This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json) Hash identifier: l89gYeqvTXtVDgTuDjyMzONHOepRU9nz5SbSSPZ0hPM= Subject key identifier: 06:73:C0:94:4F:E7:1F:82:0F:C8:9B:66:B5:1B:D4:47:1D:A8:24:FC Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b Certificate serial: 019B31FAD1AC6274E938CD1587033B356C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 15:01:19 +0000 Manifest this update: Thu 18 Dec 2025 15:01:19 +0000 Manifest next update: Fri 19 Dec 2025 15:01:19 +0000 Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=) 2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: Ga3BqLMk6/i3KPTUrHLe6lf93TeZdepvIZPBV/w0Nuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:d1:ac:62:74:e9:38:cd:15:87:03:3b:35:6c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca06ff246df411643d9de3669818112f3362283b Validity Not Before: Dec 18 15:01:19 2025 GMT Not After : Dec 19 15:01:19 2025 GMT Subject: CN=0673c0944fe71f820fc89b66b51bd4471da824fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:a1:28:6a:d3:6f:35:85:66:39:7d:7e:b6: 07:ff:63:68:31:41:06:6b:82:b2:14:3f:ca:3a:73: ec:2c:cc:93:c6:4d:75:ef:61:6b:ee:dc:55:7c:c3: 74:c0:80:aa:8b:9c:fe:a0:da:6f:5c:6e:3f:dd:bd: 52:ad:43:c6:06:62:de:16:f3:6c:76:44:e5:84:b7: 09:95:bd:e3:d5:20:73:b8:91:f1:dc:59:89:e3:13: 39:94:12:ad:0a:88:cb:1f:92:07:17:97:81:db:22: d7:57:bb:0c:72:d5:9b:53:3c:18:97:e4:1f:42:b5: 12:06:4f:ee:5c:49:b9:dd:4f:fb:be:40:a8:af:92: 09:2e:3c:1b:0f:d1:08:7c:91:2a:6e:2d:90:7d:ce: 91:9c:5e:cb:0f:78:98:8e:77:14:f6:5a:1f:32:6a: b3:d9:c5:1d:1f:3d:b3:d7:54:b7:4c:6f:20:bb:e3: d9:9c:b3:53:c4:8b:5e:12:ed:8a:4c:4e:75:df:99: aa:c8:9c:e8:db:92:d3:e1:e6:20:e7:ca:d9:94:a0: 7f:a9:01:c3:68:81:ac:fc:ed:cb:b5:15:6a:4d:2f: d4:b2:44:1a:b6:b7:a6:d3:b2:5f:64:84:de:89:9f: ee:8e:1a:97:c5:51:c6:97:c0:e3:4e:0b:c4:3b:b4: 03:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:73:C0:94:4F:E7:1F:82:0F:C8:9B:66:B5:1B:D4:47:1D:A8:24:FC X509v3 Authority Key Identifier: keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:4b:ca:54:4a:84:25:b7:39:35:91:19:8f:67:91:b1:65:72: f2:e3:9c:5b:08:9a:34:c2:07:50:76:6e:f1:e6:04:4d:77:e0: 51:3a:49:9a:d2:17:29:01:2b:41:34:78:ac:40:58:45:3a:1b: 5b:60:47:eb:57:2a:a4:a4:5b:ae:78:e3:9b:4e:13:cc:b8:23: ee:03:71:c2:9e:67:47:ab:c6:f2:d6:00:e1:47:91:f0:c7:a7: 8c:00:3c:2d:63:d4:33:02:50:f1:49:de:dd:a0:b7:84:b6:09: 39:76:12:12:71:ae:3f:7e:c8:7b:6c:58:ea:4f:f8:64:32:49: 80:4d:92:0c:e3:f1:ea:52:41:bd:55:ca:6e:0e:e8:f9:85:1e: 2a:e3:cf:b6:2c:5a:b9:15:c3:e7:a1:b0:25:ec:91:e2:e7:5b: bf:fd:4b:32:3a:f0:1a:5e:6b:5b:b7:77:64:21:30:3e:1d:e1: 3f:96:87:09:68:6e:6e:4c:14:e7:78:25:19:48:45:07:60:74: 52:0c:ad:ec:26:ae:a1:7c:34:a9:45:99:a7:68:ae:45:c8:45: 65:d4:9a:4e:68:c7:73:cc:07:c2:b3:76:89:3b:cc:e0:85:44: 4b:e4:79:a8:c4:16:e1:af:ac:0e:e0:46:7e:46:6e:44:e6:3a: 16:fe:4d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+tGsYnTpOM0VhwM7NWxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDZmZjI0NmRmNDExNjQzZDlkZTM2Njk4MTgxMTJmMzM2 MjI4M2IwHhcNMjUxMjE4MTUwMTE5WhcNMjUxMjE5MTUwMTE5WjAzMTEwLwYDVQQD EygwNjczYzA5NDRmZTcxZjgyMGZjODliNjZiNTFiZDQ0NzFkYTgyNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hOhKGrTbzWFZjl9frYH/2NoMUEG a4KyFD/KOnPsLMyTxk1172Fr7txVfMN0wICqi5z+oNpvXG4/3b1SrUPGBmLeFvNs dkTlhLcJlb3j1SBzuJHx3FmJ4xM5lBKtCojLH5IHF5eB2yLXV7sMctWbUzwYl+Qf QrUSBk/uXEm53U/7vkCor5IJLjwbD9EIfJEqbi2Qfc6RnF7LD3iYjncU9lofMmqz 2cUdHz2z11S3TG8gu+PZnLNTxIteEu2KTE5135mqyJzo25LT4eYg58rZlKB/qQHD aIGs/O3LtRVqTS/UskQatrem07JfZITeiZ/ujhqXxVHGl8DjTgvEO7QDJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZzwJRP5x+CD8ibZrUb1EcdqCT8MB8GA1UdIwQY MBaAFMoG/yRt9BFkPZ3jZpgYES8zYig7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzct MWM0M2Q0YzI3ZDZjLzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzctMWM0M2Q0YzI3ZDZj LzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kvKVEqE Jbc5NZEZj2eRsWVy8uOcWwiaNMIHUHZu8eYETXfgUTpJmtIXKQErQTR4rEBYRTob W2BH61cqpKRbrnjjm04TzLgj7gNxwp5nR6vG8tYA4UeR8MenjAA8LWPUMwJQ8Une 3aC3hLYJOXYSEnGuP37Ie2xY6k/4ZDJJgE2SDOPx6lJBvVXKbg7o+YUeKuPPtixa uRXD56GwJeyR4udbv/1LMjrwGl5rW7d3ZCEwPh3hP5aHCWhubkwU53glGUhFB2B0 Ugyt7CauoXw0qUWZp2iuRchFZdSaTmjHc8wHwrN2iTvM4IVES+R5qMQW4a+sDuBG fkZuROY6Fv5N0A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:46 2025 by rpki-client