This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json) Hash identifier: bX14ujG35odz5+8Q/OFxB5jdsNdt+tBB4vznwQ6j8ME= Subject key identifier: 08:3E:B5:E0:B4:C1:BE:5C:45:8F:DC:42:48:B8:1E:4E:50:22:88:62 Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Certificate serial: 019B3EDA826BE5BE0D70A5DF09704FDB8875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 03:01:06 +0000 Manifest this update: Sun 21 Dec 2025 03:01:06 +0000 Manifest next update: Mon 22 Dec 2025 03:01:06 +0000 Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=) 2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: SI+/3zTdbEGbk3xOJdYBvv0/rZzTyk4eO/R3ioVYfPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:82:6b:e5:be:0d:70:a5:df:09:70:4f:db:88:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Validity Not Before: Dec 21 03:01:06 2025 GMT Not After : Dec 22 03:01:06 2025 GMT Subject: CN=083eb5e0b4c1be5c458fdc4248b81e4e50228862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:b1:6f:5f:d7:e5:de:a2:d7:7e:1a:d7:87: f3:75:4b:da:24:5a:8f:18:15:7c:76:b3:70:5f:45: 81:95:2d:4a:d2:9c:95:e3:64:9c:78:38:d6:f8:c6: 63:07:41:d6:d1:0b:c7:90:2d:ca:3f:e4:da:c9:47: 1c:15:2f:8d:14:aa:39:fc:35:8f:29:fc:75:df:16: 1b:ac:85:b8:6f:ae:1a:3c:ca:53:ef:ab:02:94:d0: 2f:52:05:69:31:d2:14:86:e4:07:b9:67:84:73:e2: 10:63:35:03:2f:d7:c7:12:9f:a3:dd:31:87:20:34: a8:ca:9e:84:a3:47:d8:45:54:54:53:86:da:ba:83: d4:6d:6e:ba:ce:e2:e1:cc:7b:0e:e6:63:e4:6e:42: d0:47:24:eb:c1:e7:00:fe:43:df:35:94:ff:ce:5c: 87:e6:80:3c:64:d6:59:32:58:01:21:a8:34:4f:d5: 1b:63:3f:33:5e:3f:6d:7b:ba:82:3c:b7:cc:e0:2e: e7:70:0e:f7:c9:9d:3c:99:25:a8:28:4b:ea:d0:29: 89:ca:45:6f:a1:f1:86:ce:e4:bf:7f:b6:f4:6a:0b: d7:9c:38:39:d5:0e:08:4a:dd:ba:23:7d:46:07:a4: 7a:96:df:55:da:0e:f1:69:f2:b2:54:a0:6e:45:cf: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3E:B5:E0:B4:C1:BE:5C:45:8F:DC:42:48:B8:1E:4E:50:22:88:62 X509v3 Authority Key Identifier: keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b5:d0:0c:c1:1f:df:60:33:75:a6:17:05:95:39:ad:7a:d2: 4f:3c:65:85:88:98:de:86:d9:5e:39:f8:ff:cf:a9:60:35:94: 3b:d7:34:f0:d3:46:c7:9e:01:c8:bd:8b:48:cb:9e:f8:22:02: 0b:4c:d8:c5:6b:f4:50:52:59:dc:30:ba:91:ac:98:3e:f6:5c: dd:46:ff:70:06:d2:d9:a1:7c:4f:e9:32:d6:ec:47:db:3d:d5: 4b:73:eb:f2:01:7d:ac:7e:8c:ac:c0:83:be:17:27:a1:04:4d: b0:1e:4e:f7:b5:fa:4c:ee:f0:ed:ba:fd:72:3d:4c:d0:7a:77: f0:49:2d:fd:47:1a:c6:7c:a0:17:e0:ce:fa:de:12:4a:f5:9c: ba:fe:f4:48:f9:34:1b:27:9b:1b:ef:4c:76:e3:58:7f:8a:59: 54:bd:22:1f:bd:34:c7:1b:7e:24:c6:59:11:75:de:9a:d9:ec: 34:47:97:8d:9c:e1:dc:03:1b:9e:ee:25:5a:e6:a3:ac:36:d7: 73:3e:ef:68:b5:e6:f5:3c:44:0d:eb:80:02:fd:04:a6:43:cc: fc:40:4f:fa:ce:c9:2f:95:2c:06:73:31:05:f2:9b:56:30:96: 70:6a:30:72:39:d7:03:08:56:7d:66:ea:73:00:68:6f:ce:59: 1f:49:9c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2oJr5b4NcKXfCXBP24h1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOTRkYjBiODdmNmFlZWNjZTdmYjIyZmIxYjE0MjFkOTA2 YTYzNTAwHhcNMjUxMjIxMDMwMTA2WhcNMjUxMjIyMDMwMTA2WjAzMTEwLwYDVQQD EygwODNlYjVlMGI0YzFiZTVjNDU4ZmRjNDI0OGI4MWU0ZTUwMjI4ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZexb1/X5d6i134a14fzdUvaJFqP GBV8drNwX0WBlS1K0pyV42SceDjW+MZjB0HW0QvHkC3KP+TayUccFS+NFKo5/DWP Kfx13xYbrIW4b64aPMpT76sClNAvUgVpMdIUhuQHuWeEc+IQYzUDL9fHEp+j3TGH IDSoyp6Eo0fYRVRUU4bauoPUbW66zuLhzHsO5mPkbkLQRyTrwecA/kPfNZT/zlyH 5oA8ZNZZMlgBIag0T9UbYz8zXj9te7qCPLfM4C7ncA73yZ08mSWoKEvq0CmJykVv ofGGzuS/f7b0agvXnDg51Q4ISt26I31GB6R6lt9V2g7xafKyVKBuRc+IjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg+teC0wb5cRY/cQki4Hk5QIohiMB8GA1UdIwQY MBaAFGKU2wuH9q7szn+yL7GxQh2QamNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81M2QxYTUtOWM2MS00ZmYyLWIyMWIt NzBjOTUyMDlmZTg5LzEvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81M2QxYTUtOWM2MS00ZmYyLWIyMWItNzBjOTUyMDlmZTg5 LzEvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrXQDMEf 32AzdaYXBZU5rXrSTzxlhYiY3obZXjn4/8+pYDWUO9c08NNGx54ByL2LSMue+CIC C0zYxWv0UFJZ3DC6kayYPvZc3Ub/cAbS2aF8T+ky1uxH2z3VS3Pr8gF9rH6MrMCD vhcnoQRNsB5O97X6TO7w7br9cj1M0Hp38Ekt/UcaxnygF+DO+t4SSvWcuv70SPk0 GyebG+9MduNYf4pZVL0iH700xxt+JMZZEXXemtnsNEeXjZzh3AMbnu4lWuajrDbX cz7vaLXm9TxEDeuAAv0EpkPM/EBP+s7JL5UsBnMxBfKbVjCWcGowcjnXAwhWfWbq cwBob85ZH0mcRw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:29 2025 by rpki-client