This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json) Hash identifier: 9jgrL3NgAAiwXVg4s1PZQ8wupSABALPWUkG5EmFyg6w= Subject key identifier: D3:E8:E0:8E:AC:90:2A:B2:8B:31:35:9C:5D:66:92:4F:3A:A1:0E:A6 Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c Certificate serial: 019AF12DFD80B992434F3648CE55CB389485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: KYVsAB+19oOXTJdCd3gz3FV/Pn+gzQMNHExmA/s1eAo=) 2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fd:80:b9:92:43:4f:36:48:ce:55:cb:38:94:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=d3e8e08eac902ab28b31359c5d66924f3aa10ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:3e:c2:b5:31:64:b7:26:78:8b:0a:53:bc: ee:f6:dc:a6:61:f7:12:b7:2f:8f:92:48:be:54:f4: 10:59:a9:cb:c9:71:f3:cd:e9:91:51:f1:99:95:75: 90:b7:06:74:71:f5:fe:ab:71:04:9d:c5:5d:1c:e3: 61:1f:5a:fc:40:24:06:bf:dc:5e:c2:2f:50:09:06: d7:6c:ed:3d:96:cd:d2:7d:5c:a3:f9:bb:bd:9b:d0: a5:60:31:51:2d:c0:4c:79:7d:75:15:16:e3:d2:f1: ea:16:4a:88:76:ee:d4:3b:99:88:d4:fc:16:1c:e9: d6:0f:65:76:f2:e4:96:24:fb:5d:cf:f5:75:a6:5e: 6d:29:bb:b3:c6:a1:6a:fc:78:23:e2:d0:df:ee:d1: 0c:0b:51:b5:00:47:01:18:fb:33:ba:f5:73:8b:30: 75:17:6f:d9:94:81:ee:d3:2b:c3:f1:10:09:c2:a9: f2:d4:f6:a6:f0:53:19:b8:da:17:52:1c:b4:e5:15: b5:d8:be:52:f3:84:b9:e5:62:03:d6:24:59:9f:fa: 25:23:fd:23:af:af:ca:9a:70:90:76:97:fb:a7:11: 7f:9c:73:29:1b:d3:04:35:b2:69:48:1a:d7:bf:91: c0:a7:20:7b:e1:54:fa:c1:33:34:47:84:1a:05:c6: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E8:E0:8E:AC:90:2A:B2:8B:31:35:9C:5D:66:92:4F:3A:A1:0E:A6 X509v3 Authority Key Identifier: keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:03:2a:59:f9:85:96:88:85:72:7c:19:6d:62:26:e0:eb:da: f1:76:d2:98:a5:7e:c7:35:f8:19:26:1c:d0:b7:d3:34:65:b6: 28:81:18:46:c8:6d:ef:e3:22:9a:d7:97:e5:6a:ba:54:49:4c: 98:f0:51:70:27:6a:82:85:f5:53:2f:fa:fe:3a:b5:dc:86:e6: c5:2e:85:40:fb:0d:39:83:bd:12:03:b0:31:a9:91:5b:bd:93: bb:9d:a4:eb:d6:ce:d1:26:5a:78:66:14:62:3d:ed:05:82:58: 8d:b4:d9:e2:44:8a:6f:81:2a:ac:ee:ff:d3:fb:5f:9b:28:56: ec:0a:4a:33:5d:4e:24:af:fd:21:2d:40:40:81:67:d9:ea:b0: d2:74:33:ae:13:87:fc:34:29:c8:03:c1:0d:c5:13:1f:04:a3: ac:71:50:d3:51:6f:70:f7:b4:5e:c2:0f:14:b1:b8:bb:47:73: f9:ee:98:c6:56:40:8a:63:89:03:20:a4:03:0c:4b:39:a7:f6: 13:06:13:95:34:ac:20:ac:90:8b:11:74:3c:0b:e1:78:e9:28: 49:8a:19:6e:b4:39:4c:5e:2c:43:17:23:72:2c:1d:fc:0d:1a: bd:55:0f:b7:ff:35:52:c3:ee:5f:7b:89:72:0f:49:0d:95:b4: 7d:18:4c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLf2AuZJDTzZIzlXLOJSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5YzEyNmI4MmY3N2NjNjNiNWE2YjZjZDhiZGFlNmUw ZjVhM2MwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD EyhkM2U4ZTA4ZWFjOTAyYWIyOGIzMTM1OWM1ZDY2OTI0ZjNhYTEwZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+I+wrUxZLcmeIsKU7zu9tymYfcS ty+Pkki+VPQQWanLyXHzzemRUfGZlXWQtwZ0cfX+q3EEncVdHONhH1r8QCQGv9xe wi9QCQbXbO09ls3SfVyj+bu9m9ClYDFRLcBMeX11FRbj0vHqFkqIdu7UO5mI1PwW HOnWD2V28uSWJPtdz/V1pl5tKbuzxqFq/Hgj4tDf7tEMC1G1AEcBGPszuvVzizB1 F2/ZlIHu0yvD8RAJwqny1Pam8FMZuNoXUhy05RW12L5S84S55WID1iRZn/olI/0j r6/KmnCQdpf7pxF/nHMpG9MENbJpSBrXv5HApyB74VT6wTM0R4QaBcZ+gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPo4I6skCqyizE1nF1mkk86oQ6mMB8GA1UdIwQY MBaAFMrXnBJrgvd8xjtaa2zYva5uD1o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2Mt NGNhNDQ4MDJiNTYzLzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2MtNGNhNDQ4MDJiNTYz LzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswMqWfmF loiFcnwZbWIm4Ova8XbSmKV+xzX4GSYc0LfTNGW2KIEYRsht7+MimteX5Wq6VElM mPBRcCdqgoX1Uy/6/jq13IbmxS6FQPsNOYO9EgOwMamRW72Tu52k69bO0SZaeGYU Yj3tBYJYjbTZ4kSKb4EqrO7/0/tfmyhW7ApKM11OJK/9IS1AQIFn2eqw0nQzrhOH /DQpyAPBDcUTHwSjrHFQ01FvcPe0XsIPFLG4u0dz+e6YxlZAimOJAyCkAwxLOaf2 EwYTlTSsIKyQixF0PAvheOkoSYoZbrQ5TF4sQxcjciwd/A0avVUPt/81UsPuX3uJ cg9JDZW0fRhMig== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:12 2025 by rpki-client