This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json) Hash identifier: ZKHFacyd0e8HjzwaZ90nbsvZG3UaMIuBUJMu0XL7l6M= Subject key identifier: 13:B3:76:74:99:D4:18:81:38:BE:F9:63:B2:14:8F:8B:BE:E1:C3:84 Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af Certificate serial: 019B2551502E510C4095B572157D9E4BD5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft Manifest number: 0521 Signing time: Tue 16 Dec 2025 04:00:44 +0000 Manifest this update: Tue 16 Dec 2025 04:00:44 +0000 Manifest next update: Wed 17 Dec 2025 04:00:44 +0000 Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: cX+BxiNze01P+gJG2OZYVjmPlRdhp2RZe+Pt7zb74Uc=) 2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:50:2e:51:0c:40:95:b5:72:15:7d:9e:4b:d5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af Validity Not Before: Dec 16 04:00:44 2025 GMT Not After : Dec 17 04:00:44 2025 GMT Subject: CN=13b3767499d4188138bef963b2148f8bbee1c384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:e6:1e:57:bc:b3:ae:ba:0b:0d:4c:81:09: 88:93:e5:d9:82:58:cd:ca:40:1e:50:bb:89:ff:b3: 86:53:0f:16:cb:24:41:bf:07:db:31:31:8a:7a:ce: 87:20:a8:f5:01:5c:49:44:81:38:0b:9b:02:09:d8: 8f:38:0f:30:45:3b:28:ac:2c:a1:e3:d9:c2:f3:65: 31:4a:7f:38:c7:37:64:74:a0:dd:ac:f1:94:a4:f0: 7b:fe:b8:d4:01:7e:31:55:99:bd:6c:c5:20:01:39: 69:3e:a8:4b:9b:a7:f2:f5:7e:05:43:5b:c3:c7:34: fc:5b:ed:84:be:04:db:e7:b3:e6:25:02:9e:f1:9d: c1:38:01:85:bc:ef:f6:e3:3e:34:2e:33:b5:8f:a5: 31:fa:6f:20:48:0e:66:cb:8e:b7:60:63:50:c9:a9: 73:d0:7f:43:a0:de:8d:a1:a2:03:01:49:60:bb:d5: 65:a1:c0:79:b5:68:3c:25:8b:a2:86:14:83:df:80: 99:77:b4:ff:59:4f:d0:9c:d6:3d:59:08:5b:53:2e: 67:61:55:a7:77:47:33:7f:e4:4d:98:2d:cc:4e:3c: 4b:6e:85:53:6c:15:fd:ee:66:44:35:12:b5:84:ad: 33:ae:b9:19:e7:70:9b:c6:3f:27:19:8f:6e:80:f3: 84:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:76:74:99:D4:18:81:38:BE:F9:63:B2:14:8F:8B:BE:E1:C3:84 X509v3 Authority Key Identifier: keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a6:d5:bb:e8:e5:16:f9:74:6e:80:4e:bb:a0:c0:5d:3e:c3: 29:37:82:e8:69:73:3c:58:bf:af:4e:1b:90:9c:a0:27:5c:36: 1f:98:8d:b3:dd:2f:ec:9e:eb:a3:e5:5d:5b:a5:6f:1d:8c:0a: f5:d0:e7:01:c8:34:ad:69:2d:54:ab:d4:a7:a3:f9:92:da:08: 5e:04:eb:d9:ef:ca:c2:69:88:97:26:c8:9d:7a:5e:69:d1:d5: 6f:c6:3c:b5:72:62:d0:74:5d:a1:5e:95:fa:02:6e:fc:61:80: f9:8e:99:47:3c:28:18:c0:02:5c:ff:1f:3d:45:de:ec:cb:b5: 36:df:f5:3b:92:dc:9f:27:0d:b1:a6:ea:ce:eb:f0:e6:e3:2a: fa:70:79:ee:d8:57:a8:5a:e2:11:5b:55:04:03:54:6a:f2:a7: 1a:41:b1:c1:04:9a:89:6a:21:22:57:3c:cb:b9:3d:02:28:b5: 73:e3:d8:b7:e1:fd:cb:0d:73:46:f8:fd:b0:c6:3b:9b:a8:2b: 45:43:21:dd:52:e5:06:43:18:4f:15:dc:ee:36:9f:9e:88:c1: 0f:4e:c6:13:95:5c:b4:53:20:0f:0e:94:e7:62:26:a9:4d:54: 7e:8f:f6:11:79:1d:e0:2b:56:6a:c6:18:fc:cc:a2:a3:4e:a7: 5c:e0:8e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUVAuUQxAlbVyFX2eS9W5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw MDkwYWYwHhcNMjUxMjE2MDQwMDQ0WhcNMjUxMjE3MDQwMDQ0WjAzMTEwLwYDVQQD EygxM2IzNzY3NDk5ZDQxODgxMzhiZWY5NjNiMjE0OGY4YmJlZTFjMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3LmHle8s666Cw1MgQmIk+XZgljN ykAeULuJ/7OGUw8WyyRBvwfbMTGKes6HIKj1AVxJRIE4C5sCCdiPOA8wRTsorCyh 49nC82UxSn84xzdkdKDdrPGUpPB7/rjUAX4xVZm9bMUgATlpPqhLm6fy9X4FQ1vD xzT8W+2EvgTb57PmJQKe8Z3BOAGFvO/24z40LjO1j6Ux+m8gSA5my463YGNQyalz 0H9DoN6NoaIDAUlgu9VlocB5tWg8JYuihhSD34CZd7T/WU/QnNY9WQhbUy5nYVWn d0czf+RNmC3MTjxLboVTbBX97mZENRK1hK0zrrkZ53Cbxj8nGY9ugPOEFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOzdnSZ1BiBOL75Y7IUj4u+4cOEMB8GA1UdIwQY MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKbVu+jl Fvl0boBOu6DAXT7DKTeC6GlzPFi/r04bkJygJ1w2H5iNs90v7J7ro+VdW6VvHYwK 9dDnAcg0rWktVKvUp6P5ktoIXgTr2e/KwmmIlybInXpeadHVb8Y8tXJi0HRdoV6V +gJu/GGA+Y6ZRzwoGMACXP8fPUXe7Mu1Nt/1O5LcnycNsabqzuvw5uMq+nB57thX qFriEVtVBANUavKnGkGxwQSaiWohIlc8y7k9Aii1c+PYt+H9yw1zRvj9sMY7m6gr RUMh3VLlBkMYTxXc7jafnojBD07GE5VctFMgDw6U52ImqU1Ufo/2EXkd4CtWasYY /Myio06nXOCOxA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:01 2025 by rpki-client