This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json) Hash identifier: /xEHKNqX077UtobE8SGoVOuvrPmvIfOL9Tr1Kk3hXVs= Subject key identifier: 95:55:88:0B:20:D6:B3:8E:E9:E6:83:07:02:08:D0:A7:4C:7D:4C:D7 Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e Certificate serial: 019AF19B921C145A219336AB752ED378AB36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft Manifest number: 11D1 Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: qwqY/MnnCrfcfvpnLFMx/GZDGPqIRlJYTISG2YNRi74=) 2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:92:1c:14:5a:21:93:36:ab:75:2e:d3:78:ab:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=9555880b20d6b38ee9e683070208d0a74c7d4cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e3:89:5c:b0:6f:38:5b:2d:69:59:35:87:9d: 1e:f0:ae:88:14:a1:ef:7e:5d:a2:d3:fd:be:56:8f: 04:67:a8:52:98:30:2e:38:ce:7d:3f:98:82:8d:6c: 80:46:4f:cc:74:60:c2:22:24:45:c8:59:79:24:3f: 70:a0:24:90:bf:ad:08:4c:7f:39:63:07:ca:e7:d0: b6:d8:65:6d:bc:e5:b1:58:ad:71:8b:80:d5:3f:05: 1d:50:12:7f:bb:08:1a:f3:7c:da:0c:1e:e5:06:a5: 7c:7e:74:31:56:f2:ea:4e:1d:e9:f3:ee:8c:71:80: 03:b7:af:3d:28:2f:1a:c3:ad:8c:b1:00:7e:da:07: 14:13:c6:07:bd:f3:0c:e9:82:d9:dd:3b:64:d7:a8: 61:d4:14:e0:90:be:1b:87:2e:f8:f4:07:7b:44:99: ef:db:b4:0c:df:81:47:5d:bf:8e:d6:44:5b:db:9c: 52:8f:43:af:03:69:6e:9f:9e:e4:6f:02:86:29:96: 5a:10:9a:97:bb:95:76:df:4a:76:36:9c:50:5f:75: 3a:32:82:af:42:4e:ab:fa:54:c1:11:a2:03:68:77: 5b:fc:ed:9f:c3:b4:39:2c:09:d8:8e:bc:f3:84:c5: 67:41:ba:36:ec:9d:6a:a9:2c:b8:bc:f6:8d:03:2b: f2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:55:88:0B:20:D6:B3:8E:E9:E6:83:07:02:08:D0:A7:4C:7D:4C:D7 X509v3 Authority Key Identifier: keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1a:2d:83:ba:60:d3:58:15:27:31:1e:2b:25:53:ab:5c:63: 5b:dc:d9:5c:fa:82:8e:7e:20:d5:83:77:64:71:71:e7:fe:eb: e2:13:b0:1a:a4:b5:6d:5b:aa:a9:12:62:89:ca:9f:21:68:6b: 2c:65:67:60:97:b0:b1:0a:f6:9b:cc:a2:f2:0a:2e:72:d7:30: 3d:82:50:8b:50:3b:ec:21:3e:d9:54:55:ed:ef:9c:dc:69:7f: 3b:a6:d0:dd:10:5f:a0:12:a9:79:50:94:39:3f:6a:4c:7a:b8: 66:a0:69:fd:d0:2e:1d:3e:40:aa:68:77:3a:bb:a6:6e:2d:a3: e6:36:93:75:81:d5:e8:bb:cd:51:a4:64:f8:7f:03:48:86:1d: 70:cb:9d:7d:5e:b2:9c:f9:b8:0a:19:91:d1:12:5c:87:3f:84: e6:c2:a7:92:1a:40:9e:11:67:aa:e9:42:86:b5:1c:25:c1:ad: 34:88:68:5e:83:8b:30:f5:44:cf:79:80:5c:46:81:ed:8c:7e: a6:ea:e3:e0:cd:35:58:a7:12:46:14:1d:7a:90:75:e7:d0:5d: 5e:61:7a:da:1a:8b:3f:ed:ed:b5:d3:de:37:12:dd:51:14:63: be:33:ec:cf:a9:ae:87:76:9c:4e:fc:35:45:ff:da:c9:16:07: 86:b0:7a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5IcFFohkzardS7TeKs2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2 N2M3MGUwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD Eyg5NTU1ODgwYjIwZDZiMzhlZTllNjgzMDcwMjA4ZDBhNzRjN2Q0Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+OJXLBvOFstaVk1h50e8K6IFKHv fl2i0/2+Vo8EZ6hSmDAuOM59P5iCjWyARk/MdGDCIiRFyFl5JD9woCSQv60ITH85 YwfK59C22GVtvOWxWK1xi4DVPwUdUBJ/uwga83zaDB7lBqV8fnQxVvLqTh3p8+6M cYADt689KC8aw62MsQB+2gcUE8YHvfMM6YLZ3Ttk16hh1BTgkL4bhy749Ad7RJnv 27QM34FHXb+O1kRb25xSj0OvA2lun57kbwKGKZZaEJqXu5V230p2NpxQX3U6MoKv Qk6r+lTBEaIDaHdb/O2fw7Q5LAnYjrzzhMVnQbo27J1qqSy4vPaNAyvy0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVViAsg1rOO6eaDBwII0KdMfUzXMB8GA1UdIwQY MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct OTdmZDc2YjgwODI3LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3 LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRotg7pg 01gVJzEeKyVTq1xjW9zZXPqCjn4g1YN3ZHFx5/7r4hOwGqS1bVuqqRJiicqfIWhr LGVnYJewsQr2m8yi8gouctcwPYJQi1A77CE+2VRV7e+c3Gl/O6bQ3RBfoBKpeVCU OT9qTHq4ZqBp/dAuHT5Aqmh3Orumbi2j5jaTdYHV6LvNUaRk+H8DSIYdcMudfV6y nPm4ChmR0RJchz+E5sKnkhpAnhFnqulChrUcJcGtNIhoXoOLMPVEz3mAXEaB7Yx+ purj4M01WKcSRhQdepB159BdXmF62hqLP+3ttdPeNxLdURRjvjPsz6muh3acTvw1 Rf/ayRYHhrB6aw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:08 2025 by rpki-client