This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft File: YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json) Hash identifier: QGt2S6hFK1gqeCCsLQ5UyS87sV94ox+j2JA0QFowC/g= Subject key identifier: FF:F9:DF:F0:AC:0D:9E:8D:77:9E:0C:E2:D8:CB:19:ED:B8:82:6A:20 Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F Certificate issuer: /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f Certificate serial: 019AF23FE1CA63598A0CC2228D59FA71AB72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft Manifest number: 05D6 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=) 2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: /jaJE5yuOhcp9qS/COJmEJ7QMpUHFxVMNv01jGROzKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e1:ca:63:59:8a:0c:c2:22:8d:59:fa:71:ab:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=fff9dff0ac0d9e8d779e0ce2d8cb19edb8826a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:7f:36:2c:13:8f:41:9d:32:e8:f8:5a:4c: 0f:34:ca:41:0a:df:92:45:d8:c7:70:0b:23:0d:19: 81:b8:c3:c5:a7:0c:68:e8:c4:27:2b:6f:d8:af:5c: 25:71:70:05:1e:9f:f7:80:39:f6:55:13:3e:5e:c5: 3b:9b:ca:41:89:6f:81:c6:bc:9d:6f:7d:3d:97:db: d9:2e:2d:3d:b6:07:23:0a:82:80:31:ae:8a:6f:22: 77:d0:79:9f:03:fe:55:c0:6e:a1:bb:42:21:11:7e: 5e:9a:f3:c7:e2:7e:19:24:c1:b7:f9:55:0d:93:f7: 3c:f2:7a:87:bc:af:06:5b:ec:c7:fa:75:2f:16:af: a8:1e:cb:59:39:ff:54:26:d9:4d:2c:96:a8:08:3c: b4:8f:68:c1:a4:80:75:71:2b:c6:fd:fb:d6:69:90: 0d:21:fd:89:a4:c3:1b:6d:3b:02:e7:f8:25:d4:2a: 3e:22:52:df:20:3e:49:c3:57:48:65:ec:c5:81:47: 57:22:01:d6:1d:97:bb:4c:a2:39:ba:09:1d:33:01: f8:df:e5:7e:0f:b8:3a:f3:8f:8e:c8:96:e6:68:da: 8e:6b:ec:20:24:9a:a0:fb:b4:e5:43:47:d9:dd:cf: a5:77:a9:57:35:bc:a7:3d:72:06:da:94:fb:b2:e1: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:DF:F0:AC:0D:9E:8D:77:9E:0C:E2:D8:CB:19:ED:B8:82:6A:20 X509v3 Authority Key Identifier: keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:20:e3:06:94:ce:8d:2c:7f:4a:cd:8b:b7:bc:a5:42:8a:54: a8:d6:52:bb:67:c7:cc:21:df:9a:36:a1:9b:b0:5a:90:e1:f8: e1:3f:36:a9:3a:cc:8c:06:6a:0f:ff:74:7c:38:0f:0c:4a:02: 5d:86:6d:ce:f0:b1:fd:5d:9c:b3:2d:74:9e:d8:b0:ab:31:c2: 62:31:d3:d2:9d:4c:cc:8d:e6:c6:57:0d:13:33:bd:90:ff:ef: ea:b1:30:23:69:77:74:12:90:f3:ed:72:68:50:16:19:63:f0: 70:a0:27:d7:1a:2d:6e:eb:84:4a:9d:d8:eb:35:55:56:fc:b6: 6c:5e:0f:80:75:be:c6:59:b5:a5:c9:f2:90:da:a5:51:9e:d3: 2c:c4:24:f6:bb:55:60:49:c8:2e:20:7f:4a:d7:f6:bb:90:1c: db:ad:b5:ed:7a:7c:39:95:49:c2:a4:bb:7d:8c:37:26:0c:bd: ba:66:4b:d1:a1:86:dd:f4:24:75:9b:43:80:e8:d2:ff:3b:6c: 94:5e:6b:55:33:6e:76:5e:89:96:98:da:30:5d:1b:db:c5:ad: 70:b8:d7:56:65:3e:49:bc:56:61:ae:2c:00:cd:89:b6:7c:eb: e1:c5:37:37:88:bf:0d:56:eb:da:d7:e9:2d:50:24:92:b6:ae: 62:63:c1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+HKY1mKDMIijVn6catyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmE3ZmRmY2ViYzA3YTI3MmRiODljZGFmODc3ODcwYzY4 N2UwNGYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhmZmY5ZGZmMGFjMGQ5ZThkNzc5ZTBjZTJkOGNiMTllZGI4ODI2YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY1/NiwTj0GdMuj4WkwPNMpBCt+S RdjHcAsjDRmBuMPFpwxo6MQnK2/Yr1wlcXAFHp/3gDn2VRM+XsU7m8pBiW+Bxryd b309l9vZLi09tgcjCoKAMa6KbyJ30HmfA/5VwG6hu0IhEX5emvPH4n4ZJMG3+VUN k/c88nqHvK8GW+zH+nUvFq+oHstZOf9UJtlNLJaoCDy0j2jBpIB1cSvG/fvWaZAN If2JpMMbbTsC5/gl1Co+IlLfID5Jw1dIZezFgUdXIgHWHZe7TKI5ugkdMwH43+V+ D7g684+OyJbmaNqOa+wgJJqg+7TlQ0fZ3c+ld6lXNbynPXIG2pT7suFrGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/53/CsDZ6Nd54M4tjLGe24gmogMB8GA1UdIwQY MBaAFGD6f9/OvAeictuJza+HeHDGh+BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMmNlYTQtNTE0YS00MzQ5LTljYmMt ZjllYzMwY2I5YjRiLzEvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMmNlYTQtNTE0YS00MzQ5LTljYmMtZjllYzMwY2I5YjRi LzEvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyDjBpTO jSx/Ss2Lt7ylQopUqNZSu2fHzCHfmjahm7BakOH44T82qTrMjAZqD/90fDgPDEoC XYZtzvCx/V2csy10ntiwqzHCYjHT0p1MzI3mxlcNEzO9kP/v6rEwI2l3dBKQ8+1y aFAWGWPwcKAn1xotbuuESp3Y6zVVVvy2bF4PgHW+xlm1pcnykNqlUZ7TLMQk9rtV YEnILiB/Stf2u5Ac26217Xp8OZVJwqS7fYw3Jgy9umZL0aGG3fQkdZtDgOjS/zts lF5rVTNudl6JlpjaMF0b28WtcLjXVmU+SbxWYa4sAM2Jtnzr4cU3N4i/DVbr2tfp LVAkkrauYmPBUw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:11 2025 by rpki-client