This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json) Hash identifier: GEzP0QypnK0tiBfM8luIgnK5ZKG4o6890TX9Vkc4Pkw= Subject key identifier: DB:48:53:0A:08:D7:15:1D:37:BE:EA:3F:A2:6B:5A:9F:90:28:AB:D4 Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Certificate serial: 019B3D59ADA10DB9A153AD6301A0189C8B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft Manifest number: 1292 Signing time: Sat 20 Dec 2025 20:00:45 +0000 Manifest this update: Sat 20 Dec 2025 20:00:45 +0000 Manifest next update: Sun 21 Dec 2025 20:00:45 +0000 Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=) 2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: mcpPelyHeuBgmUaIoaq9GI6GYf2LsWsRNZFxS3yw2F4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ad:a1:0d:b9:a1:53:ad:63:01:a0:18:9c:8b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Validity Not Before: Dec 20 20:00:45 2025 GMT Not After : Dec 21 20:00:45 2025 GMT Subject: CN=db48530a08d7151d37beea3fa26b5a9f9028abd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:42:e0:cc:7d:45:5e:40:93:94:e5:f6:b5: 96:fd:d6:e9:5b:d5:21:c2:e3:90:ca:92:64:53:f5: 55:64:d3:ce:be:de:cc:bf:6e:21:e9:9d:2b:6c:1b: 4d:d9:74:b8:b3:d6:a2:0b:38:ac:e5:73:d7:fd:fd: 80:b2:b7:0c:aa:e2:7f:cd:4e:ff:a6:7c:bc:4c:ec: cd:3f:ab:af:87:f5:29:1e:49:6d:95:62:5e:fe:ed: 62:d7:cd:d2:46:0a:0e:68:d3:de:5d:af:74:1e:6c: 2e:ef:6c:77:1d:ef:ab:17:0a:d3:85:ac:80:ac:e8: bc:3a:d8:80:78:e9:e6:e8:19:74:1e:62:73:31:ab: 77:94:62:23:60:4f:0a:1c:82:1a:cb:ae:80:a1:9d: 9e:36:73:9f:32:f3:8c:40:48:17:db:d6:f5:f6:68: 27:b4:d8:1f:47:9d:ea:90:2c:5b:6b:32:bd:fa:16: b5:cb:0c:a1:81:c0:81:20:4b:2b:2f:ce:b1:26:8a: 48:87:19:46:c4:9d:f3:62:51:03:1b:f8:81:d9:4a: 01:58:00:fe:10:3d:63:bd:35:17:a1:5f:0a:70:db: d5:99:35:ed:5f:c7:2d:4f:d3:0b:8b:cb:b5:0b:ee: ff:ed:26:c3:1e:2a:85:1c:82:49:08:07:c1:10:07: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:53:0A:08:D7:15:1D:37:BE:EA:3F:A2:6B:5A:9F:90:28:AB:D4 X509v3 Authority Key Identifier: keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c1:98:85:7e:86:81:f1:04:73:98:02:14:6e:ca:71:d7:60: 7d:64:9f:e2:eb:14:23:7d:96:1b:c5:82:f5:13:98:21:e5:68: 46:67:68:f8:e4:3d:43:2c:22:67:4d:a0:1f:ff:80:04:a7:92: 4e:57:7b:79:7f:db:52:f3:88:64:a4:8d:84:31:71:b8:92:ee: 7a:07:96:2b:7a:f0:5c:4a:64:62:70:f1:5f:88:a0:4e:ed:9c: ca:fc:a6:bd:c7:77:74:9e:2f:1d:af:82:a0:8e:d4:4a:de:11: 23:ab:39:b3:6a:70:db:ac:dc:40:cb:23:75:16:87:4f:a6:15: fa:84:ab:2c:bc:dd:ea:3f:41:d5:39:9c:2c:c9:ec:a5:13:b2: de:b2:41:27:d7:40:08:f8:48:96:ce:bd:82:02:25:68:53:5b: f6:8a:b2:11:94:de:1f:1a:bd:be:7a:67:82:72:dd:86:76:55: c5:1d:c5:1a:14:5c:d5:68:31:a3:11:07:cc:a6:e9:db:bf:97: 5a:12:4e:0f:c8:b0:1f:52:a6:92:bc:cb:54:25:47:f7:a7:13: 10:09:a1:dc:66:66:2b:10:67:0a:a0:b9:2c:d2:a6:a0:85:b8: 1c:8a:67:62:ab:d2:d1:73:2d:a3:04:14:7c:44:2a:20:b5:63: 20:74:dc:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wa2hDbmhU61jAaAYnItlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy NGU2YTYwHhcNMjUxMjIwMjAwMDQ1WhcNMjUxMjIxMjAwMDQ1WjAzMTEwLwYDVQQD EyhkYjQ4NTMwYTA4ZDcxNTFkMzdiZWVhM2ZhMjZiNWE5ZjkwMjhhYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40dC4Mx9RV5Ak5Tl9rWW/dbpW9Uh wuOQypJkU/VVZNPOvt7Mv24h6Z0rbBtN2XS4s9aiCzis5XPX/f2AsrcMquJ/zU7/ pny8TOzNP6uvh/UpHkltlWJe/u1i183SRgoOaNPeXa90Hmwu72x3He+rFwrThayA rOi8OtiAeOnm6Bl0HmJzMat3lGIjYE8KHIIay66AoZ2eNnOfMvOMQEgX29b19mgn tNgfR53qkCxbazK9+ha1ywyhgcCBIEsrL86xJopIhxlGxJ3zYlEDG/iB2UoBWAD+ ED1jvTUXoV8KcNvVmTXtX8ctT9MLi8u1C+7/7SbDHiqFHIJJCAfBEAeZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtIUwoI1xUdN77qP6JrWp+QKKvUMB8GA1UdIwQY MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1 LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMGYhX6G gfEEc5gCFG7KcddgfWSf4usUI32WG8WC9ROYIeVoRmdo+OQ9QywiZ02gH/+ABKeS Tld7eX/bUvOIZKSNhDFxuJLuegeWK3rwXEpkYnDxX4igTu2cyvymvcd3dJ4vHa+C oI7USt4RI6s5s2pw26zcQMsjdRaHT6YV+oSrLLzd6j9B1TmcLMnspROy3rJBJ9dA CPhIls69ggIlaFNb9oqyEZTeHxq9vnpngnLdhnZVxR3FGhRc1WgxoxEHzKbp27+X WhJOD8iwH1KmkrzLVCVH96cTEAmh3GZmKxBnCqC5LNKmoIW4HIpnYqvS0XMtowQU fEQqILVjIHTcQg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:58 2025 by rpki-client