This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json) Hash identifier: jMPLgUcFScMDOgbr2Lwo4TwRNMNN05WNCBEurB8PI7A= Subject key identifier: A6:4D:02:C1:9B:D8:14:3D:79:32:62:19:FA:10:27:24:45:AB:F4:79 Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b Certificate serial: 019AF5412AFB71AB23B675EAA367F201B51A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft Manifest number: 1369 Signing time: Sat 06 Dec 2025 20:01:19 +0000 Manifest this update: Sat 06 Dec 2025 20:01:19 +0000 Manifest next update: Sun 07 Dec 2025 20:01:19 +0000 Files and hashes: 1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: gq4HlTlyWAUAAUo1CSoH4tvg4dAvoDL9zk2AQ3ZBg0I=) 2: iK-6vM3UN-0JPyozDLdhLjJ5znw.roa (hash: LEDGjWpooiw+DnQIpdRJAz1t/vP9dQU00MHsp9zo7Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:2a:fb:71:ab:23:b6:75:ea:a3:67:f2:01:b5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b Validity Not Before: Dec 6 20:01:19 2025 GMT Not After : Dec 7 20:01:19 2025 GMT Subject: CN=a64d02c19bd8143d79326219fa10272445abf479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:1c:64:48:c2:fc:ab:3f:af:a9:32:0a:4f: e5:e1:af:ae:d9:a9:4c:c7:0f:4c:06:9e:4a:90:23: 89:7e:2b:32:91:64:73:23:8e:60:02:ca:bf:3c:02: b6:eb:5f:7b:c6:4b:c9:24:4c:65:4a:f7:b1:b6:74: 70:bb:13:a0:bc:28:04:41:12:e7:b2:64:eb:76:73: 10:c7:1d:20:44:a3:e4:2e:4b:63:fe:c6:02:a1:22: 7a:b7:49:b3:a1:51:9c:2b:fe:8c:1c:82:c0:97:59: 87:08:d1:5c:8e:6b:3c:e7:92:f0:37:a1:9c:fe:40: a0:26:f8:1f:03:f0:70:72:f8:c5:38:fd:bd:fb:05: e8:87:4f:58:d0:dc:ad:56:f2:d1:09:61:85:73:38: 40:b1:8e:bc:25:eb:35:81:9e:7b:af:b5:b1:49:e0: 21:e6:00:5f:65:f2:10:4f:62:39:c0:64:ca:d5:46: 63:ae:c3:88:7f:16:05:8c:8d:dd:ad:7c:da:05:a1: 16:07:98:f7:51:46:4e:a3:50:a1:7d:3b:49:12:35: e9:43:74:b6:4d:6f:ef:e0:00:e2:cd:76:a6:78:80: b9:18:4f:00:78:fd:60:e8:73:78:2b:5b:32:7d:9b: e4:a4:c5:b0:84:d8:ab:80:ae:9d:68:96:82:d7:bf: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4D:02:C1:9B:D8:14:3D:79:32:62:19:FA:10:27:24:45:AB:F4:79 X509v3 Authority Key Identifier: keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fb:8b:c0:68:7c:c1:e5:89:39:c3:b8:e0:d5:3c:30:8e:2e: 9f:7d:9e:b2:2d:cd:ed:5f:d8:bf:be:b5:9a:e3:31:45:59:4d: 38:03:6c:19:b2:23:bf:7a:aa:cd:78:13:08:a3:14:b6:17:aa: 62:4f:c4:e2:f0:0e:d7:16:85:f3:9c:2e:38:73:34:bb:a0:8b: c3:69:58:d5:6a:f3:f9:73:55:79:4e:4b:c4:a7:78:ea:2e:0d: d1:9d:71:67:79:01:95:00:a9:95:a1:e9:41:45:70:e2:c7:de: 09:10:bc:1f:d8:35:a7:a1:68:1e:c7:d7:25:cd:5a:db:e5:0f: 17:6a:b6:f8:71:7c:d1:33:27:85:b7:f2:9e:e7:53:9b:7e:bb: 47:2f:7f:20:37:ee:3c:83:ee:03:33:81:fd:4d:0b:59:98:1b: 21:d6:13:9a:16:2e:30:03:4e:c2:09:61:97:6b:6f:08:1a:f1: cd:9b:9b:f4:f6:db:c1:30:c9:42:2b:ea:b9:4f:81:16:62:f2: 49:11:b7:f5:c4:35:5a:c4:d6:6b:ae:19:18:2c:0b:35:3a:25: c8:ed:fb:09:8f:8f:13:5e:be:35:b1:a4:e0:92:da:d1:50:55: d7:40:20:6c:10:1b:0b:eb:07:43:78:fd:96:45:7b:4d:73:1c: 0f:5a:94:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSr7casjtnXqo2fyAbUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5 ZmUwN2IwHhcNMjUxMjA2MjAwMTE5WhcNMjUxMjA3MjAwMTE5WjAzMTEwLwYDVQQD EyhhNjRkMDJjMTliZDgxNDNkNzkzMjYyMTlmYTEwMjcyNDQ1YWJmNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsUcZEjC/Ks/r6kyCk/l4a+u2alM xw9MBp5KkCOJfisykWRzI45gAsq/PAK26197xkvJJExlSvextnRwuxOgvCgEQRLn smTrdnMQxx0gRKPkLktj/sYCoSJ6t0mzoVGcK/6MHILAl1mHCNFcjms855LwN6Gc /kCgJvgfA/BwcvjFOP29+wXoh09Y0NytVvLRCWGFczhAsY68Jes1gZ57r7WxSeAh 5gBfZfIQT2I5wGTK1UZjrsOIfxYFjI3drXzaBaEWB5j3UUZOo1ChfTtJEjXpQ3S2 TW/v4ADizXameIC5GE8AeP1g6HN4K1syfZvkpMWwhNirgK6daJaC178OwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZNAsGb2BQ9eTJiGfoQJyRFq/R5MB8GA1UdIwQY MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt MDIzOTk1OTA2YzQ2LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2 LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvuLwGh8 weWJOcO44NU8MI4un32esi3N7V/Yv761muMxRVlNOANsGbIjv3qqzXgTCKMUtheq Yk/E4vAO1xaF85wuOHM0u6CLw2lY1Wrz+XNVeU5LxKd46i4N0Z1xZ3kBlQCplaHp QUVw4sfeCRC8H9g1p6FoHsfXJc1a2+UPF2q2+HF80TMnhbfynudTm367Ry9/IDfu PIPuAzOB/U0LWZgbIdYTmhYuMANOwglhl2tvCBrxzZub9PbbwTDJQivquU+BFmLy SRG39cQ1WsTWa64ZGCwLNTolyO37CY+PE16+NbGk4JLa0VBV10AgbBAbC+sHQ3j9 lkV7TXMcD1qUCA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:08 2025 by rpki-client