This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft File: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json) Hash identifier: jtDZNfYWBdpSZ8zk6xces89RaXKdQvWxMIj1CfRGeLw= Subject key identifier: D2:86:21:63:34:A2:CB:2A:10:26:98:FB:4F:C1:BB:C0:AD:98:57:E4 Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 Certificate issuer: /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Certificate serial: 019AF1641A3E11EC72731E277683ABDA2948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft Manifest number: 02DC Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=) 2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: 75eFxz3p7IRiNoPcVB6Be1Tm7eGhKUBskTcfbzgk7PI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1a:3e:11:ec:72:73:1e:27:76:83:ab:da:29:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7 Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=d286216334a2cb2a102698fb4fc1bbc0ad9857e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:24:ee:2d:a4:68:a5:79:29:9f:91:68:14: 53:77:8c:96:cb:59:e5:59:f1:cb:8a:fa:72:26:dc: 36:66:ab:ee:c1:85:31:31:ff:60:68:e2:73:d0:21: 53:2c:a2:b1:c2:7d:4e:2b:c2:a3:9e:90:af:ba:d2: 12:81:65:d3:1f:65:e2:8f:f4:bc:14:1d:3e:3f:f3: cc:f9:41:8b:04:73:4b:9f:93:3a:05:f0:65:8a:0a: ca:43:e2:95:55:ba:ae:18:70:9b:c2:f0:6f:b5:59: b3:96:35:f6:03:be:bb:df:cc:f7:60:22:67:e8:71: 5d:ce:a4:ab:b8:d6:34:5a:4d:4c:60:ee:c9:65:8c: be:33:be:ac:ce:38:91:f1:e2:48:e9:9b:b6:51:05: 52:d2:25:88:27:8d:9b:85:40:a0:6f:f6:e1:5a:6f: 9e:33:57:ac:6d:9a:80:39:7b:1f:83:cc:6e:af:32: d9:05:d1:0d:15:93:5c:1a:f4:e8:b0:33:80:65:b5: d5:eb:68:6e:6f:e0:69:5d:bb:9f:17:ee:0b:5e:55: 77:e8:61:24:a0:b2:94:1a:1d:28:eb:42:a8:23:cd: 1e:d4:2a:f9:70:25:9d:25:05:b7:98:c1:92:7c:6b: cf:ef:96:50:bd:88:97:c8:3b:46:06:6b:a3:29:b3: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:86:21:63:34:A2:CB:2A:10:26:98:FB:4F:C1:BB:C0:AD:98:57:E4 X509v3 Authority Key Identifier: keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:dd:46:61:f1:30:9a:fc:a8:b6:09:86:24:e7:22:c2:90:57: 2d:f8:ca:5b:76:f2:09:b5:39:cc:1b:08:c1:b7:64:14:f5:73: a2:e9:2c:87:34:f3:38:2d:3d:1b:c8:37:19:93:b7:0b:81:e8: c6:e6:52:56:14:d8:dd:54:b3:f7:d8:d4:a5:1c:c1:ef:c4:d9: c6:f5:95:f1:07:61:46:8e:65:a5:b9:9c:85:7c:38:e6:4c:a2: fd:f4:22:51:cb:64:44:e1:12:7b:81:9e:be:f7:13:7b:9c:f2: 95:b9:54:c5:12:be:12:75:b5:89:74:95:8f:ec:48:24:ea:cf: c6:f3:0e:fa:47:6c:7f:06:53:94:87:52:d8:9a:0a:a4:c5:14: fc:82:ea:7d:e9:a9:d3:37:a8:e4:f5:84:2a:2e:57:cb:9b:3a: 5c:72:1a:c6:db:95:5c:fa:d7:71:70:ad:34:a9:6d:d0:98:26: e1:4b:37:48:7f:1d:c0:0d:58:e7:36:c6:77:c2:d8:3a:06:51: 03:d4:87:b6:f2:65:a5:a3:4a:fd:1a:2a:ef:b3:fb:ff:5e:c8: f3:6d:66:5b:e1:02:24:d4:78:0e:4d:ba:d5:e3:19:51:5e:14: 88:1b:da:b1:92:c8:3a:c1:b4:82:7d:d9:3e:c8:20:15:ed:10: 1e:57:fd:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBo+Eexycx4ndoOr2ilIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mjk0YTJjMGM0OWRjOTM2Y2I5ODhiNjg1YjNhN2Q5NWM4 ZmUwYjcwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD EyhkMjg2MjE2MzM0YTJjYjJhMTAyNjk4ZmI0ZmMxYmJjMGFkOTg1N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvwk7i2kaKV5KZ+RaBRTd4yWy1nl WfHLivpyJtw2ZqvuwYUxMf9gaOJz0CFTLKKxwn1OK8KjnpCvutISgWXTH2Xij/S8 FB0+P/PM+UGLBHNLn5M6BfBligrKQ+KVVbquGHCbwvBvtVmzljX2A76738z3YCJn 6HFdzqSruNY0Wk1MYO7JZYy+M76szjiR8eJI6Zu2UQVS0iWIJ42bhUCgb/bhWm+e M1esbZqAOXsfg8xurzLZBdENFZNcGvTosDOAZbXV62hub+BpXbufF+4LXlV36GEk oLKUGh0o60KoI80e1Cr5cCWdJQW3mMGSfGvP75ZQvYiXyDtGBmujKbON2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKGIWM0ossqECaY+0/Bu8CtmFfkMB8GA1UdIwQY MBaAFMgpSiwMSdyTbLmItoWzp9lcj+C3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQt OWNlZjc5MmE1ZjZiLzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQtOWNlZjc5MmE1ZjZi LzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUd1GYfEw mvyotgmGJOciwpBXLfjKW3byCbU5zBsIwbdkFPVzoukshzTzOC09G8g3GZO3C4Ho xuZSVhTY3VSz99jUpRzB78TZxvWV8QdhRo5lpbmchXw45kyi/fQiUctkROESe4Ge vvcTe5zylblUxRK+EnW1iXSVj+xIJOrPxvMO+kdsfwZTlIdS2JoKpMUU/ILqfemp 0zeo5PWEKi5Xy5s6XHIaxtuVXPrXcXCtNKlt0Jgm4Us3SH8dwA1Y5zbGd8LYOgZR A9SHtvJlpaNK/Roq77P7/17I821mW+ECJNR4Dk261eMZUV4UiBvasZLIOsG0gn3Z PsggFe0QHlf9Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:29 2025 by rpki-client