This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft File: YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json) Hash identifier: JZDSTUs1YPg4yzydTPOejYCRivTtKNEcWEkzRbKsRhA= Subject key identifier: 1F:AC:04:00:AD:DF:69:EA:E3:E6:9B:C9:23:4B:A5:56:71:D9:09:FA Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A Certificate issuer: /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Certificate serial: 019B41DB957304086B68D547E4C981CA7AB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft Manifest number: 0758 Signing time: Sun 21 Dec 2025 17:01:08 +0000 Manifest this update: Sun 21 Dec 2025 17:01:08 +0000 Manifest next update: Mon 22 Dec 2025 17:01:08 +0000 Files and hashes: 1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: JRekdDpp1a/jRjmuJUvGCmO1eARb8Hxbk+WpG9iKdWE=) 2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:95:73:04:08:6b:68:d5:47:e4:c9:81:ca:7a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Validity Not Before: Dec 21 17:01:08 2025 GMT Not After : Dec 22 17:01:08 2025 GMT Subject: CN=1fac0400addf69eae3e69bc9234ba55671d909fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:63:01:e1:a5:2b:b9:93:3f:c6:ea:96:60: c9:19:98:98:f4:58:43:80:50:7c:be:b0:83:23:c8: 16:51:0f:a0:60:e8:35:a0:3e:d9:0c:44:42:5b:8d: 80:39:91:83:b6:80:c5:e6:dd:06:66:a8:2e:20:e4: 2c:6d:5e:f9:49:cd:eb:02:68:65:e7:61:25:a4:03: d7:1e:ea:dd:35:7c:87:bf:6b:39:a3:5d:46:31:60: 91:66:5c:51:6c:3b:d6:5d:c5:44:b8:48:90:db:be: 43:ea:b2:f0:c2:c7:aa:8d:52:6e:d9:93:f1:b0:19: ac:54:2f:6b:cf:ec:59:fd:a0:ff:b9:5a:9a:81:0b: 4b:75:fa:30:a2:81:dd:68:d6:f8:80:e4:f9:4b:bd: 33:34:00:ff:51:38:37:28:d3:28:8f:ee:07:a2:c6: ed:63:51:1c:74:dd:34:51:d9:8d:17:1c:43:c5:c7: 1b:62:3f:6e:ed:fc:f7:c3:81:98:f0:a1:16:4e:5c: ad:db:c3:8a:6f:54:a3:e9:98:dc:d0:0a:b6:a9:02: 1d:a8:26:e6:d1:3c:a0:5b:8a:a4:f1:9d:8e:19:44: 0a:ca:cf:1a:e1:00:75:3e:98:b6:3f:e2:00:2d:25: 8a:41:95:52:da:01:d4:8d:df:ed:45:e8:9f:e0:67: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:04:00:AD:DF:69:EA:E3:E6:9B:C9:23:4B:A5:56:71:D9:09:FA X509v3 Authority Key Identifier: keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:11:d1:4d:ce:81:6e:85:97:14:3b:ed:e6:0f:f8:83:f1:c5: 86:2f:a8:98:23:98:0a:e9:9c:f3:54:53:fb:d0:ce:1f:0f:a2: 7d:4a:7f:94:bb:80:2b:0d:b1:fb:4d:22:49:9b:44:f1:0d:94: 7e:1e:57:ec:3c:da:f0:be:4f:23:b3:2c:af:3f:39:fb:1f:c0: 6e:f7:8f:93:b8:fe:71:de:ac:b4:87:15:c7:2a:c4:f3:4f:71: 60:a7:79:2e:de:b2:07:b3:b8:46:15:bc:1f:02:9f:cc:99:0d: f0:ba:5d:23:5f:0a:cf:7e:85:0e:ad:a2:bb:09:8f:07:e0:96: ec:d4:5b:d4:5f:dd:58:45:6a:df:24:75:78:9e:fe:30:3c:e2: d9:f3:26:8c:b1:40:29:5a:2c:62:11:2f:d4:c6:41:7c:64:73: 4a:96:55:7a:f2:2f:6d:27:9a:38:3f:de:c8:09:82:25:46:c4: 66:b3:64:70:5e:b8:35:ae:44:c3:db:06:e8:3b:dd:6c:3a:8f: d4:8c:ca:a2:d4:db:7e:2c:51:02:6f:e9:e1:27:9c:c8:f3:9a: b1:dc:ba:db:f7:4c:7f:44:2c:d6:5a:9a:84:45:e6:36:f2:ba: f6:b2:d6:69:f3:1d:8b:84:71:7f:31:d5:68:d0:2b:79:e3:2e: b9:72:3e:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25VzBAhraNVH5MmBynqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTg4ZmZlNmYwZGU1ZjJmMWZjOWQxNGVmNjJmMjU2NzBi ZDViNGEwHhcNMjUxMjIxMTcwMTA4WhcNMjUxMjIyMTcwMTA4WjAzMTEwLwYDVQQD EygxZmFjMDQwMGFkZGY2OWVhZTNlNjliYzkyMzRiYTU1NjcxZDkwOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg1jAeGlK7mTP8bqlmDJGZiY9FhD gFB8vrCDI8gWUQ+gYOg1oD7ZDERCW42AOZGDtoDF5t0GZqguIOQsbV75Sc3rAmhl 52ElpAPXHurdNXyHv2s5o11GMWCRZlxRbDvWXcVEuEiQ275D6rLwwseqjVJu2ZPx sBmsVC9rz+xZ/aD/uVqagQtLdfowooHdaNb4gOT5S70zNAD/UTg3KNMoj+4Hosbt Y1EcdN00UdmNFxxDxccbYj9u7fz3w4GY8KEWTlyt28OKb1Sj6Zjc0Aq2qQIdqCbm 0TygW4qk8Z2OGUQKys8a4QB1Ppi2P+IALSWKQZVS2gHUjd/tReif4GcGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+sBACt32nq4+abySNLpVZx2Qn6MB8GA1UdIwQY MBaAFGDoj/5vDeXy8fydFO9i8lZwvVtKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEt MDcyNWYwNjk3YjgzLzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEtMDcyNWYwNjk3Yjgz LzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxHRTc6B boWXFDvt5g/4g/HFhi+omCOYCumc81RT+9DOHw+ifUp/lLuAKw2x+00iSZtE8Q2U fh5X7Dza8L5PI7Msrz85+x/AbvePk7j+cd6stIcVxyrE809xYKd5Lt6yB7O4RhW8 HwKfzJkN8LpdI18Kz36FDq2iuwmPB+CW7NRb1F/dWEVq3yR1eJ7+MDzi2fMmjLFA KVosYhEv1MZBfGRzSpZVevIvbSeaOD/eyAmCJUbEZrNkcF64Na5Ew9sG6DvdbDqP 1IzKotTbfixRAm/p4SecyPOasdy62/dMf0Qs1lqahEXmNvK69rLWafMdi4RxfzHV aNAreeMuuXI+uA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:31:25 2025 by rpki-client