This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft File: ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json) Hash identifier: 8Rh3GaLs2N9YL4llfvOmG/Vsll1FNviBa7+/mLYc0W8= Subject key identifier: B8:49:6F:49:B2:5B:5B:05:B9:9E:2D:CD:3A:95:42:C8:3F:3E:05:95 Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C Certificate issuer: /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c Certificate serial: 019B1F87B6F4A660AF4723254C4AA5148BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft Manifest number: 170C Signing time: Mon 15 Dec 2025 01:02:26 +0000 Manifest this update: Mon 15 Dec 2025 01:02:26 +0000 Manifest next update: Tue 16 Dec 2025 01:02:26 +0000 Files and hashes: 1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: 7OEcZo/+Ca2+C4lXC4FHn5a+QBNwOrLSHqrviMpb1kk=) 2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:b6:f4:a6:60:af:47:23:25:4c:4a:a5:14:8b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c Validity Not Before: Dec 15 01:02:26 2025 GMT Not After : Dec 16 01:02:26 2025 GMT Subject: CN=b8496f49b25b5b05b99e2dcd3a9542c83f3e0595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:7f:c8:a2:47:95:79:07:54:f0:9d:9b:1d: 90:df:ee:74:e2:b8:53:91:9c:80:32:1f:2a:24:52: ba:80:54:52:25:6b:78:5a:5c:67:b6:9f:f5:cc:59: 9f:12:be:e0:ba:9d:a8:dc:89:29:62:5b:40:45:4f: 55:f9:0b:3d:a4:62:15:23:48:b7:22:5f:47:1d:bd: 6e:a8:3f:fa:44:2e:ca:1f:5f:07:3e:33:09:aa:f9: 5c:fe:33:97:8a:8b:4a:35:a9:fa:69:79:28:de:d7: ca:c5:5e:22:8c:87:10:d1:9d:d5:08:62:62:b7:dd: 88:f4:c8:4a:39:0c:62:ff:ca:8b:91:2e:e1:72:04: 43:76:3a:b9:44:f7:d2:1d:d2:1d:dc:b3:e9:d9:1b: d7:a5:36:44:41:fc:c3:4c:71:95:e2:46:68:98:d6: b2:ba:fa:d3:3a:cf:15:98:aa:6e:f0:d7:ef:bf:1e: d1:e7:ce:8c:87:8d:25:a1:e0:e8:9e:fb:87:61:fb: f8:93:58:bd:94:41:bf:20:64:cc:5a:c2:28:8c:0e: 70:56:aa:fa:14:84:0d:13:fe:26:9d:d2:85:6f:22: 9a:93:b9:32:c2:e5:b8:86:c7:49:a6:08:7d:b9:6a: b8:5f:56:0d:54:f1:31:2a:0f:98:54:66:1b:4c:67: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:49:6F:49:B2:5B:5B:05:B9:9E:2D:CD:3A:95:42:C8:3F:3E:05:95 X509v3 Authority Key Identifier: keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2a:4a:e5:d8:ac:bb:a7:bb:c7:c9:1b:8d:a8:ab:4b:b9:10: 07:4d:05:ff:85:65:ac:88:7d:c1:a6:ce:2d:0f:2d:b3:69:69: 71:16:24:8f:a9:ad:10:fe:ef:02:ac:da:f5:05:a5:90:85:3d: 41:4f:a0:ec:aa:dc:1f:9c:ce:13:7e:43:b9:9b:f3:8f:26:68: 9c:8f:c2:51:23:18:85:3c:89:3a:67:bf:55:69:79:c3:92:ee: 0f:01:2c:c4:11:a1:8d:16:0c:59:ca:0e:88:c9:3d:32:17:36: c9:56:92:a8:dd:30:b7:fb:ef:c2:77:aa:ab:ea:0e:88:5a:1a: ae:e5:fc:bb:54:c9:5b:58:3b:d5:56:09:d2:08:c5:d9:73:8f: de:d2:e3:a7:8b:d6:0d:e3:a3:1d:38:0e:39:36:99:c0:1e:ab: 1d:da:15:86:7a:13:5b:34:ad:7a:dd:40:e2:1a:97:05:4c:74: de:91:db:2a:c7:44:dc:bf:e3:d3:20:23:19:14:ef:1e:94:79: 98:50:42:63:e7:24:24:88:86:7c:27:8e:8c:5f:d2:3e:36:a1: 82:e1:81:8e:6b:3e:ed:58:cb:9a:a6:b0:dc:3c:8a:3f:31:44: d2:41:dc:53:93:17:31:1b:61:f6:dd:15:53:bb:8f:f7:03:d7: 10:96:d2:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfh7b0pmCvRyMlTEqlFIvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5YzEyNmI4MmY3N2NjNjNiNWE2YjZjZDhiZGFlNmUw ZjVhM2MwHhcNMjUxMjE1MDEwMjI2WhcNMjUxMjE2MDEwMjI2WjAzMTEwLwYDVQQD EyhiODQ5NmY0OWIyNWI1YjA1Yjk5ZTJkY2QzYTk1NDJjODNmM2UwNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobx/yKJHlXkHVPCdmx2Q3+504rhT kZyAMh8qJFK6gFRSJWt4Wlxntp/1zFmfEr7gup2o3IkpYltARU9V+Qs9pGIVI0i3 Il9HHb1uqD/6RC7KH18HPjMJqvlc/jOXiotKNan6aXko3tfKxV4ijIcQ0Z3VCGJi t92I9MhKOQxi/8qLkS7hcgRDdjq5RPfSHdId3LPp2RvXpTZEQfzDTHGV4kZomNay uvrTOs8VmKpu8Nfvvx7R586Mh40loeDonvuHYfv4k1i9lEG/IGTMWsIojA5wVqr6 FIQNE/4mndKFbyKak7kywuW4hsdJpgh9uWq4X1YNVPExKg+YVGYbTGfP+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhJb0myW1sFuZ4tzTqVQsg/PgWVMB8GA1UdIwQY MBaAFMrXnBJrgvd8xjtaa2zYva5uD1o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2Mt NGNhNDQ4MDJiNTYzLzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZjE2OWMtNmRhNy00MzUwLThkM2MtNGNhNDQ4MDJiNTYz LzEveXRlY0VtdUM5M3pHTzFwcmJOaTlybTRQV2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARipK5dis u6e7x8kbjairS7kQB00F/4VlrIh9wabOLQ8ts2lpcRYkj6mtEP7vAqza9QWlkIU9 QU+g7KrcH5zOE35DuZvzjyZonI/CUSMYhTyJOme/VWl5w5LuDwEsxBGhjRYMWcoO iMk9Mhc2yVaSqN0wt/vvwneqq+oOiFoaruX8u1TJW1g71VYJ0gjF2XOP3tLjp4vW DeOjHTgOOTaZwB6rHdoVhnoTWzStet1A4hqXBUx03pHbKsdE3L/j0yAjGRTvHpR5 mFBCY+ckJIiGfCeOjF/SPjahguGBjms+7VjLmqaw3DyKPzFE0kHcU5MXMRth9t0V U7uP9wPXEJbSQQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:07:58 2025 by rpki-client