This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft File: YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft (raw, json) Hash identifier: HqXk9fGEN6QuhYU1p8fRwws+zjUDg3QqMp9/GqPiMUE= Subject key identifier: A0:3F:DB:51:6B:15:5B:B6:BC:88:02:85:01:AC:46:16:9C:2D:94:94 Authority key identifier: 62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF Certificate issuer: /CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf Certificate serial: 019AF6F80BCE0E4C2CC85991A90478A8F14E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft Manifest number: 0838 Signing time: Sun 07 Dec 2025 04:00:42 +0000 Manifest this update: Sun 07 Dec 2025 04:00:42 +0000 Manifest next update: Mon 08 Dec 2025 04:00:42 +0000 Files and hashes: 1: YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl (hash: XuL21blkkERTb5SwdeP5YqeMTtLEuRTZ8mMk8h1PMME=) 2: p0WThpG_MdNvN5PcmLOinicnMKU.roa (hash: mWE6tAtdJrB/Zm93V43/E521MfBc5yD2nOmUvWByQN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:0b:ce:0e:4c:2c:c8:59:91:a9:04:78:a8:f1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf Validity Not Before: Dec 7 04:00:42 2025 GMT Not After : Dec 8 04:00:42 2025 GMT Subject: CN=a03fdb516b155bb6bc88028501ac46169c2d9494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:2b:0e:23:dc:ac:85:79:79:c9:9a:c6:f4: 36:bd:04:17:f9:8b:2b:0e:29:34:3d:e9:10:74:fa: 61:2d:dc:d0:a0:39:58:29:7c:2b:01:1a:a8:a9:5d: a9:a8:ed:e8:6d:8c:78:c4:08:40:1d:83:0f:f4:9b: c2:45:ac:f5:3f:2a:03:34:94:f3:30:70:95:e3:ee: a3:9f:43:48:55:44:67:e5:d4:36:f9:04:bd:50:2b: cb:91:66:68:23:2f:ae:16:b9:61:a1:31:a2:a7:ee: a2:63:5e:9a:3e:6a:76:4e:4f:87:1d:13:d5:f0:d0: df:a0:74:13:3a:fb:1c:15:f9:b6:7e:14:97:ac:e0: e7:c9:3c:83:c6:51:0c:05:fa:42:ef:37:d6:c4:f6: c8:f4:5f:99:9b:12:3f:d9:64:f9:55:0d:94:df:d3: eb:b8:14:ea:f6:ae:28:c2:be:8b:0b:d2:87:f8:2b: ae:e1:7b:1a:bf:b3:d7:fe:97:d0:1b:12:38:da:34: 47:9d:e4:e3:00:af:6e:70:06:3a:01:a0:17:1c:10: 84:73:11:d8:18:35:fb:dc:61:1d:08:ab:ab:32:df: 24:db:c0:6e:23:de:d1:bb:4b:ab:b4:d0:a0:78:0e: a3:8e:4c:2a:11:1b:04:fe:a3:24:aa:d9:8a:39:f0: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3F:DB:51:6B:15:5B:B6:BC:88:02:85:01:AC:46:16:9C:2D:94:94 X509v3 Authority Key Identifier: keyid:62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:98:9e:9b:e8:e5:a2:bb:98:31:ec:23:fe:54:b9:a5:8d:6e: 3b:e2:5e:ae:a7:66:61:43:c0:48:a1:39:cd:73:ab:c1:90:1c: 33:2b:2a:7c:09:20:e9:d2:bf:e4:34:36:fd:16:6f:2e:be:f7: db:be:82:6c:e9:79:e7:da:17:c1:01:7d:ef:a6:7f:1a:a2:6e: bf:c9:82:b9:62:d2:2d:71:ea:14:df:f3:c1:63:e7:cd:23:5b: 71:0f:5e:3b:b8:8f:ae:12:5e:ad:31:96:63:15:32:5e:45:35: f8:41:02:59:90:50:36:8a:0c:f6:2c:a7:a3:ec:ad:d1:f0:ee: 02:49:c8:14:70:39:42:18:72:a0:61:4f:be:ea:02:9d:c4:24: f8:dd:a0:88:ec:d2:a7:ac:5d:43:dd:e6:6c:0e:d7:48:29:52: 46:f6:9d:62:a5:f1:d0:27:8e:be:d9:40:d1:8c:94:39:24:60: 62:b6:7e:86:44:c9:92:5b:38:5b:6c:58:25:79:b0:0d:da:60: 30:96:49:ea:35:1a:62:7f:98:ec:f7:53:cf:c0:f1:89:12:09: ab:be:8b:97:a3:5d:cb:dd:a3:7c:95:19:17:e2:07:b7:0c:fb: 4c:b5:82:15:cc:04:4b:0b:0c:05:1a:ab:f3:c4:e4:91:fe:e6: a5:98:94:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+AvODkwsyFmRqQR4qPFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNzlkYjE0YWMwMThiZTNiNjdkMjBiNjdlMGQ5YmEzNzZk YmQ5YmYwHhcNMjUxMjA3MDQwMDQyWhcNMjUxMjA4MDQwMDQyWjAzMTEwLwYDVQQD EyhhMDNmZGI1MTZiMTU1YmI2YmM4ODAyODUwMWFjNDYxNjljMmQ5NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/grDiPcrIV5ecmaxvQ2vQQX+Ysr Dik0PekQdPphLdzQoDlYKXwrARqoqV2pqO3obYx4xAhAHYMP9JvCRaz1PyoDNJTz MHCV4+6jn0NIVURn5dQ2+QS9UCvLkWZoIy+uFrlhoTGip+6iY16aPmp2Tk+HHRPV 8NDfoHQTOvscFfm2fhSXrODnyTyDxlEMBfpC7zfWxPbI9F+ZmxI/2WT5VQ2U39Pr uBTq9q4owr6LC9KH+Cuu4Xsav7PX/pfQGxI42jRHneTjAK9ucAY6AaAXHBCEcxHY GDX73GEdCKurMt8k28BuI97Ru0urtNCgeA6jjkwqERsE/qMkqtmKOfDnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA/21FrFVu2vIgChQGsRhacLZSUMB8GA1UdIwQY MBaAFGJ52xSsAYvjtn0gtn4Nm6N229m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNzUzZGQtNzQ0NC00Yjk3LWI3M2It MGIzNGVkYzQxOGQ4LzEvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yNzUzZGQtNzQ0NC00Yjk3LWI3M2ItMGIzNGVkYzQxOGQ4 LzEvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpiem+jl oruYMewj/lS5pY1uO+JerqdmYUPASKE5zXOrwZAcMysqfAkg6dK/5DQ2/RZvLr73 276CbOl559oXwQF976Z/GqJuv8mCuWLSLXHqFN/zwWPnzSNbcQ9eO7iPrhJerTGW YxUyXkU1+EECWZBQNooM9iyno+yt0fDuAknIFHA5QhhyoGFPvuoCncQk+N2giOzS p6xdQ93mbA7XSClSRvadYqXx0CeOvtlA0YyUOSRgYrZ+hkTJkls4W2xYJXmwDdpg MJZJ6jUaYn+Y7PdTz8DxiRIJq76Ll6Ndy92jfJUZF+IHtwz7TLWCFcwESwsMBRqr 88Tkkf7mpZiUPA== -----END CERTIFICATE-----Generated at Sun Dec 7 09:00:02 2025 by rpki-client