This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft File: YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json) Hash identifier: T8DYToRHwCpXRK1ebQ1c5qfxY1CIY0gHzWjit6zXsDU= Subject key identifier: A9:07:DA:D5:3B:73:B1:11:C8:FA:58:F0:86:45:85:C9:72:F2:AF:AB Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7 Certificate issuer: /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7 Certificate serial: 019B7E271CF1B29A73104DEEC7B0DB34AF6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft Manifest number: 17A9 Signing time: Fri 02 Jan 2026 10:00:51 +0000 Manifest this update: Fri 02 Jan 2026 10:00:51 +0000 Manifest next update: Sat 03 Jan 2026 10:00:51 +0000 Files and hashes: 1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: Aupg7B6lJtnqycceAyj4mVfqGc6vC8rBNhWYcrpvbRs=) 2: zdnYCkiNuOv7XI-YYcTI782K0s4.roa (hash: K34FiGl2KBdBAOAH0emFvCcnnIpkLK1MVs53GxTVksQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:27:1c:f1:b2:9a:73:10:4d:ee:c7:b0:db:34:af:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7 Validity Not Before: Jan 2 10:00:51 2026 GMT Not After : Jan 3 10:00:51 2026 GMT Subject: CN=a907dad53b73b111c8fa58f0864585c972f2afab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:86:23:40:93:c2:23:0b:4a:65:38:62:e3: 00:a1:56:25:02:d8:de:04:59:f4:38:f1:25:e0:55: e3:02:e9:31:0f:cf:99:7d:32:0b:af:b5:89:06:6e: 2e:64:09:d8:58:54:c1:9d:0a:b8:71:30:92:94:72: 0f:4e:4d:56:32:63:f9:7a:1f:7e:d4:ff:fe:d6:57: 4f:47:44:c7:f4:6f:64:2f:8a:a5:60:27:59:5d:41: 4e:50:2d:c5:5b:5c:a9:72:d2:90:cb:59:71:20:60: b0:30:57:9d:eb:4b:94:b2:97:32:b3:59:61:57:8d: 05:32:99:69:b2:2e:98:6d:a5:95:ec:bc:36:8b:63: 17:f0:40:67:9f:98:9f:62:f6:ad:6d:d7:35:8b:df: 69:c4:b7:fe:f2:22:ce:db:1c:ce:e7:0a:6a:8a:f3: 6e:c5:3a:05:6e:c4:07:a2:b4:16:d7:1a:4c:b0:68: 94:de:d4:6e:94:0a:07:d5:72:12:11:81:60:3f:cd: bd:b1:f6:07:99:49:30:94:ec:43:60:9a:2c:a8:e5: 7f:66:e6:3e:3a:73:6d:e5:cc:88:0f:fb:c0:42:0a: 12:c7:f9:41:23:5c:75:91:7d:50:ce:c1:d3:bb:d2: 79:f8:8e:81:e9:0c:3e:74:78:df:d0:f8:be:37:c8: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:07:DA:D5:3B:73:B1:11:C8:FA:58:F0:86:45:85:C9:72:F2:AF:AB X509v3 Authority Key Identifier: keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:95:92:9d:3c:b7:ec:c5:39:b0:06:4a:e4:88:f3:41:ae:62: 7a:c3:2b:a0:05:38:a6:95:f7:da:7d:46:46:62:0f:f2:48:52: ea:4a:cf:5a:34:cd:f1:82:46:d2:87:15:59:97:39:15:51:07: a3:1a:02:a5:08:ec:c8:97:b2:62:3e:21:f9:b5:aa:7b:ad:c1: 2b:75:f1:94:61:7b:5e:a1:f9:bc:c6:66:02:bd:9d:f9:ab:01: 1a:95:50:ce:6d:d9:cc:f0:f1:be:54:c3:63:d0:de:02:b1:71: 82:e4:37:4e:07:86:71:43:c9:e9:cc:71:a9:12:5b:7b:ee:df: 43:0a:cd:73:48:11:d9:b2:76:18:4b:77:80:56:ac:09:69:85: 26:59:17:7e:c3:2f:35:70:55:58:b6:81:3c:e0:2d:4d:1e:70: b6:d0:45:17:08:10:a8:b1:31:15:d7:78:71:53:61:e5:97:05: 19:1f:22:9c:b1:89:2b:f4:68:2a:90:aa:a2:39:e3:ac:84:35: fb:2d:f7:ca:0e:9d:ef:93:f1:71:ed:c0:14:a4:dc:4c:82:2e: f3:04:e5:fa:71:7a:98:6b:21:2d:d5:a3:65:1f:b9:34:d6:13: 47:4e:46:47:d3:35:39:c8:20:73:cd:de:e9:f7:a4:40:a4:5c: 1e:28:d1:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+JxzxsppzEE3ux7DbNK9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNWZiYmRmYzkwMWU4ZWIwZWNkMGRkM2Y0MDg1YzEyODlj ZmVkZjcwHhcNMjYwMTAyMTAwMDUxWhcNMjYwMTAzMTAwMDUxWjAzMTEwLwYDVQQD EyhhOTA3ZGFkNTNiNzNiMTExYzhmYTU4ZjA4NjQ1ODVjOTcyZjJhZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7SGI0CTwiMLSmU4YuMAoVYlAtje BFn0OPEl4FXjAukxD8+ZfTILr7WJBm4uZAnYWFTBnQq4cTCSlHIPTk1WMmP5eh9+ 1P/+1ldPR0TH9G9kL4qlYCdZXUFOUC3FW1ypctKQy1lxIGCwMFed60uUspcys1lh V40FMplpsi6YbaWV7Lw2i2MX8EBnn5ifYvatbdc1i99pxLf+8iLO2xzO5wpqivNu xToFbsQHorQW1xpMsGiU3tRulAoH1XISEYFgP829sfYHmUkwlOxDYJosqOV/ZuY+ OnNt5cyID/vAQgoSx/lBI1x1kX1QzsHTu9J5+I6B6Qw+dHjf0Pi+N8j9nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkH2tU7c7ERyPpY8IZFhcly8q+rMB8GA1UdIwQY MBaAFGFfu9/JAejrDs0N0/QIXBKJz+33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83NGYzMTMtN2M5Mi00YzU0LTgzOGYt NzljNzIyYzU0ZTE5LzEvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy83NGYzMTMtN2M5Mi00YzU0LTgzOGYtNzljNzIyYzU0ZTE5 LzEvWVYtNzM4a0I2T3NPelEzVDlBaGNFb25QN2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJWSnTy3 7MU5sAZK5IjzQa5iesMroAU4ppX32n1GRmIP8khS6krPWjTN8YJG0ocVWZc5FVEH oxoCpQjsyJeyYj4h+bWqe63BK3XxlGF7XqH5vMZmAr2d+asBGpVQzm3ZzPDxvlTD Y9DeArFxguQ3TgeGcUPJ6cxxqRJbe+7fQwrNc0gR2bJ2GEt3gFasCWmFJlkXfsMv NXBVWLaBPOAtTR5wttBFFwgQqLExFdd4cVNh5ZcFGR8inLGJK/RoKpCqojnjrIQ1 +y33yg6d75Pxce3AFKTcTIIu8wTl+nF6mGshLdWjZR+5NNYTR05GR9M1Ocggc83e 6fekQKRcHijRpw== -----END CERTIFICATE-----Generated at Fri Jan 2 13:08:33 2026 by rpki-client