This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json) Hash identifier: i1zTjkyQVBYCruBRtlmFoVyZDmLvHn6Mg9EkEypF000= Subject key identifier: 0D:13:D8:9A:3D:72:1E:EB:17:BE:57:2E:7E:80:3E:B6:F1:1F:A0:1F Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af Certificate serial: 019B59ACE6B463DA9AAB8D749D65BFAA11B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft Manifest number: 053E Signing time: Fri 26 Dec 2025 08:01:01 +0000 Manifest this update: Fri 26 Dec 2025 08:01:01 +0000 Manifest next update: Sat 27 Dec 2025 08:01:01 +0000 Files and hashes: 1: DwtiYCA5PIgfwE4pkiYoIoxyi-E.roa (hash: 6XExmJOQBH8rMAuumFk+d7Dn96rkTzZemwEkCkoGbLQ=) 2: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: Qu4YQjbe9VfS4DOXzSg4Frkem0p7t6CwQv9wVmgB3Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e6:b4:63:da:9a:ab:8d:74:9d:65:bf:aa:11:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af Validity Not Before: Dec 26 08:01:01 2025 GMT Not After : Dec 27 08:01:01 2025 GMT Subject: CN=0d13d89a3d721eeb17be572e7e803eb6f11fa01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:f1:bb:da:40:7e:c1:f0:69:73:31:bd:bd: 21:96:93:a4:58:0c:cf:dc:4b:5b:4c:fb:ef:54:3c: f7:a1:a4:c5:6c:55:8c:ff:17:5b:18:41:29:8c:80: 77:88:94:99:28:99:ae:ae:7c:18:7a:72:9b:9b:e1: 9e:05:d0:29:7c:30:75:c5:4b:79:55:20:38:c1:c7: 5a:fb:27:68:ac:e7:b9:7a:ff:94:b0:8d:b6:99:59: 32:12:90:7b:e5:a9:a7:7d:1f:76:96:65:5a:c2:f1: fc:b6:79:12:d5:0c:35:ac:70:b2:1c:31:13:5d:4f: 5b:69:da:70:f8:f9:e1:db:d5:4f:e5:00:83:49:9f: 80:fb:fa:4c:38:fe:cd:a5:4b:f1:71:a0:b3:d0:32: f8:bb:f4:dc:e9:fe:c9:81:dc:68:2b:79:b4:25:48: 61:6f:d7:e8:d6:04:af:92:91:f6:66:50:61:4d:9c: 63:ed:48:ee:c0:1e:bc:78:90:70:a5:ac:7b:21:1a: 2e:79:1b:3b:e0:d8:06:44:e8:24:28:40:3d:91:f2: c0:cd:a4:17:ee:c8:be:b1:dc:30:cb:27:65:a2:4c: d4:02:6f:7a:b6:bc:eb:6d:aa:5f:71:4d:45:0b:22: 2b:9c:e9:23:54:9c:12:a6:48:11:39:f1:fd:c8:d9: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:13:D8:9A:3D:72:1E:EB:17:BE:57:2E:7E:80:3E:B6:F1:1F:A0:1F X509v3 Authority Key Identifier: keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1d:fc:ed:af:49:e0:a8:93:c7:30:00:77:e7:23:83:14:d2: b4:a4:5f:f1:56:c0:e0:1d:2f:c5:09:54:a7:d3:91:89:d0:82: 13:00:81:34:3f:56:11:ae:a9:55:d5:a2:0a:e8:18:0c:ff:25: 0d:3c:9c:dc:de:80:33:93:ee:3f:15:7f:9d:82:79:24:c2:7d: ab:e3:4d:56:09:93:35:f7:3f:97:1f:6e:e6:f7:27:47:06:04: c6:15:61:fb:a4:59:8f:32:e2:dd:d0:cb:94:a8:6e:14:42:9f: b5:da:33:a9:fd:62:48:1a:be:d5:6a:31:3c:ff:28:64:72:6d: fd:64:ce:23:ae:81:ca:05:b2:d1:19:20:0d:33:71:d4:2e:3f: 81:0b:dc:2b:14:a4:1c:a9:11:7a:b2:84:11:e6:03:d9:e9:d0: 55:18:00:60:88:0f:bb:d6:2c:c9:19:cf:2e:c6:4b:16:38:78: 03:f0:78:d9:55:fc:7f:86:7e:0b:c1:5b:3b:51:c5:7a:f1:17: a1:ac:a0:a8:b4:4a:f9:f3:46:dc:bc:38:79:cc:ec:38:d3:fd: 4a:4f:a7:9f:49:ee:1c:db:f0:ed:d0:10:e9:c3:ca:2c:d5:63: d0:83:1d:0c:a1:34:12:83:76:48:67:fd:75:40:a0:1c:8d:49: 75:2b:d9:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOa0Y9qaq410nWW/qhG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw MDkwYWYwHhcNMjUxMjI2MDgwMTAxWhcNMjUxMjI3MDgwMTAxWjAzMTEwLwYDVQQD EygwZDEzZDg5YTNkNzIxZWViMTdiZTU3MmU3ZTgwM2ViNmYxMWZhMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA3xu9pAfsHwaXMxvb0hlpOkWAzP 3EtbTPvvVDz3oaTFbFWM/xdbGEEpjIB3iJSZKJmurnwYenKbm+GeBdApfDB1xUt5 VSA4wcda+ydorOe5ev+UsI22mVkyEpB75amnfR92lmVawvH8tnkS1Qw1rHCyHDET XU9badpw+Pnh29VP5QCDSZ+A+/pMOP7NpUvxcaCz0DL4u/Tc6f7JgdxoK3m0JUhh b9fo1gSvkpH2ZlBhTZxj7UjuwB68eJBwpax7IRoueRs74NgGROgkKEA9kfLAzaQX 7si+sdwwyydlokzUAm96trzrbapfcU1FCyIrnOkjVJwSpkgROfH9yNnRZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0T2Jo9ch7rF75XLn6APrbxH6AfMB8GA1UdIwQY MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAox387a9J 4KiTxzAAd+cjgxTStKRf8VbA4B0vxQlUp9ORidCCEwCBND9WEa6pVdWiCugYDP8l DTyc3N6AM5PuPxV/nYJ5JMJ9q+NNVgmTNfc/lx9u5vcnRwYExhVh+6RZjzLi3dDL lKhuFEKftdozqf1iSBq+1WoxPP8oZHJt/WTOI66BygWy0RkgDTNx1C4/gQvcKxSk HKkRerKEEeYD2enQVRgAYIgPu9YsyRnPLsZLFjh4A/B42VX8f4Z+C8FbO1HFevEX oaygqLRK+fNG3Lw4eczsONP9Sk+nn0nuHNvw7dAQ6cPKLNVj0IMdDKE0EoN2SGf9 dUCgHI1JdSvZVQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:13 2025 by rpki-client