This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json) Hash identifier: qCQxy7LbIPUN3F73Aq3OS34FFiTPnPzAv27FwUmoKbo= Subject key identifier: D4:59:9B:3A:2E:4F:6E:DE:CC:23:AF:A0:D9:42:AB:3B:23:E3:06:C3 Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b Certificate serial: 019AF23F92262964B5BC2BAF40AE07192280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=) 2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: Zuqjg9+TtMabsk4hVjCy+ZMA8izJmEXoHl8QIwpIsQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:92:26:29:64:b5:bc:2b:af:40:ae:07:19:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca06ff246df411643d9de3669818112f3362283b Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=d4599b3a2e4f6edecc23afa0d942ab3b23e306c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a2:fe:fe:9e:c0:08:1c:9c:09:0e:7c:e9:d5: 48:2e:61:48:f2:73:c8:5f:e4:a0:e2:65:df:84:37: 93:3a:72:bd:9a:41:ff:11:87:4a:ed:ce:ba:40:09: 54:69:49:76:ab:16:10:2c:9e:36:da:95:91:d0:d6: ad:a7:5e:90:81:fa:86:dc:69:fc:07:bf:e0:40:8c: 20:95:19:61:ea:c1:7f:5d:2d:af:59:48:6a:5c:a7: a5:15:42:69:ab:e2:32:27:ff:28:0f:a9:82:92:c1: e6:29:97:33:14:f3:0f:ef:04:c9:46:1d:47:cc:93: c2:85:29:6b:47:75:23:d2:95:f5:48:f8:71:4f:8f: 32:01:68:45:fb:f6:8b:1b:44:f3:97:d4:47:bd:84: 60:81:61:21:16:29:0b:0c:e4:01:27:15:ea:3f:49: 0c:2c:14:66:10:20:ee:d5:67:ad:7d:89:94:60:d1: f8:da:c8:be:d2:59:73:ae:37:fc:0d:9b:19:16:ea: cc:16:39:68:08:0f:ae:33:a7:ef:c3:fe:1d:2a:92: 9a:12:f1:17:5a:ba:ec:8c:2e:85:db:02:bc:ed:1f: 73:d4:76:9d:c6:c7:e3:a0:2c:a9:a4:85:59:10:02: bc:a7:57:f0:e7:35:d5:ea:41:51:0e:6e:0b:72:fb: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:59:9B:3A:2E:4F:6E:DE:CC:23:AF:A0:D9:42:AB:3B:23:E3:06:C3 X509v3 Authority Key Identifier: keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a1:81:4b:d3:06:1c:7f:7d:85:83:13:b9:31:d8:2f:9c:4e: cd:51:a7:e3:c1:ad:8c:97:91:5f:91:b0:08:35:01:6c:4e:6f: 4c:d9:41:57:67:5f:99:2c:57:7c:cc:80:15:2b:40:2b:75:39: cb:fc:bc:ba:01:c6:7b:73:a0:e3:8d:58:10:75:f9:bf:50:e0: 2b:8b:4c:67:36:0e:10:45:5f:ac:03:43:00:90:2f:81:29:5e: b6:6b:7d:3e:cc:d7:99:a7:32:f1:71:55:02:62:c7:fe:c7:7f: f0:e5:01:03:82:aa:0a:af:1a:aa:21:ae:f1:09:6d:74:e4:18: 56:f1:c3:85:b1:e5:98:0f:7e:d0:12:ce:53:ef:94:b0:21:6a: b3:9e:9a:9f:45:62:c1:cc:51:3f:20:0b:e0:54:0a:b0:6f:7d: 1c:e7:df:b1:5d:52:e0:25:1a:29:a1:b6:ab:3d:33:cb:b0:23: 40:ce:86:31:fd:11:76:43:27:85:5a:a5:7b:2b:23:3c:da:78: 0e:f8:ab:36:93:52:10:b1:e0:25:a5:17:46:08:bb:a3:46:7a: 63:8c:06:f4:f4:65:47:44:0f:24:2c:18:52:62:e7:27:b1:fe: ca:c7:73:a3:48:b7:4f:2f:ad:41:f4:ae:af:1e:11:41:56:4e: 9c:9d:04:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5ImKWS1vCuvQK4HGSKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDZmZjI0NmRmNDExNjQzZDlkZTM2Njk4MTgxMTJmMzM2 MjI4M2IwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhkNDU5OWIzYTJlNGY2ZWRlY2MyM2FmYTBkOTQyYWIzYjIzZTMwNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaL+/p7ACBycCQ586dVILmFI8nPI X+Sg4mXfhDeTOnK9mkH/EYdK7c66QAlUaUl2qxYQLJ422pWR0Natp16QgfqG3Gn8 B7/gQIwglRlh6sF/XS2vWUhqXKelFUJpq+IyJ/8oD6mCksHmKZczFPMP7wTJRh1H zJPChSlrR3Uj0pX1SPhxT48yAWhF+/aLG0Tzl9RHvYRggWEhFikLDOQBJxXqP0kM LBRmECDu1WetfYmUYNH42si+0llzrjf8DZsZFurMFjloCA+uM6fvw/4dKpKaEvEX WrrsjC6F2wK87R9z1HadxsfjoCyppIVZEAK8p1fw5zXV6kFRDm4LcvvuxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRZmzouT27ezCOvoNlCqzsj4wbDMB8GA1UdIwQY MBaAFMoG/yRt9BFkPZ3jZpgYES8zYig7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzct MWM0M2Q0YzI3ZDZjLzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzctMWM0M2Q0YzI3ZDZj LzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqGBS9MG HH99hYMTuTHYL5xOzVGn48GtjJeRX5GwCDUBbE5vTNlBV2dfmSxXfMyAFStAK3U5 y/y8ugHGe3Og441YEHX5v1DgK4tMZzYOEEVfrANDAJAvgSletmt9PszXmacy8XFV AmLH/sd/8OUBA4KqCq8aqiGu8QltdOQYVvHDhbHlmA9+0BLOU++UsCFqs56an0Vi wcxRPyAL4FQKsG99HOffsV1S4CUaKaG2qz0zy7AjQM6GMf0RdkMnhVqleysjPNp4 DvirNpNSELHgJaUXRgi7o0Z6Y4wG9PRlR0QPJCwYUmLnJ7H+ysdzo0i3Ty+tQfSu rx4RQVZOnJ0EPg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:42 2025 by rpki-client