This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json) Hash identifier: cQH3d+GpAnvg+0QefnMGzwKTUWJsK/UOYDglUliw9Ps= Subject key identifier: 4B:BF:A1:9E:53:07:12:C8:14:8E:8A:08:A6:85:13:6A:21:98:FB:39 Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f Certificate serial: 019B650CE0AEE67049DD24CC56C13D1D1E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft Manifest number: 0192 Signing time: Sun 28 Dec 2025 13:01:41 +0000 Manifest this update: Sun 28 Dec 2025 13:01:41 +0000 Manifest next update: Mon 29 Dec 2025 13:01:41 +0000 Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: PFxvRmuGirUpoy9Ax9hLHTW5aCEpTV/QETUM4hUj3T4=) 2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:e0:ae:e6:70:49:dd:24:cc:56:c1:3d:1d:1e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f Validity Not Before: Dec 28 13:01:41 2025 GMT Not After : Dec 29 13:01:41 2025 GMT Subject: CN=4bbfa19e530712c8148e8a08a685136a2198fb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c9:68:c2:96:81:37:5c:db:29:85:d6:e4:d8: ce:ef:f2:f1:97:21:a7:b9:34:56:08:a2:f2:8a:9d: fd:96:0e:1d:af:80:00:35:e3:8e:eb:b4:05:d8:f2: b1:32:8f:e7:06:a4:04:3b:ee:71:e5:c2:de:08:4b: 44:39:16:1b:0a:c0:7c:35:09:8c:83:d4:17:52:23: 7f:d0:4f:4b:82:53:a0:06:25:5a:30:da:95:80:3c: 86:ca:34:01:9e:57:4e:5d:61:26:e3:0b:54:88:83: 75:5c:87:32:1f:b3:d0:2c:82:b0:7a:ba:6e:c1:2f: 5d:26:79:c5:48:7b:22:2d:73:df:85:3d:c3:4e:3a: e9:b3:73:ca:fb:ee:99:8d:9a:33:91:a2:b4:c4:9e: b7:72:8c:87:33:1c:6c:d8:d6:d1:5f:35:a2:da:7a: 0f:f7:70:98:d2:86:cd:25:ca:6b:33:af:33:ed:89: e0:52:ac:61:85:81:3b:ec:4f:13:c1:a4:df:4e:1a: c2:91:69:fb:75:08:c8:5d:a2:5a:54:91:9e:35:8f: 9c:d5:24:54:da:4b:1a:5a:ee:0f:b4:c2:7a:f9:2b: d8:65:64:f5:46:89:11:d4:90:ca:4a:75:dd:37:61: 13:f5:f1:52:f5:10:33:c2:21:b8:d3:1b:e8:19:3f: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:A1:9E:53:07:12:C8:14:8E:8A:08:A6:85:13:6A:21:98:FB:39 X509v3 Authority Key Identifier: keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:ad:49:2d:5f:99:bd:c5:4c:c1:03:0e:64:4b:6f:2a:db: be:5e:ec:82:0c:8e:48:2a:66:e6:aa:0c:0c:c6:41:10:7d:ed: 5a:dd:d4:fb:21:8b:1d:87:8b:a1:66:03:cf:08:72:0b:c9:0f: db:99:95:7a:26:2f:2f:23:37:da:1e:8e:38:37:67:21:a8:7c: fa:d4:e9:b0:e9:2c:b0:d3:c3:b9:fd:48:57:a0:0a:5a:be:7d: d3:98:fe:9f:87:e1:15:1b:ac:80:2b:e7:de:bb:14:2c:8d:50: 20:6e:9c:7b:6b:98:44:7d:69:89:dd:07:aa:84:5b:c2:ac:54: 0d:82:1d:fa:9c:ce:93:da:10:d4:67:35:65:f2:fc:0f:7a:87: a1:85:97:fb:e9:a3:a4:06:e3:67:ce:71:b8:44:73:82:b9:ff: 38:c9:94:7c:57:c7:72:03:6f:c1:83:d0:81:f8:49:c4:a4:45: b1:dc:ab:ea:52:0a:7a:ab:c8:b1:46:aa:56:fd:a6:4e:37:5e: fc:3b:d5:8c:df:83:73:bb:fc:e2:55:a0:af:3f:fd:fb:68:d2: ab:cf:0d:05:c1:f2:fd:73:37:12:99:e6:d1:af:3c:49:79:07: dc:8e:84:02:45:14:30:c7:1f:19:9a:d9:2e:6a:42:77:82:4b: 07:78:9f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDOCu5nBJ3STMVsE9HR6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODcxNjllMDMwZTM3MjVkNmViNDc4YTMyN2U2YmRmMzZi ZThkMmYwHhcNMjUxMjI4MTMwMTQxWhcNMjUxMjI5MTMwMTQxWjAzMTEwLwYDVQQD Eyg0YmJmYTE5ZTUzMDcxMmM4MTQ4ZThhMDhhNjg1MTM2YTIxOThmYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8slowpaBN1zbKYXW5NjO7/LxlyGn uTRWCKLyip39lg4dr4AANeOO67QF2PKxMo/nBqQEO+5x5cLeCEtEORYbCsB8NQmM g9QXUiN/0E9LglOgBiVaMNqVgDyGyjQBnldOXWEm4wtUiIN1XIcyH7PQLIKwerpu wS9dJnnFSHsiLXPfhT3DTjrps3PK++6ZjZozkaK0xJ63coyHMxxs2NbRXzWi2noP 93CY0obNJcprM68z7YngUqxhhYE77E8TwaTfThrCkWn7dQjIXaJaVJGeNY+c1SRU 2ksaWu4PtMJ6+SvYZWT1RokR1JDKSnXdN2ET9fFS9RAzwiG40xvoGT9uzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu/oZ5TBxLIFI6KCKaFE2ohmPs5MB8GA1UdIwQY MBaAFGGHFp4DDjcl1utHijJ+a982vo0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWIt NDgwZGY4ZjQxZTQ0LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWItNDgwZGY4ZjQxZTQ0 LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9qtSS1f mb3FTMEDDmRLbyrbvl7sggyOSCpm5qoMDMZBEH3tWt3U+yGLHYeLoWYDzwhyC8kP 25mVeiYvLyM32h6OODdnIah8+tTpsOkssNPDuf1IV6AKWr5905j+n4fhFRusgCvn 3rsULI1QIG6ce2uYRH1pid0HqoRbwqxUDYId+pzOk9oQ1Gc1ZfL8D3qHoYWX++mj pAbjZ85xuERzgrn/OMmUfFfHcgNvwYPQgfhJxKRFsdyr6lIKeqvIsUaqVv2mTjde /DvVjN+Dc7v84lWgrz/9+2jSq88NBcHy/XM3Epnm0a88SXkH3I6EAkUUMMcfGZrZ LmpCd4JLB3ifRg== -----END CERTIFICATE-----Generated at Sun Dec 28 14:53:24 2025 by rpki-client