This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft File: YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft (raw, json) Hash identifier: KiM4epEgR2lxLfOYnhs0R2SoElFIybFeRw+p7ALsqCg= Subject key identifier: C4:3B:28:AA:FC:F4:CF:4E:2C:54:23:F7:9B:C2:46:B2:28:EA:0E:ED Authority key identifier: 62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF Certificate issuer: /CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf Certificate serial: 019B1F869FC09017DA34335FC586C41FE889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft Manifest number: 084D Signing time: Mon 15 Dec 2025 01:01:14 +0000 Manifest this update: Mon 15 Dec 2025 01:01:14 +0000 Manifest next update: Tue 16 Dec 2025 01:01:14 +0000 Files and hashes: 1: YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl (hash: dQzjSRgX2ZXCpLLhFkxqheHA652SFFKyz5TYkdBF6E8=) 2: p0WThpG_MdNvN5PcmLOinicnMKU.roa (hash: mWE6tAtdJrB/Zm93V43/E521MfBc5yD2nOmUvWByQN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:9f:c0:90:17:da:34:33:5f:c5:86:c4:1f:e8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf Validity Not Before: Dec 15 01:01:14 2025 GMT Not After : Dec 16 01:01:14 2025 GMT Subject: CN=c43b28aafcf4cf4e2c5423f79bc246b228ea0eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:43:b7:e9:6e:1f:40:0d:c5:f0:21:64:01: bd:21:b6:ac:36:8b:cb:fa:e2:c3:85:49:6c:7a:07: 4b:49:ff:b1:ba:0e:be:55:f5:49:a5:d5:02:f0:3f: 48:6d:ef:5c:bd:fe:d4:d5:65:b3:fc:fe:13:dc:04: b9:57:c6:61:48:13:d4:bd:a3:2f:48:e4:03:e4:0c: d4:b9:62:c2:6b:50:88:98:f5:56:e7:fc:0d:80:50: 08:48:82:a1:28:ce:75:47:fd:74:19:16:6f:bb:8e: ed:f8:94:a7:36:ca:5c:00:e0:64:8e:e3:73:d1:8e: 49:2e:ef:ad:2b:b7:bf:8d:2b:6c:75:7a:41:f2:33: c5:06:64:4c:68:af:ed:16:d8:33:28:89:39:26:a9: e8:4a:e9:98:0f:0e:d5:d2:00:8e:d3:dd:60:3f:85: 49:bf:a9:c8:99:d1:a5:e0:d1:f6:8f:91:f9:d0:8d: e8:84:e9:ab:18:98:99:f5:0f:fa:72:d1:d1:ae:84: a4:13:1f:43:cd:d7:44:2d:1d:ea:30:dd:d2:db:4f: 3e:d4:6e:aa:eb:6f:0c:6c:7a:ca:d8:f1:d3:83:83: 83:87:dc:bc:76:c9:bb:ee:25:ac:2f:38:93:15:d1: df:57:f8:04:de:b4:3c:14:50:53:82:f7:3c:c7:48: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3B:28:AA:FC:F4:CF:4E:2C:54:23:F7:9B:C2:46:B2:28:EA:0E:ED X509v3 Authority Key Identifier: keyid:62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:13:88:35:7e:21:43:25:c6:bd:00:a2:5a:e5:76:6b:67:d5: ba:2d:6d:99:4c:6b:41:3b:08:79:ce:90:9b:8e:01:87:30:1c: 66:d1:0e:f1:92:99:46:54:ca:eb:a0:3b:f2:65:f8:56:e6:ef: 24:4b:50:ae:64:10:c0:b3:28:dc:ba:38:04:2f:2c:e0:f0:32: 8e:a6:d8:04:58:74:a6:6a:09:e0:e0:59:ce:97:f3:df:b4:c9: b9:f8:33:ca:70:5f:67:5b:0a:aa:d2:9f:0d:40:94:ce:a3:d6: c2:09:70:f2:74:39:b3:6b:80:8b:3e:a3:d7:8a:66:22:69:85: 52:f3:0e:9f:d3:35:0f:e4:ef:be:d3:ae:c6:d0:94:da:37:58: 39:c2:77:d7:a5:d0:11:50:11:dd:c9:fa:4f:9b:08:2e:e5:10: 8f:a0:80:78:80:5c:23:60:05:d1:7c:7d:75:20:92:21:4f:3d: e0:90:27:3c:17:f4:69:33:f3:ab:e7:49:56:cc:c5:9f:dd:cb: be:38:f0:63:8b:41:c3:5e:b9:d7:9a:3a:d1:2a:2d:62:2f:f2: cb:a2:be:41:c6:20:c9:c4:b6:05:3d:33:29:b1:6a:1b:d9:74: f2:40:77:a0:f4:eb:e7:5f:31:04:60:94:99:d6:6e:74:f7:5c: 5a:e0:a4:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhp/AkBfaNDNfxYbEH+iJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNzlkYjE0YWMwMThiZTNiNjdkMjBiNjdlMGQ5YmEzNzZk YmQ5YmYwHhcNMjUxMjE1MDEwMTE0WhcNMjUxMjE2MDEwMTE0WjAzMTEwLwYDVQQD EyhjNDNiMjhhYWZjZjRjZjRlMmM1NDIzZjc5YmMyNDZiMjI4ZWEwZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYFDt+luH0ANxfAhZAG9IbasNovL +uLDhUlsegdLSf+xug6+VfVJpdUC8D9Ibe9cvf7U1WWz/P4T3AS5V8ZhSBPUvaMv SOQD5AzUuWLCa1CImPVW5/wNgFAISIKhKM51R/10GRZvu47t+JSnNspcAOBkjuNz 0Y5JLu+tK7e/jStsdXpB8jPFBmRMaK/tFtgzKIk5JqnoSumYDw7V0gCO091gP4VJ v6nImdGl4NH2j5H50I3ohOmrGJiZ9Q/6ctHRroSkEx9DzddELR3qMN3S208+1G6q 628MbHrK2PHTg4ODh9y8dsm77iWsLziTFdHfV/gE3rQ8FFBTgvc8x0gmZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQ7KKr89M9OLFQj95vCRrIo6g7tMB8GA1UdIwQY MBaAFGJ52xSsAYvjtn0gtn4Nm6N229m/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNzUzZGQtNzQ0NC00Yjk3LWI3M2It MGIzNGVkYzQxOGQ4LzEvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yNzUzZGQtNzQ0NC00Yjk3LWI3M2ItMGIzNGVkYzQxOGQ4 LzEvWW5uYkZLd0JpLU8yZlNDMmZnMmJvM2JiMmI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBOINX4h QyXGvQCiWuV2a2fVui1tmUxrQTsIec6Qm44BhzAcZtEO8ZKZRlTK66A78mX4Vubv JEtQrmQQwLMo3Lo4BC8s4PAyjqbYBFh0pmoJ4OBZzpfz37TJufgzynBfZ1sKqtKf DUCUzqPWwglw8nQ5s2uAiz6j14pmImmFUvMOn9M1D+TvvtOuxtCU2jdYOcJ316XQ EVAR3cn6T5sILuUQj6CAeIBcI2AF0Xx9dSCSIU894JAnPBf0aTPzq+dJVszFn93L vjjwY4tBw16515o60SotYi/yy6K+QcYgycS2BT0zKbFqG9l08kB3oPTr518xBGCU mdZudPdcWuCkOg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:59 2025 by rpki-client