This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json) Hash identifier: easZolawmiTYREgOsgNLM1T8T3jcUS7hOGy49gUguxA= Subject key identifier: 65:4C:B1:23:1C:53:0A:BE:1C:2D:D7:35:A0:A4:36:0D:AA:0E:F4:91 Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57 Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57 Certificate serial: 019B19F1EA3F315D5A08DC348522A5D78F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft Manifest number: 0A55 Signing time: Sat 13 Dec 2025 23:00:42 +0000 Manifest this update: Sat 13 Dec 2025 23:00:42 +0000 Manifest next update: Sun 14 Dec 2025 23:00:42 +0000 Files and hashes: 1: MwOTM4NTpYgqtlsKuteambtyY6Q.roa (hash: 15PRhJOGtpjQfaXM28ile3ZgmOfmdwLuAPfdRlgIuMk=) 2: Yn2x7t_9VSdIySXKRiBrfoAkd-g.roa (hash: 5vsDapFH/y4LZ2Hh7KnRvs2tLQL4atDz8jjEX28Quz4=) 3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: PaHMnPJrmVlUz0PWS8gmBAevCIHkSkRrff0LN0JZcow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:ea:3f:31:5d:5a:08:dc:34:85:22:a5:d7:8f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57 Validity Not Before: Dec 13 23:00:42 2025 GMT Not After : Dec 14 23:00:42 2025 GMT Subject: CN=654cb1231c530abe1c2dd735a0a4360daa0ef491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:f4:6b:55:e2:06:dc:e9:41:66:9b:5c:c9: eb:e7:dc:d5:c1:40:07:49:b7:91:91:7b:bb:e6:c8: 63:83:79:7a:85:65:ac:94:96:a1:ac:54:3b:10:90: 9a:63:13:07:7a:ee:22:89:f0:fc:88:f6:13:88:1f: ef:e4:6a:34:4c:91:9a:8d:c6:6d:72:da:d5:ad:24: 9e:53:5b:bb:2f:8d:5f:8b:1a:48:6e:46:5c:19:98: d6:9b:c6:b0:ed:ef:ec:24:86:a4:c0:17:74:01:1b: db:25:3c:69:56:7d:c7:bc:88:c6:0a:88:01:37:0e: 37:21:3c:f6:13:d8:b7:89:49:90:33:c6:92:6a:3d: 61:2c:48:46:e2:4a:97:ae:85:44:ce:d1:fd:aa:d4: b9:34:da:8a:61:14:f9:2e:70:71:fc:9a:5c:16:90: 8a:98:53:24:74:04:02:e3:39:aa:68:34:fc:44:e9: 7e:75:79:da:c6:75:74:8b:c8:0e:61:36:78:31:ef: b1:6a:a9:ad:0e:c4:b7:6b:6d:ee:e5:72:35:66:b0: 16:38:3e:f4:f5:9c:09:6b:a3:06:2e:46:cb:8f:04: 91:12:dd:98:c6:ff:eb:2a:17:ed:08:a2:fc:b2:6d: a3:9f:ae:2c:43:b3:d4:b5:fc:ac:70:a7:57:0a:f5: 51:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:B1:23:1C:53:0A:BE:1C:2D:D7:35:A0:A4:36:0D:AA:0E:F4:91 X509v3 Authority Key Identifier: keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:37:3d:28:7d:a4:e7:97:5c:fd:f4:20:b7:4f:84:12:98:73: c5:b3:4e:7a:39:0c:90:52:99:6a:d0:9b:42:7f:a2:50:e4:64: f8:97:21:1b:5b:cc:a8:a1:af:81:63:22:e8:03:1b:49:05:f7: 58:6c:b0:0c:3a:dd:eb:e6:ee:57:fb:17:36:0b:9d:02:85:13: 01:41:e8:02:db:ae:43:fc:10:3b:8e:46:2d:ab:1e:73:c2:df: f4:4f:3d:ca:15:9b:41:55:63:04:9a:a9:4e:22:1e:95:5a:9b: 64:d8:5a:26:e0:87:29:5c:28:ec:ce:0d:bd:4c:78:d1:85:8a: f8:3f:12:3b:3f:f5:af:04:55:d4:43:94:73:70:48:e5:64:07: 71:c6:d6:5d:cc:54:bc:ba:e9:50:59:f2:13:90:ab:96:78:e8: 6d:4b:ca:3c:68:ba:69:c6:84:b8:f3:43:03:b5:7a:47:0c:bc: 10:78:76:ed:db:e5:dd:26:0f:e6:3e:07:2e:b0:d0:dd:77:b4: 18:0b:0f:ec:21:6a:5d:01:53:1c:19:11:24:cf:56:e9:ad:da: 08:67:f8:e5:a3:32:95:63:ad:47:44:87:02:e7:74:56:b6:7e: a3:93:1f:81:58:d8:99:03:3b:3b:7f:49:49:e7:37:fc:8a:c4: 05:f3:ce:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8eo/MV1aCNw0hSKl148PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTYwZDM4YmIzNzc5NGU3MmU4N2U2ODcwZDA3MWYyYTdk ZDNlNTcwHhcNMjUxMjEzMjMwMDQyWhcNMjUxMjE0MjMwMDQyWjAzMTEwLwYDVQQD Eyg2NTRjYjEyMzFjNTMwYWJlMWMyZGQ3MzVhMGE0MzYwZGFhMGVmNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9v0a1XiBtzpQWabXMnr59zVwUAH SbeRkXu75shjg3l6hWWslJahrFQ7EJCaYxMHeu4iifD8iPYTiB/v5Go0TJGajcZt ctrVrSSeU1u7L41fixpIbkZcGZjWm8aw7e/sJIakwBd0ARvbJTxpVn3HvIjGCogB Nw43ITz2E9i3iUmQM8aSaj1hLEhG4kqXroVEztH9qtS5NNqKYRT5LnBx/JpcFpCK mFMkdAQC4zmqaDT8ROl+dXnaxnV0i8gOYTZ4Me+xaqmtDsS3a23u5XI1ZrAWOD70 9ZwJa6MGLkbLjwSREt2Yxv/rKhftCKL8sm2jn64sQ7PUtfyscKdXCvVRAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVMsSMcUwq+HC3XNaCkNg2qDvSRMB8GA1UdIwQY MBaAFLPmDTi7N3lOcuh+aHDQcfKn3T5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUt N2E5NGM3YzM2MjE3LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83Zjc2NWQtZDA3ZS00YTY2LTkyYTUtN2E5NGM3YzM2MjE3 LzEvcy1ZTk9MczNlVTV5Nkg1b2NOQng4cWZkUGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzc9KH2k 55dc/fQgt0+EEphzxbNOejkMkFKZatCbQn+iUORk+JchG1vMqKGvgWMi6AMbSQX3 WGywDDrd6+buV/sXNgudAoUTAUHoAtuuQ/wQO45GLasec8Lf9E89yhWbQVVjBJqp TiIelVqbZNhaJuCHKVwo7M4NvUx40YWK+D8SOz/1rwRV1EOUc3BI5WQHccbWXcxU vLrpUFnyE5CrlnjobUvKPGi6acaEuPNDA7V6Rwy8EHh27dvl3SYP5j4HLrDQ3Xe0 GAsP7CFqXQFTHBkRJM9W6a3aCGf45aMylWOtR0SHAud0VrZ+o5MfgVjYmQM7O39J Sec3/IrEBfPOtQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:18 2025 by rpki-client