This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft File: YPclN-3x3At_aURTRQvKSu74P2Q.mft (raw, json) Hash identifier: VF99gpivDgiak/5Ewa5jq2X+jllM7Si5CHb5n9lubCw= Subject key identifier: CF:BD:41:01:55:24:E1:4A:0C:35:50:FD:3F:4E:93:D7:B4:D4:88:CC Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64 Certificate issuer: /CN=60f72537edf1dc0b7f694453450bca4aeef83f64 Certificate serial: 019AF163F9F2AA73FB54F279D2724C1199A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft Manifest number: 0BF1 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: 64MeW97pL92-_QUPEgapyM7HNao.roa (hash: gMWV3xN0pHUk4BWbscqYu+HnLvJWI7ZvfzjkigsBbmk=) 2: YPclN-3x3At_aURTRQvKSu74P2Q.crl (hash: MCusU7ApScDkU/IsoLs0UDaVcIpyi5txe4H+yvYm+w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f9:f2:aa:73:fb:54:f2:79:d2:72:4c:11:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64 Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=cfbd41015524e14a0c3550fd3f4e93d7b4d488cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:e0:48:6d:e1:ab:73:75:8a:13:5e:c5:d3: df:72:fd:8a:5b:2b:94:4d:de:66:ae:27:a0:69:dc: ac:5e:da:d9:4b:aa:2c:0a:a9:50:88:0b:8f:a1:8b: 95:dc:53:13:d4:14:43:48:96:03:e5:2f:f3:65:9d: 97:fa:48:c4:63:17:14:3b:98:fb:92:02:b6:f9:a0: 46:1e:da:f9:ac:e9:12:93:5e:df:e5:59:a2:43:49: 2c:54:7e:b4:0b:ce:ee:cb:d1:d0:0d:3b:ab:e1:69: d4:b5:b9:85:6a:0b:da:bf:b1:66:f2:e6:fd:eb:fa: 5e:0f:65:b2:be:a8:a3:bf:c1:44:83:24:f4:da:f9: 2e:f4:90:5f:2c:d6:47:40:a0:aa:9b:ea:51:79:7d: e4:43:85:4c:69:0a:83:8d:ca:41:d2:2f:93:e2:15: 4b:0b:a2:cd:c7:59:84:1d:6e:dc:0f:ed:ba:d4:05: ab:6c:85:3e:59:df:96:23:6f:f3:ca:06:33:ae:c6: 37:03:67:a6:94:60:88:eb:de:bf:41:0c:1c:b8:d0: f6:b8:f5:b6:d6:59:c2:2a:ea:d3:7b:f7:56:ef:dd: a3:cf:a7:40:22:e8:13:28:d3:25:d2:da:77:b3:f5: 4f:58:2e:be:c7:d5:45:23:c5:bd:16:d2:0e:af:6a: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BD:41:01:55:24:E1:4A:0C:35:50:FD:3F:4E:93:D7:B4:D4:88:CC X509v3 Authority Key Identifier: keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9a:13:8b:19:7f:d8:e1:c0:b4:ea:45:d4:1a:d2:13:1e:74: ee:0d:95:04:b9:57:3e:5b:7d:d3:3f:33:93:e5:f8:fc:75:5f: 76:8d:4a:87:a4:77:ff:22:64:bc:ce:9c:de:15:ad:ac:1e:3e: 1a:5e:19:05:da:5a:dc:ce:24:33:ef:1c:ca:17:83:aa:d5:ee: dd:7d:77:69:57:5f:2d:5c:93:74:50:5a:ec:e4:3b:5d:2c:d6: 9d:2f:7e:93:af:9e:fb:88:76:4e:f9:2c:36:70:6d:f0:ef:94: 6d:03:8b:66:3f:3d:fb:24:14:94:b0:9d:1b:d5:d1:ef:47:ed: 33:1b:31:6a:9b:d2:45:2b:fe:9e:1f:7c:85:fb:e9:71:57:ee: f0:dd:d9:6f:ce:83:f4:27:e2:bd:7b:f4:cf:de:03:58:22:0e: bc:33:fd:cc:73:9c:7a:34:22:f8:f0:cc:0c:b1:fb:9e:c7:98: 80:fa:bd:d7:85:a5:39:28:e1:61:42:f0:f2:ee:18:de:b9:b0: 64:32:be:e9:6e:5a:1c:b8:f5:fc:2a:21:99:bd:95:ec:8f:a8: 55:6a:c1:a2:87:60:78:fb:0a:00:c3:4c:ca:fa:a4:c7:26:be: 2a:27:27:c7:73:8c:45:3b:41:b2:d9:b9:a7:cc:ba:76:44:49: b0:15:ed:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/nyqnP7VPJ50nJMEZmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjcyNTM3ZWRmMWRjMGI3ZjY5NDQ1MzQ1MGJjYTRhZWVm ODNmNjQwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhjZmJkNDEwMTU1MjRlMTRhMGMzNTUwZmQzZjRlOTNkN2I0ZDQ4OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyHgSG3hq3N1ihNexdPfcv2KWyuU Td5mriegadysXtrZS6osCqlQiAuPoYuV3FMT1BRDSJYD5S/zZZ2X+kjEYxcUO5j7 kgK2+aBGHtr5rOkSk17f5VmiQ0ksVH60C87uy9HQDTur4WnUtbmFagvav7Fm8ub9 6/peD2Wyvqijv8FEgyT02vku9JBfLNZHQKCqm+pReX3kQ4VMaQqDjcpB0i+T4hVL C6LNx1mEHW7cD+261AWrbIU+Wd+WI2/zygYzrsY3A2emlGCI696/QQwcuND2uPW2 1lnCKurTe/dW792jz6dAIugTKNMl0tp3s/VPWC6+x9VFI8W9FtIOr2oOwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+9QQFVJOFKDDVQ/T9Ok9e01IjMMB8GA1UdIwQY MBaAFGD3JTft8dwLf2lEU0ULykru+D9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iMTAxNWQtNDEyMi00MTc0LTgyYTUt NGJiZjY0NWIxMGQzLzEvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9iMTAxNWQtNDEyMi00MTc0LTgyYTUtNGJiZjY0NWIxMGQz LzEvWVBjbE4tM3gzQXRfYVVSVFJRdktTdTc0UDJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpoTixl/ 2OHAtOpF1BrSEx507g2VBLlXPlt90z8zk+X4/HVfdo1Kh6R3/yJkvM6c3hWtrB4+ Gl4ZBdpa3M4kM+8cyheDqtXu3X13aVdfLVyTdFBa7OQ7XSzWnS9+k6+e+4h2Tvks NnBt8O+UbQOLZj89+yQUlLCdG9XR70ftMxsxapvSRSv+nh98hfvpcVfu8N3Zb86D 9CfivXv0z94DWCIOvDP9zHOcejQi+PDMDLH7nseYgPq914WlOSjhYULw8u4Y3rmw ZDK+6W5aHLj1/Cohmb2V7I+oVWrBoodgePsKAMNMyvqkxya+Kicnx3OMRTtBstm5 p8y6dkRJsBXtvw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:04 2025 by rpki-client