This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json) Hash identifier: B3d/FraLRMFDU8rfiM/fUmRyxEywCwP5zYKxgNRqPt4= Subject key identifier: 88:12:31:3E:B5:83:37:D6:BC:CF:2D:B7:78:24:08:EB:53:39:10:53 Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc Certificate serial: 019B44390B7BC6200AECC6E3E2ADFED501C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft Manifest number: 1682 Signing time: Mon 22 Dec 2025 04:02:27 +0000 Manifest this update: Mon 22 Dec 2025 04:02:27 +0000 Manifest next update: Tue 23 Dec 2025 04:02:27 +0000 Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: rBUFJL/qLgq5aksSL9ryk831riJn8AClLjdE45S0KzQ=) 2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:0b:7b:c6:20:0a:ec:c6:e3:e2:ad:fe:d5:01:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc Validity Not Before: Dec 22 04:02:27 2025 GMT Not After : Dec 23 04:02:27 2025 GMT Subject: CN=8812313eb58337d6bccf2db7782408eb53391053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:c1:7d:9f:40:23:66:86:86:85:33:df:2a: 03:23:7f:17:76:70:80:06:bf:5d:85:25:aa:d3:4c: 68:ef:00:1f:03:45:30:35:84:b4:bf:d7:dd:bd:e3: 76:2b:f0:0e:b6:3f:6a:93:e4:ad:80:32:02:23:a7: f1:f2:05:c4:ed:42:23:57:93:a1:38:dc:2f:9f:f5: 21:12:3d:17:51:25:11:69:70:39:1c:6f:ed:17:77: f9:b6:c5:46:e1:60:1d:6c:91:d7:de:8e:5b:04:26: 6d:41:d5:ef:83:7d:b9:bb:a3:5f:ea:16:e6:f5:08: e1:0f:4b:06:c1:3f:91:35:c5:1a:12:ee:c1:4c:7d: 7a:c9:c3:95:b2:dc:62:96:28:76:1e:9c:59:88:07: a1:94:2e:d2:aa:2f:62:4a:9c:de:2c:b7:3f:2a:b6: c6:c5:84:0d:a0:b7:9f:25:8f:e2:1e:14:ca:d4:ff: 7a:dc:1f:c8:a8:08:3c:c7:28:a6:8d:bd:f1:4c:08: d1:62:c9:2a:2f:48:f0:c7:e7:e6:de:28:84:a8:ff: 9c:65:cf:1b:54:39:78:d2:2f:b2:34:3f:26:b5:ff: 4b:1d:a8:16:e3:b9:d6:ca:6e:1b:17:05:79:d0:7f: 16:90:40:e4:59:aa:be:43:d4:80:ca:77:c3:9e:10: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:12:31:3E:B5:83:37:D6:BC:CF:2D:B7:78:24:08:EB:53:39:10:53 X509v3 Authority Key Identifier: keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5f:74:a0:b8:f0:67:9c:03:0b:f8:a2:1a:a6:17:dc:2e:d1: f0:c3:5f:54:a9:ef:66:af:2c:61:22:92:84:85:cf:c7:a6:ee: e2:d3:70:04:f8:2e:77:ea:22:9c:0c:54:83:10:2c:6b:94:0f: 3b:42:8d:de:0d:ae:00:1f:f4:43:c8:fb:7c:23:1b:d4:f5:7a: 75:07:a2:f0:20:02:8e:53:c9:d3:ff:74:c3:bc:6d:d7:60:d1: 3c:1f:7a:b8:aa:6b:aa:75:a7:51:f1:2e:60:b3:60:1d:3a:ac: 90:ae:b6:4b:43:9b:5e:8e:14:ca:7b:ff:a3:6f:1e:f2:02:50: 2b:1b:c3:28:8f:44:3b:c4:53:53:87:dc:26:38:2d:80:77:5e: 4c:f3:71:74:4f:76:d5:b3:cc:ac:f7:36:b0:6e:ac:a6:d4:af: 48:04:7b:8d:c2:f2:2e:52:68:20:7d:a6:d7:ef:d3:49:96:48: b3:31:95:33:54:9b:cd:67:ad:94:a1:cd:36:d9:b6:e8:ad:47: 98:16:ad:3e:c3:ce:fd:22:97:32:31:ee:93:17:32:77:50:17: 1a:d8:e3:d3:81:b1:bb:62:eb:66:ed:92:65:08:fa:03:2a:36: 9b:9c:2d:fe:3a:e1:d5:1e:01:3c:bd:c9:7d:25:73:78:e9:0a: 08:07:4b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQt7xiAK7Mbj4q3+1QHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3 ODlhZmMwHhcNMjUxMjIyMDQwMjI3WhcNMjUxMjIzMDQwMjI3WjAzMTEwLwYDVQQD Eyg4ODEyMzEzZWI1ODMzN2Q2YmNjZjJkYjc3ODI0MDhlYjUzMzkxMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK3BfZ9AI2aGhoUz3yoDI38XdnCA Br9dhSWq00xo7wAfA0UwNYS0v9fdveN2K/AOtj9qk+StgDICI6fx8gXE7UIjV5Oh ONwvn/UhEj0XUSURaXA5HG/tF3f5tsVG4WAdbJHX3o5bBCZtQdXvg325u6Nf6hbm 9QjhD0sGwT+RNcUaEu7BTH16ycOVstxilih2HpxZiAehlC7Sqi9iSpzeLLc/KrbG xYQNoLefJY/iHhTK1P963B/IqAg8xyimjb3xTAjRYskqL0jwx+fm3iiEqP+cZc8b VDl40i+yND8mtf9LHagW47nWym4bFwV50H8WkEDkWaq+Q9SAynfDnhDwpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgSMT61gzfWvM8tt3gkCOtTORBTMB8GA1UdIwQY MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt MjkzNmFhMjI3NzY1LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1 LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM190oLjw Z5wDC/iiGqYX3C7R8MNfVKnvZq8sYSKShIXPx6bu4tNwBPgud+oinAxUgxAsa5QP O0KN3g2uAB/0Q8j7fCMb1PV6dQei8CACjlPJ0/90w7xt12DRPB96uKprqnWnUfEu YLNgHTqskK62S0ObXo4Uynv/o28e8gJQKxvDKI9EO8RTU4fcJjgtgHdeTPNxdE92 1bPMrPc2sG6sptSvSAR7jcLyLlJoIH2m1+/TSZZIszGVM1SbzWetlKHNNtm26K1H mBatPsPO/SKXMjHukxcyd1AXGtjj04Gxu2LrZu2SZQj6Ayo2m5wt/jrh1R4BPL3J fSVzeOkKCAdLFg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:08 2025 by rpki-client