This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json) Hash identifier: 1+E6alR6KaY2nDuhk4Ms6lW39NO76a49qIEuhOIYlcc= Subject key identifier: FC:85:82:7B:9A:B1:3A:17:0D:2C:71:8D:7E:5F:89:F3:57:58:2E:2F Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec Certificate serial: 019B5DC0D621C559195A85C036F235766FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft Manifest number: 0A3F Signing time: Sat 27 Dec 2025 03:01:17 +0000 Manifest this update: Sat 27 Dec 2025 03:01:17 +0000 Manifest next update: Sun 28 Dec 2025 03:01:17 +0000 Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=) 2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: bHUCI/X57J1GEhicTom0X8y6MlYCyzP092H5QbtO7Gc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:d6:21:c5:59:19:5a:85:c0:36:f2:35:76:6f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec Validity Not Before: Dec 27 03:01:17 2025 GMT Not After : Dec 28 03:01:17 2025 GMT Subject: CN=fc85827b9ab13a170d2c718d7e5f89f357582e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5f:22:ca:97:36:04:e2:f6:38:82:5d:d6:2f: 4f:34:59:d1:5c:e8:52:43:09:ad:a0:dd:27:25:f7: 63:34:11:0b:9a:51:06:60:ac:cd:e3:8a:bd:6e:78: be:5a:3b:a9:4a:7d:99:e7:e1:40:a8:5c:b5:69:d5: e2:49:26:36:fd:e0:f6:f6:ca:d2:95:f1:e1:3b:13: 20:b0:cc:48:31:91:13:a9:14:f3:c9:f7:14:ae:ee: fb:3c:98:81:a7:3d:4f:f5:6a:f1:95:23:5f:53:f7: 53:ac:70:92:40:6f:81:8e:40:4e:2e:84:4d:f6:c0: 70:2d:3f:d4:f0:af:0d:6b:bb:43:b6:67:8a:2c:31: 44:8f:1a:e3:cb:bb:94:c2:33:90:88:b6:c4:68:90: 36:bf:a0:e9:9a:33:94:45:aa:af:aa:dd:5a:cf:e2: 8c:45:dd:7b:d6:bc:93:d8:35:05:e9:79:54:24:44: 1a:4a:27:46:cf:bb:3d:82:b4:99:fe:80:13:16:16: a3:82:d6:ad:ee:63:e7:68:79:ac:8c:36:92:b1:15: 9d:db:87:bf:9d:53:e4:90:49:74:8f:ca:5a:66:76: 9c:20:4d:24:d5:76:87:4c:ed:5f:f1:20:bc:cc:0a: 0f:ce:c7:c4:5d:71:73:c1:c0:a9:ad:3d:e4:69:e2: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:85:82:7B:9A:B1:3A:17:0D:2C:71:8D:7E:5F:89:F3:57:58:2E:2F X509v3 Authority Key Identifier: keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:58:93:5c:59:59:bc:11:8d:3b:45:64:e6:9b:46:12:a3: 27:35:49:74:41:97:81:ca:d3:17:86:d7:dc:27:14:e3:ac:58: 53:c0:9b:b8:d2:fa:97:7c:0d:11:6c:af:b1:bd:3b:6b:91:67: 18:fa:83:cd:6d:0f:2d:2d:6e:10:84:f5:38:9c:19:92:54:64: db:71:02:5c:7b:e6:56:99:51:84:cc:94:b3:0c:82:f4:5c:06: 26:81:1e:77:e4:47:d7:9c:4f:a6:23:d9:84:0a:d2:86:3a:ba: 54:da:e3:c4:aa:10:67:4e:d1:b9:fa:0e:ff:06:57:b0:66:45: 8a:6b:ba:86:16:b3:3b:85:43:0d:d1:af:90:79:38:68:98:e0: 34:4a:83:ac:a0:0d:03:9c:78:e6:cd:60:97:4f:00:77:d4:b7: b2:ae:db:f1:68:e5:12:43:96:56:b7:78:3b:a6:e4:c3:cb:5e: 80:93:2c:7b:44:58:31:37:f7:15:b6:ae:c2:f6:48:d0:70:fd: f4:b3:43:16:97:ba:d8:32:e0:f1:4a:bd:42:87:73:9a:fc:2c: c4:40:64:31:e6:c5:25:20:6d:fb:c1:ea:d6:da:12:2f:9c:9e: fe:77:16:b8:d9:b5:ec:05:22:25:97:79:f7:ec:70:90:e1:ee: be:50:f9:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwNYhxVkZWoXANvI1dm+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzNlYzFhMjQwMTQzZGFlMTExYmI5MmQxOTJkYWJmNzc1 ZDgxZWMwHhcNMjUxMjI3MDMwMTE3WhcNMjUxMjI4MDMwMTE3WjAzMTEwLwYDVQQD EyhmYzg1ODI3YjlhYjEzYTE3MGQyYzcxOGQ3ZTVmODlmMzU3NTgyZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V8iypc2BOL2OIJd1i9PNFnRXOhS QwmtoN0nJfdjNBELmlEGYKzN44q9bni+WjupSn2Z5+FAqFy1adXiSSY2/eD29srS lfHhOxMgsMxIMZETqRTzyfcUru77PJiBpz1P9WrxlSNfU/dTrHCSQG+BjkBOLoRN 9sBwLT/U8K8Na7tDtmeKLDFEjxrjy7uUwjOQiLbEaJA2v6DpmjOURaqvqt1az+KM Rd171ryT2DUF6XlUJEQaSidGz7s9grSZ/oATFhajgtat7mPnaHmsjDaSsRWd24e/ nVPkkEl0j8paZnacIE0k1XaHTO1f8SC8zAoPzsfEXXFzwcCprT3kaeIgLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyFgnuasToXDSxxjX5fifNXWC4vMB8GA1UdIwQY MBaAFGEz7BokAUPa4RG7ktGS2r93XYHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt YzVmZTQ0NDIwYzA5LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5 LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAFYk1xZ WbwRjTtFZOabRhKjJzVJdEGXgcrTF4bX3CcU46xYU8CbuNL6l3wNEWyvsb07a5Fn GPqDzW0PLS1uEIT1OJwZklRk23ECXHvmVplRhMyUswyC9FwGJoEed+RH15xPpiPZ hArShjq6VNrjxKoQZ07RufoO/wZXsGZFimu6hhazO4VDDdGvkHk4aJjgNEqDrKAN A5x45s1gl08Ad9S3sq7b8WjlEkOWVrd4O6bkw8tegJMse0RYMTf3FbauwvZI0HD9 9LNDFpe62DLg8Uq9QodzmvwsxEBkMebFJSBt+8Hq1toSL5ye/ncWuNm17AUiJZd5 9+xwkOHuvlD5qQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:51:27 2025 by rpki-client