This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json) Hash identifier: E7FuqADyujF0V2LBl+8XjlLC0ksztdTKJ7rnlAnm8So= Subject key identifier: 68:FA:0E:97:4F:32:77:E0:BE:EB:A3:44:4A:3C:20:CF:E5:64:77:50 Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5 Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5 Certificate serial: 019AF1D22E5ABCF71A35952AD6C2F3F7498C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: 267D5+1Pm088eKzs/n522xLMdin5dihkrQcGzoBLCg8=) 2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2e:5a:bc:f7:1a:35:95:2a:d6:c2:f3:f7:49:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=68fa0e974f3277e0beeba3444a3c20cfe5647750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:f9:92:cc:04:9b:a1:2a:1e:99:19:3c:7e: bc:87:9b:d4:95:84:f8:7f:2f:67:ed:26:87:b4:94: 57:e2:d2:89:80:14:b3:ee:77:5b:22:9b:7f:da:65: 5e:1f:55:0d:a4:c2:e5:2a:46:ed:90:ae:db:ea:af: 29:e3:d6:9e:98:50:90:0c:d4:31:bc:f6:1a:72:04: d9:0e:52:38:04:62:10:b9:91:28:ec:f1:e7:3e:53: ea:38:3a:23:94:56:1d:32:e8:9b:d6:23:c8:2b:89: d3:41:f6:0b:74:46:62:15:e0:b8:70:2d:cc:86:6a: 9b:f7:db:56:b9:97:4c:13:bd:f7:83:43:b3:67:48: fb:af:89:bd:54:0d:43:27:16:e0:d5:8f:e0:c6:8f: 6c:d8:de:8a:0a:9a:74:37:ff:8c:cd:6d:2b:14:1b: 54:39:66:f3:3d:00:21:41:b0:74:da:48:fd:3a:18: 4a:8d:83:93:68:3f:6b:d5:a0:10:8e:b8:f4:ba:21: 4d:66:32:c5:47:0f:07:14:fe:0c:d2:5c:bc:f8:7f: f8:06:92:04:f8:36:e8:f9:75:c3:a5:67:32:ca:b8: 3c:c0:8c:4a:0e:ed:d7:bc:4f:d6:05:7d:b8:67:dc: d6:3d:c3:52:c5:e7:ef:ae:b4:41:a4:2d:f0:27:35: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:0E:97:4F:32:77:E0:BE:EB:A3:44:4A:3C:20:CF:E5:64:77:50 X509v3 Authority Key Identifier: keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e9:c4:1d:2a:c4:76:d8:22:84:a5:45:5a:41:f6:3a:16:46: d1:aa:12:04:b8:ca:5b:06:bc:f8:c6:38:a4:d5:f8:41:f5:00: e6:93:0f:d6:78:35:39:04:58:c3:d8:9e:52:c1:9d:6e:87:2a: c0:3d:93:0b:5e:99:4e:a7:d4:fb:05:72:be:28:56:34:38:3d: 00:82:21:70:1b:78:74:33:b5:bb:85:f4:5a:ad:e4:21:b3:82: d9:09:a3:b9:cc:00:3a:3c:9e:a9:ce:66:3b:6c:c8:14:72:b6: ca:c6:08:7e:34:3c:12:47:02:69:64:a1:02:62:79:5d:56:fc: 2c:bf:75:24:a0:6f:c4:ea:29:aa:cd:0b:f1:d5:fc:a6:df:c3: 41:d9:fd:3a:81:68:68:13:18:d9:40:d8:7f:b9:1f:d2:42:2b: 14:48:6e:dd:28:c4:fb:2c:0c:ff:f5:fb:d0:27:a6:09:c8:b8: 70:b6:d2:e0:3b:dd:3e:0a:3a:6f:d4:bb:61:c3:74:1e:8f:82: 24:13:7a:75:8e:4b:ed:33:24:75:de:4e:5c:6d:0c:75:1a:5b: a9:ec:74:e5:61:15:74:55:af:7c:1c:37:8b:6c:4a:8c:e4:b6: 4d:16:3d:17:67:13:63:0e:32:9a:1d:2a:df:12:7a:4a:94:d9: e4:87:6a:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i5avPcaNZUq1sLz90mMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjZiY2Y2ZTJiMTA5YmEyYTE0YTczYjk3NWFkOTU0NDg0 YjRiYTUwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD Eyg2OGZhMGU5NzRmMzI3N2UwYmVlYmEzNDQ0YTNjMjBjZmU1NjQ3NzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VT5kswEm6EqHpkZPH68h5vUlYT4 fy9n7SaHtJRX4tKJgBSz7ndbIpt/2mVeH1UNpMLlKkbtkK7b6q8p49aemFCQDNQx vPYacgTZDlI4BGIQuZEo7PHnPlPqODojlFYdMuib1iPIK4nTQfYLdEZiFeC4cC3M hmqb99tWuZdME733g0OzZ0j7r4m9VA1DJxbg1Y/gxo9s2N6KCpp0N/+MzW0rFBtU OWbzPQAhQbB02kj9OhhKjYOTaD9r1aAQjrj0uiFNZjLFRw8HFP4M0ly8+H/4BpIE +Dbo+XXDpWcyyrg8wIxKDu3XvE/WBX24Z9zWPcNSxefvrrRBpC3wJzVwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGj6DpdPMnfgvuujREo8IM/lZHdQMB8GA1UdIwQY MBaAFGD2vPbisQm6KhSnO5da2VRIS0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2Qt YWI0MDI1M2I1ZTJiLzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84M2FkYmItMzYyNy00Yjg3LTlmN2QtYWI0MDI1M2I1ZTJi LzEvWVBhODl1S3hDYm9xRktjN2wxclpWRWhMUzZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdenEHSrE dtgihKVFWkH2OhZG0aoSBLjKWwa8+MY4pNX4QfUA5pMP1ng1OQRYw9ieUsGdbocq wD2TC16ZTqfU+wVyvihWNDg9AIIhcBt4dDO1u4X0Wq3kIbOC2QmjucwAOjyeqc5m O2zIFHK2ysYIfjQ8EkcCaWShAmJ5XVb8LL91JKBvxOopqs0L8dX8pt/DQdn9OoFo aBMY2UDYf7kf0kIrFEhu3SjE+ywM//X70CemCci4cLbS4DvdPgo6b9S7YcN0Ho+C JBN6dY5L7TMkdd5OXG0MdRpbqex05WEVdFWvfBw3i2xKjOS2TRY9F2cTYw4ymh0q 3xJ6SpTZ5IdqyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:19 2025 by rpki-client