This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json) Hash identifier: p6lBYtjmWDRU+2ICBWMsjgveyxHDwuWp029VIxKCMDs= Subject key identifier: B4:54:18:8E:FC:0A:8E:56:16:8E:D6:2E:8E:E5:6B:C8:F2:3D:13:A2 Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455 Certificate serial: 019B292E70FD3CE052FD5E08291C71BBAE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft Manifest number: 0EB0 Signing time: Tue 16 Dec 2025 22:01:07 +0000 Manifest this update: Tue 16 Dec 2025 22:01:07 +0000 Manifest next update: Wed 17 Dec 2025 22:01:07 +0000 Files and hashes: 1: jXQtN0_lH1jMkgeFoBItsFqK9sA.roa (hash: CEWMWhf6Wo0twHsiVnqhdkBQ3a5xIOWXXq6UQo1OqpU=) 2: k4w-6jVNy-8iNTxThqtVK8dHfNM.roa (hash: i49dbw3SszheCL/rtxIrLH6ESMYCJl9JAeSfGhPrYzs=) 3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: Rc4TUnlz5HMFdRP5lVfdsXIn6jHnAUljf3Vu6eG1AoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:70:fd:3c:e0:52:fd:5e:08:29:1c:71:bb:ae:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455 Validity Not Before: Dec 16 22:01:07 2025 GMT Not After : Dec 17 22:01:07 2025 GMT Subject: CN=b454188efc0a8e56168ed62e8ee56bc8f23d13a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bf:3b:45:54:fe:ef:73:4b:9d:59:a9:e2:0c: e1:22:96:4c:12:36:1d:b9:45:27:e0:59:76:f8:ce: 97:1d:b2:1c:cd:5c:ba:6c:a8:d7:16:75:ed:04:ce: 75:5b:3d:c8:13:e0:e6:42:2c:ca:ae:16:0b:ee:4f: 45:e9:8a:7a:01:36:5c:04:88:c1:77:1a:94:24:64: 00:47:c1:32:4e:33:80:12:46:24:b1:3d:e2:9f:4c: 1c:9c:7b:3e:13:65:c4:5c:80:1c:46:21:f1:39:b5: c7:59:58:e2:e5:dd:15:00:ed:8c:a0:23:17:eb:9b: 2a:22:56:ac:d0:fc:a7:96:dd:f6:4a:53:cb:6c:66: 0e:9a:2f:e3:34:54:50:f5:4b:17:3e:92:61:00:96: 11:ba:91:48:33:08:80:9a:c1:3d:28:e0:47:87:f0: 97:5f:8b:dc:b9:33:8c:16:df:70:80:e9:30:a3:98: 69:ad:e4:5d:ea:9c:9b:4f:40:cc:3d:74:ba:dd:fc: 53:ee:aa:58:d1:cb:ee:a0:3d:06:ae:36:67:3a:16: 70:29:1c:c6:1d:de:2c:a3:63:e7:80:3f:07:99:0c: bb:f2:cb:58:21:0b:28:2a:d4:ca:9a:a6:53:93:7d: 6e:98:02:3c:cc:d1:50:a9:9a:43:6f:d5:e8:c1:8f: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:18:8E:FC:0A:8E:56:16:8E:D6:2E:8E:E5:6B:C8:F2:3D:13:A2 X509v3 Authority Key Identifier: keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4a:63:df:16:a1:81:07:38:06:ee:ba:5c:11:6d:e2:63:b3: bd:53:07:9f:ca:bb:4a:69:46:ac:7e:f2:50:db:23:13:f2:5e: 1a:3d:73:19:f5:01:af:bf:ed:be:1f:0b:8f:75:d3:09:a0:9c: 35:3f:a1:99:cf:71:62:90:3c:9e:9b:7c:6f:69:e3:15:e9:7a: 1e:a1:09:71:0d:5a:59:04:50:92:93:77:61:f4:6c:b1:85:b6: 87:62:90:e9:7d:d4:52:01:40:8b:6c:fc:cc:27:a4:73:72:8e: 52:f3:c9:fb:98:b7:d3:0c:67:bb:11:b6:94:c3:40:c3:60:ce: 1c:65:ab:85:37:5c:36:d4:7f:65:6e:1a:cb:7b:0b:c0:1d:6d: e8:3d:d0:f3:e3:4e:b2:c8:77:5d:bc:d6:ff:6e:1a:29:ab:8c: b2:bf:92:9b:3f:27:1c:83:8a:af:8c:f1:1c:e2:82:26:b1:0f: b4:6d:a2:26:46:62:ab:cc:6f:e0:7c:5a:35:87:07:75:65:17: 83:72:99:90:64:42:75:83:30:e1:d5:8e:bf:93:b2:3e:bb:1f: 25:c2:52:34:38:a0:f1:8b:6e:6b:6e:88:bc:b0:2a:14:28:56: 72:bd:31:1d:ef:09:78:54:52:c0:1f:fe:c7:d5:e6:bb:34:07: f4:a5:b8:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLnD9POBS/V4IKRxxu65EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy N2I0NTUwHhcNMjUxMjE2MjIwMTA3WhcNMjUxMjE3MjIwMTA3WjAzMTEwLwYDVQQD EyhiNDU0MTg4ZWZjMGE4ZTU2MTY4ZWQ2MmU4ZWU1NmJjOGYyM2QxM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b87RVT+73NLnVmp4gzhIpZMEjYd uUUn4Fl2+M6XHbIczVy6bKjXFnXtBM51Wz3IE+DmQizKrhYL7k9F6Yp6ATZcBIjB dxqUJGQAR8EyTjOAEkYksT3in0wcnHs+E2XEXIAcRiHxObXHWVji5d0VAO2MoCMX 65sqIlas0Pynlt32SlPLbGYOmi/jNFRQ9UsXPpJhAJYRupFIMwiAmsE9KOBHh/CX X4vcuTOMFt9wgOkwo5hpreRd6pybT0DMPXS63fxT7qpY0cvuoD0GrjZnOhZwKRzG Hd4so2PngD8HmQy78stYIQsoKtTKmqZTk31umAI8zNFQqZpDb9XowY/3kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRUGI78Co5WFo7WLo7la8jyPROiMB8GA1UdIwQY MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt NTU5MjM2MGUzZThlLzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUpj3xah gQc4Bu66XBFt4mOzvVMHn8q7SmlGrH7yUNsjE/JeGj1zGfUBr7/tvh8Lj3XTCaCc NT+hmc9xYpA8npt8b2njFel6HqEJcQ1aWQRQkpN3YfRssYW2h2KQ6X3UUgFAi2z8 zCekc3KOUvPJ+5i30wxnuxG2lMNAw2DOHGWrhTdcNtR/ZW4ay3sLwB1t6D3Q8+NO ssh3XbzW/24aKauMsr+Smz8nHIOKr4zxHOKCJrEPtG2iJkZiq8xv4HxaNYcHdWUX g3KZkGRCdYMw4dWOv5OyPrsfJcJSNDig8Ytua26IvLAqFChWcr0xHe8JeFRSwB/+ x9XmuzQH9KW4EA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:20:02 2025 by rpki-client