This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json) Hash identifier: BH+V+/SgZ79SNWfK2ySRgRP3efghqe9ln0Gd5WxhpRU= Subject key identifier: C0:DD:18:9B:8E:ED:4C:FB:7C:A1:2A:9B:22:F9:12:AB:6A:5B:6F:23 Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f Certificate serial: 019AF12EB12341B74DA223EE04CEF5B63291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft Manifest number: 0156 Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: PwvfDgb+nULh7sxyjI/ixfAqu07SPCxwxMtkIqcusvk=) 2: ef5i4gFsUjQtA9jIFWXZmLBsI5w.roa (hash: nHPFZXhPCy6Yr/I1NdWh8sLmeUGTngr7MiMVHJxQNuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b1:23:41:b7:4d:a2:23:ee:04:ce:f5:b6:32:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=c0dd189b8eed4cfb7ca12a9b22f912ab6a5b6f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:ac:b6:d1:1d:7d:28:a9:0c:71:c2:4d:f3: 4c:c7:06:10:ff:a4:20:3e:30:5f:75:2a:56:b7:91: e7:8f:ed:df:e9:12:89:cd:2d:c0:5d:ac:27:62:e8: a1:4a:a2:19:7a:25:15:af:cb:f0:90:11:e8:66:c3: 11:1f:9c:f0:ac:76:4b:09:a2:d3:30:e1:ae:f4:2f: 4f:e3:7d:7a:8c:bb:68:f4:0a:8e:f7:d0:35:fb:06: 42:65:f1:41:1c:22:98:6e:e0:e5:0d:79:08:ef:cc: 6c:ba:85:eb:6f:80:52:18:b5:81:30:a4:6e:d5:81: 1d:5a:61:60:c7:67:ea:ec:a6:83:70:57:62:36:a6: ff:6b:8f:8c:e4:d2:2e:68:dd:c3:9a:56:3e:64:77: e9:24:4f:c0:d1:08:ed:2a:9d:16:5a:5f:4c:e4:37: be:86:a3:57:72:0c:fb:e2:9f:26:40:66:02:aa:8d: 70:68:74:e8:e9:1e:31:36:24:95:aa:bd:fb:65:b2: bc:ea:4c:f8:e1:01:6e:be:72:5d:6d:d5:0d:76:d5: c5:90:71:1c:6c:16:84:8c:27:b1:26:87:c7:71:d4: a1:d2:c9:ff:36:0d:5c:2c:ec:c2:09:9f:53:95:af: 0a:5f:fd:2a:9b:d1:de:f8:77:c5:6b:6d:3c:0a:9b: ac:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DD:18:9B:8E:ED:4C:FB:7C:A1:2A:9B:22:F9:12:AB:6A:5B:6F:23 X509v3 Authority Key Identifier: keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:23:b4:f0:74:30:42:af:f1:d9:87:7d:e7:d6:9b:3f:92:14: f3:2e:31:7b:30:83:10:f5:ea:3d:1e:db:64:d5:c8:4d:84:e3: d9:fd:d7:c9:a8:8c:55:2f:51:92:9e:93:b9:56:92:7c:6d:47: 30:9d:fd:e8:01:46:2d:86:7c:f8:02:d3:fe:95:4e:ca:8e:b6: d5:a6:a7:43:14:d2:50:c7:c8:06:ed:b8:03:71:71:03:a2:26: 55:06:a6:9f:2e:37:dc:f1:bf:c8:00:6d:4b:be:ad:f3:1d:ae: 4f:a7:13:cc:c7:65:c4:b9:7b:c5:86:6f:d6:82:c5:f5:23:97: a1:e9:3e:23:b3:54:34:57:7a:52:d5:0c:60:b2:90:d7:29:d6: fb:52:e8:cf:6c:c2:54:00:91:e4:b3:1a:d4:47:a5:d8:f2:e6: 4e:63:bf:a6:d1:c6:6d:d1:8c:83:91:a1:9f:aa:d1:01:b7:b0: ef:bf:81:ed:99:8f:3c:71:4e:fd:cf:6b:b9:7d:bb:1e:2e:79: e4:6d:ad:5b:8c:1c:56:0e:4d:a8:9b:bc:65:35:17:e4:0f:6c: 77:03:a6:9a:8b:1f:f9:1b:9c:57:4a:f3:b5:b8:5f:6b:04:66: a1:ad:0f:5d:4d:0f:60:51:ae:ae:13:a4:b3:32:64:62:ee:00: 7b:8f:16:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrEjQbdNoiPuBM71tjKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODcxNjllMDMwZTM3MjVkNmViNDc4YTMyN2U2YmRmMzZi ZThkMmYwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD EyhjMGRkMTg5YjhlZWQ0Y2ZiN2NhMTJhOWIyMmY5MTJhYjZhNWI2ZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWmsttEdfSipDHHCTfNMxwYQ/6Qg PjBfdSpWt5Hnj+3f6RKJzS3AXawnYuihSqIZeiUVr8vwkBHoZsMRH5zwrHZLCaLT MOGu9C9P4316jLto9AqO99A1+wZCZfFBHCKYbuDlDXkI78xsuoXrb4BSGLWBMKRu 1YEdWmFgx2fq7KaDcFdiNqb/a4+M5NIuaN3DmlY+ZHfpJE/A0QjtKp0WWl9M5De+ hqNXcgz74p8mQGYCqo1waHTo6R4xNiSVqr37ZbK86kz44QFuvnJdbdUNdtXFkHEc bBaEjCexJofHcdSh0sn/Ng1cLOzCCZ9Tla8KX/0qm9He+HfFa208CpusyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDdGJuO7Uz7fKEqmyL5EqtqW28jMB8GA1UdIwQY MBaAFGGHFp4DDjcl1utHijJ+a982vo0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWIt NDgwZGY4ZjQxZTQ0LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83NjE5ZWMtNTQzOC00NTUyLWFiYWItNDgwZGY4ZjQxZTQ0 LzEvWVljV25nTU9OeVhXNjBlS01uNXIzemEtalM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECO08HQw Qq/x2Yd959abP5IU8y4xezCDEPXqPR7bZNXITYTj2f3XyaiMVS9Rkp6TuVaSfG1H MJ396AFGLYZ8+ALT/pVOyo621aanQxTSUMfIBu24A3FxA6ImVQamny433PG/yABt S76t8x2uT6cTzMdlxLl7xYZv1oLF9SOXoek+I7NUNFd6UtUMYLKQ1ynW+1Loz2zC VACR5LMa1Eel2PLmTmO/ptHGbdGMg5Ghn6rRAbew77+B7ZmPPHFO/c9ruX27Hi55 5G2tW4wcVg5NqJu8ZTUX5A9sdwOmmosf+RucV0rztbhfawRmoa0PXU0PYFGurhOk szJkYu4Ae48WWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:19 2025 by rpki-client