This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json) Hash identifier: KYHxoE0YwmFghQ/o0gVQexR0ERhFW8hF4xFJZzxLgxc= Subject key identifier: 10:64:2F:79:7E:4C:2B:5D:95:5E:67:65:08:51:8F:79:93:16:4A:6C Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Certificate serial: 019B0F008F4D7F12FF6FAAC0B9657CFD1231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft Manifest number: 0F6C Signing time: Thu 11 Dec 2025 20:00:53 +0000 Manifest this update: Thu 11 Dec 2025 20:00:53 +0000 Manifest next update: Fri 12 Dec 2025 20:00:53 +0000 Files and hashes: 1: CNe8Ce9LX6bIFoae7IEYInIJvX8.roa (hash: vAks/DifGuIDg8MpuhTecKF4JO7GCicanpj2dhKngMI=) 2: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: py9IirvyYKSn+9r6FalvupemVmsmXC71rGKMRW+Eriw=) 3: nXfzcpDMArjxgb2F7qR75SrYmPY.roa (hash: 50wVvlHYuRdw/re5wFDGWVBuuEfzzC0RRb8vEvTcySU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:8f:4d:7f:12:ff:6f:aa:c0:b9:65:7c:fd:12:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053 Validity Not Before: Dec 11 20:00:53 2025 GMT Not After : Dec 12 20:00:53 2025 GMT Subject: CN=10642f797e4c2b5d955e676508518f7993164a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:66:88:64:59:c4:49:ec:15:a0:d7:ce:fb: 48:ef:47:24:2a:53:53:4c:50:7f:50:a7:11:f6:6b: e8:d0:79:92:a7:93:da:2f:5a:30:30:53:42:80:30: 98:bc:f2:38:af:6d:41:26:ee:99:b3:89:c6:45:86: 11:e0:fd:4b:d2:e7:65:8e:a4:d2:46:f2:c1:30:1a: 63:c8:27:67:00:7e:95:89:18:5e:8d:37:0e:e5:90: 97:87:14:59:45:c4:d8:c2:75:5b:ea:a9:50:78:3b: 63:5a:0d:75:75:e1:97:77:a9:cc:87:3d:4d:76:48: df:43:61:47:3d:47:8c:40:d1:78:45:9f:2d:68:2c: a1:6d:6f:b6:f7:dc:2c:52:4b:20:4b:b6:d2:76:da: 0a:42:70:5e:ee:0f:e8:37:9f:e4:76:19:77:cb:1e: 0a:e8:12:3c:ed:42:4e:40:f6:75:10:24:76:6c:dc: c5:12:a4:8a:f2:5e:ab:11:15:2f:9a:15:2e:e6:87: 16:9e:23:a3:10:37:61:4c:eb:c1:22:ff:d7:ea:36: d4:b0:5c:10:c4:a2:0f:a3:04:40:6e:55:c3:02:61: a9:02:3d:9d:c4:79:cd:8f:cb:f6:84:25:1b:30:33: 2a:59:27:49:2d:8b:58:65:e3:56:b8:01:06:05:d1: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:2F:79:7E:4C:2B:5D:95:5E:67:65:08:51:8F:79:93:16:4A:6C X509v3 Authority Key Identifier: keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:55:c8:87:7c:06:20:6b:3c:b0:a1:ea:36:98:80:f7:b0:73: 19:1a:15:50:ac:c2:4f:09:74:27:65:42:70:c3:df:00:79:2b: 09:41:7e:65:7f:ce:b7:de:df:41:ba:04:68:6d:67:bc:95:aa: 83:1f:00:4e:1a:35:b4:0c:d1:e8:3d:95:cf:dc:4d:54:bd:70: 75:7d:a0:ea:b5:7b:4b:2f:e9:37:e6:81:b0:f5:2c:f9:66:ed: 4e:c9:c9:a6:bb:c2:1d:ac:25:07:e6:ea:38:49:ff:3d:fc:0b: db:9d:8c:4c:03:27:df:bc:18:ff:c1:52:56:f1:eb:c5:b5:7b: 1a:0c:b5:bf:98:55:70:4f:ba:7d:c1:d5:c5:7b:83:33:2f:ef: 5f:ff:78:8f:13:5b:dd:72:bb:84:5b:b2:c0:15:46:54:11:69: e5:2f:4d:1f:58:f3:6d:aa:18:c5:35:99:02:40:e3:89:c1:38: 82:cd:96:7c:40:f8:4b:a7:34:bc:9e:0f:d8:6d:8f:24:c9:2c: 2f:50:52:54:1b:d4:4c:48:d4:b8:9f:19:a9:c3:40:3d:59:0b: d1:57:c3:da:fd:cc:61:81:e8:e5:21:a6:91:22:df:08:a2:9f: 68:10:c3:a9:be:96:c3:66:3a:4a:0d:4b:2c:46:9e:69:00:f6: c5:85:2b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAI9NfxL/b6rAuWV8/RIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwODAxMWVhNTFhOWZiY2Y4YmFlMGRmMWVkNDk5YTM0MDdk NjMwNTMwHhcNMjUxMjExMjAwMDUzWhcNMjUxMjEyMjAwMDUzWjAzMTEwLwYDVQQD EygxMDY0MmY3OTdlNGMyYjVkOTU1ZTY3NjUwODUxOGY3OTkzMTY0YTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRBmiGRZxEnsFaDXzvtI70ckKlNT TFB/UKcR9mvo0HmSp5PaL1owMFNCgDCYvPI4r21BJu6Zs4nGRYYR4P1L0udljqTS RvLBMBpjyCdnAH6ViRhejTcO5ZCXhxRZRcTYwnVb6qlQeDtjWg11deGXd6nMhz1N dkjfQ2FHPUeMQNF4RZ8taCyhbW+299wsUksgS7bSdtoKQnBe7g/oN5/kdhl3yx4K 6BI87UJOQPZ1ECR2bNzFEqSK8l6rERUvmhUu5ocWniOjEDdhTOvBIv/X6jbUsFwQ xKIPowRAblXDAmGpAj2dxHnNj8v2hCUbMDMqWSdJLYtYZeNWuAEGBdHjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBkL3l+TCtdlV5nZQhRj3mTFkpsMB8GA1UdIwQY MBaAFGCAEepRqfvPi64N8e1JmjQH1jBTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgt NzQyZjg2OTFiZWFhLzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80ZjBlYzUtNTRkMi00MGZiLTk0OTgtNzQyZjg2OTFiZWFh LzEvWUlBUjZsR3AtOC1McmczeDdVbWFOQWZXTUZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlXIh3wG IGs8sKHqNpiA97BzGRoVUKzCTwl0J2VCcMPfAHkrCUF+ZX/Ot97fQboEaG1nvJWq gx8ATho1tAzR6D2Vz9xNVL1wdX2g6rV7Sy/pN+aBsPUs+WbtTsnJprvCHawlB+bq OEn/PfwL252MTAMn37wY/8FSVvHrxbV7Ggy1v5hVcE+6fcHVxXuDMy/vX/94jxNb 3XK7hFuywBVGVBFp5S9NH1jzbaoYxTWZAkDjicE4gs2WfED4S6c0vJ4P2G2PJMks L1BSVBvUTEjUuJ8ZqcNAPVkL0VfD2v3MYYHo5SGmkSLfCKKfaBDDqb6Ww2Y6Sg1L LEaeaQD2xYUrDw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:42 2025 by rpki-client