This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json) Hash identifier: ZFVJsLtnnrStd7WaHCoCgrhy0aRKnaRW+FBNHfypvsI= Subject key identifier: EA:72:4D:BA:BC:8D:71:CF:D1:60:3A:CC:BC:E6:39:C3:BF:37:AD:AB Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Certificate serial: 019B31C37CF98E4039F6DC2AFB6F32FFE9AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft Manifest number: 128C Signing time: Thu 18 Dec 2025 14:00:53 +0000 Manifest this update: Thu 18 Dec 2025 14:00:53 +0000 Manifest next update: Fri 19 Dec 2025 14:00:53 +0000 Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=) 2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: 1oknMYfHgDDcj6WVWj6m2s9+HfxwZb2Vi/fI+JKtPYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:7c:f9:8e:40:39:f6:dc:2a:fb:6f:32:ff:e9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Validity Not Before: Dec 18 14:00:53 2025 GMT Not After : Dec 19 14:00:53 2025 GMT Subject: CN=ea724dbabc8d71cfd1603accbce639c3bf37adab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:cd:22:49:5e:95:68:d4:28:c6:d5:cc:3a: 68:38:33:6c:71:ca:ae:b1:d3:32:d7:a5:07:b1:61: b5:f5:2f:c3:a0:a2:0b:ac:90:09:d1:01:3b:98:cb: 21:8f:22:6c:31:04:80:5d:6e:63:e4:44:81:de:1d: f8:d6:32:d3:df:06:be:08:df:fd:1b:65:30:b6:0c: 3a:74:49:7b:04:c8:52:6f:15:ee:14:f4:4a:cc:6a: 2a:21:c8:6f:37:58:b6:16:b0:d6:32:7d:db:7a:cb: bf:5d:23:d2:4d:d3:36:f0:62:8a:f7:97:ba:fa:f3: cb:91:db:df:7b:db:59:25:8e:79:7c:33:8b:c1:c7: 4c:f9:a0:86:d3:4c:9d:e0:e4:0c:77:b2:46:f3:a7: e2:83:6d:99:39:d1:29:c5:3e:2d:bb:79:e6:f2:cb: 5b:1e:18:8d:ff:91:48:c7:98:da:9c:c8:73:ec:0d: f9:15:18:d5:24:dd:30:3b:c0:b2:15:6d:c3:ea:df: 02:74:b7:b9:be:03:d7:14:f9:c4:6b:f1:3c:42:46: 61:6e:19:eb:fe:bb:18:fc:8d:1f:14:6d:86:97:55: b3:ed:13:71:8c:90:fc:43:5a:ef:40:68:a9:62:a7: 2d:44:c1:39:47:98:c1:8a:c2:86:af:76:58:f6:7b: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:72:4D:BA:BC:8D:71:CF:D1:60:3A:CC:BC:E6:39:C3:BF:37:AD:AB X509v3 Authority Key Identifier: keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5a:67:27:24:9a:16:ce:cd:a3:b6:1f:81:e7:e1:cc:5c:84: 57:f9:24:1a:35:55:e1:3e:2a:1d:06:7b:41:51:6c:f0:95:fc: 42:f9:de:a8:98:11:05:f2:00:34:e0:86:39:15:87:12:bc:c9: 06:6b:03:9c:ed:55:ae:a2:29:4a:cf:f1:9e:34:1f:fb:20:d6: a3:39:94:b8:d9:d8:cc:b5:85:f8:af:9c:bc:8a:51:7e:b0:34: ee:48:ae:e8:98:08:24:e2:5d:98:c7:ab:54:17:f6:4f:4f:39: c7:2a:de:96:96:73:41:bf:b9:c0:be:ff:5d:5f:75:2b:32:c4: 6c:6f:67:56:e0:2e:76:ef:cc:53:7d:41:d7:18:f9:cc:3a:84: b6:78:e9:d5:f7:74:f9:e9:bc:9e:90:e5:78:80:0c:3c:54:19: df:7a:84:84:9e:a0:eb:03:ac:b8:21:11:4f:22:5a:90:30:c0: 50:ef:01:a2:21:c3:56:a0:60:bf:10:b9:07:c9:8b:a0:84:f0: ba:43:70:7f:5c:19:b6:f4:34:63:ea:d2:2e:bb:22:dc:3c:8f: 74:b3:a6:50:c1:57:37:d1:d4:2d:54:29:02:06:1c:3d:20:30: 8c:92:14:0a:de:99:3d:fe:31:f4:05:57:33:d6:de:66:ac:3b: dd:69:30:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw3z5jkA59twq+28y/+mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy NGU2YTYwHhcNMjUxMjE4MTQwMDUzWhcNMjUxMjE5MTQwMDUzWjAzMTEwLwYDVQQD EyhlYTcyNGRiYWJjOGQ3MWNmZDE2MDNhY2NiY2U2MzljM2JmMzdhZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUfNIklelWjUKMbVzDpoODNsccqu sdMy16UHsWG19S/DoKILrJAJ0QE7mMshjyJsMQSAXW5j5ESB3h341jLT3wa+CN/9 G2Uwtgw6dEl7BMhSbxXuFPRKzGoqIchvN1i2FrDWMn3besu/XSPSTdM28GKK95e6 +vPLkdvfe9tZJY55fDOLwcdM+aCG00yd4OQMd7JG86fig22ZOdEpxT4tu3nm8stb HhiN/5FIx5janMhz7A35FRjVJN0wO8CyFW3D6t8CdLe5vgPXFPnEa/E8QkZhbhnr /rsY/I0fFG2Gl1Wz7RNxjJD8Q1rvQGipYqctRME5R5jBisKGr3ZY9nvOiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpyTbq8jXHP0WA6zLzmOcO/N62rMB8GA1UdIwQY MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1 LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFpnJySa Fs7No7YfgefhzFyEV/kkGjVV4T4qHQZ7QVFs8JX8QvneqJgRBfIANOCGORWHErzJ BmsDnO1VrqIpSs/xnjQf+yDWozmUuNnYzLWF+K+cvIpRfrA07kiu6JgIJOJdmMer VBf2T085xyrelpZzQb+5wL7/XV91KzLEbG9nVuAudu/MU31B1xj5zDqEtnjp1fd0 +em8npDleIAMPFQZ33qEhJ6g6wOsuCERTyJakDDAUO8BoiHDVqBgvxC5B8mLoITw ukNwf1wZtvQ0Y+rSLrsi3DyPdLOmUMFXN9HULVQpAgYcPSAwjJIUCt6ZPf4x9AVX M9beZqw73WkwzA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:07:22 2025 by rpki-client