This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json) Hash identifier: BbrfW7PLW+ckKRhSUCSLn4n44+aWow0DvUGF6x7Tp/Y= Subject key identifier: 51:F2:76:38:F1:54:FE:83:CC:3A:C4:D1:76:ED:0D:55:F4:C0:9A:05 Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9 Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9 Certificate serial: 019AF1D1E3156486C8D58FB38AA7C66D1AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft Manifest number: 076C Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=) 2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: fEMDp3U6qUAJj8FLBZRTQg8n6UOXsapH+9J54dQGgVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e3:15:64:86:c8:d5:8f:b3:8a:a7:c6:6d:1a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=51f27638f154fe83cc3ac4d176ed0d55f4c09a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:9f:cb:33:ee:12:0e:1e:16:4b:8d:9d:81: a6:c9:7d:54:f9:5e:ca:81:a2:77:65:c4:6c:a9:41: b7:9e:b0:c0:03:f0:a4:60:a3:66:6f:c1:80:c1:15: 9a:d3:8c:fd:1b:e0:d7:73:3c:72:19:97:33:74:d9: 90:67:74:c9:cb:33:8d:fd:c4:23:08:51:e9:40:62: 09:8d:76:d4:37:da:af:b4:5d:89:6a:ef:fd:62:50: 2b:e7:b1:a3:50:8e:ab:ab:2a:ab:9d:bb:51:88:3a: bc:2c:d9:fd:ad:3b:18:f8:0b:2a:22:92:5b:c3:1c: cf:32:00:37:c2:f9:65:85:bf:32:58:70:4f:6d:12: 00:d8:3e:5f:b3:23:8d:cb:46:b9:33:da:ca:38:44: 7e:42:fd:a5:2c:ad:33:ef:05:d6:1b:7d:27:b1:81: ef:09:e5:d6:34:ba:2a:16:10:b9:76:32:52:26:92: 42:87:07:1f:8c:4f:43:fd:8d:6b:cd:07:01:d0:a7: a5:0d:1d:07:51:1b:08:39:09:aa:d9:ac:10:ee:2f: 03:5b:8d:06:be:fa:40:1c:aa:45:14:52:f7:fb:d3: 05:f3:38:ab:07:d4:fb:60:98:02:7f:71:8d:b2:62: 2d:25:dd:14:44:7e:3a:8c:35:ab:5b:0b:8c:22:f3: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:76:38:F1:54:FE:83:CC:3A:C4:D1:76:ED:0D:55:F4:C0:9A:05 X509v3 Authority Key Identifier: keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:88:15:07:f0:85:ab:40:89:6f:0e:37:e0:7d:16:c8:80:6f: 82:30:4f:fb:a3:6b:75:a2:7f:23:3b:1f:4e:8e:0b:66:22:e3: 40:e3:f5:67:5f:f5:13:10:00:78:77:8d:65:61:1e:e4:c4:c4: 65:c2:59:6a:4b:e1:e1:a7:b3:00:a5:a1:d1:b2:64:57:19:1a: a1:b5:af:46:8f:86:f5:46:37:85:58:58:51:78:c5:2e:33:28: a0:4e:36:b4:29:6b:fc:61:08:cf:cf:af:8c:10:30:24:92:4e: 2c:6f:fe:e6:a6:b9:bd:45:92:77:68:97:b9:9c:0f:21:98:9c: d0:2e:bd:a6:f4:f6:41:58:3f:94:ca:ab:05:0f:d2:8f:22:16: 51:e8:d3:21:be:76:ae:f8:a8:04:14:50:b6:c2:f2:11:be:03: 40:44:6d:79:f4:08:9e:3e:c8:4a:41:66:bf:ea:f1:51:dd:4e: 0b:30:d4:af:94:3a:9c:5b:75:52:c4:0b:27:40:14:3f:4d:31: 46:c6:10:5b:c4:5a:36:0f:a5:26:ad:88:b3:30:a1:9a:86:e8: 2a:89:d9:87:b6:3e:22:f8:bf:78:db:48:97:b9:db:11:16:d6: a8:3b:91:7e:0f:83:de:3b:7a:7c:25:69:e7:94:d8:fd:4f:cb: 74:21:3e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eMVZIbI1Y+ziqfGbRr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjZhNzJjMzQzZTc2NDc3NjI0NGEyZmYxMTI3MWZlYjIy ZWRmZjkwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD Eyg1MWYyNzYzOGYxNTRmZTgzY2MzYWM0ZDE3NmVkMGQ1NWY0YzA5YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oKfyzPuEg4eFkuNnYGmyX1U+V7K gaJ3ZcRsqUG3nrDAA/CkYKNmb8GAwRWa04z9G+DXczxyGZczdNmQZ3TJyzON/cQj CFHpQGIJjXbUN9qvtF2Jau/9YlAr57GjUI6rqyqrnbtRiDq8LNn9rTsY+AsqIpJb wxzPMgA3wvllhb8yWHBPbRIA2D5fsyONy0a5M9rKOER+Qv2lLK0z7wXWG30nsYHv CeXWNLoqFhC5djJSJpJChwcfjE9D/Y1rzQcB0KelDR0HURsIOQmq2awQ7i8DW40G vvpAHKpFFFL3+9MF8zirB9T7YJgCf3GNsmItJd0URH46jDWrWwuMIvMbGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHydjjxVP6DzDrE0XbtDVX0wJoFMB8GA1UdIwQY MBaAFMj2pyw0PnZHdiRKL/EScf6yLt/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2It YWRhNmU2NDMwN2M5LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2ItYWRhNmU2NDMwN2M5 LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXogVB/CF q0CJbw434H0WyIBvgjBP+6NrdaJ/IzsfTo4LZiLjQOP1Z1/1ExAAeHeNZWEe5MTE ZcJZakvh4aezAKWh0bJkVxkaobWvRo+G9UY3hVhYUXjFLjMooE42tClr/GEIz8+v jBAwJJJOLG/+5qa5vUWSd2iXuZwPIZic0C69pvT2QVg/lMqrBQ/SjyIWUejTIb52 rvioBBRQtsLyEb4DQERtefQInj7ISkFmv+rxUd1OCzDUr5Q6nFt1UsQLJ0AUP00x RsYQW8RaNg+lJq2IszChmoboKonZh7Y+Ivi/eNtIl7nbERbWqDuRfg+D3jt6fCVp 55TY/U/LdCE+bA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:45 2025 by rpki-client