This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft File: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json) Hash identifier: 9Udw2PSA7iKPoALZeIN0XI+2fD0yDV3hTpyVN1SNt+s= Subject key identifier: 95:42:C3:EF:69:F1:DB:DD:61:DA:79:D2:5B:4E:8D:D5:84:14:6E:D2 Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78 Certificate issuer: /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478 Certificate serial: 019AF12E298DF175E9911B9D160E36845F98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=) 2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: eCuWeUY9Sy0tbUS7XDVCEkdWH/JolXrveKiX3fAK4fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:29:8d:f1:75:e9:91:1b:9d:16:0e:36:84:5f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478 Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=9542c3ef69f1dbdd61da79d25b4e8dd584146ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:73:0e:dc:fd:65:d0:3a:9a:39:25:da:2f: 34:56:d2:a0:99:89:84:65:6d:7b:23:4b:fe:58:61: 8b:c9:49:67:3e:a4:a9:ac:17:e7:80:43:99:76:93: 0c:9a:aa:5e:2e:a3:a1:a0:e4:7c:a1:08:7f:09:5f: e5:ef:ab:93:ea:ea:28:a5:68:57:55:9d:a3:7d:65: ca:96:27:8c:2d:3b:8b:3e:82:d4:65:23:56:01:f6: 8a:b3:8b:15:86:d6:30:f1:cd:1d:c9:80:e2:ff:09: 36:ca:1d:e2:e5:1d:cf:84:ff:4e:db:1b:25:a0:24: 83:99:ac:52:0c:90:d8:4d:2a:a9:89:ff:8d:4e:7e: ec:77:86:b3:bb:b7:b7:2d:4d:e2:c2:2f:28:62:72: c5:cc:91:83:76:a4:1c:62:01:49:05:b8:5b:30:0f: 95:23:89:6e:83:36:b7:b7:30:00:fc:70:95:d8:42: cf:5d:15:1e:c0:46:d5:73:35:09:d6:d2:36:29:4a: 45:62:48:14:ea:58:91:40:bc:bb:00:eb:7b:e3:4d: 8e:fc:15:a0:af:01:5a:9c:2a:cb:56:ba:4b:eb:6a: 94:5a:de:bf:75:10:db:3b:6a:be:a7:9e:0c:26:fb: 2c:f4:48:ba:9c:d0:fb:c6:77:8d:dd:56:de:f7:30: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:42:C3:EF:69:F1:DB:DD:61:DA:79:D2:5B:4E:8D:D5:84:14:6E:D2 X509v3 Authority Key Identifier: keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:7c:ec:88:88:fb:4e:c9:28:ed:89:3c:7f:31:6f:df:3b: 6a:3b:7a:b0:9c:d8:6c:75:6b:0c:64:ea:01:3f:a1:45:3b:1c: fe:97:24:e6:92:6f:27:0a:d7:48:d9:6d:a2:11:13:83:be:e2: d3:fe:26:21:c4:02:f2:e4:bf:7d:7c:bf:63:2f:c9:99:7d:d8: 09:d0:75:57:2c:04:25:93:6d:26:bb:17:f9:c8:82:b7:d9:e8: 7c:71:f7:ac:2a:33:8e:93:53:04:b4:fa:9e:6f:32:43:37:63: 1b:fb:d8:84:67:ec:1d:6b:85:1a:d2:60:ec:60:ef:c7:34:ca: 71:4c:a7:9e:a4:24:9f:77:4b:a5:70:d5:d0:f4:34:25:5a:19: 69:d8:9a:18:8c:00:c0:e0:ba:1f:26:b4:86:a3:c5:88:6f:7f: 3c:98:2a:87:a5:e6:f5:73:db:34:c6:6b:1a:8a:27:7b:b8:50: d3:db:7b:cf:25:93:cf:22:ff:5f:35:4e:2e:45:f9:cf:3b:d6: ff:1c:ed:7f:c6:a7:e2:46:99:7a:f5:67:fb:b0:1c:9a:b2:1a: 78:a3:20:c8:f1:6c:dd:c6:c9:bf:9c:df:03:0d:a2:5e:6b:37: c1:22:7b:5d:bf:db:77:0c:06:43:08:93:f0:5a:db:4c:aa:34: c9:92:b9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLimN8XXpkRudFg42hF+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmIxYzZlNWU4ODY1ODhjZDQ3NjE2YmFjYmQ3Y2NiNjRh YmY0NzgwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD Eyg5NTQyYzNlZjY5ZjFkYmRkNjFkYTc5ZDI1YjRlOGRkNTg0MTQ2ZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxNzDtz9ZdA6mjkl2i80VtKgmYmE ZW17I0v+WGGLyUlnPqSprBfngEOZdpMMmqpeLqOhoOR8oQh/CV/l76uT6uoopWhX VZ2jfWXKlieMLTuLPoLUZSNWAfaKs4sVhtYw8c0dyYDi/wk2yh3i5R3PhP9O2xsl oCSDmaxSDJDYTSqpif+NTn7sd4azu7e3LU3iwi8oYnLFzJGDdqQcYgFJBbhbMA+V I4lugza3tzAA/HCV2ELPXRUewEbVczUJ1tI2KUpFYkgU6liRQLy7AOt7402O/BWg rwFanCrLVrpL62qUWt6/dRDbO2q+p54MJvss9Ei6nND7xneN3Vbe9zBvWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVCw+9p8dvdYdp50ltOjdWEFG7SMB8GA1UdIwQY MBaAFGK7HG5eiGWIzUdha6y9fMtkq/R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYt N2M0NDViM2Y5ZmMzLzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85Zjk0NDAtNTkxYi00NGQzLTg3ZDYtN2M0NDViM2Y5ZmMz LzEvWXJzY2JsNklaWWpOUjJGcnJMMTh5MlNyOUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIx87IiI +07JKO2JPH8xb987ajt6sJzYbHVrDGTqAT+hRTsc/pck5pJvJwrXSNltohETg77i 0/4mIcQC8uS/fXy/Yy/JmX3YCdB1VywEJZNtJrsX+ciCt9nofHH3rCozjpNTBLT6 nm8yQzdjG/vYhGfsHWuFGtJg7GDvxzTKcUynnqQkn3dLpXDV0PQ0JVoZadiaGIwA wOC6Hya0hqPFiG9/PJgqh6Xm9XPbNMZrGoone7hQ09t7zyWTzyL/XzVOLkX5zzvW /xztf8an4kaZevVn+7AcmrIaeKMgyPFs3cbJv5zfAw2iXms3wSJ7Xb/bdwwGQwiT 8FrbTKo0yZK50A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:39 2025 by rpki-client