This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft File: YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json) Hash identifier: osHL2wyflZQz/DxkWzk+5YLwvhTN4mA6jazQZNcDP8k= Subject key identifier: 4F:CA:1D:0B:D1:98:B6:B1:93:26:1A:C2:5A:C9:5C:00:78:84:06:CC Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A Certificate issuer: /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Certificate serial: 019AF2ADF00DEF4CDB6A55B34825F6349629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft Manifest number: 072F Signing time: Sat 06 Dec 2025 08:01:16 +0000 Manifest this update: Sat 06 Dec 2025 08:01:16 +0000 Manifest next update: Sun 07 Dec 2025 08:01:16 +0000 Files and hashes: 1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: Aw19c17GjRH1ZRcn0zZSUcXB8m8ivBuTAYCB3nPJUUs=) 2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f0:0d:ef:4c:db:6a:55:b3:48:25:f6:34:96:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a Validity Not Before: Dec 6 08:01:16 2025 GMT Not After : Dec 7 08:01:16 2025 GMT Subject: CN=4fca1d0bd198b6b193261ac25ac95c00788406cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:2f:0b:08:09:c4:b3:de:6d:04:80:1d:0d: 31:80:fc:b2:1f:76:d8:21:a5:4c:40:8b:bf:b1:32: 86:36:ed:77:66:ed:fa:ce:0c:8d:34:e3:40:9e:53: ad:12:93:c6:85:41:a0:f3:4f:29:d2:b8:3e:04:70: 9e:f3:4e:e9:d6:18:97:76:3b:14:1b:81:6a:a6:05: 35:08:ba:21:25:d2:17:1e:95:14:56:c5:21:b7:ab: 81:e6:ee:30:02:7d:a9:2a:87:ae:bb:d1:03:87:9c: e4:7c:3d:09:08:a8:1a:4a:ad:d6:3b:da:f9:f7:5e: 6d:a9:8e:3a:06:ee:bc:bf:dd:10:15:21:5f:8d:51: 43:31:e4:a9:4d:c8:8a:f1:bd:54:b9:0e:8e:9e:d0: 43:17:7a:14:98:95:99:ef:8e:36:12:6c:d9:33:3d: 01:43:83:13:5b:da:cc:39:66:f1:ec:5c:d7:80:54: 64:16:c5:96:90:e4:17:9a:bf:38:61:c0:22:4e:1c: 1b:c1:3c:a5:d1:56:ef:0a:69:59:a6:10:91:46:9f: d5:c9:20:ef:65:33:0d:0b:d4:64:bf:ed:c5:54:42: dd:61:d5:0c:6f:09:24:f9:35:3d:9c:65:c6:87:b7: f7:bc:f7:2f:bb:97:ca:b9:e9:69:25:45:fe:f1:22: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:1D:0B:D1:98:B6:B1:93:26:1A:C2:5A:C9:5C:00:78:84:06:CC X509v3 Authority Key Identifier: keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:55:d8:94:31:8a:38:c3:72:a5:49:b4:17:74:40:ae:36: 14:0e:0d:98:2d:4f:aa:9b:9b:a7:66:00:2d:ed:0f:f9:a3:fb: 9a:b0:74:75:23:12:88:4d:a1:63:aa:75:6f:f0:08:5e:ea:d1: aa:f2:bc:49:45:f5:c1:15:ab:7f:ca:20:ac:22:29:04:3e:7f: d6:f7:93:14:65:8b:94:58:b2:7f:15:2b:cb:62:6f:d9:2f:89: b5:56:c8:d1:59:ff:99:8b:1a:11:45:d2:ce:ad:9f:e8:05:6d: 9d:be:7f:94:29:80:c0:8f:7c:2c:74:00:5a:f5:0d:f9:4b:a4: 49:c5:9e:ba:85:5f:e8:60:5a:20:5e:67:37:c8:ca:41:88:9e: 71:c8:94:3c:cd:8b:72:7b:40:3f:b4:a6:f5:cd:ce:a0:50:df: 80:b8:19:2c:b7:1d:df:96:98:b6:0d:94:a2:e9:9d:52:78:09: f5:15:ec:19:ad:55:02:00:0e:a3:ab:7c:b8:5f:d7:4f:41:b0: f7:0d:1f:b6:31:6c:52:2a:53:f7:94:3a:15:e4:5f:dc:ba:f8: c0:61:2b:b7:e9:11:b3:70:ef:0b:ad:1a:46:b6:35:c3:84:6e: b3:20:30:cb:a8:1d:67:c4:e3:93:ea:59:ea:06:34:f0:e2:b6: 0e:27:a0:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfAN70zbalWzSCX2NJYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTg4ZmZlNmYwZGU1ZjJmMWZjOWQxNGVmNjJmMjU2NzBi ZDViNGEwHhcNMjUxMjA2MDgwMTE2WhcNMjUxMjA3MDgwMTE2WjAzMTEwLwYDVQQD Eyg0ZmNhMWQwYmQxOThiNmIxOTMyNjFhYzI1YWM5NWMwMDc4ODQwNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7gvCwgJxLPebQSAHQ0xgPyyH3bY IaVMQIu/sTKGNu13Zu36zgyNNONAnlOtEpPGhUGg808p0rg+BHCe807p1hiXdjsU G4FqpgU1CLohJdIXHpUUVsUht6uB5u4wAn2pKoeuu9EDh5zkfD0JCKgaSq3WO9r5 915tqY46Bu68v90QFSFfjVFDMeSpTciK8b1UuQ6OntBDF3oUmJWZ7442EmzZMz0B Q4MTW9rMOWbx7FzXgFRkFsWWkOQXmr84YcAiThwbwTyl0VbvCmlZphCRRp/VySDv ZTMNC9Rkv+3FVELdYdUMbwkk+TU9nGXGh7f3vPcvu5fKuelpJUX+8SK7DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/KHQvRmLaxkyYawlrJXAB4hAbMMB8GA1UdIwQY MBaAFGDoj/5vDeXy8fydFO9i8lZwvVtKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEt MDcyNWYwNjk3YjgzLzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEtMDcyNWYwNjk3Yjgz LzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg65V2JQx ijjDcqVJtBd0QK42FA4NmC1Pqpubp2YALe0P+aP7mrB0dSMSiE2hY6p1b/AIXurR qvK8SUX1wRWrf8ogrCIpBD5/1veTFGWLlFiyfxUry2Jv2S+JtVbI0Vn/mYsaEUXS zq2f6AVtnb5/lCmAwI98LHQAWvUN+UukScWeuoVf6GBaIF5nN8jKQYiecciUPM2L cntAP7Sm9c3OoFDfgLgZLLcd35aYtg2UoumdUngJ9RXsGa1VAgAOo6t8uF/XT0Gw 9w0ftjFsUipT95Q6FeRf3Lr4wGErt+kRs3DvC60aRrY1w4RusyAwy6gdZ8Tjk+pZ 6gY08OK2DiegeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:11 2025 by rpki-client