This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json) Hash identifier: osNZ081vTnNNlhUq0IiTBCFPHrI89M0OC4GcjHXy2Z8= Subject key identifier: AB:5E:B2:99:1D:75:2A:99:C3:29:CA:2C:77:65:D1:AA:1C:15:D6:78 Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f Certificate serial: 019AF12DA5F38AA164473061039F1F0165D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=) 2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: YVVyj2usRWLJAzgq4rQyVtVGYKAffUV0elPYj53nPNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a5:f3:8a:a1:64:47:30:61:03:9f:1f:01:65:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=ab5eb2991d752a99c329ca2c7765d1aa1c15d678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:b4:8f:47:74:d2:2b:71:15:8d:a0:54:48: 0d:86:38:ea:ff:99:92:3e:a0:6a:34:5c:3d:6d:23: 74:b9:76:46:71:18:cc:0a:91:75:5c:79:9f:a8:15: c7:46:7e:8f:a4:4a:a9:ab:d7:1b:12:55:4e:13:f1: 5b:c1:c9:40:55:7e:2b:37:6e:1e:9f:0b:fc:04:3d: 52:9f:8e:72:27:07:49:ce:0d:b3:e7:69:02:f8:38: a7:2f:68:13:8f:16:7a:bd:03:27:53:42:3c:0f:b8: 25:6e:46:1b:51:c5:79:3e:fc:12:94:3c:1d:55:8b: 47:85:84:16:e1:50:24:8a:9c:87:29:49:5c:f7:b7: b7:71:4e:0e:2f:93:aa:a5:0d:71:4a:e1:f8:1f:97: fd:8f:53:ad:d8:ee:fd:ec:c6:d1:2e:08:78:19:85: 4d:fe:f8:25:b4:6b:52:5f:22:fd:33:aa:c1:e4:22: ab:33:7a:aa:d2:c5:b6:b1:de:74:7c:49:50:91:37: 64:84:af:cd:b2:7e:97:36:58:8a:93:73:4a:49:f1: 30:23:a2:46:f4:f6:b1:97:7b:75:41:dd:0f:65:cf: ae:a7:0b:b1:15:cd:f9:3e:1d:60:ab:ac:14:a6:46: c9:7e:7c:16:02:ab:5c:25:cd:94:bf:85:e6:2a:5a: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5E:B2:99:1D:75:2A:99:C3:29:CA:2C:77:65:D1:AA:1C:15:D6:78 X509v3 Authority Key Identifier: keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:35:47:d5:b5:4e:bc:dc:a9:b2:a8:33:cb:09:1a:14:e7:cf: 0f:61:ab:35:39:9d:7e:ca:f9:fd:40:66:da:1b:21:e6:70:68: dc:1d:f8:51:76:fe:2e:14:84:34:41:bd:1c:e4:e2:24:3e:33: 57:44:23:c4:44:f0:20:53:cc:df:63:74:7a:f2:e2:9e:0d:f5: ff:12:0e:1f:0b:1a:c2:ad:9a:0c:8a:cf:75:7b:9e:db:7e:76: 99:9a:9a:dc:19:95:e4:33:d3:56:53:f8:99:a8:b9:79:7d:62: 0a:ff:66:37:9b:2e:c9:82:c0:ce:b2:4b:24:85:88:cf:fb:1f: 02:db:7c:b5:d0:cd:ec:53:fd:99:39:ca:65:39:08:27:15:50: cb:3d:44:06:41:57:4e:83:43:df:e0:8e:a5:1a:71:e9:4a:13: 75:16:37:0c:76:16:89:31:48:1c:05:fa:29:3f:4e:29:df:9c: 99:89:41:b8:1c:7f:79:f7:17:cb:85:dc:7c:27:34:4a:ee:9b: ed:f3:76:56:55:70:20:71:4e:0a:bc:42:92:89:21:35:51:e0: 32:5d:c1:b7:b3:41:9b:c4:36:34:09:88:37:13:14:ad:c6:cd: 0e:91:1b:79:f8:97:0d:d0:ea:0f:b7:88:cc:dc:68:c8:22:5a: 20:97:00:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaXziqFkRzBhA58fAWXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMjQyMzUzNmU1MWY5NGZhYmZjNTBhY2Y5NDRkNzk4YWFj ZjQwM2YwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD EyhhYjVlYjI5OTFkNzUyYTk5YzMyOWNhMmM3NzY1ZDFhYTFjMTVkNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYu0j0d00itxFY2gVEgNhjjq/5mS PqBqNFw9bSN0uXZGcRjMCpF1XHmfqBXHRn6PpEqpq9cbElVOE/FbwclAVX4rN24e nwv8BD1Sn45yJwdJzg2z52kC+DinL2gTjxZ6vQMnU0I8D7glbkYbUcV5PvwSlDwd VYtHhYQW4VAkipyHKUlc97e3cU4OL5OqpQ1xSuH4H5f9j1Ot2O797MbRLgh4GYVN /vgltGtSXyL9M6rB5CKrM3qq0sW2sd50fElQkTdkhK/Nsn6XNliKk3NKSfEwI6JG 9Paxl3t1Qd0PZc+upwuxFc35Ph1gq6wUpkbJfnwWAqtcJc2Uv4XmKlqcdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtespkddSqZwynKLHdl0aocFdZ4MB8GA1UdIwQY MBaAFGEkI1NuUflPq/xQrPlE15iqz0A/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVNRalUyNVItVS1yX0ZDcy1VVFhtS3JQUUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83YjBlYzctOTg0OC00MTYzLWFjMWIt N2IwNGQzNTk3Mzc4LzEvWVNRalUyNVItVS1yX0ZDcy1VVFhtS3JQUUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83YjBlYzctOTg0OC00MTYzLWFjMWItN2IwNGQzNTk3Mzc4 LzEvWVNRalUyNVItVS1yX0ZDcy1VVFhtS3JQUUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzVH1bVO vNypsqgzywkaFOfPD2GrNTmdfsr5/UBm2hsh5nBo3B34UXb+LhSENEG9HOTiJD4z V0QjxETwIFPM32N0evLing31/xIOHwsawq2aDIrPdXue2352mZqa3BmV5DPTVlP4 mai5eX1iCv9mN5suyYLAzrJLJIWIz/sfAtt8tdDN7FP9mTnKZTkIJxVQyz1EBkFX ToND3+COpRpx6UoTdRY3DHYWiTFIHAX6KT9OKd+cmYlBuBx/efcXy4XcfCc0Su6b 7fN2VlVwIHFOCrxCkokhNVHgMl3Bt7NBm8Q2NAmINxMUrcbNDpEbefiXDdDqD7eI zNxoyCJaIJcAog== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:01 2025 by rpki-client