c:27:1c:be:4d:23:36:0d:55:77:3e:5f:24:14: 51:99:aa:b9:db:3b:b1:74:42:b6:05:60:63:70:0b:d5:5c:f1: bf:4f:cc:04:d9:da:31:2c:40:33:1c:a3:e9:48:ab:28:23:f6: ca:21:ef:d7:1d:82:86:78:5b:7a:3a:da:d6:eb:06:fc:9f:b8: 10:bd:02:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+Zq1sQsEZuK9QNytZvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDczNjVlMGNmMzBjYThmY2U5OGM2MjY2MGQxODZhOTc5 YmM5NTkwHhcNMjUxMjA2MTQwMTQxWhcNMjUxMjA3MTQwMTQxWjAzMTEwLwYDVQQD EyhlN2NiMWY2MTI2NGY2NDFmMjhmMTM4MWNjMTM1NzIyMmYyZjU5ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jF+dJCm2nCTZ31VPPZ2JQUHfUfG yh72rv5aIQBJeS5YsB9CJ/oHTqDcxCodFOw4be0qrp24RF3siqSmvfqPJp7Ug4jt cbsZJvhYOQvNv2hIkv50wIrWLrxILsn6Wbn5qfveNLth0HPcV+VTAyCN+jmJdH+6 hqlC6ozsCQeQatR6PuCWmu7BxRqfCcO/J9Rd/t1lhHnleR6mq0crr3RarjYoVHtb UpZSbL3puTYCSWPetwQogyeR+XP9WPecs5jzTltQDNhh1yosPo8N+1VxUIKhpxHM P60WVAvkxgBA97t2TE2TQTPr+zAhE6nKIyeyXwaC7wtBZmOTPLlZClDrAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfLH2EmT2QfKPE4HME1ciLy9Z5vMB8GA1UdIwQY MBaAFGAHNl4M8wyo/OmMYmYNGGqXm8lZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTIt Yjc1YjQ5MDQ5ODJmLzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84MjZlZWItMGJiMi00MmE4LTg0ZTItYjc1YjQ5MDQ5ODJm LzEvWUFjMlhnenpES2o4Nll4aVpnMFlhcGVieVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQpLdQfN oZaJFdhCtJAfMKFY2Wo3tr03trvvGB05gCtN6ooT01s4oiXT1qY51YyEzoZNAA49 FxUOLW1bBWD08p7qzs8NZIZIzymWrNtKp1WfGXS0bDeuIw61qr26JAG1CY3taHz1 kpZ9WQvwWUJjVNQ50X438Uy3gTsrwiM4Vkb0HQ8XvJh9Cn1lh4DAAq5nPmDsDs/m S42j2+Tx32fBHf0Cz3v5vQ602KYgfLOnWdlO79IWhdVPkmwnHL5NIzYNVXc+XyQU UZmquds7sXRCtgVgY3AL1Vzxv0/MBNnaMSxAMxyj6UirKCP2yiHv1x2Chnhbejra 1usG/J+4EL0CVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:26 2025 by rpki-client