This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft File: YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft (raw, json) Hash identifier: k5In6GOI/uG3MPGIByB3z53MZrHR2bRyWb57m17qdLg= Subject key identifier: 9A:82:CA:28:EA:36:CE:C9:DC:49:4D:96:17:10:3E:01:36:60:8D:02 Authority key identifier: 61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC Certificate issuer: /CN=6133ec1a240143dae111bb92d192dabf775d81ec Certificate serial: 019AF19B4CF3875C022148C895FB91E0F46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft Manifest number: 0A07 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: COcUW0x5kxM0ZoYaE6bjH_ilI5I.roa (hash: DiDBhNFDOT29doleyEuXM5Xz1UWaH+5+crJRRQCdBnI=) 2: YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl (hash: lDsb7CMz0Mp86oF2gqOb+6mquOf3mtbnDuGILFxRjok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4c:f3:87:5c:02:21:48:c8:95:fb:91:e0:f4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6133ec1a240143dae111bb92d192dabf775d81ec Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=9a82ca28ea36cec9dc494d9617103e0136608d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:ea:1a:91:0f:75:e5:62:cc:eb:52:4f:e5: 9b:37:cb:d6:94:e2:d7:b2:17:dc:6e:32:b5:cd:7d: 47:b0:a6:66:99:f4:3e:f3:be:49:04:01:14:25:20: c5:7a:f6:7e:34:5a:e5:1d:5e:d7:1a:0b:dc:0b:7b: f3:aa:78:8b:ae:54:72:2c:53:77:a0:68:32:86:11: de:51:b6:bf:a3:50:d8:08:43:04:8a:94:37:52:0a: 6b:15:86:e6:20:e9:c0:12:17:63:5c:ea:81:54:08: 78:72:0d:3b:9b:1a:82:31:62:b1:6e:51:7f:26:68: 17:83:8d:d0:5a:b0:ae:a3:74:cc:c5:2c:1b:47:cf: 0b:84:80:07:4c:88:cc:e7:e8:ad:1a:7a:88:be:a5: 67:dd:05:b5:ce:bc:9f:f6:81:a0:23:57:04:99:1e: 9a:b6:8a:42:ce:43:f2:1e:e1:c5:8b:1d:c9:2f:49: b2:ec:8b:aa:63:c9:84:56:04:78:80:04:8f:22:c4: 4c:a9:20:92:38:0d:c0:8d:9d:cc:aa:a1:1b:44:1e: 73:d0:ab:a3:99:c0:72:a5:50:28:12:4a:d0:5d:36: 50:b3:32:3e:d7:70:a9:f6:6b:c5:31:87:11:03:2d: 35:b1:6f:e8:02:d8:63:67:20:4d:60:9a:78:6f:9c: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:CA:28:EA:36:CE:C9:DC:49:4D:96:17:10:3E:01:36:60:8D:02 X509v3 Authority Key Identifier: keyid:61:33:EC:1A:24:01:43:DA:E1:11:BB:92:D1:92:DA:BF:77:5D:81:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTPsGiQBQ9rhEbuS0ZLav3ddgew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/YTPsGiQBQ9rhEbuS0ZLav3ddgew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:20:4b:35:a4:16:2c:6c:d0:4d:14:42:aa:cd:45:9e:26:3f: 68:62:b1:79:50:23:ec:c1:86:4b:65:99:28:06:43:ba:02:a6: 02:0c:1c:ba:af:98:52:76:3f:80:38:fa:66:66:2c:fe:08:bf: bd:1c:2b:58:06:f4:b2:4e:d1:60:97:e8:69:76:e2:b7:bf:55: 7b:df:10:43:89:01:df:1b:99:21:66:f2:24:bb:69:59:3f:75: 8e:9b:07:37:5a:5a:08:84:1b:1e:9a:c1:50:dd:86:cd:4d:96: b8:1a:82:f1:49:b8:66:2d:fd:0d:a0:9c:dc:5c:8d:79:38:eb: fe:c3:b5:e5:8b:e0:08:bc:f5:4d:a7:af:52:c2:0e:1f:a8:76: c9:07:e1:e4:42:cb:28:39:df:eb:78:83:1b:49:b8:96:74:03: 8e:43:37:36:1e:5e:0d:42:76:77:35:b8:f9:0a:04:e3:58:df: 28:3a:c8:9c:76:0c:3f:34:e7:be:0d:3e:6f:b3:4a:10:f5:c8: b4:0a:1c:71:87:a8:1b:2d:fd:59:49:9e:61:66:81:c9:e2:60: 2a:98:54:c1:6e:58:e1:fc:1e:42:e0:5f:15:35:89:ae:16:36: 9b:1c:7d:bd:86:01:cd:4c:89:75:3b:28:2f:92:95:d0:ca:18: ae:f8:79:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0zzh1wCIUjIlfuR4PRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzNlYzFhMjQwMTQzZGFlMTExYmI5MmQxOTJkYWJmNzc1 ZDgxZWMwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD Eyg5YTgyY2EyOGVhMzZjZWM5ZGM0OTRkOTYxNzEwM2UwMTM2NjA4ZDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA397qGpEPdeVizOtST+WbN8vWlOLX shfcbjK1zX1HsKZmmfQ+875JBAEUJSDFevZ+NFrlHV7XGgvcC3vzqniLrlRyLFN3 oGgyhhHeUba/o1DYCEMEipQ3UgprFYbmIOnAEhdjXOqBVAh4cg07mxqCMWKxblF/ JmgXg43QWrCuo3TMxSwbR88LhIAHTIjM5+itGnqIvqVn3QW1zryf9oGgI1cEmR6a topCzkPyHuHFix3JL0my7IuqY8mEVgR4gASPIsRMqSCSOA3AjZ3MqqEbRB5z0Kuj mcBypVAoEkrQXTZQszI+13Cp9mvFMYcRAy01sW/oAthjZyBNYJp4b5wZLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqCyijqNs7J3ElNlhcQPgE2YI0CMB8GA1UdIwQY MBaAFGEz7BokAUPa4RG7ktGS2r93XYHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt YzVmZTQ0NDIwYzA5LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5 LzEvWVRQc0dpUUJROXJoRWJ1UzBaTGF2M2RkZ2V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSBLNaQW LGzQTRRCqs1FniY/aGKxeVAj7MGGS2WZKAZDugKmAgwcuq+YUnY/gDj6ZmYs/gi/ vRwrWAb0sk7RYJfoaXbit79Ve98QQ4kB3xuZIWbyJLtpWT91jpsHN1paCIQbHprB UN2GzU2WuBqC8Um4Zi39DaCc3FyNeTjr/sO15YvgCLz1TaevUsIOH6h2yQfh5ELL KDnf63iDG0m4lnQDjkM3Nh5eDUJ2dzW4+QoE41jfKDrInHYMPzTnvg0+b7NKEPXI tAoccYeoGy39WUmeYWaByeJgKphUwW5Y4fweQuBfFTWJrhY2mxx9vYYBzUyJdTso L5KV0MoYrvh5zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:15 2025 by rpki-client