This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft File: ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json) Hash identifier: lbCU4aWE2x1akWlvQJtzdut1KyivXYzogM5GtrIUhPk= Subject key identifier: D9:15:FE:43:20:A0:31:B3:79:93:56:33:8D:F8:AB:B6:E0:31:BE:4B Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39 Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39 Certificate serial: 019AF12DCD5B58F8C3430932149439DF8659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=) 2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: XjPS5fndr606YLGjNfR/tKncCZN+hPN1rLdfrYOn2Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cd:5b:58:f8:c3:43:09:32:14:94:39:df:86:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=d915fe4320a031b3799356338df8abb6e031be4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:fb:6f:0c:3f:7f:be:fb:16:87:da:8f:14: eb:64:e7:b1:41:23:d4:7a:e3:c1:e1:0d:8b:74:64: 21:90:f6:37:86:bf:57:dc:b2:41:c7:72:7f:a9:0e: 2f:42:43:94:8f:eb:ef:f2:be:8e:b3:fa:af:42:e3: fb:4f:cd:76:8f:36:f5:28:fa:17:77:28:92:71:e5: c1:d2:cd:bc:aa:4c:e5:04:31:9c:f8:32:68:27:a6: 3b:1c:60:56:b9:3c:a4:dd:88:a2:54:ee:9e:a0:66: 01:89:1c:4b:d3:be:b0:97:35:35:20:5f:83:35:93: 75:59:70:59:67:5a:0b:0e:58:f8:8a:32:bd:a3:58: 0f:06:55:32:a9:93:35:d7:4d:36:74:c6:20:2f:08: 6e:18:cf:9f:20:3f:f2:5a:6e:82:37:af:bd:dc:ab: 09:d4:94:8f:4c:63:15:98:ae:5f:f1:1c:21:cb:97: 9b:5a:11:da:e9:a3:6a:c6:38:dd:dd:01:c4:6d:0c: 92:92:51:8b:24:e3:5e:57:4c:53:86:46:70:f8:18: e2:02:93:6d:bd:7c:a6:9e:5d:0d:9f:3e:64:55:b0: c7:07:ec:9c:2e:c6:aa:dc:46:c3:a3:28:24:62:73: 75:94:6a:1d:78:85:15:92:9a:09:6a:2e:05:cb:c2: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:FE:43:20:A0:31:B3:79:93:56:33:8D:F8:AB:B6:E0:31:BE:4B X509v3 Authority Key Identifier: keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f9:a9:7c:8a:6c:bd:82:41:8a:1a:5e:92:ad:3b:92:3f:a9: 9e:ce:2f:ac:bd:6e:63:5c:4c:37:46:75:92:d7:a1:af:40:e4: 01:97:29:b0:96:39:87:34:5c:02:ed:43:b9:86:cf:ec:cf:cb: d1:76:fd:32:9a:e2:57:e8:1a:e0:c9:62:c1:c0:70:95:e1:db: 86:aa:c2:6f:5a:ab:8e:77:3d:79:90:58:90:12:6a:27:b5:d9: d6:a6:9c:41:ce:46:e2:93:1d:db:23:97:63:26:4c:8d:ad:4f: 28:d6:1b:eb:89:18:7e:c0:9b:2d:0f:12:48:ca:dc:9c:b9:e6: ca:e0:a2:ce:3f:ff:bd:99:8c:62:94:56:bf:77:41:56:4e:49: b7:c2:41:f6:1e:76:1d:62:6e:b1:66:75:b2:38:5d:65:6b:19: f8:62:81:c7:84:05:83:df:fc:e9:c1:d7:1d:71:87:10:04:93: 30:7c:cf:d1:36:1e:96:b5:41:95:14:7b:da:90:59:e0:69:79: 85:db:9d:44:f8:04:fd:c4:6e:6d:cd:36:d5:5f:93:37:8d:2b: a4:33:b7:26:2c:98:08:a3:47:e9:88:21:ef:37:81:80:68:5d: d3:fb:fa:99:3f:3f:3d:d4:f9:34:13:72:05:2c:57:39:00:db: 19:8d:3b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLc1bWPjDQwkyFJQ534ZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzQ0OGZjMDliM2Y3MzIwZGE4MDU3YmZhOGVlYTliYWY5 Y2VlMzkwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EyhkOTE1ZmU0MzIwYTAzMWIzNzk5MzU2MzM4ZGY4YWJiNmUwMzFiZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2577bww/f777FofajxTrZOexQSPU euPB4Q2LdGQhkPY3hr9X3LJBx3J/qQ4vQkOUj+vv8r6Os/qvQuP7T812jzb1KPoX dyiSceXB0s28qkzlBDGc+DJoJ6Y7HGBWuTyk3YiiVO6eoGYBiRxL076wlzU1IF+D NZN1WXBZZ1oLDlj4ijK9o1gPBlUyqZM11002dMYgLwhuGM+fID/yWm6CN6+93KsJ 1JSPTGMVmK5f8Rwhy5ebWhHa6aNqxjjd3QHEbQySklGLJONeV0xThkZw+BjiApNt vXymnl0Nnz5kVbDHB+ycLsaq3EbDoygkYnN1lGodeIUVkpoJai4Fy8JOpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkV/kMgoDGzeZNWM434q7bgMb5LMB8GA1UdIwQY MBaAFMp0SPwJs/cyDagFe/qO6puvnO45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQt MzgwMmZmNGVjMTU5LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQtMzgwMmZmNGVjMTU5 LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPmpfIps vYJBihpekq07kj+pns4vrL1uY1xMN0Z1ktehr0DkAZcpsJY5hzRcAu1DuYbP7M/L 0Xb9MpriV+ga4MliwcBwleHbhqrCb1qrjnc9eZBYkBJqJ7XZ1qacQc5G4pMd2yOX YyZMja1PKNYb64kYfsCbLQ8SSMrcnLnmyuCizj//vZmMYpRWv3dBVk5Jt8JB9h52 HWJusWZ1sjhdZWsZ+GKBx4QFg9/86cHXHXGHEASTMHzP0TYelrVBlRR72pBZ4Gl5 hdudRPgE/cRubc021V+TN40rpDO3JiyYCKNH6Ygh7zeBgGhd0/v6mT8/PdT5NBNy BSxXOQDbGY07fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:37 2025 by rpki-client