This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json) Hash identifier: DO+k/P9peLe2Kb4pSq4CewKtsJuAtnjB+8TAo+m9Gyc= Subject key identifier: 63:A6:A2:31:08:0C:93:35:5B:1A:FB:DD:18:78:AE:67:8F:C2:65:96 Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Certificate serial: 019AF61C3D65070A6E728F321D024E1C794A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft Manifest number: 141A Signing time: Sun 07 Dec 2025 00:00:37 +0000 Manifest this update: Sun 07 Dec 2025 00:00:37 +0000 Manifest next update: Mon 08 Dec 2025 00:00:37 +0000 Files and hashes: 1: XuX7uT8cb5cVhdOXna_jZRuc6JE.roa (hash: 6nSukjm2iQoWm9SssGRSJpva0KahTxgtp11M/o63UVs=) 2: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: fGz8oVMrg25wYnTmA94srKxmGoFDlYJHSv8a3GgpQ+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3d:65:07:0a:6e:72:8f:32:1d:02:4e:1c:79:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b Validity Not Before: Dec 7 00:00:37 2025 GMT Not After : Dec 8 00:00:37 2025 GMT Subject: CN=63a6a231080c93355b1afbdd1878ae678fc26596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:d8:f1:d3:42:d9:02:02:5f:20:e1:7f:03: 50:24:4d:4d:7d:80:ce:15:61:40:b7:dc:6b:0e:e0: a8:18:ae:50:b7:8a:c9:11:18:a1:c1:46:f4:d0:0c: ff:8f:21:f9:a7:d7:17:36:83:57:00:ad:8a:89:a0: 7c:46:11:c6:1a:8d:89:64:3c:43:c7:99:e6:77:e1: e0:64:b3:f4:58:ba:85:3c:a5:f0:3a:25:e9:1b:45: 4f:b8:41:79:9f:95:db:82:c2:a9:e2:01:84:4a:f3: 0c:d1:52:76:1c:5a:ec:ab:93:38:64:13:b3:6e:e3: 1f:4b:0c:68:05:10:2a:e7:aa:8e:95:64:8a:36:d3: 0d:37:58:42:8e:3b:b8:74:73:9c:eb:4c:37:c2:31: 5a:78:ac:0d:07:0a:7e:e1:39:f0:d1:33:89:7c:4b: 62:e4:cf:b0:59:25:93:6d:fe:c6:7f:f6:0d:6a:c9: 73:91:2b:d4:93:97:79:f6:ad:0f:b9:b9:73:5e:5e: 37:2a:35:2f:5a:47:96:ee:e9:78:47:72:b0:61:cf: 96:de:ce:88:8c:bc:c6:66:42:39:28:46:62:6b:c7: ed:67:ea:88:30:03:f1:9a:1d:1b:4f:d5:26:a1:ee: c9:b9:c5:d0:a9:a7:cb:f8:9b:52:14:0b:d8:38:a0: b1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A6:A2:31:08:0C:93:35:5B:1A:FB:DD:18:78:AE:67:8F:C2:65:96 X509v3 Authority Key Identifier: keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:02:7f:7c:38:23:72:68:1d:22:7e:f8:66:cf:07:87:15:ae: 09:cc:22:0d:10:4c:1c:d4:14:40:e5:fd:95:54:11:45:0e:ab: ef:3f:f8:39:2a:43:48:fc:1c:ad:1f:16:b4:c9:a1:e0:f3:76: 3e:35:02:dd:b5:8c:96:34:80:58:5d:c8:58:f2:bc:3f:3a:a6: 54:0c:1b:4b:e5:7e:99:ba:49:52:7b:0a:77:44:58:28:bf:a3: 21:78:1b:45:5e:96:45:b0:3e:5e:0f:77:fe:9d:9d:d5:35:04: b5:df:6e:1c:41:dd:b4:3c:17:84:63:d5:d6:b2:1a:04:5d:2a: ae:d5:48:c4:09:3b:5c:2c:a8:76:bc:21:44:2b:51:fb:d0:09: cd:ec:fd:6a:90:a8:d9:1b:b2:ee:60:f9:66:1e:82:96:ce:6d: d5:72:7d:c8:90:3b:54:f5:90:c5:5a:fe:0f:f4:08:fd:22:66: 55:57:01:ad:e6:20:57:80:b0:f6:cb:45:da:57:dc:52:4e:e9: 2c:63:e4:bc:51:b1:d8:b1:7f:dc:ec:ac:b9:50:9f:e1:d9:c9: a2:67:e0:3e:de:56:f8:83:f2:cb:d4:e1:bf:7b:a2:fe:cc:47: bd:72:4b:f4:da:cb:0b:da:8d:81:8c:db:d9:d1:fd:56:e5:79: 35:23:6d:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HD1lBwpuco8yHQJOHHlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjg1N2M0M2NhMWRmMDRjYjY5YTRhMGFhYzg2MjliZGYz Mjc1NmIwHhcNMjUxMjA3MDAwMDM3WhcNMjUxMjA4MDAwMDM3WjAzMTEwLwYDVQQD Eyg2M2E2YTIzMTA4MGM5MzM1NWIxYWZiZGQxODc4YWU2NzhmYzI2NTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV7Y8dNC2QICXyDhfwNQJE1NfYDO FWFAt9xrDuCoGK5Qt4rJERihwUb00Az/jyH5p9cXNoNXAK2KiaB8RhHGGo2JZDxD x5nmd+HgZLP0WLqFPKXwOiXpG0VPuEF5n5XbgsKp4gGESvMM0VJ2HFrsq5M4ZBOz buMfSwxoBRAq56qOlWSKNtMNN1hCjju4dHOc60w3wjFaeKwNBwp+4Tnw0TOJfEti 5M+wWSWTbf7Gf/YNaslzkSvUk5d59q0PublzXl43KjUvWkeW7ul4R3KwYc+W3s6I jLzGZkI5KEZia8ftZ+qIMAPxmh0bT9Umoe7JucXQqafL+JtSFAvYOKCxbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOmojEIDJM1Wxr73Rh4rmePwmWWMB8GA1UdIwQY MBaAFGBoV8Q8od8Ey2mkoKrIYpvfMnVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEt ZDQ3MTBkMDIyMzM2LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi85NWQ3ZGMtMGM4Yi00OTQxLWI5YzEtZDQ3MTBkMDIyMzM2 LzEvWUdoWHhEeWgzd1RMYWFTZ3FzaGltOTh5ZFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgJ/fDgj cmgdIn74Zs8HhxWuCcwiDRBMHNQUQOX9lVQRRQ6r7z/4OSpDSPwcrR8WtMmh4PN2 PjUC3bWMljSAWF3IWPK8PzqmVAwbS+V+mbpJUnsKd0RYKL+jIXgbRV6WRbA+Xg93 /p2d1TUEtd9uHEHdtDwXhGPV1rIaBF0qrtVIxAk7XCyodrwhRCtR+9AJzez9apCo 2Ruy7mD5Zh6Cls5t1XJ9yJA7VPWQxVr+D/QI/SJmVVcBreYgV4Cw9stF2lfcUk7p LGPkvFGx2LF/3OysuVCf4dnJomfgPt5W+IPyy9Thv3ui/sxHvXJL9NrLC9qNgYzb 2dH9VuV5NSNtrg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:07:59 2025 by rpki-client