This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json) Hash identifier: 2UR+ANjiPvzKJC2xRSryS5rB0AON15nQ1cWL97EWz9k= Subject key identifier: 58:35:D9:54:C1:34:33:EA:72:02:A8:2A:74:18:FB:A5:2F:E1:CA:BD Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2 Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2 Certificate serial: 019AF1D196AEF79C1F1B8070B2E872158A35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft Manifest number: 170C Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: Y/XchCdtx1nuFDceGYxg2PLEoGscXq+lTCiC8F+xK7o=) 2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:96:ae:f7:9c:1f:1b:80:70:b2:e8:72:15:8a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=5835d954c13433ea7202a82a7418fba52fe1cabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:b4:e5:cb:50:37:d1:cb:a2:3b:96:ec:65: 6e:f5:42:45:00:8f:26:b3:11:b0:e9:29:a8:84:fe: 1a:85:ce:be:b3:a1:f1:04:74:f2:80:bd:5d:53:06: dd:60:55:15:fe:9f:b2:a6:19:f3:00:15:79:5c:e7: e8:47:75:8e:e3:ea:e3:1e:2a:96:e3:8e:c8:b5:09: 18:77:ed:8d:bd:05:f8:82:d5:2e:4b:ea:41:3b:f7: 93:fb:52:7f:d0:76:12:e5:7f:ce:50:26:03:71:01: 76:1c:d1:4b:2b:e0:14:7b:f8:57:b5:b5:67:ea:00: 13:45:f3:2e:6d:c2:b7:4b:41:2d:05:ad:06:ee:3f: 63:68:7a:83:67:71:eb:31:ec:1a:19:ac:d4:29:87: a4:fe:a1:f6:6e:a1:d0:a6:a1:1c:ad:59:f8:f1:9c: 54:b0:0c:ba:44:6f:d3:3a:bb:01:eb:7f:3b:23:8a: 14:cb:16:fc:88:c4:2d:b3:df:04:67:11:0a:f0:e3: 0b:5d:ae:f8:4e:80:70:02:42:99:eb:6c:44:27:2f: 6e:de:f8:cf:8f:9f:5f:29:c5:c7:7f:b1:76:0e:df: b1:bb:40:0c:98:35:70:d1:48:a4:a3:a6:ca:bc:d3: 4f:39:99:dc:db:5d:ea:0d:e4:69:e9:cc:19:dd:eb: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:D9:54:C1:34:33:EA:72:02:A8:2A:74:18:FB:A5:2F:E1:CA:BD X509v3 Authority Key Identifier: keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:be:02:be:62:33:a1:d0:7f:6d:ca:16:4c:3c:d3:c9:31:e7: 9f:6e:9e:fa:16:69:5c:6e:43:fa:db:bc:df:1d:e8:f3:93:85: 0e:c4:72:a9:ed:26:44:14:b3:2d:82:63:e8:69:55:fc:83:29: 23:af:11:33:31:1c:ce:f9:57:c4:84:af:46:7b:ca:61:0c:81: 13:22:b9:3c:29:05:ba:10:1d:7c:ca:df:4d:41:4f:bf:77:ef: ed:34:a9:15:43:6c:d1:b5:f0:6c:18:ac:e1:f2:39:dc:16:a3: c2:1a:8a:e2:5e:7c:69:5e:9d:53:9f:4f:9b:e8:b4:6b:81:c2: 68:ee:54:94:74:ce:ef:76:40:87:d9:5b:93:92:66:8a:f1:91: d2:58:2b:be:2d:87:7c:74:69:f3:94:dd:00:9b:be:97:43:e0: 18:d5:cf:e3:a0:67:d8:0d:95:09:80:a6:74:3d:a2:54:09:39: 38:b3:94:14:5e:0e:4f:c8:0a:91:88:60:ef:ac:b6:69:15:69: ca:72:e3:0e:8d:ba:a7:60:55:05:f5:ec:f7:db:58:86:01:e5: 29:e4:cd:cd:2f:64:4d:cc:12:20:46:61:2a:43:f8:c6:ec:36: d6:33:81:aa:e7:ec:38:2a:6b:a9:29:f1:ea:0d:1b:ce:11:29: 2c:7c:ce:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zau95wfG4BwsuhyFYo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjc5NDkwMmE1Y2QzZDI3ODNmY2MyYWE0YjA3OTFmNzlh NTc3YTIwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg1ODM1ZDk1NGMxMzQzM2VhNzIwMmE4MmE3NDE4ZmJhNTJmZTFjYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnby05ctQN9HLojuW7GVu9UJFAI8m sxGw6SmohP4ahc6+s6HxBHTygL1dUwbdYFUV/p+yphnzABV5XOfoR3WO4+rjHiqW 447ItQkYd+2NvQX4gtUuS+pBO/eT+1J/0HYS5X/OUCYDcQF2HNFLK+AUe/hXtbVn 6gATRfMubcK3S0EtBa0G7j9jaHqDZ3HrMewaGazUKYek/qH2bqHQpqEcrVn48ZxU sAy6RG/TOrsB6387I4oUyxb8iMQts98EZxEK8OMLXa74ToBwAkKZ62xEJy9u3vjP j59fKcXHf7F2Dt+xu0AMmDVw0Uiko6bKvNNPOZnc213qDeRp6cwZ3euSTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg12VTBNDPqcgKoKnQY+6Uv4cq9MB8GA1UdIwQY MBaAFGC3lJAqXNPSeD/MKqSweR95pXeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQt NDAxNDc3NDg5MzAyLzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQtNDAxNDc3NDg5MzAy LzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL74CvmIz odB/bcoWTDzTyTHnn26e+hZpXG5D+tu83x3o85OFDsRyqe0mRBSzLYJj6GlV/IMp I68RMzEczvlXxISvRnvKYQyBEyK5PCkFuhAdfMrfTUFPv3fv7TSpFUNs0bXwbBis 4fI53BajwhqK4l58aV6dU59Pm+i0a4HCaO5UlHTO73ZAh9lbk5JmivGR0lgrvi2H fHRp85TdAJu+l0PgGNXP46Bn2A2VCYCmdD2iVAk5OLOUFF4OT8gKkYhg76y2aRVp ynLjDo26p2BVBfXs99tYhgHlKeTNzS9kTcwSIEZhKkP4xuw21jOBqufsOCprqSnx 6g0bzhEpLHzO+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:20 2025 by rpki-client