This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft File: YE6Z8sS9AZ63cxUmRSbdauHWK00.mft (raw, json) Hash identifier: FwiIgz3kvBWElYbLSzI0WCji5rJquQnbz60qbv77NDY= Subject key identifier: D4:7A:09:BC:04:BF:B9:3A:FB:3A:ED:F3:FD:F3:64:24:1D:91:0E:71 Authority key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D Certificate issuer: /CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d Certificate serial: 019AF12D9D8286D1714EF561E9F31792E30E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: 5z3VvkRy-ZxRlwDulpmyqBpJyjo.roa (hash: T1LPS9QQuOzTlUB1i+/0lZXM72ThKtsE6hI3w4YjKAE=) 2: YE6Z8sS9AZ63cxUmRSbdauHWK00.crl (hash: Y7g8Ca/7yj3gSO+d1IKAhR1mtJg7wtdZu80gthvfWHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9d:82:86:d1:71:4e:f5:61:e9:f3:17:92:e3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=d47a09bc04bfb93afb3aedf3fdf364241d910e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:76:1f:68:d8:c9:41:88:1f:70:48:fa:e8: 2d:24:4a:80:19:69:8a:53:8c:4e:00:be:aa:81:e0: 1b:d8:3a:96:9a:a7:27:70:7d:c1:f6:83:da:7d:bd: eb:5c:48:97:70:a7:23:b8:c3:53:e6:a9:69:05:d7: f7:4f:12:32:a3:8a:e6:56:cb:47:ad:95:5f:53:83: 71:8b:f5:3e:99:75:88:aa:18:a9:55:ef:e5:de:ab: a0:c0:6b:60:a9:b8:83:3e:45:ed:fa:1b:cf:60:36: 89:c1:5b:72:54:f5:11:38:10:66:52:31:be:b9:87: ad:11:3f:c7:60:3c:fc:2a:1e:7d:24:3d:c9:06:10: 3b:f4:9d:83:0b:6c:dc:54:0d:97:bb:6d:49:1f:3a: 9f:7c:46:eb:3b:52:e8:97:fd:56:4b:2f:8c:ce:4d: b3:24:42:fd:99:13:08:1f:8c:25:93:aa:25:5e:b4: a9:1e:b4:16:43:34:6c:78:07:50:f9:64:50:c1:38: 64:e2:08:6a:d2:80:27:ec:ef:93:a0:fb:9f:b4:2d: 87:3e:94:72:99:ea:5f:ba:40:94:8c:e9:24:dd:08: 40:f1:5c:91:bc:2e:f3:29:c4:23:c9:b2:10:78:08: 9e:e3:ea:cb:f7:eb:b6:c1:ab:47:8b:1a:3f:51:80: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:09:BC:04:BF:B9:3A:FB:3A:ED:F3:FD:F3:64:24:1D:91:0E:71 X509v3 Authority Key Identifier: keyid:60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:87:7d:83:2a:41:13:75:d4:a8:3a:ba:07:6a:fa:d7:53:59: 45:be:da:c3:6a:51:ff:d5:e5:1c:e8:90:a3:20:f4:41:2b:9a: 6f:93:0b:9a:dd:98:1a:56:8f:3e:d5:fe:8d:d2:2a:2a:ee:c8: 0c:54:11:33:65:94:8a:b6:9d:5c:26:fc:5e:f9:d3:35:dc:bb: 8b:7e:da:50:87:a0:6f:99:f6:b4:f7:98:9b:08:b1:b1:5b:83: 24:44:31:82:07:c5:da:76:54:35:eb:f4:c4:67:e3:48:d2:48: 8e:af:67:fc:64:d7:8e:0a:8a:b2:90:69:93:1d:7e:a4:3a:10: f8:e2:aa:7d:26:8e:05:a8:5b:4c:07:70:1d:cd:fe:4b:79:47: ae:5e:4d:97:93:cd:e6:29:48:17:7a:93:92:7f:6d:d3:fc:b9: bd:8d:0a:eb:e6:1b:50:9d:a9:e1:9a:f7:f8:aa:3c:68:73:ac: 7d:7b:9a:f8:39:ea:4e:f1:a9:9a:18:e0:e1:c7:e4:b3:39:9b: 29:fd:c4:58:17:30:dc:94:19:83:ad:7d:66:9c:06:bf:c2:8c: 77:eb:4d:b5:6d:81:54:ac:99:ca:10:6a:8e:20:e1:27:b3:77: 58:4c:ed:b5:f1:2e:24:5d:54:73:62:bb:41:ee:e2:95:ee:a1: 9d:91:58:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ2ChtFxTvVh6fMXkuMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNGU5OWYyYzRiZDAxOWViNzczMTUyNjQ1MjZkZDZhZTFk NjJiNGQwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EyhkNDdhMDliYzA0YmZiOTNhZmIzYWVkZjNmZGYzNjQyNDFkOTEwZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTN2H2jYyUGIH3BI+ugtJEqAGWmK U4xOAL6qgeAb2DqWmqcncH3B9oPafb3rXEiXcKcjuMNT5qlpBdf3TxIyo4rmVstH rZVfU4Nxi/U+mXWIqhipVe/l3qugwGtgqbiDPkXt+hvPYDaJwVtyVPUROBBmUjG+ uYetET/HYDz8Kh59JD3JBhA79J2DC2zcVA2Xu21JHzqffEbrO1Lol/1WSy+Mzk2z JEL9mRMIH4wlk6olXrSpHrQWQzRseAdQ+WRQwThk4ghq0oAn7O+ToPuftC2HPpRy mepfukCUjOkk3QhA8VyRvC7zKcQjybIQeAie4+rL9+u2watHixo/UYDUfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR6CbwEv7k6+zrt8/3zZCQdkQ5xMB8GA1UdIwQY MBaAFGBOmfLEvQGet3MVJkUm3Wrh1itNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmY1YzMtZTA5YS00ODJiLTgxNGUt YjI1NjBlYWIxNTBmLzEvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83NmY1YzMtZTA5YS00ODJiLTgxNGUtYjI1NjBlYWIxNTBm LzEvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANId9gypB E3XUqDq6B2r611NZRb7aw2pR/9XlHOiQoyD0QSuab5MLmt2YGlaPPtX+jdIqKu7I DFQRM2WUiradXCb8XvnTNdy7i37aUIegb5n2tPeYmwixsVuDJEQxggfF2nZUNev0 xGfjSNJIjq9n/GTXjgqKspBpkx1+pDoQ+OKqfSaOBahbTAdwHc3+S3lHrl5Nl5PN 5ilIF3qTkn9t0/y5vY0K6+YbUJ2p4Zr3+Ko8aHOsfXua+DnqTvGpmhjg4cfkszmb Kf3EWBcw3JQZg619ZpwGv8KMd+tNtW2BVKyZyhBqjiDhJ7N3WEzttfEuJF1Uc2K7 Qe7ile6hnZFYEA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:59 2025 by rpki-client