This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft File: YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft (raw, json) Hash identifier: IAKBIq3zPghJ/c8I+Zqt3hDGc7be8bz8jyuCHETXxgE= Subject key identifier: 61:0B:15:15:5F:75:7E:F2:3B:BC:3D:BA:2E:D6:12:94:E1:F1:D7:2E Authority key identifier: 62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 Certificate issuer: /CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Certificate serial: 019AF38A12D434AF5B00A4BD79A2475365BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: Fd7jj4UgNX8KUEunLGyTOECk2zM.roa (hash: 4ykrgJNWkElQuXhdhPDtDMLnIYLOev4Sm6TYtDwClXU=) 2: YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl (hash: boK6WWDQzZ0ME9XiI8sLOwVLpnRMk1UNuWKssOTkG74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:12:d4:34:af:5b:00:a4:bd:79:a2:47:53:65:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6294db0b87f6aeecce7fb22fb1b1421d906a6350 Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=610b15155f757ef23bbc3dba2ed61294e1f1d72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:3e:40:8b:77:32:2a:df:51:97:94:6b:53: 5a:db:98:ba:a1:dd:23:1e:6a:5a:97:d8:8c:be:1a: 4f:4c:ca:e0:ae:48:cd:a5:0f:84:28:03:42:56:1c: 93:09:95:41:25:e8:9e:76:5b:1d:02:90:53:5e:89: 7e:a1:d1:5f:db:c7:34:51:46:e0:a8:c3:71:34:fd: 05:e8:3f:9d:80:38:9b:4f:ac:56:db:a0:f8:21:29: d2:a2:59:bc:eb:7e:d0:32:72:0e:3e:1a:b6:7b:9f: a1:b8:d7:23:62:d0:8f:7b:0e:08:69:e8:9a:c9:1e: 1a:57:47:51:ab:05:69:f4:f3:85:d0:fb:7a:94:76: 08:22:74:3d:c9:a9:2f:b0:31:f2:64:ee:5e:83:72: 33:4b:13:c6:fd:7d:ba:99:8e:01:48:bd:40:e1:40: cb:11:ed:24:44:40:ce:56:48:f9:0a:90:69:f7:61: e2:e8:52:dd:2c:47:09:e8:14:15:a4:04:d0:0e:5f: c9:2e:2a:84:05:28:95:2b:4e:04:2f:8f:e6:5c:fd: d6:08:f9:b6:b3:36:a9:60:76:28:3f:9d:ce:e9:70: 66:bd:a0:b8:13:ad:9f:4d:73:e3:79:5b:77:78:a8: a9:aa:4b:1c:5b:5c:07:f8:ff:1a:d2:67:67:00:18: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0B:15:15:5F:75:7E:F2:3B:BC:3D:BA:2E:D6:12:94:E1:F1:D7:2E X509v3 Authority Key Identifier: keyid:62:94:DB:0B:87:F6:AE:EC:CE:7F:B2:2F:B1:B1:42:1D:90:6A:63:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpTbC4f2ruzOf7IvsbFCHZBqY1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/53d1a5-9c61-4ff2-b21b-70c95209fe89/1/YpTbC4f2ruzOf7IvsbFCHZBqY1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a2:c9:ab:d3:b1:a7:57:39:13:01:e5:78:22:78:cf:61:81: 37:21:33:8a:e4:e4:11:59:7e:d5:53:8c:d4:d7:a0:17:5f:76: 86:bb:f2:59:a8:79:6d:a0:d5:a8:26:5b:82:c3:07:d3:33:fb: ca:14:63:f0:7e:f9:fd:bf:27:b7:0e:52:e4:eb:a5:30:f6:30: 20:c9:51:8a:d2:68:c2:86:da:b3:32:97:04:13:69:1f:b7:2c: 6e:32:d3:53:1b:6b:cb:f1:be:42:08:a3:b0:f3:2f:76:ee:67: c7:be:9f:90:7d:86:ea:c9:ce:da:ea:8c:f1:fa:7d:cc:56:78: c1:4f:49:0b:97:f4:0e:cb:7b:24:54:7f:30:b6:9f:9b:e9:4b: 87:c8:f9:03:a3:7b:8e:c9:80:34:ce:cd:21:2e:52:b8:b7:8a: b7:12:54:6f:06:fa:5f:63:6a:87:ff:aa:57:e9:52:dc:cb:10: 19:e0:83:0f:dc:63:d5:70:bf:a0:55:4f:59:ad:b8:4e:fa:62: d4:a8:af:10:50:9c:6a:b0:c0:8f:96:83:4e:24:cf:a0:4e:5b: ca:b8:ee:a3:37:9b:81:b9:36:60:0e:9a:b1:88:12:ac:79:c9: da:64:32:6b:ab:ba:db:30:7c:cb:60:3c:34:51:33:a0:20:2d: 0d:4a:34:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihLUNK9bAKS9eaJHU2W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOTRkYjBiODdmNmFlZWNjZTdmYjIyZmIxYjE0MjFkOTA2 YTYzNTAwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD Eyg2MTBiMTUxNTVmNzU3ZWYyM2JiYzNkYmEyZWQ2MTI5NGUxZjFkNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMM+QIt3MirfUZeUa1Na25i6od0j Hmpal9iMvhpPTMrgrkjNpQ+EKANCVhyTCZVBJeiedlsdApBTXol+odFf28c0UUbg qMNxNP0F6D+dgDibT6xW26D4ISnSolm8637QMnIOPhq2e5+huNcjYtCPew4Iaeia yR4aV0dRqwVp9POF0Pt6lHYIInQ9yakvsDHyZO5eg3IzSxPG/X26mY4BSL1A4UDL Ee0kREDOVkj5CpBp92Hi6FLdLEcJ6BQVpATQDl/JLiqEBSiVK04EL4/mXP3WCPm2 szapYHYoP53O6XBmvaC4E62fTXPjeVt3eKipqkscW1wH+P8a0mdnABjFjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGELFRVfdX7yO7w9ui7WEpTh8dcuMB8GA1UdIwQY MBaAFGKU2wuH9q7szn+yL7GxQh2QamNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81M2QxYTUtOWM2MS00ZmYyLWIyMWIt NzBjOTUyMDlmZTg5LzEvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81M2QxYTUtOWM2MS00ZmYyLWIyMWItNzBjOTUyMDlmZTg5 LzEvWXBUYkM0ZjJydXpPZjdJdnNiRkNIWkJxWTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaLJq9Ox p1c5EwHleCJ4z2GBNyEziuTkEVl+1VOM1NegF192hrvyWah5baDVqCZbgsMH0zP7 yhRj8H75/b8ntw5S5OulMPYwIMlRitJowobaszKXBBNpH7csbjLTUxtry/G+Qgij sPMvdu5nx76fkH2G6snO2uqM8fp9zFZ4wU9JC5f0Dst7JFR/MLafm+lLh8j5A6N7 jsmANM7NIS5SuLeKtxJUbwb6X2Nqh/+qV+lS3MsQGeCDD9xj1XC/oFVPWa24Tvpi 1KivEFCcarDAj5aDTiTPoE5byrjuozebgbk2YA6asYgSrHnJ2mQya6u62zB8y2A8 NFEzoCAtDUo0ig== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:58 2025 by rpki-client