This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json) Hash identifier: +eeobFYjoim9yTrzyD8vV2+IJbIKhrNgPvs2tm6ZuMg= Subject key identifier: 06:8F:83:18:B1:AF:55:02:41:70:F6:1F:32:8E:57:C1:FC:A4:4D:49 Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b Certificate serial: 019B4091A763156C084107A85DA71992194F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft Manifest number: 1390 Signing time: Sun 21 Dec 2025 11:00:45 +0000 Manifest this update: Sun 21 Dec 2025 11:00:45 +0000 Manifest next update: Mon 22 Dec 2025 11:00:45 +0000 Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: C+A35vCY+uXhdMJaC2yQMP2KuWhV5JuC4+LPiw8IVNI=) 2: iK-6vM3UN-0JPyozDLdhLjJ5znw.roa (hash: LEDGjWpooiw+DnQIpdRJAz1t/vP9dQU00MHsp9zo7Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:a7:63:15:6c:08:41:07:a8:5d:a7:19:92:19:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b Validity Not Before: Dec 21 11:00:45 2025 GMT Not After : Dec 22 11:00:45 2025 GMT Subject: CN=068f8318b1af55024170f61f328e57c1fca44d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:e4:be:e4:7a:d5:3d:39:eb:b6:a9:2d:6c: f6:14:f6:cf:dd:9c:f8:fd:42:e7:22:fa:00:08:2b: 75:02:4a:33:51:56:a6:ea:f7:bd:fc:de:53:85:58: a9:bf:b3:3b:ca:54:2c:a3:36:72:bf:29:41:0a:44: a1:ec:80:93:07:c5:4e:c2:e3:5f:93:69:9c:8a:a2: b9:59:a9:f8:f1:4d:94:18:48:4b:85:22:4f:0d:20: a0:67:9b:fb:a4:40:95:52:b6:41:b7:dd:95:e9:88: 73:95:b6:3c:90:40:ba:27:6d:56:a0:0a:79:a8:cf: 09:85:0a:18:0f:f5:e8:da:4e:8f:b6:d8:04:6f:3a: df:fa:2a:9b:af:33:39:7f:1a:13:2b:5c:ce:35:9e: bc:e8:a9:ee:68:76:82:1e:60:16:41:9c:91:8d:91: ee:1f:5e:d2:aa:19:32:45:bf:15:c5:e5:bc:68:e7: b7:1a:f2:d8:2a:13:fe:9a:eb:64:46:b3:91:b6:cb: 53:a9:89:b5:ff:59:c9:95:77:0b:bb:58:97:a4:d7: 91:ca:a8:04:05:6c:17:98:f1:d8:3d:b3:ff:b2:fe: 32:a6:d1:3f:db:f4:14:d7:67:2e:9f:83:4f:63:45: 96:13:2a:74:39:10:d0:4e:76:3b:ab:9c:0b:24:97: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8F:83:18:B1:AF:55:02:41:70:F6:1F:32:8E:57:C1:FC:A4:4D:49 X509v3 Authority Key Identifier: keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:51:fd:7f:8d:eb:a8:b0:74:73:b7:4b:7b:38:2b:4e:92:a7: 95:96:f3:45:9c:74:9b:ff:bb:75:62:d8:75:f7:12:14:53:cb: d5:ec:8c:5d:e7:f4:32:3f:56:6f:1b:26:fd:74:fa:0d:5a:ca: 36:e5:c0:45:a5:61:79:1c:14:f2:ba:53:e7:4b:a1:a7:34:b9: da:e0:84:04:ac:0c:a5:ba:c0:0a:1e:f3:25:35:3c:c8:54:07: 16:9d:65:0e:92:9a:f3:06:dc:17:a8:fa:37:8b:4a:8a:4f:16: 09:00:34:03:3a:09:88:a2:a8:db:50:07:a8:8f:2f:e7:15:bf: 7b:b2:8d:af:39:89:87:c3:42:60:7c:4c:86:1a:a0:07:c8:99: 02:3e:0e:14:34:e6:31:b6:44:fa:e0:fe:50:18:0f:59:7a:0b: 61:02:23:fa:68:da:00:05:05:74:cc:bf:f0:19:65:17:93:ff: 2b:ac:5c:02:8a:01:7e:ff:79:9d:1c:3c:39:61:85:82:19:b2: f8:f0:b7:24:ee:62:29:ac:08:3d:74:e4:95:48:24:89:b4:a8: c8:b6:8f:e7:d6:c9:1e:6f:f1:55:1b:71:ff:83:8c:0e:a5:b0: 30:e7:cd:a1:23:55:29:5e:cc:9d:8d:62:32:5e:b7:db:b4:99: 7b:03:41:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkadjFWwIQQeoXacZkhlPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5 ZmUwN2IwHhcNMjUxMjIxMTEwMDQ1WhcNMjUxMjIyMTEwMDQ1WjAzMTEwLwYDVQQD EygwNjhmODMxOGIxYWY1NTAyNDE3MGY2MWYzMjhlNTdjMWZjYTQ0ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/kvuR61T0567apLWz2FPbP3Zz4 /ULnIvoACCt1AkozUVam6ve9/N5ThVipv7M7ylQsozZyvylBCkSh7ICTB8VOwuNf k2mciqK5Wan48U2UGEhLhSJPDSCgZ5v7pECVUrZBt92V6YhzlbY8kEC6J21WoAp5 qM8JhQoYD/Xo2k6PttgEbzrf+iqbrzM5fxoTK1zONZ686KnuaHaCHmAWQZyRjZHu H17SqhkyRb8VxeW8aOe3GvLYKhP+mutkRrORtstTqYm1/1nJlXcLu1iXpNeRyqgE BWwXmPHYPbP/sv4yptE/2/QU12cun4NPY0WWEyp0ORDQTnY7q5wLJJd5hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaPgxixr1UCQXD2HzKOV8H8pE1JMB8GA1UdIwQY MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt MDIzOTk1OTA2YzQ2LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2 LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVH9f43r qLB0c7dLezgrTpKnlZbzRZx0m/+7dWLYdfcSFFPL1eyMXef0Mj9Wbxsm/XT6DVrK NuXARaVheRwU8rpT50uhpzS52uCEBKwMpbrACh7zJTU8yFQHFp1lDpKa8wbcF6j6 N4tKik8WCQA0AzoJiKKo21AHqI8v5xW/e7KNrzmJh8NCYHxMhhqgB8iZAj4OFDTm MbZE+uD+UBgPWXoLYQIj+mjaAAUFdMy/8BllF5P/K6xcAooBfv95nRw8OWGFghmy +PC3JO5iKawIPXTklUgkibSoyLaP59bJHm/xVRtx/4OMDqWwMOfNoSNVKV7MnY1i Ml6327SZewNB9g== -----END CERTIFICATE-----Generated at Sun Dec 21 16:43:14 2025 by rpki-client