This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json) Hash identifier: tR+6RavLvtHA+QxWnNczKRbpVVvXe1zG9PDr9IpmqqI= Subject key identifier: 36:7F:D1:0C:CB:CA:0A:E6:E7:89:BC:12:75:AC:70:8B:25:1C:73:82 Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd Certificate serial: 019AF208D3329327454886C7B74930ED5A04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft Manifest number: 0504 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: 9hSS_TvQhCvC8fhsSyJYV-rq3kg.roa (hash: IKnNzHp7XVRMYKLUBlGGbOEdrSNJK7VVnYm2JR8nfXc=) 2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: ZrJuG/9+HlPjAsb5w+r7N+h/r/JGDFZylQMzNjK7nm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d3:32:93:27:45:48:86:c7:b7:49:30:ed:5a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=367fd10ccbca0ae6e789bc1275ac708b251c7382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:27:5e:fe:03:52:f8:d3:7e:c4:42:09:ae: 0c:b6:70:44:ea:9b:14:5b:8b:f8:6c:62:61:cf:f2: 90:a9:fd:4a:21:21:02:c0:f9:09:ec:a4:5f:d1:86: 5c:94:b1:9d:c2:a4:84:e8:e8:ba:5a:d4:fd:68:9a: f2:1a:c9:2e:e4:df:42:01:c3:28:e2:24:fb:a9:78: b1:a0:c6:06:b9:e4:cd:70:21:79:a4:7a:0d:7e:44: 75:7d:40:9c:46:71:b3:b9:9c:4b:61:39:27:d6:83: ab:4f:49:28:22:9e:80:d8:c4:42:a3:5a:d9:1e:b7: a4:66:df:d0:22:80:6b:6a:22:78:2c:83:23:38:e9: 12:1a:b1:45:77:d0:96:d7:9b:33:1a:47:b9:38:92: 25:37:44:57:96:37:a4:fa:f6:c2:cb:66:e4:be:c8: 55:13:c0:56:90:01:81:64:65:56:15:32:e1:1b:b7: 27:a6:36:10:7e:12:71:68:90:d5:a8:81:7b:17:15: 2f:87:48:e7:76:8f:32:88:63:68:27:29:06:4e:e9: d3:f2:19:a3:e1:8d:e7:03:c8:4d:e3:3d:95:4d:28: 22:b3:5b:1d:a0:17:27:7c:be:55:52:f5:f2:ba:14: c0:4a:e1:5b:ad:fa:e4:da:a0:27:90:a9:01:06:83: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7F:D1:0C:CB:CA:0A:E6:E7:89:BC:12:75:AC:70:8B:25:1C:73:82 X509v3 Authority Key Identifier: keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:83:55:6e:cf:0c:58:07:b1:8a:ef:79:dc:01:9a:0d:2a:6c: 37:fd:36:e3:33:8b:8e:bd:8e:15:ce:cf:ab:63:88:31:50:57: 03:fe:d8:a1:b4:3f:e5:33:4b:fc:a8:76:83:1d:46:2f:c3:ad: c5:6d:4e:bd:8b:a7:29:c8:3d:dc:48:be:a1:91:15:4d:2f:88: 7d:16:9a:b7:49:25:03:13:0a:2c:53:62:5d:35:00:aa:7f:33: 93:ca:41:6c:d3:51:37:6b:6e:9f:41:fe:d7:81:68:23:08:d1: d3:3e:22:0d:d8:74:d0:fd:bc:84:95:ea:25:84:6e:9d:88:ae: 9c:7f:71:0a:f7:af:2c:9c:09:5c:cd:d3:73:ad:3f:90:3c:87: 81:df:d8:02:1e:2f:02:c4:fe:50:05:7b:22:7c:33:65:b2:59: ed:4c:9f:03:ce:13:fa:4e:3c:61:60:41:b3:04:c8:c4:db:97: d6:d5:65:e9:68:ed:56:9a:3f:82:a0:81:59:80:7f:00:72:11: de:26:69:4d:f4:df:09:f1:b8:67:4d:d0:f1:ff:36:25:3d:75: 53:e1:c6:8e:2c:7b:58:03:e6:ca:b7:88:9e:ca:15:3e:97:66: 52:48:ce:e8:00:09:fa:5b:06:d1:32:6c:6b:a2:a2:54:22:0e: c8:99:9b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNMykydFSIbHt0kw7VoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDkxNDlmMzQ3ODRmNWIyMDJjNTY3NjFiMDFkMzVkZDAy NTY5Y2QwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EygzNjdmZDEwY2NiY2EwYWU2ZTc4OWJjMTI3NWFjNzA4YjI1MWM3MzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU8nXv4DUvjTfsRCCa4MtnBE6psU W4v4bGJhz/KQqf1KISECwPkJ7KRf0YZclLGdwqSE6Oi6WtT9aJryGsku5N9CAcMo 4iT7qXixoMYGueTNcCF5pHoNfkR1fUCcRnGzuZxLYTkn1oOrT0koIp6A2MRCo1rZ HrekZt/QIoBraiJ4LIMjOOkSGrFFd9CW15szGke5OJIlN0RXljek+vbCy2bkvshV E8BWkAGBZGVWFTLhG7cnpjYQfhJxaJDVqIF7FxUvh0jndo8yiGNoJykGTunT8hmj 4Y3nA8hN4z2VTSgis1sdoBcnfL5VUvXyuhTASuFbrfrk2qAnkKkBBoNZAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ/0QzLygrm54m8EnWscIslHHOCMB8GA1UdIwQY MBaAFMoJFJ80eE9bICxWdhsB013QJWnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMGRjZGEtYTM3ZS00NzAzLThkNWEt OWFhZDkwM2E3Mjc2LzEveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iMGRjZGEtYTM3ZS00NzAzLThkNWEtOWFhZDkwM2E3Mjc2 LzEveWdrVW56UjRUMXNnTEZaMkd3SFRYZEFsYWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATINVbs8M WAexiu953AGaDSpsN/024zOLjr2OFc7Pq2OIMVBXA/7YobQ/5TNL/Kh2gx1GL8Ot xW1OvYunKcg93Ei+oZEVTS+IfRaat0klAxMKLFNiXTUAqn8zk8pBbNNRN2tun0H+ 14FoIwjR0z4iDdh00P28hJXqJYRunYiunH9xCvevLJwJXM3Tc60/kDyHgd/YAh4v AsT+UAV7InwzZbJZ7UyfA84T+k48YWBBswTIxNuX1tVl6WjtVpo/gqCBWYB/AHIR 3iZpTfTfCfG4Z03Q8f82JT11U+HGjix7WAPmyreInsoVPpdmUkjO6AAJ+lsG0TJs a6KiVCIOyJmbtA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:45 2025 by rpki-client