This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json) Hash identifier: CmJsOLocdTplBDd8OESmldDN+6/0myODjqEGgJEoFd4= Subject key identifier: E3:74:7D:B9:6F:3F:A5:A7:76:C0:BD:AA:B2:9D:90:F0:3E:A3:E6:35 Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57 Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57 Certificate serial: 019AF16451897256540B61D36E1015224C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft Manifest number: 0A40 Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=) 2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=) 3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: J8BV8mvUqbE+XhPbnCeGD125mZFC2T1yrRds+c0e1kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:51:89:72:56:54:0b:61:d3:6e:10:15:22:4c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57 Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=e3747db96f3fa5a776c0bdaab29d90f03ea3e635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d9:6e:31:87:8a:dc:fd:95:0c:8b:fc:7d:fb: 6e:64:8d:c7:92:cd:99:0e:13:5c:8b:86:3c:78:68: 1b:87:47:e2:46:9d:c4:02:ca:24:d7:6d:88:e8:70: 93:58:34:66:16:d2:7f:92:16:bb:cb:27:aa:a5:25: f6:d1:bd:30:37:36:d4:0d:28:5d:87:f2:5d:36:ea: 8b:e6:a9:1f:87:7f:9a:0c:6e:05:46:e5:bc:06:14: 0f:4c:b3:bb:bc:19:dc:9d:e2:24:60:17:42:dd:32: 67:d4:07:03:cc:7d:d2:66:f6:37:95:74:24:aa:fd: ec:18:9a:08:48:b1:39:58:19:70:1b:71:dc:82:fe: bf:65:85:c9:9e:d3:8c:63:8a:61:48:b6:09:34:43: 90:69:10:46:0e:40:d2:78:98:ff:1c:e4:ed:da:f4: 8f:8f:ce:eb:49:e8:56:08:76:5c:97:59:b6:3a:37: 00:fe:b2:9b:a9:c4:47:7e:c7:c2:b7:ef:cd:cd:a2: 98:9b:95:d2:ee:57:57:92:c0:ea:f2:50:d9:fb:11: 33:66:1e:47:ac:aa:21:42:de:1a:e9:53:76:13:5e: df:5a:07:96:8a:0e:50:37:99:82:ea:38:c1:d7:02: 59:b0:60:6e:5d:33:35:89:ac:01:69:c4:01:8e:1d: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:74:7D:B9:6F:3F:A5:A7:76:C0:BD:AA:B2:9D:90:F0:3E:A3:E6:35 X509v3 Authority Key Identifier: keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7a:0e:bd:a6:64:3a:5d:6c:56:71:90:84:26:2d:b4:8d:f6: d3:96:a1:06:2d:de:2b:f6:d0:0d:12:a7:da:d0:0c:36:b9:b3: 80:0b:76:7f:96:a2:21:a5:e9:62:72:bf:30:41:95:b8:f7:a0: 1e:6f:26:a2:59:1e:2c:62:4b:3e:02:aa:61:77:39:08:e8:13: 38:fc:44:a9:d1:ea:5c:66:33:af:ae:fa:98:0f:9f:51:ab:44: a6:2d:64:95:a6:f2:cd:d4:59:b9:8a:d5:2e:02:25:a7:1a:e6: 73:a3:45:cf:5b:e5:92:ad:df:35:28:55:a8:6b:53:33:b2:3c: 41:9f:71:d9:b7:e2:33:d8:c5:50:e1:19:ee:28:f4:b4:3a:e3: 85:0d:58:2f:bd:42:0b:bb:6b:b0:aa:e9:c0:0e:d1:ba:42:88: 14:2f:92:f2:77:5f:f9:f6:8b:b1:13:a6:b0:3d:95:29:d7:f6: 2b:e9:36:90:5d:1f:ed:fa:61:00:fb:c8:75:1c:80:a1:15:50: e2:ca:62:0b:70:6a:e4:b8:af:45:24:a3:97:38:1a:b4:a4:de: a5:57:99:ac:d9:fb:2c:1c:7a:61:76:1b:6e:c0:57:d5:1b:f8: 6d:e8:f7:53:20:18:e6:b5:25:ed:75:1f:d5:ed:4b:eb:84:83: b9:e2:c3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFGJclZUC2HTbhAVIkxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk ZDNlNTcwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD EyhlMzc0N2RiOTZmM2ZhNWE3NzZjMGJkYWFiMjlkOTBmMDNlYTNlNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidluMYeK3P2VDIv8fftuZI3Hks2Z DhNci4Y8eGgbh0fiRp3EAsok122I6HCTWDRmFtJ/kha7yyeqpSX20b0wNzbUDShd h/JdNuqL5qkfh3+aDG4FRuW8BhQPTLO7vBncneIkYBdC3TJn1AcDzH3SZvY3lXQk qv3sGJoISLE5WBlwG3Hcgv6/ZYXJntOMY4phSLYJNEOQaRBGDkDSeJj/HOTt2vSP j87rSehWCHZcl1m2OjcA/rKbqcRHfsfCt+/NzaKYm5XS7ldXksDq8lDZ+xEzZh5H rKohQt4a6VN2E17fWgeWig5QN5mC6jjB1wJZsGBuXTM1iawBacQBjh0oLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON0fblvP6WndsC9qrKdkPA+o+Y1MB8GA1UdIwQY MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3 LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnoOvaZk Ol1sVnGQhCYttI3205ahBi3eK/bQDRKn2tAMNrmzgAt2f5aiIaXpYnK/MEGVuPeg Hm8molkeLGJLPgKqYXc5COgTOPxEqdHqXGYzr676mA+fUatEpi1klabyzdRZuYrV LgIlpxrmc6NFz1vlkq3fNShVqGtTM7I8QZ9x2bfiM9jFUOEZ7ij0tDrjhQ1YL71C C7trsKrpwA7RukKIFC+S8ndf+faLsROmsD2VKdf2K+k2kF0f7fphAPvIdRyAoRVQ 4spiC3Bq5LivRSSjlzgatKTepVeZrNn7LBx6YXYbbsBX1Rv4bej3UyAY5rUl7XUf 1e1L64SDueLD9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:06 2025 by rpki-client