This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json) Hash identifier: dbhO1XGqwvRN8S+a51bvS99QD2oQs6dyo869aRKwsCw= Subject key identifier: 62:A1:61:BC:10:CE:88:CD:6B:31:7C:B1:5C:4F:BC:EA:FC:B6:73:3A Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523 Certificate serial: 019AF38969D724500CD170B5829E961B473B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft Manifest number: 1637 Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: 0TtFz6wVP0jqaQNw01V55drmS3k.roa (hash: TMVD5m2P0IJi74IF8JJhCFdWfhDxP8MQCO9QQGNNZr4=) 2: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: NBIgTa+z5F/Wh5TfrV71XO8HojIiNOm10A2xKwO988Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:69:d7:24:50:0c:d1:70:b5:82:9e:96:1b:47:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523 Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=62a161bc10ce88cd6b317cb15c4fbceafcb6733a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:67:31:f4:e3:c8:14:28:3a:42:9a:45:c7: e9:51:90:cf:a3:a6:86:4d:be:38:cb:a5:59:3e:39: 90:91:a9:a4:04:91:da:67:55:ce:0e:db:60:d9:ed: e2:7f:f0:14:67:1a:3b:13:39:87:db:fa:68:66:d4: 53:15:27:92:06:48:a4:fd:93:66:68:4b:47:2e:fc: c0:42:41:c6:1a:c1:4e:b8:55:c8:21:4e:30:65:29: f2:0d:1f:eb:3a:96:f5:da:24:2e:aa:5f:92:98:2b: a6:13:e2:73:a2:4a:3d:34:12:e9:45:6f:43:5c:51: 6c:0e:e6:c3:71:2b:f9:64:12:5b:b8:19:ad:51:6e: fa:96:1d:3f:06:80:4f:1a:5b:95:fb:91:10:02:9b: 5b:ac:f2:09:a3:ed:3a:7a:c8:8b:1f:70:8b:78:6c: 97:71:12:4e:a8:39:9e:55:6e:b1:2b:df:cb:4e:02: 48:f1:3f:57:53:56:f7:85:b4:93:d0:c8:34:84:36: f8:46:e6:a6:d1:69:34:be:5b:73:3d:ec:e1:c1:dc: 50:d1:b9:05:c6:46:5f:2d:ca:57:69:49:59:85:31: bc:4a:4e:f3:74:69:86:b6:af:53:67:60:d1:96:c5: c7:8c:5f:0e:45:d7:ec:17:ba:38:98:cf:90:34:5f: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A1:61:BC:10:CE:88:CD:6B:31:7C:B1:5C:4F:BC:EA:FC:B6:73:3A X509v3 Authority Key Identifier: keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fa:8a:c4:79:59:77:e8:1b:5a:de:0a:d1:69:0f:96:8f:c6: e6:c6:5b:c3:da:50:03:86:d9:03:c9:a9:76:5b:49:03:8a:e9: 13:26:cd:06:aa:51:7d:a4:b4:2a:57:72:c2:78:e0:9d:b3:52: fa:0e:9e:13:e4:6f:df:ff:3a:c9:66:0b:7e:3d:72:4c:a4:00: a8:4a:62:6d:7e:43:d9:fd:80:a6:d8:37:82:4d:b7:10:db:f4: 67:a6:a5:43:d1:ad:4b:53:55:34:b3:7f:5b:2a:58:87:9e:f3: 97:da:b8:1b:56:00:7a:8a:6e:70:ce:43:5d:b3:59:5d:9b:9c: 30:ca:c2:29:8e:61:3d:c9:df:dc:6b:cd:32:a8:43:7c:97:c9: e2:c0:00:68:bf:a9:12:43:b8:5f:5b:30:88:a6:bd:57:32:b2: 23:b6:50:2b:fc:34:ff:0f:a0:f4:d2:8d:c8:58:8c:54:ea:0c: 8f:c8:9d:6f:71:67:71:41:23:d0:36:19:d3:12:ec:53:7f:81: fb:19:2e:04:28:c2:18:0b:08:fc:cf:3a:be:4e:ba:8c:21:24: 66:e9:91:e8:72:2d:15:de:33:67:be:0f:d1:0a:5f:c3:fb:00: c9:79:d9:fd:d4:61:79:ff:67:2d:68:52:c3:62:8b:14:ee:57: 91:76:1a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWnXJFAM0XC1gp6WG0c7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTA2ZDJkZmY3MTE2ZjM1YWI3ZmExMDI3NWE0NWUzODNi Y2U1MjMwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg2MmExNjFiYzEwY2U4OGNkNmIzMTdjYjE1YzRmYmNlYWZjYjY3MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/dnMfTjyBQoOkKaRcfpUZDPo6aG Tb44y6VZPjmQkamkBJHaZ1XODttg2e3if/AUZxo7EzmH2/poZtRTFSeSBkik/ZNm aEtHLvzAQkHGGsFOuFXIIU4wZSnyDR/rOpb12iQuql+SmCumE+Jzoko9NBLpRW9D XFFsDubDcSv5ZBJbuBmtUW76lh0/BoBPGluV+5EQAptbrPIJo+06esiLH3CLeGyX cRJOqDmeVW6xK9/LTgJI8T9XU1b3hbST0Mg0hDb4Ruam0Wk0vltzPezhwdxQ0bkF xkZfLcpXaUlZhTG8Sk7zdGmGtq9TZ2DRlsXHjF8ORdfsF7o4mM+QNF8yjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKhYbwQzojNazF8sVxPvOr8tnM6MB8GA1UdIwQY MBaAFGEQbS3/cRbzWrf6ECdaReODvOUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEt YTQ5NDRlOTYyNWMwLzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hMTZlYTUtMzg2Ny00NDA2LTlmMmEtYTQ5NDRlOTYyNWMw LzEvWVJCdExmOXhGdk5hdF9vUUoxcEY0NE84NVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvqKxHlZ d+gbWt4K0WkPlo/G5sZbw9pQA4bZA8mpdltJA4rpEybNBqpRfaS0KldywnjgnbNS +g6eE+Rv3/86yWYLfj1yTKQAqEpibX5D2f2Aptg3gk23ENv0Z6alQ9GtS1NVNLN/ WypYh57zl9q4G1YAeopucM5DXbNZXZucMMrCKY5hPcnf3GvNMqhDfJfJ4sAAaL+p EkO4X1swiKa9VzKyI7ZQK/w0/w+g9NKNyFiMVOoMj8idb3FncUEj0DYZ0xLsU3+B +xkuBCjCGAsI/M86vk66jCEkZumR6HItFd4zZ74P0Qpfw/sAyXnZ/dRhef9nLWhS w2KLFO5XkXYaiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:12 2025 by rpki-client