This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft File: yrk2s1-SzexekN8zvcUIZhwntFU.mft (raw, json) Hash identifier: WKsLhpe377+ReASNOhmwxqCxXTC4RqctIkDy1mgQaNU= Subject key identifier: 71:07:F9:3A:63:BA:97:57:BC:74:37:8E:39:F6:E3:4F:86:FF:CE:2C Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455 Certificate serial: 019AF31CFACEDEDA3CE8121D21DB7621CC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft Manifest number: 0E94 Signing time: Sat 06 Dec 2025 10:02:33 +0000 Manifest this update: Sat 06 Dec 2025 10:02:33 +0000 Manifest next update: Sun 07 Dec 2025 10:02:33 +0000 Files and hashes: 1: jXQtN0_lH1jMkgeFoBItsFqK9sA.roa (hash: CEWMWhf6Wo0twHsiVnqhdkBQ3a5xIOWXXq6UQo1OqpU=) 2: k4w-6jVNy-8iNTxThqtVK8dHfNM.roa (hash: i49dbw3SszheCL/rtxIrLH6ESMYCJl9JAeSfGhPrYzs=) 3: yrk2s1-SzexekN8zvcUIZhwntFU.crl (hash: 6tWZnt86/iX4q69TWmH4BZax+5m8VrjfheXrdMmGi/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:fa:ce:de:da:3c:e8:12:1d:21:db:76:21:cc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455 Validity Not Before: Dec 6 10:02:33 2025 GMT Not After : Dec 7 10:02:33 2025 GMT Subject: CN=7107f93a63ba9757bc74378e39f6e34f86ffce2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:b5:cf:c8:b9:9f:5c:47:f9:f7:77:e7:ab: dc:df:fd:a5:44:58:1c:a1:ce:70:de:5b:b5:52:d2: 80:28:e0:13:1b:d9:f9:ce:3a:ed:8b:83:87:ae:53: 71:f2:bc:5a:cf:2a:72:1c:10:db:7c:03:55:3d:5a: a8:ff:5d:8b:e9:71:78:11:52:c7:68:f9:00:c2:e5: 5d:b0:1c:6d:6b:57:be:7f:55:b5:a3:51:dc:d8:42: 94:c4:4c:64:b6:b3:c1:2e:7b:74:59:6d:04:7b:3c: 63:a8:a8:d3:de:fc:fe:5e:2d:4d:97:27:c4:58:ae: f3:22:8e:58:27:b8:3a:1f:74:ee:6e:31:5c:34:4d: 2e:c2:4a:c3:49:a1:64:b7:1e:b5:af:24:52:18:92: 0e:11:47:86:3e:c6:5f:c2:e5:c2:40:4f:a8:22:9b: 6c:46:b1:d8:9a:b1:16:0c:fb:01:bf:c5:4d:f0:8c: af:f2:e7:da:e6:9a:87:70:a7:7b:1f:d4:ba:20:cb: 9a:2f:20:33:9e:84:c5:3d:b5:1e:40:18:47:05:de: 82:ee:51:df:73:77:4d:fb:50:e4:d6:ae:42:d8:9a: f5:0e:60:0d:55:2d:0f:3d:d9:f6:a5:5e:57:14:91: 77:28:25:40:55:74:c4:a3:02:b2:16:06:2f:55:87: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:F9:3A:63:BA:97:57:BC:74:37:8E:39:F6:E3:4F:86:FF:CE:2C X509v3 Authority Key Identifier: keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:70:8e:44:e3:82:fd:ea:f1:3f:cb:18:e2:54:27:fc:57:31: f0:f0:87:fa:93:75:58:30:72:98:a3:e8:51:62:16:d6:de:2e: 2d:47:87:de:3a:51:45:ce:8b:3d:8f:ef:95:c1:9f:e7:d4:e5: 9a:3d:fd:ee:a2:1b:57:c0:3e:f4:1f:2d:05:d9:4e:4d:d5:b0: 83:13:91:00:67:d6:88:81:cf:30:cd:37:b3:8e:00:35:18:5c: 53:88:c1:79:23:f4:4f:4f:1a:b3:3d:24:97:9c:e4:51:9a:5f: f1:d1:f2:82:63:c0:52:ca:6c:7c:7e:08:e8:a8:6f:24:3b:bf: 54:82:2b:a7:0b:cd:84:c9:0c:3e:bb:af:fc:f4:6c:b2:14:02: 6c:dd:c1:fd:e4:95:1a:11:84:7f:ec:1c:bd:ce:8f:b3:11:5a: 29:9d:80:21:12:a4:cd:a2:cf:62:c3:b4:54:92:20:fb:93:c1: a9:29:dd:35:29:07:2d:ab:97:87:1f:d2:71:52:2b:33:46:0c: bf:90:6f:5e:26:c5:e2:e1:8a:05:b8:91:10:c3:40:1b:bf:af: 6b:63:5e:75:ac:ea:90:8d:69:a8:d5:79:8e:04:17:41:6d:27: 22:fd:a0:0c:1e:06:49:7b:19:e2:1b:5d:5a:f1:4d:16:ef:4a: 55:1f:21:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPrO3to86BIdIdt2IcwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjkzNmIzNWY5MmNkZWM1ZTkwZGYzM2JkYzUwODY2MWMy N2I0NTUwHhcNMjUxMjA2MTAwMjMzWhcNMjUxMjA3MTAwMjMzWjAzMTEwLwYDVQQD Eyg3MTA3ZjkzYTYzYmE5NzU3YmM3NDM3OGUzOWY2ZTM0Zjg2ZmZjZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xS1z8i5n1xH+fd356vc3/2lRFgc oc5w3lu1UtKAKOATG9n5zjrti4OHrlNx8rxazypyHBDbfANVPVqo/12L6XF4EVLH aPkAwuVdsBxta1e+f1W1o1Hc2EKUxExktrPBLnt0WW0EezxjqKjT3vz+Xi1NlyfE WK7zIo5YJ7g6H3TubjFcNE0uwkrDSaFktx61ryRSGJIOEUeGPsZfwuXCQE+oIpts RrHYmrEWDPsBv8VN8Iyv8ufa5pqHcKd7H9S6IMuaLyAznoTFPbUeQBhHBd6C7lHf c3dN+1Dk1q5C2Jr1DmANVS0PPdn2pV5XFJF3KCVAVXTEowKyFgYvVYftnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEH+TpjupdXvHQ3jjn240+G/84sMB8GA1UdIwQY MBaAFMq5NrNfks3sXpDfM73FCGYcJ7RVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAt NTU5MjM2MGUzZThlLzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yZjk3N2EtYzBkYi00MzdlLTlmNjAtNTU5MjM2MGUzZThl LzEveXJrMnMxLVN6ZXhla044enZjVUlaaHdudEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHCOROOC /erxP8sY4lQn/Fcx8PCH+pN1WDBymKPoUWIW1t4uLUeH3jpRRc6LPY/vlcGf59Tl mj397qIbV8A+9B8tBdlOTdWwgxORAGfWiIHPMM03s44ANRhcU4jBeSP0T08asz0k l5zkUZpf8dHygmPAUspsfH4I6KhvJDu/VIIrpwvNhMkMPruv/PRsshQCbN3B/eSV GhGEf+wcvc6PsxFaKZ2AIRKkzaLPYsO0VJIg+5PBqSndNSkHLauXhx/ScVIrM0YM v5BvXibF4uGKBbiREMNAG7+va2NedazqkI1pqNV5jgQXQW0nIv2gDB4GSXsZ4htd WvFNFu9KVR8hDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:41 2025 by rpki-client