This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json) Hash identifier: 4BzNZGHszfHwjteOOJMg3d4CtJJvxKRmdZzWuqMxa6M= Subject key identifier: 9D:0F:6C:E1:42:55:08:B9:1C:59:F2:0F:40:4B:1E:79:95:71:2C:0D Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af Certificate serial: 019B405AFB1742F3396D60DC1C1675A2D969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft Manifest number: 052F Signing time: Sun 21 Dec 2025 10:01:02 +0000 Manifest this update: Sun 21 Dec 2025 10:01:02 +0000 Manifest next update: Mon 22 Dec 2025 10:01:02 +0000 Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: bFeUxf1D3YqpFUQ9tA6cYdcNmEzIqpIZF3ewZUXCD98=) 2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:fb:17:42:f3:39:6d:60:dc:1c:16:75:a2:d9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af Validity Not Before: Dec 21 10:01:02 2025 GMT Not After : Dec 22 10:01:02 2025 GMT Subject: CN=9d0f6ce1425508b91c59f20f404b1e7995712c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:57:14:d7:82:1d:ff:29:ac:39:0b:26:32: 89:2e:00:b7:75:e3:4d:b7:97:67:00:d7:75:9d:d1: d0:5d:aa:17:59:20:52:fa:ec:e6:c8:bd:d3:bf:92: 18:19:97:78:82:5b:bc:c6:89:1e:b5:28:0f:ac:a4: bb:a5:09:fc:f6:50:c0:9d:3a:f8:d6:f7:87:f7:ef: 58:b7:3f:ef:a4:1a:74:bc:a6:d1:ec:b9:b4:70:0e: e0:cc:ae:3a:e5:ab:4b:62:a7:12:45:ac:f9:0c:43: ac:77:16:43:71:a9:a9:c6:06:d5:4f:ab:ab:09:c5: 85:b4:d1:c5:d3:1f:85:a0:63:ca:06:2a:d2:bb:88: f6:0c:6d:61:07:b8:1b:58:4e:f5:e3:5f:cc:7a:93: 8a:3e:f4:86:3e:e3:fb:4b:ec:8b:41:19:fb:16:3f: f2:82:97:06:14:48:34:be:61:d2:25:66:69:9a:37: db:7d:cc:6e:39:62:72:76:0b:11:94:e7:fc:f4:d9: 10:8d:7c:85:f3:ce:91:f2:32:3e:b9:c1:57:92:9f: 7c:59:27:1e:c0:ae:cb:92:ad:e3:3f:8e:7c:a0:e1: 99:ae:02:10:2b:0c:cc:5c:97:27:ce:68:0f:0a:2b: 27:1a:09:31:7e:eb:a5:07:db:1f:39:9d:9b:1a:86: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0F:6C:E1:42:55:08:B9:1C:59:F2:0F:40:4B:1E:79:95:71:2C:0D X509v3 Authority Key Identifier: keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cc:3a:69:bb:a8:53:35:1f:8e:80:45:33:81:e9:29:f5:36: ca:13:77:70:0a:b4:00:68:11:c6:36:c9:1b:f8:61:90:01:f5: 7f:32:e6:be:0e:f4:f9:54:52:fc:a8:c6:be:ca:eb:d1:30:66: ea:e3:69:60:71:ad:1e:0f:cd:6d:06:28:bf:bb:3f:9e:de:83: c4:7d:4c:10:de:27:77:12:c2:04:26:29:3a:5f:67:50:6b:e7: 76:02:4d:9d:89:10:c5:39:f6:ab:c5:6c:22:92:8f:ca:3c:87: fc:5c:dc:7f:67:c7:0d:0d:e8:96:d8:62:d4:c5:dc:20:af:88: 9e:39:72:05:9e:4f:12:48:87:16:44:f3:25:61:8c:92:ef:55: a7:8f:3f:8a:0a:a1:ea:a6:08:bf:59:b5:42:91:d7:41:7b:bc: cd:1b:2a:47:22:4a:38:c9:af:45:c2:7f:8e:95:15:7a:d8:0f: c5:21:69:47:ce:69:ab:7a:dc:41:1f:90:3f:84:02:80:cd:fa: 0e:d1:9d:3a:11:5b:39:35:9f:69:1d:44:f2:f8:3a:1b:17:85: 45:4a:cb:fd:10:e0:e7:79:d3:ac:33:ef:e6:91:43:a5:27:9d: e0:3a:34:93:3c:cc:3a:59:fc:49:75:79:5f:14:e6:61:91:c2: 17:e2:57:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWvsXQvM5bWDcHBZ1otlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw MDkwYWYwHhcNMjUxMjIxMTAwMTAyWhcNMjUxMjIyMTAwMTAyWjAzMTEwLwYDVQQD Eyg5ZDBmNmNlMTQyNTUwOGI5MWM1OWYyMGY0MDRiMWU3OTk1NzEyYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNpXFNeCHf8prDkLJjKJLgC3deNN t5dnANd1ndHQXaoXWSBS+uzmyL3Tv5IYGZd4glu8xoketSgPrKS7pQn89lDAnTr4 1veH9+9Ytz/vpBp0vKbR7Lm0cA7gzK465atLYqcSRaz5DEOsdxZDcampxgbVT6ur CcWFtNHF0x+FoGPKBirSu4j2DG1hB7gbWE7141/MepOKPvSGPuP7S+yLQRn7Fj/y gpcGFEg0vmHSJWZpmjfbfcxuOWJydgsRlOf89NkQjXyF886R8jI+ucFXkp98WSce wK7Lkq3jP458oOGZrgIQKwzMXJcnzmgPCisnGgkxfuulB9sfOZ2bGobkvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0PbOFCVQi5HFnyD0BLHnmVcSwNMB8GA1UdIwQY MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsw6abuo UzUfjoBFM4HpKfU2yhN3cAq0AGgRxjbJG/hhkAH1fzLmvg70+VRS/KjGvsrr0TBm 6uNpYHGtHg/NbQYov7s/nt6DxH1MEN4ndxLCBCYpOl9nUGvndgJNnYkQxTn2q8Vs IpKPyjyH/Fzcf2fHDQ3olthi1MXcIK+InjlyBZ5PEkiHFkTzJWGMku9Vp48/igqh 6qYIv1m1QpHXQXu8zRsqRyJKOMmvRcJ/jpUVetgPxSFpR85pq3rcQR+QP4QCgM36 DtGdOhFbOTWfaR1E8vg6GxeFRUrL/RDg53nTrDPv5pFDpSed4Do0kzzMOln8SXV5 XxTmYZHCF+JXeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:37:45 2025 by rpki-client