This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json) Hash identifier: y+LHF6pkdDets+iXbmCsMlxwJiQXp6M3nVpf86m+4v8= Subject key identifier: 33:3E:3F:AB:05:AC:AE:BB:16:DF:85:1F:68:5C:39:73:85:1D:74:75 Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d Certificate serial: 019B337B524E12503D6EAA9DF2300DD59340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft Manifest number: 044D Signing time: Thu 18 Dec 2025 22:01:18 +0000 Manifest this update: Thu 18 Dec 2025 22:01:18 +0000 Manifest next update: Fri 19 Dec 2025 22:01:18 +0000 Files and hashes: 1: SSBMzkm-jf_y5E7eeLfr40dA4CE.roa (hash: 46QdoM079olXIRvtJI0XHjDc3RUOZR3rP6kBJA82cO8=) 2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: pcj6dW4slTnoxK8nSm0jsE9NC6m+b702AICCbOrWPOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:52:4e:12:50:3d:6e:aa:9d:f2:30:0d:d5:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d Validity Not Before: Dec 18 22:01:18 2025 GMT Not After : Dec 19 22:01:18 2025 GMT Subject: CN=333e3fab05acaebb16df851f685c3973851d7475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a6:03:48:e8:91:93:1a:ce:7f:ee:ec:c3:78: 60:aa:b6:d4:99:77:40:95:76:23:b7:d4:19:47:39: 85:c8:3c:e8:59:a1:fb:07:37:2e:00:37:3c:2c:5e: 8b:f3:cf:25:8e:83:74:1d:f6:e5:28:2a:6a:25:a1: d2:a6:57:b0:e0:9a:fe:3e:68:1f:b8:34:79:b6:6d: 7c:37:35:8e:ba:5f:aa:b0:3f:9f:0c:13:c3:f5:5d: b9:1e:90:83:94:0d:12:18:2b:9d:c3:e5:7b:07:f5: 9f:00:2c:28:dd:63:f8:ee:03:72:f6:eb:68:e9:7e: 58:69:ee:30:bd:58:e6:f7:42:5a:d8:06:46:44:ef: 89:fe:d5:24:b6:da:a0:a9:fc:28:40:ea:d6:9e:68: f4:5a:2e:48:3b:59:51:44:d0:9e:3d:a4:41:b9:1f: c2:d7:0e:bf:f5:43:9b:ea:2c:dc:e8:23:d2:92:dd: 19:89:8d:2b:b7:6e:09:48:9d:42:bb:28:5d:5e:27: bc:55:34:95:78:40:57:51:9d:5a:4d:ce:28:89:d1: 6e:80:b4:89:2d:5c:b5:b5:6b:98:2b:19:bf:0b:d8: c5:be:05:dc:38:ce:1b:5d:8a:74:73:67:c4:ff:00: 21:7d:32:84:ac:0f:3b:a0:89:88:e2:27:aa:69:a2: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:3F:AB:05:AC:AE:BB:16:DF:85:1F:68:5C:39:73:85:1D:74:75 X509v3 Authority Key Identifier: keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f7:c7:e7:7c:b2:2b:22:d4:6a:a9:cb:dd:15:48:dd:f1:be: 88:3b:1a:23:0d:ae:0c:32:08:b3:e7:71:1d:9a:9d:fa:a3:c1: b1:17:58:b0:71:7d:c1:83:c3:1a:41:12:59:99:71:7b:83:50: 65:3b:20:52:f7:dc:40:60:aa:38:67:66:c7:a4:4a:52:65:af: 8e:5e:b2:6c:66:08:17:94:2c:ff:f4:df:45:e4:b0:21:f1:96: 98:e9:70:41:1e:87:b2:3f:22:9d:5a:bc:4d:f2:7c:a3:87:e0: f7:26:b4:b8:2b:b8:56:36:60:20:e0:7a:74:a3:a3:ce:d9:b9: cd:e3:30:3d:fd:b8:99:14:f3:cd:d1:c5:98:62:6e:74:da:ab: 43:78:00:46:7e:3b:97:c7:66:5f:95:9b:c5:9a:81:0b:66:48: b1:14:ff:4b:8e:a2:0d:e5:b2:69:c7:0e:b0:9d:3f:30:32:e4: 33:23:9f:16:a4:78:8d:b7:ea:25:a1:6a:98:b2:fa:56:1d:ec: d1:02:c2:36:15:a3:50:15:84:76:cd:a9:c6:63:b3:dd:1b:e9: 9e:29:1f:d6:4c:0b:6f:71:7d:ed:de:ee:69:b1:2b:de:06:ae: 29:2f:a0:75:c1:ed:cb:b5:64:0d:d7:4c:60:aa:4a:d7:9e:3a: f0:c1:e7:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1JOElA9bqqd8jAN1ZNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YWVmODcxNjc1ODVkMjg5ODMxNWFhMzc1M2YzZmE2OGRh ZDJjNmQwHhcNMjUxMjE4MjIwMTE4WhcNMjUxMjE5MjIwMTE4WjAzMTEwLwYDVQQD EygzMzNlM2ZhYjA1YWNhZWJiMTZkZjg1MWY2ODVjMzk3Mzg1MWQ3NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aYDSOiRkxrOf+7sw3hgqrbUmXdA lXYjt9QZRzmFyDzoWaH7BzcuADc8LF6L888ljoN0HfblKCpqJaHSplew4Jr+Pmgf uDR5tm18NzWOul+qsD+fDBPD9V25HpCDlA0SGCudw+V7B/WfACwo3WP47gNy9uto 6X5Yae4wvVjm90Ja2AZGRO+J/tUkttqgqfwoQOrWnmj0Wi5IO1lRRNCePaRBuR/C 1w6/9UOb6izc6CPSkt0ZiY0rt24JSJ1CuyhdXie8VTSVeEBXUZ1aTc4oidFugLSJ LVy1tWuYKxm/C9jFvgXcOM4bXYp0c2fE/wAhfTKErA87oImI4ieqaaLXqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM+P6sFrK67Ft+FH2hcOXOFHXR1MB8GA1UdIwQY MBaAFMmu+HFnWF0omDFao3U/P6aNrSxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODIt ZGIxMGRjZmVjNGJmLzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NWNlODItZGQwNi00OTU4LTllODItZGIxMGRjZmVjNGJm LzEveWE3NGNXZFlYU2lZTVZxamRUOF9wbzJ0TEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/fH53yy KyLUaqnL3RVI3fG+iDsaIw2uDDIIs+dxHZqd+qPBsRdYsHF9wYPDGkESWZlxe4NQ ZTsgUvfcQGCqOGdmx6RKUmWvjl6ybGYIF5Qs//TfReSwIfGWmOlwQR6Hsj8inVq8 TfJ8o4fg9ya0uCu4VjZgIOB6dKOjztm5zeMwPf24mRTzzdHFmGJudNqrQ3gARn47 l8dmX5WbxZqBC2ZIsRT/S46iDeWyaccOsJ0/MDLkMyOfFqR4jbfqJaFqmLL6Vh3s 0QLCNhWjUBWEds2pxmOz3Rvpnikf1kwLb3F97d7uabEr3gauKS+gdcHty7VkDddM YKpK15468MHnmg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:57 2025 by rpki-client