This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft File: ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json) Hash identifier: J3WZTv5AvjVJXaOBNcXKnSHBqVjrP9QWyLqGBiSD7II= Subject key identifier: 3A:BF:A0:E7:3D:F9:70:10:5A:45:2C:27:F8:13:BA:00:6B:94:4D:38 Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 Certificate issuer: /CN=ca707e086640056bc271d5d2b3e24d01440baa04 Certificate serial: 019AF5E5CF270AC91857B5BF5B470D620680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft Manifest number: 069D Signing time: Sat 06 Dec 2025 23:01:09 +0000 Manifest this update: Sat 06 Dec 2025 23:01:09 +0000 Manifest next update: Sun 07 Dec 2025 23:01:09 +0000 Files and hashes: 1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=) 2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=) 3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=) 4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: UjS33yKK0bsUD+9JVH8pOHESrOwPVBRRVbTQY9i68SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:cf:27:0a:c9:18:57:b5:bf:5b:47:0d:62:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04 Validity Not Before: Dec 6 23:01:09 2025 GMT Not After : Dec 7 23:01:09 2025 GMT Subject: CN=3abfa0e73df970105a452c27f813ba006b944d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:6b:a2:f2:41:5f:9f:d8:55:d0:a2:0b:86: 30:50:a7:38:b8:3b:c1:51:5d:18:c4:ce:54:13:70: c1:d5:e6:d5:62:aa:83:94:c0:5d:40:b5:2c:9d:e8: d2:ca:f7:49:08:95:33:74:d2:b3:31:93:59:46:47: 7b:2e:a8:52:87:bd:8b:39:d5:16:b2:55:1e:fb:58: 22:28:f1:b8:34:56:63:20:ba:39:78:86:34:46:8e: 65:77:f4:ee:ca:0d:cb:36:a7:7f:25:21:ed:d0:6a: 3f:28:a7:78:17:d1:11:9d:f2:23:17:b8:89:ec:8b: b6:df:56:07:41:6f:84:d5:18:6b:da:bc:b3:de:f0: 1f:59:c0:ee:9c:3c:d1:77:2c:a0:e0:26:3e:5b:cc: e9:f2:1d:f4:87:fe:d3:03:33:a6:8b:b7:53:cb:86: dd:b8:70:04:37:da:6c:2d:97:e1:b2:fd:f4:ed:12: 46:52:1c:ea:15:04:d9:77:cf:59:aa:da:ea:b8:f7: 20:77:5a:e8:c0:8d:0e:a2:20:29:67:70:9c:13:24: 33:8b:a7:0a:64:2c:47:09:d6:8c:26:ed:49:ab:29: e9:d7:45:68:a8:6c:6f:a0:24:eb:42:6a:96:d4:a1: e5:1f:79:b5:9d:16:f1:f7:79:39:23:93:55:b5:a9: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:A0:E7:3D:F9:70:10:5A:45:2C:27:F8:13:BA:00:6B:94:4D:38 X509v3 Authority Key Identifier: keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:6a:bb:f8:c1:14:ba:85:d0:46:88:ff:a8:25:cd:7d:9f:c4: 4f:6a:5f:3a:f7:5c:dd:47:89:f1:33:21:ee:a1:df:dd:05:29: ab:d0:5b:fb:4f:3f:fc:3f:71:f0:55:48:60:26:c0:62:ad:dc: ba:25:03:61:95:0e:29:f3:5a:40:b4:22:c4:f7:a3:07:72:ed: 3a:14:89:6f:f3:db:55:f2:e8:38:c3:64:d6:d1:e7:94:55:5a: 8a:b4:2f:45:3d:0d:b0:d9:e2:59:88:db:02:eb:ba:10:a2:a3: 77:fe:fc:6a:5a:e3:a5:3e:04:f9:84:19:19:50:a2:16:44:3d: e1:20:a8:5b:cf:55:a0:d4:b4:ad:7b:36:9d:7c:fc:5e:77:bd: a9:6a:4d:20:95:75:6a:67:0e:d1:06:09:20:b3:0f:76:ae:19: 61:06:34:af:17:0e:43:98:85:c6:a4:d4:8e:12:aa:56:d7:81: 70:3e:7e:23:cb:b0:ed:a9:e7:75:6e:68:ec:e0:cb:9e:e8:c3: 0f:52:67:07:0f:9e:ac:b7:42:a3:9f:a6:7b:b3:20:d5:15:0b: dc:a8:95:08:47:8b:86:e2:4d:02:6d:7d:cf:c8:d9:63:b3:9b: a8:d7:fe:e6:00:6c:aa:a6:e0:e8:fe:4f:97:1a:17:19:e8:fa: 41:97:90:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15c8nCskYV7W/W0cNYgaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNzA3ZTA4NjY0MDA1NmJjMjcxZDVkMmIzZTI0ZDAxNDQw YmFhMDQwHhcNMjUxMjA2MjMwMTA5WhcNMjUxMjA3MjMwMTA5WjAzMTEwLwYDVQQD EygzYWJmYTBlNzNkZjk3MDEwNWE0NTJjMjdmODEzYmEwMDZiOTQ0ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hJrovJBX5/YVdCiC4YwUKc4uDvB UV0YxM5UE3DB1ebVYqqDlMBdQLUsnejSyvdJCJUzdNKzMZNZRkd7LqhSh72LOdUW slUe+1giKPG4NFZjILo5eIY0Ro5ld/Tuyg3LNqd/JSHt0Go/KKd4F9ERnfIjF7iJ 7Iu231YHQW+E1Rhr2ryz3vAfWcDunDzRdyyg4CY+W8zp8h30h/7TAzOmi7dTy4bd uHAEN9psLZfhsv307RJGUhzqFQTZd89ZqtrquPcgd1rowI0OoiApZ3CcEyQzi6cK ZCxHCdaMJu1Jqynp10VoqGxvoCTrQmqW1KHlH3m1nRbx93k5I5NVtakCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq/oOc9+XAQWkUsJ/gTugBrlE04MB8GA1UdIwQY MBaAFMpwfghmQAVrwnHV0rPiTQFEC6oEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMt Yjk5Y2UzMGQ4MzlmLzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zNzZjY2QtZGVmYS00MDI4LWFmMWMtYjk5Y2UzMGQ4Mzlm LzEveW5CLUNHWkFCV3ZDY2RYU3MtSk5BVVFMcWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmq7+MEU uoXQRoj/qCXNfZ/ET2pfOvdc3UeJ8TMh7qHf3QUpq9Bb+08//D9x8FVIYCbAYq3c uiUDYZUOKfNaQLQixPejB3LtOhSJb/PbVfLoOMNk1tHnlFVairQvRT0NsNniWYjb Auu6EKKjd/78alrjpT4E+YQZGVCiFkQ94SCoW89VoNS0rXs2nXz8Xne9qWpNIJV1 amcO0QYJILMPdq4ZYQY0rxcOQ5iFxqTUjhKqVteBcD5+I8uw7anndW5o7ODLnujD D1JnBw+erLdCo5+me7Mg1RUL3KiVCEeLhuJNAm19z8jZY7ObqNf+5gBsqqbg6P5P lxoXGej6QZeQZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:30:42 2025 by rpki-client