This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft File: Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json) Hash identifier: RGOtbN2uoQsCNPndfKS7n3UMJNWLFiEk3BDkl513aSs= Subject key identifier: 5E:A2:1D:00:BD:C4:A2:B9:CA:23:C7:7C:C5:89:EC:DB:20:B2:5D:2F Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8 Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8 Certificate serial: 019AF164456C8ACB77C28F38DE8D4DDC434B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft Manifest number: 12C0 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=) 2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: sR60AVtIQ77iWKnw2TXGFYS4MwNtKLreymK67mkIS6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:45:6c:8a:cb:77:c2:8f:38:de:8d:4d:dc:43:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=5ea21d00bdc4a2b9ca23c77cc589ecdb20b25d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:7a:0b:60:f7:7f:c9:39:86:57:95:5a:bd: ba:b4:1e:6c:67:c7:07:8e:0e:00:d0:b9:32:78:89: 60:3d:2b:4c:ad:d2:8d:79:13:eb:6f:24:51:62:1f: db:b3:4e:5b:15:22:a3:4c:c2:e5:3a:05:1c:22:ea: a7:89:cf:76:92:f7:4d:72:6d:e1:69:53:0a:81:60: c7:43:05:43:6a:96:b9:73:ba:aa:2e:0d:10:6e:94: 45:15:7b:59:d4:02:ed:75:1e:da:81:6a:37:45:4c: 00:83:e1:d3:25:48:9e:8d:0c:e1:62:c9:4c:13:d5: bd:f7:83:5b:de:55:be:77:29:e1:13:ec:cc:56:f9: 5c:9a:5c:7d:25:c1:d4:42:20:53:bb:6d:72:df:2f: d3:86:69:2a:c1:c2:16:21:a6:d4:26:42:89:bc:fb: 04:9e:2c:34:7e:f3:ff:f7:b1:66:9b:c5:32:7e:ed: a6:9f:bc:ef:82:00:3e:3c:37:a2:69:6f:ea:b5:e7: db:0a:eb:6c:70:2f:74:f1:14:ca:ae:58:d2:9f:12: ac:15:d5:57:01:12:5b:80:8c:ce:2e:bf:08:a0:49: f9:f3:cf:76:ee:4a:77:b5:96:04:b6:2c:10:ba:d0: a8:45:04:fa:5e:d7:87:ec:6e:c0:28:17:24:36:8b: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A2:1D:00:BD:C4:A2:B9:CA:23:C7:7C:C5:89:EC:DB:20:B2:5D:2F X509v3 Authority Key Identifier: keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ae:25:ba:72:24:1f:29:67:95:ef:e6:38:06:7f:0d:4d:3c: b5:96:f4:ba:c8:71:1d:ed:6b:f5:70:43:32:4d:f1:b4:5b:a9: 43:f3:ab:b0:c3:9b:3a:c4:24:8f:c2:97:9b:dd:6c:1f:5e:69: 01:2b:f8:c3:af:4e:6a:3b:85:01:46:3e:47:5e:7a:c7:85:23: 77:2e:f0:fb:dd:72:8a:11:ce:5f:7b:59:fa:2e:f3:01:b8:e7: 5f:ef:4e:49:80:b9:fe:da:c7:36:8d:70:c2:91:ef:1a:21:39: 1a:5d:16:2c:b9:37:12:ba:ca:a4:13:6d:a6:e2:01:e4:9d:2d: e8:c3:37:39:e3:35:3a:93:37:47:1f:0f:11:f7:57:a6:6c:14: fe:e6:93:7a:e3:60:9e:b9:f6:4f:e9:bc:7c:31:10:ac:b2:e4: 0b:ff:00:43:42:5a:78:70:06:e8:e6:2b:ca:f4:6d:a4:1d:9e: 4b:4a:61:9f:2c:ba:71:91:8a:68:2b:fc:2e:fa:7d:25:bc:e7: e0:31:60:86:5e:ff:14:f0:09:ab:85:33:69:f4:1c:56:15:ca: 5b:33:c1:f3:30:26:b3:06:87:03:8a:c3:a0:51:4d:b3:84:10: e7:df:8a:b7:ca:7c:e8:85:22:5a:47:c7:f5:f0:5f:b3:0f:f3: 5c:7e:88:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEVsist3wo843o1N3ENLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTkzZjA4YTQ1ZDJiN2M3NGJmNWRlMDFiMjUyMjAxNjAy YWVlZTgwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD Eyg1ZWEyMWQwMGJkYzRhMmI5Y2EyM2M3N2NjNTg5ZWNkYjIwYjI1ZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOh6C2D3f8k5hleVWr26tB5sZ8cH jg4A0LkyeIlgPStMrdKNeRPrbyRRYh/bs05bFSKjTMLlOgUcIuqnic92kvdNcm3h aVMKgWDHQwVDapa5c7qqLg0QbpRFFXtZ1ALtdR7agWo3RUwAg+HTJUiejQzhYslM E9W994Nb3lW+dynhE+zMVvlcmlx9JcHUQiBTu21y3y/ThmkqwcIWIabUJkKJvPsE niw0fvP/97Fmm8Uyfu2mn7zvggA+PDeiaW/qtefbCutscC908RTKrljSnxKsFdVX ARJbgIzOLr8IoEn588927kp3tZYEtiwQutCoRQT6XteH7G7AKBckNotl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6iHQC9xKK5yiPHfMWJ7Nsgsl0vMB8GA1UdIwQY MBaAFGLpPwikXSt8dL9d4BslIgFgKu7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMt N2VhNjVjMTJlOGVjLzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yMzEzNDktN2YwZS00OTc1LWJjNjMtN2VhNjVjMTJlOGVj LzEvWXVrX0NLUmRLM3gwdjEzZ0d5VWlBV0FxN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa4lunIk Hylnle/mOAZ/DU08tZb0ushxHe1r9XBDMk3xtFupQ/OrsMObOsQkj8KXm91sH15p ASv4w69OajuFAUY+R156x4Ujdy7w+91yihHOX3tZ+i7zAbjnX+9OSYC5/trHNo1w wpHvGiE5Gl0WLLk3ErrKpBNtpuIB5J0t6MM3OeM1OpM3Rx8PEfdXpmwU/uaTeuNg nrn2T+m8fDEQrLLkC/8AQ0JaeHAG6OYryvRtpB2eS0phnyy6cZGKaCv8Lvp9Jbzn 4DFghl7/FPAJq4UzafQcVhXKWzPB8zAmswaHA4rDoFFNs4QQ59+Kt8p86IUiWkfH 9fBfsw/zXH6I9g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:32 2025 by rpki-client