This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft File: YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json) Hash identifier: 1lhCYZjzE9BeJ9sOe8qoLJ1wcZVOkmYWcZ2zA1+2WnE= Subject key identifier: 38:E2:7B:C0:DF:6D:DC:54:09:D3:2D:BE:2E:5E:37:C2:94:08:09:A5 Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3 Certificate issuer: /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3 Certificate serial: 019AF19B620422ECE4A1CEA29A5BB6EBF1A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft Manifest number: 0E26 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: r1cSlRT01erh5KwPNubAVqe2IQPErLnWfXjwSUr11wk=) 2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:62:04:22:ec:e4:a1:ce:a2:9a:5b:b6:eb:f1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=38e27bc0df6ddc5409d32dbe2e5e37c2940809a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:61:f5:fd:be:37:0f:49:10:a9:82:4f:02: 08:9d:d3:67:eb:d5:6d:16:b7:84:9a:5e:8a:23:dd: 18:42:cf:eb:26:60:f9:ba:d1:84:e1:0b:da:07:de: a3:18:d4:05:65:c4:39:a6:bb:b0:aa:5d:29:a8:49: 38:7d:eb:e5:57:0e:b0:ef:2a:43:9f:6e:9e:33:78: 8b:af:30:6b:22:9c:80:68:42:46:44:8c:65:80:64: bd:e1:cb:ed:e3:d9:b2:17:5f:36:13:55:05:aa:8c: 9e:50:22:d0:49:49:39:3b:73:87:47:45:1d:8e:07: 6e:6b:cb:82:f2:d6:99:9f:14:33:95:4f:84:39:62: 1d:3f:d7:08:7e:e7:6b:2d:05:bb:1a:8c:05:54:ca: 37:c2:68:83:22:b2:97:57:8c:05:27:2d:ef:79:5e: bd:e7:ea:ff:1a:98:67:3c:a2:c1:32:96:f2:24:97: f4:1a:fb:26:d7:11:8c:8a:7f:9f:ca:ae:55:f0:95: 20:ff:29:22:6b:eb:c3:02:58:eb:c3:e6:55:cb:a7: d9:11:53:e6:0c:c9:8c:04:00:f8:10:15:d4:34:c0: 51:3d:50:8c:c4:02:f5:b4:18:cb:d5:ce:d1:2b:16: e1:00:a3:e5:77:a7:d8:54:56:ba:49:45:3c:fd:53: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E2:7B:C0:DF:6D:DC:54:09:D3:2D:BE:2E:5E:37:C2:94:08:09:A5 X509v3 Authority Key Identifier: keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:24:ff:48:76:49:fa:05:28:c7:1e:e4:d6:ba:b1:c8:e7:7d: df:06:ac:08:83:e4:f2:9f:9b:76:70:e4:7f:a6:e3:4b:6d:41: 8b:41:17:da:a9:8d:6d:79:75:51:c0:1c:c8:07:54:db:db:3a: 48:9f:90:e8:15:a5:e5:c9:05:46:01:0f:e6:d0:6c:fd:86:5e: 92:db:bc:8d:70:74:d2:0d:c0:98:01:70:38:e3:cc:d6:58:c7: 43:e0:73:ae:2b:9e:2a:0d:e5:6f:28:1d:59:6b:f8:63:3b:cf: b5:f3:1e:eb:19:cf:2c:c8:69:e0:10:c3:b3:c6:aa:9d:29:51: 38:22:cd:18:6f:cf:09:c4:c8:d5:95:d6:d1:d6:f0:ce:cd:6f: e5:17:6b:6b:4e:66:87:c0:e9:1e:80:a0:13:92:ee:d1:e8:13: a2:36:b6:e0:13:48:66:a2:ac:f0:53:0c:ff:c5:6f:03:dd:2f: 6b:62:cc:db:4d:53:05:2b:aa:04:2b:c9:71:d2:a8:c4:0c:d7: 19:3a:d0:22:fc:4c:05:2e:ae:c8:c7:20:da:83:5c:0f:81:69: 85:3e:94:8e:43:73:0d:be:9b:cb:43:97:06:95:b6:e0:1f:5c: cc:49:d1:5b:92:21:ff:11:53:0f:19:e8:b6:16:a6:8d:bf:16: 49:9c:ee:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2IEIuzkoc6imlu26/GpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMGY4Zjk5ZmNhNjlhYTczZjg4YTUzMWRiNDZkMjI4YTdl MmMzZDMwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EygzOGUyN2JjMGRmNmRkYzU0MDlkMzJkYmUyZTVlMzdjMjk0MDgwOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Jh9f2+Nw9JEKmCTwIIndNn69Vt FreEml6KI90YQs/rJmD5utGE4QvaB96jGNQFZcQ5pruwql0pqEk4fevlVw6w7ypD n26eM3iLrzBrIpyAaEJGRIxlgGS94cvt49myF182E1UFqoyeUCLQSUk5O3OHR0Ud jgdua8uC8taZnxQzlU+EOWIdP9cIfudrLQW7GowFVMo3wmiDIrKXV4wFJy3veV69 5+r/GphnPKLBMpbyJJf0Gvsm1xGMin+fyq5V8JUg/ykia+vDAljrw+ZVy6fZEVPm DMmMBAD4EBXUNMBRPVCMxAL1tBjL1c7RKxbhAKPld6fYVFa6SUU8/VMYEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjie8DfbdxUCdMtvi5eN8KUCAmlMB8GA1UdIwQY MBaAFGEPj5n8ppqnP4ilMdtG0iin4sPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgt NzlhMGE1MjhlMGE0LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kOTQ2ODEtYWJlNi00ZTIzLTliOTgtNzlhMGE1MjhlMGE0 LzEvWVEtUG1meW1tcWNfaUtVeDIwYlNLS2ZpdzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCT/SHZJ +gUoxx7k1rqxyOd93wasCIPk8p+bdnDkf6bjS21Bi0EX2qmNbXl1UcAcyAdU29s6 SJ+Q6BWl5ckFRgEP5tBs/YZektu8jXB00g3AmAFwOOPM1ljHQ+BzriueKg3lbygd WWv4YzvPtfMe6xnPLMhp4BDDs8aqnSlROCLNGG/PCcTI1ZXW0dbwzs1v5Rdra05m h8DpHoCgE5Lu0egToja24BNIZqKs8FMM/8VvA90va2LM201TBSuqBCvJcdKoxAzX GTrQIvxMBS6uyMcg2oNcD4FphT6UjkNzDb6by0OXBpW24B9czEnRW5Ih/xFTDxno thamjb8WSZzu2g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:03 2025 by rpki-client