This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft File: YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft (raw, json) Hash identifier: JjSkqIZn6kOj410WkYZPnQqmCYNCrN8HoNgbKvyb5nE= Subject key identifier: 72:84:86:5D:04:99:EC:D2:97:E2:F4:1B:87:E2:C4:04:47:DC:15:36 Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC Certificate issuer: /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac Certificate serial: 019AF1D225BAC6A8AE4D34880FAC64501167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft Manifest number: 01A0 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: 8eOcRvtFv6WKmWJsvFtCeh3bQOI.roa (hash: Fc0MHvgeimy08EQvI9R5qWeNLdRQwq1sSVsHXK/MAtQ=) 2: YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl (hash: /Wq1VHkZFZ9446KyJ9DrOaIewn8c3qeMwiXMyj4oHWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:25:ba:c6:a8:ae:4d:34:88:0f:ac:64:50:11:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=7284865d0499ecd297e2f41b87e2c40447dc1536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:26:65:c9:28:49:0c:b8:19:c1:eb:63:66: 1f:ef:23:9e:0c:3e:c0:7c:8e:70:36:e1:d3:a0:ce: 8f:64:7e:a2:97:09:35:ec:9c:78:23:35:da:ec:e9: b3:db:e7:2f:ae:cc:4c:a1:ad:4b:86:71:3d:33:4d: 6f:95:d6:31:2e:2e:42:ff:5a:22:4e:47:7b:06:57: 2b:1b:e6:e7:14:41:2e:7f:cc:fa:57:1d:2b:a4:25: 73:19:59:3f:32:03:b9:eb:b8:83:2f:a2:37:e6:6c: cd:64:77:ee:e2:6a:00:cb:49:46:aa:fa:e7:20:37: 10:e0:ec:cc:4e:50:72:09:39:dd:16:19:33:00:0d: d1:40:79:91:96:b2:ba:ab:f1:9c:64:a5:8c:a0:c3: 2f:29:bf:fc:43:69:22:43:72:26:6c:a2:e5:0c:25: b9:b4:ab:d6:74:99:eb:fd:0c:ae:c4:39:3e:62:6b: 26:ae:c3:01:5f:85:b5:1d:c6:2a:eb:e0:6a:4b:bb: 43:c8:c4:26:e2:50:03:78:d6:07:13:44:1c:8e:5f: cd:d6:1f:75:bf:d7:b8:1e:50:78:dc:47:a5:75:78: 77:2d:be:f5:7b:f6:e9:3a:54:57:2a:c4:4f:63:a1: 47:d0:48:6f:f4:69:92:b2:8b:68:eb:f4:ac:5a:b1: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:84:86:5D:04:99:EC:D2:97:E2:F4:1B:87:E2:C4:04:47:DC:15:36 X509v3 Authority Key Identifier: keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f2:c5:5a:a7:0a:4e:af:a0:8b:a3:d8:aa:66:97:79:2a:78: bb:98:0d:f4:d3:b9:b8:9f:6e:a7:a3:0c:9c:8f:e8:2a:65:de: 9c:4a:c0:ed:ae:da:cf:c6:53:46:95:85:c0:e8:b3:d9:f7:0a: 02:07:a7:b2:66:ba:42:0c:41:44:49:c2:ee:5f:02:09:cd:79: 21:50:4f:42:42:e1:a5:af:9c:fe:8b:a8:8f:d3:f5:99:41:c1: 85:4b:3c:a6:0b:8d:e2:d0:3d:eb:c3:31:8a:db:8e:13:bf:cc: 37:aa:12:7d:ac:da:98:3a:9c:29:3d:1f:d6:c0:65:86:18:71: 1b:b1:62:ba:ce:32:c7:79:bc:04:5e:af:7e:f4:97:24:5b:36: 98:83:74:48:04:ce:9b:34:75:22:68:cf:1a:af:4f:15:6b:87: f2:a3:15:c2:1d:03:67:5c:79:41:3e:2f:68:a8:d1:b4:d3:e0: 4a:8b:f3:50:93:5d:29:fb:0a:75:6a:9c:da:c5:3a:9e:3c:43: 84:58:22:c9:d3:a4:12:22:12:d1:96:72:e3:03:11:f9:c7:8f: 94:41:73:55:66:6f:cd:91:ab:99:c7:e2:58:f0:84:16:11:84: 7c:fe:86:62:7d:88:e1:61:54:1a:98:5c:21:c6:85:6d:b1:9a: e1:e5:f5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iW6xqiuTTSID6xkUBFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNzlmMGE1OWZjOGM2ZmQ3ODU5NTM3MDFhZTcyYjU2ZGU1 MDExYWMwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD Eyg3Mjg0ODY1ZDA0OTllY2QyOTdlMmY0MWI4N2UyYzQwNDQ3ZGMxNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsusmZckoSQy4GcHrY2Yf7yOeDD7A fI5wNuHToM6PZH6ilwk17Jx4IzXa7Omz2+cvrsxMoa1LhnE9M01vldYxLi5C/1oi Tkd7BlcrG+bnFEEuf8z6Vx0rpCVzGVk/MgO567iDL6I35mzNZHfu4moAy0lGqvrn IDcQ4OzMTlByCTndFhkzAA3RQHmRlrK6q/GcZKWMoMMvKb/8Q2kiQ3ImbKLlDCW5 tKvWdJnr/QyuxDk+YmsmrsMBX4W1HcYq6+BqS7tDyMQm4lADeNYHE0Qcjl/N1h91 v9e4HlB43EeldXh3Lb71e/bpOlRXKsRPY6FH0Ehv9GmSsoto6/SsWrFx/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKEhl0EmezSl+L0G4fixARH3BU2MB8GA1UdIwQY MBaAFGJ58KWfyMb9eFlTcBrnK1beUBGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOGQ0YmMtZjJmMS00ZWU1LTk0MGUt OWZjODVkMDJlNzFhLzEvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jOGQ0YmMtZjJmMS00ZWU1LTk0MGUtOWZjODVkMDJlNzFh LzEvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvLFWqcK Tq+gi6PYqmaXeSp4u5gN9NO5uJ9up6MMnI/oKmXenErA7a7az8ZTRpWFwOiz2fcK Agensma6QgxBREnC7l8CCc15IVBPQkLhpa+c/ouoj9P1mUHBhUs8pguN4tA968Mx ituOE7/MN6oSfazamDqcKT0f1sBlhhhxG7Fius4yx3m8BF6vfvSXJFs2mIN0SATO mzR1ImjPGq9PFWuH8qMVwh0DZ1x5QT4vaKjRtNPgSovzUJNdKfsKdWqc2sU6njxD hFgiydOkEiIS0ZZy4wMR+cePlEFzVWZvzZGrmcfiWPCEFhGEfP6GYn2I4WFUGphc IcaFbbGa4eX1XA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:07 2025 by rpki-client