This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft File: Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json) Hash identifier: QLTpmPpUKLAaxO5FedIxrWXuRnZ+0viW0Qx13xXhZYQ= Subject key identifier: 84:D7:1B:9D:A1:42:9F:8C:8D:D7:B4:17:F2:25:0A:B4:AA:1D:CC:26 Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC Certificate issuer: /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc Certificate serial: 019AF12E53E74A5FC2E96D6C10B1705914A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft Manifest number: 1657 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: 8SYmsxQxgdXPjcU8OrpwerZ7T5xp5T3OHUPhxdAujWM=) 2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:53:e7:4a:5f:c2:e9:6d:6c:10:b1:70:59:14:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=84d71b9da1429f8c8dd7b417f2250ab4aa1dcc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:60:60:ee:7e:9f:23:e1:83:11:6f:c2:18: 95:5b:92:83:19:64:82:2a:39:c6:c6:75:62:9e:3c: 3a:d7:b2:f4:9c:2c:28:98:64:d9:a7:f1:0e:45:9e: fb:23:c4:3d:c3:4c:4f:9f:08:20:ec:bc:cf:16:a0: 36:a7:1a:7b:3a:8f:56:7a:e5:82:5d:0e:4b:80:55: 80:ae:10:84:0f:bb:d4:f3:60:0a:d5:c0:10:45:73: e6:17:fd:1a:e0:ee:61:8d:4a:6f:71:c7:37:98:a0: e7:62:fe:eb:d4:4d:b3:bd:27:ec:8b:e1:70:b6:fc: a7:55:31:20:22:87:fa:10:e9:a8:cf:6f:10:8c:4f: c1:ba:28:41:db:42:58:a8:61:af:d1:52:3e:3b:a4: 8c:09:06:7c:07:59:d9:25:51:8b:2a:3c:94:62:63: a8:d7:2c:93:da:b5:c8:d2:70:69:9e:b7:9a:33:3d: 01:ee:a9:e0:39:98:5c:bc:2e:50:56:8b:23:35:8a: 86:97:a4:26:30:6b:6f:58:39:e7:95:6c:ae:0f:b4: 39:71:e0:8f:26:5b:9e:71:fc:50:10:4f:33:f2:db: e3:c9:30:45:2e:05:19:15:5c:c4:94:fe:f6:2e:f3: 33:51:cd:42:78:9b:ae:aa:7e:06:ba:a3:14:ce:4b: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D7:1B:9D:A1:42:9F:8C:8D:D7:B4:17:F2:25:0A:B4:AA:1D:CC:26 X509v3 Authority Key Identifier: keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f7:c4:d4:3c:4a:7a:0b:00:e3:1c:17:21:94:bf:bc:1e:24: 41:a7:51:f7:3b:29:da:e2:0f:d9:e8:9d:68:7f:b8:ba:b4:2c: 15:06:a7:48:8d:b5:cd:5f:7c:ab:8a:bd:99:02:f2:f1:8d:62: 40:7a:a9:c9:92:d2:83:83:c4:99:45:b3:1a:73:fd:60:35:f4: 06:6e:ea:e5:14:b5:45:39:74:73:99:23:00:ec:dc:e8:94:ae: 0c:d2:81:e6:ea:88:19:46:bd:a0:75:1b:8e:9a:07:07:e4:92: d9:b4:44:ba:74:b8:bd:f0:13:74:04:d1:a5:74:61:86:33:76: f1:ba:f7:f1:b0:f8:d1:29:1f:59:49:3a:80:02:bc:c3:6a:ae: fa:15:43:3f:19:fe:4d:92:0b:b5:39:5b:26:b3:a8:0b:0e:3a: 8d:f0:22:61:3c:3e:0d:ac:79:7b:f0:78:c8:1a:83:5d:1d:bf: 8b:c1:98:ee:fa:47:aa:96:b1:a0:62:a2:b9:f0:16:0d:34:84: 37:36:06:1b:80:23:b9:12:9c:9a:0f:9f:3c:33:58:06:aa:9e: c6:dd:f6:39:4e:d2:06:ce:ad:f8:35:e3:5a:20:73:2b:7c:d6: 86:6f:87:48:78:e4:f9:85:99:a8:5c:03:1b:03:02:1d:98:98: 94:1c:f0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlPnSl/C6W1sELFwWRSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZGZlNTM4ODRiOTVhMDlmNjZhNDE2ZTE0ZjU2YzZiMGY3 ODlhZmMwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD Eyg4NGQ3MWI5ZGExNDI5ZjhjOGRkN2I0MTdmMjI1MGFiNGFhMWRjYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPBgYO5+nyPhgxFvwhiVW5KDGWSC KjnGxnVinjw617L0nCwomGTZp/EORZ77I8Q9w0xPnwgg7LzPFqA2pxp7Oo9WeuWC XQ5LgFWArhCED7vU82AK1cAQRXPmF/0a4O5hjUpvccc3mKDnYv7r1E2zvSfsi+Fw tvynVTEgIof6EOmoz28QjE/BuihB20JYqGGv0VI+O6SMCQZ8B1nZJVGLKjyUYmOo 1yyT2rXI0nBpnreaMz0B7qngOZhcvC5QVosjNYqGl6QmMGtvWDnnlWyuD7Q5ceCP JluecfxQEE8z8tvjyTBFLgUZFVzElP72LvMzUc1CeJuuqn4GuqMUzkuZXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITXG52hQp+Mjde0F/IlCrSqHcwmMB8GA1UdIwQY MBaAFGLf5TiEuVoJ9mpBbhT1bGsPeJr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmIt MjkzNmFhMjI3NzY1LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mYjAwMzItYmM0NS00NThmLWFiMmItMjkzNmFhMjI3NzY1 LzEvWXRfbE9JUzVXZ24yYWtGdUZQVnNhdzk0bXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/fE1DxK egsA4xwXIZS/vB4kQadR9zsp2uIP2eidaH+4urQsFQanSI21zV98q4q9mQLy8Y1i QHqpyZLSg4PEmUWzGnP9YDX0Bm7q5RS1RTl0c5kjAOzc6JSuDNKB5uqIGUa9oHUb jpoHB+SS2bREunS4vfATdATRpXRhhjN28br38bD40SkfWUk6gAK8w2qu+hVDPxn+ TZILtTlbJrOoCw46jfAiYTw+Dax5e/B4yBqDXR2/i8GY7vpHqpaxoGKiufAWDTSE NzYGG4AjuRKcmg+fPDNYBqqext32OU7SBs6t+DXjWiBzK3zWhm+HSHjk+YWZqFwD GwMCHZiYlBzw0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:11 2025 by rpki-client