This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json) Hash identifier: 6X0uFBXTCd+iqEPCohsfMHd1k3D7aFVSaTbfjZgRivo= Subject key identifier: A3:9E:3D:48:D6:01:0C:FE:DF:B2:B4:5A:6F:35:86:17:47:48:DA:31 Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04 Certificate serial: 019AF3F7751ADF5974801243DA59E21A956E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft Manifest number: 069C Signing time: Sat 06 Dec 2025 14:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:01:11 +0000 Manifest next update: Sun 07 Dec 2025 14:01:11 +0000 Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=) 2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=) 3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=) 4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: yH/dDT5YjkkBiZ54OxogpwSsgoLICIFDDAKTOx9ecFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:75:1a:df:59:74:80:12:43:da:59:e2:1a:95:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04 Validity Not Before: Dec 6 14:01:11 2025 GMT Not After : Dec 7 14:01:11 2025 GMT Subject: CN=a39e3d48d6010cfedfb2b45a6f3586174748da31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:22:32:f9:f6:cc:f7:88:10:ba:2d:71:d6: ea:5d:d2:34:da:7c:ab:75:2a:57:13:99:ba:99:d6: 3d:76:14:f9:ac:fd:61:11:f3:80:63:ca:6a:d2:29: d3:89:12:5b:3e:ea:40:a4:14:71:7f:80:2f:40:3d: 35:ae:6e:73:8c:70:4c:c0:80:52:ea:b2:57:ad:5f: cb:53:10:e0:d7:ab:ed:2e:55:8f:73:2b:a4:78:f4: e9:fd:2d:54:fe:8e:26:c3:77:00:21:f8:88:44:fc: 01:4f:65:b3:40:a2:85:2d:22:db:3e:ca:68:cf:fd: 52:7f:28:4c:ff:76:70:e0:82:c0:54:16:d9:e1:ef: d3:d0:0c:d8:f1:a4:e9:f1:9c:62:6c:7e:a8:b0:0a: 89:eb:dd:e5:f2:02:54:a7:8f:5f:45:9f:25:1d:84: b8:3e:9f:ef:46:1b:ec:16:d6:c5:ce:a3:44:47:0b: 23:ae:d9:64:51:15:33:9e:32:77:92:03:d0:5f:fd: 07:fc:ff:94:a3:1c:db:44:34:f6:c2:dc:b7:10:73: be:cf:2d:5a:53:a8:e5:27:3a:25:19:3e:59:f2:dd: d2:b9:bc:87:e9:29:7c:40:c8:c6:c5:9d:62:0b:17: 6b:63:f2:dd:50:8d:79:e4:6c:54:81:b4:1c:59:82: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9E:3D:48:D6:01:0C:FE:DF:B2:B4:5A:6F:35:86:17:47:48:DA:31 X509v3 Authority Key Identifier: keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:eb:a8:39:98:c2:05:4f:94:b3:05:6c:f8:26:a1:b8:c9:57: 7c:40:4f:71:87:1c:d5:87:22:76:68:42:bc:1f:23:70:23:ef: 56:74:3e:28:90:5d:16:df:8e:d0:e6:f5:7c:5e:4d:4c:6e:37: 7b:b6:98:cd:34:33:26:19:4c:f4:a8:12:06:5e:c7:0b:c6:e4: 94:02:d7:42:c8:5a:dc:62:4e:56:d3:86:86:2b:0f:07:46:49: 92:67:33:68:55:24:f3:32:3e:f2:b4:f7:70:20:9b:1a:42:8d: 7c:d3:ac:ac:db:c2:94:d1:ff:d7:9e:02:e0:91:d3:1f:14:20: 3f:2b:10:a7:c2:69:e5:62:0d:f3:0d:b3:c8:c3:ce:37:96:aa: 40:57:e4:64:97:7a:58:72:3b:73:ed:35:a3:ce:3f:67:d5:6b: 0e:02:88:b3:c6:f8:55:dd:c0:49:77:3a:3c:83:1a:f4:13:07: 6b:5f:19:6b:ea:43:63:d7:ba:a5:88:9c:74:e3:fe:37:1b:a8: 1c:c1:fb:3a:bd:39:42:1d:0d:3e:8c:04:78:00:de:5e:20:9e: 89:49:d5:97:0f:5c:63:00:2f:01:35:7a:5a:b3:48:59:f2:ec: ee:84:d7:8c:22:fb:03:b1:d2:0d:75:e9:f2:23:e7:4c:c9:5d: a4:57:24:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93Ua31l0gBJD2lniGpVuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzA3ZTA4NjY0MDA1NmJjMjcxZDVkMmIzZTI0ZDAxNDQw YmFhMDQwHhcNMjUxMjA2MTQwMTExWhcNMjUxMjA3MTQwMTExWjAzMTEwLwYDVQQD EyhhMzllM2Q0OGQ2MDEwY2ZlZGZiMmI0NWE2ZjM1ODYxNzQ3NDhkYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDAiMvn2zPeIELotcdbqXdI02nyr dSpXE5m6mdY9dhT5rP1hEfOAY8pq0inTiRJbPupApBRxf4AvQD01rm5zjHBMwIBS 6rJXrV/LUxDg16vtLlWPcyukePTp/S1U/o4mw3cAIfiIRPwBT2WzQKKFLSLbPspo z/1SfyhM/3Zw4ILAVBbZ4e/T0AzY8aTp8ZxibH6osAqJ693l8gJUp49fRZ8lHYS4 Pp/vRhvsFtbFzqNERwsjrtlkURUznjJ3kgPQX/0H/P+UoxzbRDT2wty3EHO+zy1a U6jlJzolGT5Z8t3SubyH6Sl8QMjGxZ1iCxdrY/LdUI155GxUgbQcWYLehQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOePUjWAQz+37K0Wm81hhdHSNoxMB8GA1UdIwQY MBaAFMpwfghmQAVrwnHV0rPiTQFEC6oEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMt Yjk5Y2UzMGQ4MzlmLzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMtYjk5Y2UzMGQ4Mzlm LzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOuoOZjC BU+UswVs+CahuMlXfEBPcYcc1YcidmhCvB8jcCPvVnQ+KJBdFt+O0Ob1fF5NTG43 e7aYzTQzJhlM9KgSBl7HC8bklALXQsha3GJOVtOGhisPB0ZJkmczaFUk8zI+8rT3 cCCbGkKNfNOsrNvClNH/154C4JHTHxQgPysQp8Jp5WIN8w2zyMPON5aqQFfkZJd6 WHI7c+01o84/Z9VrDgKIs8b4Vd3ASXc6PIMa9BMHa18Za+pDY9e6pYicdOP+Nxuo HMH7Or05Qh0NPowEeADeXiCeiUnVlw9cYwAvATV6WrNIWfLs7oTXjCL7A7HSDXXp 8iPnTMldpFckMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:55:29 2025 by rpki-client