This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft File: YnswW6G6vvS_7GhYHkA51BtfcfI.mft (raw, json) Hash identifier: lj0VR/t/A1TyTiQjb9p2G4YKWFObH1d0ngxkiGBk9Pw= Subject key identifier: C2:29:AB:92:7B:C2:02:4D:AA:54:5E:FF:A8:05:3E:8D:9B:33:C0:74 Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2 Certificate issuer: /CN=627b305ba1babef4bfec68581e4039d41b5f71f2 Certificate serial: 019AF1644F08007E11CB7397BCF86EE405A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft Manifest number: 0E74 Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: YnswW6G6vvS_7GhYHkA51BtfcfI.crl (hash: ijiblYwSAmKV+xqWu71qwhLD2jdptjHO3xGqjSDD5Js=) 2: qe5ykFg2X3b3t6MuR-AZugNF4JA.roa (hash: lYA0LiGE3mwxqKf8EcIyljYtenHVRof/hSBwfSS+hr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4f:08:00:7e:11:cb:73:97:bc:f8:6e:e4:05:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2 Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=c229ab927bc2024daa545effa8053e8d9b33c074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:9e:37:95:59:61:a7:80:d1:96:07:8d:a4: 76:21:60:b9:f7:09:06:7e:a1:88:77:79:a8:ac:8a: fc:2e:63:b3:d3:29:1c:2f:6a:44:5b:84:ba:a2:c4: 6f:d4:dc:7f:da:9f:f4:18:c7:97:22:99:70:eb:8b: d4:0d:cd:17:c2:9c:45:60:d0:66:32:e5:3d:7a:a0: 79:0c:d5:57:35:08:ed:ac:f5:78:f1:13:af:8e:0b: 86:40:c1:a6:2c:1f:23:a7:1c:bd:e8:6e:88:97:d3: eb:ed:9d:5f:6f:dd:3f:a3:0a:d8:be:eb:56:9d:1a: f6:f6:46:fd:5c:12:40:aa:0d:32:84:7f:8f:33:d2: ed:01:d2:8c:3d:33:2b:e1:e6:e1:d6:5a:b5:22:62: 08:04:15:5f:39:b4:0c:39:f0:8c:85:74:2d:39:19: 06:f6:4b:f3:0c:cc:bd:67:e0:ba:98:b2:39:62:c2: 75:52:55:66:1e:d2:ad:d1:c3:df:04:59:93:c6:51: 6a:2f:6b:ca:3d:47:5e:98:67:94:da:2a:9f:32:48: 3c:95:ea:45:53:a6:49:da:57:32:05:ae:d4:c6:51: 73:6d:c6:dd:1c:f9:f4:7b:af:8a:5a:f6:ca:6d:05: d0:0f:89:9a:d6:c8:09:74:ad:56:67:2b:46:ca:0c: be:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:AB:92:7B:C2:02:4D:AA:54:5E:FF:A8:05:3E:8D:9B:33:C0:74 X509v3 Authority Key Identifier: keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f1:a6:40:e9:9a:d8:42:6c:7e:2f:d3:a5:c6:dd:30:5a:de: 95:ae:99:20:72:04:c3:7d:a8:50:ae:1b:ac:de:2e:83:bc:65: 50:11:74:31:c3:fa:9d:31:56:8e:43:c1:21:de:b6:38:96:d2: fb:9c:17:44:a3:1d:6c:f3:07:88:32:a1:08:33:c9:47:00:5f: 79:e0:08:c2:8a:7c:94:8e:8e:7b:32:68:03:59:a6:2d:59:d1: d6:68:17:52:df:a1:21:56:43:1a:62:5c:b6:3e:dd:4d:54:bb: 6e:8c:ba:ef:52:bf:cb:6a:1a:5b:9b:33:ec:94:a5:de:80:ee: 55:5a:0b:8e:d0:f6:c0:d3:0c:46:c9:01:f6:c9:5e:3d:af:e8: dd:1b:92:a2:5c:df:f2:a8:2a:a7:33:a5:c2:5e:35:ee:3d:ae: 08:ba:a2:0a:fc:47:57:ce:e2:58:62:22:2f:c2:48:80:a5:71: 76:2f:67:cc:a9:5b:33:6e:cb:d5:87:60:61:05:2c:45:0b:9a: 4f:72:1c:8e:b7:f3:c2:8c:db:a6:bb:ba:da:00:af:67:d7:a2: 6c:3c:d1:e4:58:a8:82:1d:eb:dd:74:ee:e8:83:8d:fa:24:c9: 46:b5:71:ef:b9:96:57:3a:6d:81:20:47:81:ac:8e:f6:e7:8b: 8e:e6:5b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZE8IAH4Ry3OXvPhu5AWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyN2IzMDViYTFiYWJlZjRiZmVjNjg1ODFlNDAzOWQ0MWI1 ZjcxZjIwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD EyhjMjI5YWI5MjdiYzIwMjRkYWE1NDVlZmZhODA1M2U4ZDliMzNjMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1OeN5VZYaeA0ZYHjaR2IWC59wkG fqGId3morIr8LmOz0ykcL2pEW4S6osRv1Nx/2p/0GMeXIplw64vUDc0XwpxFYNBm MuU9eqB5DNVXNQjtrPV48ROvjguGQMGmLB8jpxy96G6Il9Pr7Z1fb90/owrYvutW nRr29kb9XBJAqg0yhH+PM9LtAdKMPTMr4ebh1lq1ImIIBBVfObQMOfCMhXQtORkG 9kvzDMy9Z+C6mLI5YsJ1UlVmHtKt0cPfBFmTxlFqL2vKPUdemGeU2iqfMkg8lepF U6ZJ2lcyBa7UxlFzbcbdHPn0e6+KWvbKbQXQD4ma1sgJdK1WZytGygy+OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIpq5J7wgJNqlRe/6gFPo2bM8B0MB8GA1UdIwQY MBaAFGJ7MFuhur70v+xoWB5AOdQbX3HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUt YmVlN2ExODM5NzEwLzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUtYmVlN2ExODM5NzEw LzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPGmQOma 2EJsfi/TpcbdMFrela6ZIHIEw32oUK4brN4ug7xlUBF0McP6nTFWjkPBId62OJbS +5wXRKMdbPMHiDKhCDPJRwBfeeAIwop8lI6OezJoA1mmLVnR1mgXUt+hIVZDGmJc tj7dTVS7boy671K/y2oaW5sz7JSl3oDuVVoLjtD2wNMMRskB9slePa/o3RuSolzf 8qgqpzOlwl417j2uCLqiCvxHV87iWGIiL8JIgKVxdi9nzKlbM27L1YdgYQUsRQua T3Icjrfzwozbpru62gCvZ9eibDzR5Fiogh3r3XTu6ION+iTJRrVx77mWVzptgSBH gayO9ueLjuZbeA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:30 2025 by rpki-client