This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json) Hash identifier: Jyipy3SQQ8PUbaUFbOCYycBqWg0OB5epYoAtPhuuLfE= Subject key identifier: 90:79:97:BB:59:0F:DE:9F:44:9B:21:8D:E9:66:80:61:2F:6B:56:B3 Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2 Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2 Certificate serial: 019B5A1A651590607ED7B2139F4175A31CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft Manifest number: 1742 Signing time: Fri 26 Dec 2025 10:00:37 +0000 Manifest this update: Fri 26 Dec 2025 10:00:37 +0000 Manifest next update: Sat 27 Dec 2025 10:00:37 +0000 Files and hashes: 1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: +9aA401tZM5sfN4krki03G80l0/Keh2ztI1yesv3WpI=) 2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:65:15:90:60:7e:d7:b2:13:9f:41:75:a3:1c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2 Validity Not Before: Dec 26 10:00:37 2025 GMT Not After : Dec 27 10:00:37 2025 GMT Subject: CN=907997bb590fde9f449b218de96680612f6b56b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:00:f6:aa:6f:a9:fa:38:bc:52:dd:ca:4b: f7:8a:bc:e5:38:82:cc:05:86:57:2d:b9:83:a4:11: 04:ea:9a:36:58:27:25:0e:94:8b:60:d3:fa:1c:8d: b6:de:0b:f6:57:c9:aa:30:f5:a7:76:4a:6c:57:49: 78:2e:41:67:28:12:bc:b4:aa:f1:e5:47:ee:88:ac: 2b:e7:c2:2d:67:0f:1a:ba:48:d4:fb:8a:85:6d:0f: 89:c5:20:9c:85:02:17:ed:07:6b:d8:4e:53:e7:8a: 4d:c9:1b:2c:0c:85:15:cd:7a:71:48:84:4c:39:e1: 4a:39:b6:83:91:32:5e:49:87:8e:76:17:ab:e0:69: a3:84:7c:d2:58:e5:6b:77:79:17:48:53:38:4e:ca: 86:2c:bd:ff:33:63:1f:80:0e:b1:2f:ad:e4:10:71: b0:bd:d7:d4:86:ce:ff:7c:61:09:23:d4:4e:9a:2c: 54:10:b5:14:33:aa:7e:97:79:af:b7:fe:4b:8f:7c: da:11:3b:19:09:3b:f6:83:ce:52:7a:5b:24:a0:c5: 6a:5d:e6:cf:16:c3:50:c7:e7:64:ab:d3:9a:cd:4a: da:52:fb:f3:8d:c1:a9:17:f7:c7:e5:f2:25:2e:9f: 95:c3:19:94:6c:78:98:ec:b4:ca:8a:25:fe:f0:a4: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:79:97:BB:59:0F:DE:9F:44:9B:21:8D:E9:66:80:61:2F:6B:56:B3 X509v3 Authority Key Identifier: keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:14:d3:34:da:ab:a5:32:b5:c3:38:c7:65:f0:1a:b8:f7:6c: 05:2f:8c:63:e2:00:25:71:53:b2:37:f8:86:4e:a1:08:0e:8e: 54:4d:8d:40:9d:61:6d:fd:a1:8f:f9:df:70:04:10:6a:71:b7: 66:5b:71:44:53:be:7a:96:14:ac:71:bc:ed:b8:42:ea:41:57: 09:7d:02:94:9e:51:30:fc:05:1f:64:25:f0:5b:03:8c:d4:a1: f7:83:5d:63:3b:d0:26:fe:0e:1f:85:c8:e5:2e:73:14:2b:47: 0f:6c:7f:d8:1c:81:da:7c:e3:6d:b2:cc:b8:9f:53:e8:02:1b: a6:0c:5c:39:fa:45:81:53:6f:34:2e:83:8c:a0:97:66:1c:dd: 06:42:82:07:7e:7a:0f:4f:fd:af:1b:7c:40:a7:c3:90:77:6a: 6a:a7:d3:c7:2d:e4:70:20:27:7a:e4:07:9c:e0:d3:44:2e:e1: bd:1a:65:d6:07:77:c5:9c:33:78:3a:26:6b:a7:ea:41:74:ca: 50:d5:99:ae:37:91:4b:aa:3e:8b:c1:4f:51:21:66:fa:5c:84: d2:77:d1:45:a2:01:44:61:0d:88:bf:82:76:cc:ac:81:a1:a5: f1:d7:8b:1c:dc:e9:03:69:c2:9a:76:cf:60:4f:fb:b6:69:7a: a1:ee:25:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmUVkGB+17ITn0F1oxznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYjc5NDkwMmE1Y2QzZDI3ODNmY2MyYWE0YjA3OTFmNzlh NTc3YTIwHhcNMjUxMjI2MTAwMDM3WhcNMjUxMjI3MTAwMDM3WjAzMTEwLwYDVQQD Eyg5MDc5OTdiYjU5MGZkZTlmNDQ5YjIxOGRlOTY2ODA2MTJmNmI1NmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZQA9qpvqfo4vFLdykv3irzlOILM BYZXLbmDpBEE6po2WCclDpSLYNP6HI223gv2V8mqMPWndkpsV0l4LkFnKBK8tKrx 5UfuiKwr58ItZw8aukjU+4qFbQ+JxSCchQIX7Qdr2E5T54pNyRssDIUVzXpxSIRM OeFKObaDkTJeSYeOdher4GmjhHzSWOVrd3kXSFM4TsqGLL3/M2MfgA6xL63kEHGw vdfUhs7/fGEJI9ROmixUELUUM6p+l3mvt/5Lj3zaETsZCTv2g85SelskoMVqXebP FsNQx+dkq9OazUraUvvzjcGpF/fH5fIlLp+VwxmUbHiY7LTKiiX+8KQIMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB5l7tZD96fRJshjelmgGEva1azMB8GA1UdIwQY MBaAFGC3lJAqXNPSeD/MKqSweR95pXeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQt NDAxNDc3NDg5MzAyLzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9kNzFiMmMtMjE0MC00ZTZlLWFiYzQtNDAxNDc3NDg5MzAy LzEvWUxlVWtDcGMwOUo0UDh3cXBMQjVIM21sZDZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBTTNNqr pTK1wzjHZfAauPdsBS+MY+IAJXFTsjf4hk6hCA6OVE2NQJ1hbf2hj/nfcAQQanG3 ZltxRFO+epYUrHG87bhC6kFXCX0ClJ5RMPwFH2Ql8FsDjNSh94NdYzvQJv4OH4XI 5S5zFCtHD2x/2ByB2nzjbbLMuJ9T6AIbpgxcOfpFgVNvNC6DjKCXZhzdBkKCB356 D0/9rxt8QKfDkHdqaqfTxy3kcCAneuQHnODTRC7hvRpl1gd3xZwzeDoma6fqQXTK UNWZrjeRS6o+i8FPUSFm+lyE0nfRRaIBRGENiL+CdsysgaGl8deLHNzpA2nCmnbP YE/7tml6oe4l1g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:12 2025 by rpki-client