This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft File: YepnO-KLST26RBhw-1Dlmg0cF8U.mft (raw, json) Hash identifier: tWmIVL5sCYRc/6ev/bDYyuVq9Pflwz/lvFmt/ZzhVbE= Subject key identifier: F0:54:47:FC:D5:C3:74:9F:EE:3B:38:08:45:AD:37:F2:97:DB:1A:93 Authority key identifier: 61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5 Certificate issuer: /CN=61ea673be28b493dba441870fb50e59a0d1c17c5 Certificate serial: 019AF23FD4078E4F604EB37EDE26C8E3B02C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: YepnO-KLST26RBhw-1Dlmg0cF8U.crl (hash: Fte2Eeg6jpfirw8CiZLwCfPpRS0ZoTt4GSFJ1BRD1yA=) 2: syKB6zisduN4C3cAJozjgCCO0PY.roa (hash: 0Vdx4RjEX6ZtXLCLRmfeUBESEOKss3f6Va2BIWn7LcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:07:8e:4f:60:4e:b3:7e:de:26:c8:e3:b0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ea673be28b493dba441870fb50e59a0d1c17c5 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=f05447fcd5c3749fee3b380845ad37f297db1a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:e9:3f:c8:56:2d:e6:6b:19:d2:0e:91:26: ed:1e:f5:1c:65:13:e1:1a:ec:a7:16:2f:8e:96:00: a3:08:ab:82:2f:c1:62:54:c4:f1:1f:8e:9c:00:c5: b3:1c:ff:fe:30:a8:7a:dc:29:00:5a:42:11:f4:74: 9d:46:54:6d:80:b9:55:53:8f:ac:ae:22:d7:90:05: b4:e7:00:59:0a:0d:ac:45:bd:28:08:00:0b:d3:61: 14:ba:31:ae:3d:90:b2:a7:dc:ad:77:80:7e:d3:cc: 6f:15:3a:88:0b:23:23:c2:b4:76:a3:c1:d7:1c:dc: a8:93:bd:f0:22:e9:ed:d5:62:0d:8c:b5:fa:6e:d9: 80:87:6e:99:66:69:fc:fe:90:67:9b:cc:c5:3b:d7: a8:48:45:3a:f7:97:25:6c:3b:bf:22:e6:78:be:4e: e0:af:ac:8b:99:10:eb:e8:4e:ee:3c:74:9d:8a:12: d2:eb:ae:9f:b5:08:00:06:bb:26:f5:db:cd:45:4c: 45:48:08:0c:da:0a:78:6b:4f:66:25:20:49:be:15: 33:40:b7:c3:de:04:1a:86:0d:ee:f5:a3:79:c2:0b: ec:d3:43:d8:35:0d:6a:bb:b3:66:28:83:ff:e7:ae: 90:e4:77:46:4d:a5:80:fe:4d:f6:41:71:c2:70:d2: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:47:FC:D5:C3:74:9F:EE:3B:38:08:45:AD:37:F2:97:DB:1A:93 X509v3 Authority Key Identifier: keyid:61:EA:67:3B:E2:8B:49:3D:BA:44:18:70:FB:50:E5:9A:0D:1C:17:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YepnO-KLST26RBhw-1Dlmg0cF8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/YepnO-KLST26RBhw-1Dlmg0cF8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1f:95:6d:00:12:a2:ea:d2:68:23:01:d2:4a:23:77:f7:d6: c2:50:2b:e3:11:46:7f:ba:50:1f:53:7c:0d:69:1a:eb:39:7c: 2d:e0:b0:d7:f1:90:5b:d2:a9:c9:ca:99:6d:57:e3:92:e5:4d: 5a:58:fa:5a:c5:c3:a3:7b:97:1d:59:d9:19:14:ff:bc:a1:56: d3:ef:ba:f3:f0:15:92:5d:1b:19:e9:d2:81:be:15:10:f5:bd: a4:cf:e8:04:78:17:f1:2b:47:86:62:bd:d6:13:05:5a:0d:af: b4:d1:46:32:6d:50:98:ae:d3:b5:e7:45:fa:08:de:54:8b:2e: d0:2f:8a:c1:8d:98:eb:5f:6c:59:b6:88:a4:21:ea:c5:b3:3f: 0c:f8:6f:ee:63:c2:d7:c4:5b:77:62:33:4c:c3:f2:a0:0c:7d: 3c:c7:47:5e:c0:05:85:a0:12:b7:5b:1f:8b:05:af:f0:c9:7c: 8d:dd:c4:d9:6b:8b:59:ac:f6:40:c8:15:87:12:74:fe:40:d6: 2f:87:58:46:ef:ed:da:7a:b1:b0:89:b6:a6:96:e0:a5:c4:e4: a3:5e:4c:04:22:4f:5f:08:81:0b:c1:64:1a:09:6d:cc:fc:28: 53:cb:e5:07:b0:0c:60:2d:30:23:af:19:a3:3d:cd:f7:a1:c3: 95:1c:c5:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9QHjk9gTrN+3ibI47AsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZWE2NzNiZTI4YjQ5M2RiYTQ0MTg3MGZiNTBlNTlhMGQx YzE3YzUwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhmMDU0NDdmY2Q1YzM3NDlmZWUzYjM4MDg0NWFkMzdmMjk3ZGIxYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirLpP8hWLeZrGdIOkSbtHvUcZRPh GuynFi+OlgCjCKuCL8FiVMTxH46cAMWzHP/+MKh63CkAWkIR9HSdRlRtgLlVU4+s riLXkAW05wBZCg2sRb0oCAAL02EUujGuPZCyp9ytd4B+08xvFTqICyMjwrR2o8HX HNyok73wIunt1WINjLX6btmAh26ZZmn8/pBnm8zFO9eoSEU695clbDu/IuZ4vk7g r6yLmRDr6E7uPHSdihLS666ftQgABrsm9dvNRUxFSAgM2gp4a09mJSBJvhUzQLfD 3gQahg3u9aN5wgvs00PYNQ1qu7NmKIP/566Q5HdGTaWA/k32QXHCcNK5fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBUR/zVw3Sf7js4CEWtN/KX2xqTMB8GA1UdIwQY MBaAFGHqZzvii0k9ukQYcPtQ5ZoNHBfFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQt NDk4ZGQxZDMwN2QwLzEvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80MmMxYmYtODlmZi00ODJmLTlmMTQtNDk4ZGQxZDMwN2Qw LzEvWWVwbk8tS0xTVDI2UkJody0xRGxtZzBjRjhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx+VbQAS ourSaCMB0kojd/fWwlAr4xFGf7pQH1N8DWka6zl8LeCw1/GQW9KpycqZbVfjkuVN Wlj6WsXDo3uXHVnZGRT/vKFW0++68/AVkl0bGenSgb4VEPW9pM/oBHgX8StHhmK9 1hMFWg2vtNFGMm1QmK7TtedF+gjeVIsu0C+KwY2Y619sWbaIpCHqxbM/DPhv7mPC 18Rbd2IzTMPyoAx9PMdHXsAFhaASt1sfiwWv8Ml8jd3E2WuLWaz2QMgVhxJ0/kDW L4dYRu/t2nqxsIm2ppbgpcTko15MBCJPXwiBC8FkGgltzPwoU8vlB7AMYC0wI68Z oz3N96HDlRzFgA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:30 2025 by rpki-client