This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json) Hash identifier: fHft4JcHf/ogAzjCY3511GGvLf80MBtdpQ6m1j9b3iw= Subject key identifier: D5:2B:98:F6:C4:4D:21:65:10:40:E6:DD:EF:0E:8C:D0:1D:C5:7C:11 Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Certificate serial: 019AF3F8024B67E5F32517811C419432D74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft Manifest number: 126C Signing time: Sat 06 Dec 2025 14:01:48 +0000 Manifest this update: Sat 06 Dec 2025 14:01:48 +0000 Manifest next update: Sun 07 Dec 2025 14:01:48 +0000 Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=) 2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: K5KF0KFwSIPQSJTOD+gz9PlvxjE3M6R4L7O+ykHFSpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:02:4b:67:e5:f3:25:17:81:1c:41:94:32:d7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6 Validity Not Before: Dec 6 14:01:48 2025 GMT Not After : Dec 7 14:01:48 2025 GMT Subject: CN=d52b98f6c44d21651040e6ddef0e8cd01dc57c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:7d:90:dd:65:c0:3e:fa:e6:51:0d:08:27: c0:76:90:93:5a:64:83:95:00:c1:9f:a7:e6:26:7a: 8b:6e:15:0b:c3:cc:73:e4:1e:65:e6:67:82:f9:49: f8:4c:e6:c5:e4:2a:d4:5c:d5:7b:6d:7a:98:f6:47: 9f:f6:4c:a3:09:a5:44:e4:a7:df:30:03:71:6d:f8: de:4c:42:52:8f:6c:b8:e1:23:a0:0f:5b:4e:8c:87: b5:a3:fd:e4:b2:5d:f7:bf:b8:5e:e7:b1:21:2f:8f: 0a:36:81:be:a2:af:7a:16:bc:08:a2:bf:c2:43:1c: 66:bc:57:b9:87:61:31:2a:c2:aa:07:c9:f8:97:8c: d9:04:72:a9:bb:f1:7c:fe:c6:7c:a7:8d:61:33:6e: 1b:ce:7c:68:06:aa:e4:75:91:63:df:d3:69:ae:08: 67:db:5c:d0:b2:ca:b6:92:81:b5:c8:64:3a:48:6e: 41:f1:4a:f7:80:15:da:78:e1:4b:1d:25:9d:f5:fd: 51:f8:f3:fa:cf:ae:bf:8e:94:b6:10:6e:8a:f3:fc: 91:09:07:ba:2b:22:5b:c8:4a:49:2d:29:df:19:f5: 72:24:10:01:aa:d2:b3:e7:95:b9:da:d0:29:a2:02: cc:46:83:0c:68:d8:e5:de:d4:e0:eb:24:19:90:b3: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2B:98:F6:C4:4D:21:65:10:40:E6:DD:EF:0E:8C:D0:1D:C5:7C:11 X509v3 Authority Key Identifier: keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:a3:8b:db:2e:03:b7:ae:0b:63:a6:4f:51:c7:23:5f:ce:e4: de:fb:ef:6c:f2:17:58:da:d1:ee:1f:71:de:38:5c:a7:5a:6c: ce:80:9a:4d:12:d8:87:78:0c:f5:d3:35:f5:9f:5e:ae:01:c9: f9:63:c3:dc:d6:ca:b3:73:57:cb:d1:e4:66:25:cb:2b:90:3e: 7b:e9:19:94:65:c0:28:a9:bd:24:e1:4d:a7:48:0c:aa:3a:74: 63:86:f5:77:f1:fa:63:23:fe:74:07:56:b1:87:c6:27:b7:d8: b1:07:c4:b5:aa:76:08:a3:85:af:08:e0:ef:ac:08:00:a2:9a: e1:60:c2:09:03:c8:e5:56:e4:ac:a5:60:9b:fa:f5:0a:af:46: 8d:a7:2b:e1:ae:a3:3d:d8:42:82:ae:1a:db:c2:ff:bc:e5:9b: a4:c8:69:ee:8c:2e:0b:59:bc:e1:9f:06:e4:bd:be:26:5e:37: 2b:26:c0:7b:38:17:f8:f6:36:19:83:4d:bd:81:cc:e5:f4:70: c4:4b:9b:05:53:00:d7:ad:0b:71:95:ca:61:bc:81:ca:6a:6d: a3:61:81:b0:42:69:f8:41:03:24:f5:77:c6:5d:ef:d4:bd:9b: 7e:a1:92:0c:ab:83:49:05:af:33:22:81:90:bb:ad:5e:9f:54: 7d:ac:08:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AJLZ+XzJReBHEGUMtdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy NGU2YTYwHhcNMjUxMjA2MTQwMTQ4WhcNMjUxMjA3MTQwMTQ4WjAzMTEwLwYDVQQD EyhkNTJiOThmNmM0NGQyMTY1MTA0MGU2ZGRlZjBlOGNkMDFkYzU3YzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj19kN1lwD765lENCCfAdpCTWmSD lQDBn6fmJnqLbhULw8xz5B5l5meC+Un4TObF5CrUXNV7bXqY9kef9kyjCaVE5Kff MANxbfjeTEJSj2y44SOgD1tOjIe1o/3ksl33v7he57EhL48KNoG+oq96FrwIor/C QxxmvFe5h2ExKsKqB8n4l4zZBHKpu/F8/sZ8p41hM24bznxoBqrkdZFj39Nprghn 21zQssq2koG1yGQ6SG5B8Ur3gBXaeOFLHSWd9f1R+PP6z66/jpS2EG6K8/yRCQe6 KyJbyEpJLSnfGfVyJBABqtKz55W52tApogLMRoMMaNjl3tTg6yQZkLMOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUrmPbETSFlEEDm3e8OjNAdxXwRMB8GA1UdIwQY MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1 LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA36OL2y4D t64LY6ZPUccjX87k3vvvbPIXWNrR7h9x3jhcp1pszoCaTRLYh3gM9dM19Z9ergHJ +WPD3NbKs3NXy9HkZiXLK5A+e+kZlGXAKKm9JOFNp0gMqjp0Y4b1d/H6YyP+dAdW sYfGJ7fYsQfEtap2CKOFrwjg76wIAKKa4WDCCQPI5VbkrKVgm/r1Cq9Gjacr4a6j PdhCgq4a28L/vOWbpMhp7owuC1m84Z8G5L2+Jl43KybAezgX+PY2GYNNvYHM5fRw xEubBVMA160LcZXKYbyBympto2GBsEJp+EEDJPV3xl3v1L2bfqGSDKuDSQWvMyKB kLutXp9UfawIxg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:36 2025 by rpki-client