This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json) Hash identifier: SZi1TOR+lRNnlBVgMIHPA1DUAexIQU10wHIWPi/Engk= Subject key identifier: 72:FA:D5:D7:E2:2A:10:14:CB:61:05:65:C0:20:DC:1A:DC:05:EF:54 Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c Certificate serial: 019B3C7EF6281DE678E44B03921F354BAA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 16:01:52 +0000 Manifest this update: Sat 20 Dec 2025 16:01:52 +0000 Manifest next update: Sun 21 Dec 2025 16:01:52 +0000 Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: hkkDAyATwrXWxNbMAHU5mC9tG/A6521oJjv9AIRMkRQ=) 2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f6:28:1d:e6:78:e4:4b:03:92:1f:35:4b:aa:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c Validity Not Before: Dec 20 16:01:52 2025 GMT Not After : Dec 21 16:01:52 2025 GMT Subject: CN=72fad5d7e22a1014cb610565c020dc1adc05ef54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:ab:6b:2a:61:b9:39:9c:f4:36:e3:90:e0: 3f:56:8b:24:33:01:0d:09:47:6c:74:0d:1a:23:05: 1f:b9:4b:f4:6d:b0:11:f4:65:8a:6f:6e:31:d0:5f: 9d:96:14:f7:31:ad:c1:fb:0d:ea:b9:fe:10:a8:b6: 21:0a:fb:26:77:bf:ed:3c:4c:e1:7d:d0:62:f6:23: e7:e6:18:b5:a7:9c:24:83:92:11:73:27:8d:78:c1: 47:9d:c1:2b:3d:27:63:99:ea:27:43:e9:66:61:da: 5f:65:f2:e8:a2:08:b1:38:c1:f5:e7:bc:1e:23:d8: 66:80:f1:7f:77:cc:a7:19:3e:ba:0c:7e:1f:e5:76: b7:83:16:73:c1:63:0f:e5:07:6f:57:f6:a8:d6:26: 1e:c0:4c:30:a8:76:63:10:55:b7:cf:b0:47:6c:98: d8:25:97:f3:d6:3d:73:e0:71:15:fc:c8:97:f5:3a: 17:31:bd:04:9e:6e:a5:8b:79:be:fd:8a:6e:b4:f5: f7:8a:9e:64:13:8c:78:bf:bf:b0:8e:6d:07:9a:d8: 14:d1:6b:ff:0b:62:dd:a4:49:6f:e7:df:00:bb:ab: 94:19:d6:b3:3b:be:ee:9c:5f:6c:bc:40:fe:91:6f: f8:4b:21:73:65:d1:0b:d1:59:8d:47:86:e5:e9:4a: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FA:D5:D7:E2:2A:10:14:CB:61:05:65:C0:20:DC:1A:DC:05:EF:54 X509v3 Authority Key Identifier: keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:70:8a:77:a4:93:74:54:96:cb:62:a9:61:1d:bd:eb:62:02: ec:b8:86:61:0e:80:2a:fc:95:12:7a:30:47:b6:28:ef:32:56: 8c:bd:c7:8e:40:d0:b4:83:5e:84:c8:b2:df:5a:f6:82:c5:ee: fd:d6:58:1c:19:2c:c6:94:7f:ae:24:a4:42:da:c3:c7:96:7c: a3:b2:24:77:c3:58:05:4c:b4:34:d7:5f:8a:21:88:70:27:60: fc:f0:a0:bc:e5:27:7d:02:3b:2c:0f:73:90:25:f6:6d:12:47: b2:28:90:d1:f3:31:61:9b:7b:0c:9b:37:d5:20:77:eb:8d:de: 2f:64:cf:93:6f:d9:ef:7e:17:9b:bf:d5:fc:6c:a1:0f:a8:bf: e7:33:07:9d:c7:88:51:08:67:04:99:23:7d:02:4d:2e:51:f1: 68:f5:2b:a3:d0:e7:a6:f8:42:ed:17:33:63:e7:d2:be:f1:5c: a1:bd:e6:b7:47:5c:55:34:16:52:2c:94:4f:0d:5d:56:99:2c: 34:38:59:08:45:39:6e:30:08:34:25:19:d7:3d:3c:6a:0b:ed: 5f:d6:cd:c6:ef:eb:de:88:61:ff:e0:aa:0d:58:01:63:34:7a: ce:38:54:df:d9:02:aa:c0:cd:3d:69:19:ba:ac:67:b8:de:e0: 89:1d:c3:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvYoHeZ45EsDkh81S6oCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5YzEyNmI4MmY3N2NjNjNiNWE2YjZjZDhiZGFlNmUw ZjVhM2MwHhcNMjUxMjIwMTYwMTUyWhcNMjUxMjIxMTYwMTUyWjAzMTEwLwYDVQQD Eyg3MmZhZDVkN2UyMmExMDE0Y2I2MTA1NjVjMDIwZGMxYWRjMDVlZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMOrayphuTmc9DbjkOA/VoskMwEN CUdsdA0aIwUfuUv0bbAR9GWKb24x0F+dlhT3Ma3B+w3quf4QqLYhCvsmd7/tPEzh fdBi9iPn5hi1p5wkg5IRcyeNeMFHncErPSdjmeonQ+lmYdpfZfLoogixOMH157we I9hmgPF/d8ynGT66DH4f5Xa3gxZzwWMP5QdvV/ao1iYewEwwqHZjEFW3z7BHbJjY JZfz1j1z4HEV/MiX9ToXMb0Enm6li3m+/YputPX3ip5kE4x4v7+wjm0HmtgU0Wv/ C2LdpElv598Au6uUGdazO77unF9svED+kW/4SyFzZdEL0VmNR4bl6UqFEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHL61dfiKhAUy2EFZcAg3BrcBe9UMB8GA1UdIwQY MBaAFMrXnBJrgvd8xjtaa2zYva5uD1o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2Mt NGNhNDQ4MDJiNTYzLzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2MtNGNhNDQ4MDJiNTYz LzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXCKd6ST dFSWy2KpYR2962IC7LiGYQ6AKvyVEnowR7Yo7zJWjL3HjkDQtINehMiy31r2gsXu /dZYHBksxpR/riSkQtrDx5Z8o7Ikd8NYBUy0NNdfiiGIcCdg/PCgvOUnfQI7LA9z kCX2bRJHsiiQ0fMxYZt7DJs31SB3643eL2TPk2/Z734Xm7/V/GyhD6i/5zMHnceI UQhnBJkjfQJNLlHxaPUro9DnpvhC7RczY+fSvvFcob3mt0dcVTQWUiyUTw1dVpks NDhZCEU5bjAINCUZ1z08agvtX9bNxu/r3ohh/+CqDVgBYzR6zjhU39kCqsDNPWkZ uqxnuN7giR3D4A== -----END CERTIFICATE-----Generated at Sun Dec 21 01:13:23 2025 by rpki-client