This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft File: YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json) Hash identifier: 2zwC2D4pA1OyBZGJmFbaFdwMZ5MKAvlz8OKF+vNIk7Y= Subject key identifier: D6:31:3A:F5:59:AA:54:86:94:0D:23:05:EA:BB:B2:9A:82:46:FE:22 Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88 Certificate issuer: /CN=61658d5efa2a0a3c36c9239374258a98f7fda388 Certificate serial: 019B2776F013F7AD3CF431FC26A3A0345BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft Manifest number: 0F06 Signing time: Tue 16 Dec 2025 14:01:04 +0000 Manifest this update: Tue 16 Dec 2025 14:01:04 +0000 Manifest next update: Wed 17 Dec 2025 14:01:04 +0000 Files and hashes: 1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: WzbEJiKan5BnUhqw5nC+IeBdKH8WIjTGDfctSBYBueI=) 2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:f0:13:f7:ad:3c:f4:31:fc:26:a3:a0:34:5b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388 Validity Not Before: Dec 16 14:01:04 2025 GMT Not After : Dec 17 14:01:04 2025 GMT Subject: CN=d6313af559aa5486940d2305eabbb29a8246fe22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:6f:3a:dc:c1:bc:bd:bf:2f:aa:a4:2e:cb: 0f:20:95:d7:0f:28:3d:90:96:b1:83:32:04:b9:33: 5f:ac:3b:78:e0:d4:ea:55:78:a3:97:17:98:84:23: a0:c0:2f:a6:0d:8f:cc:5b:e5:bc:e2:64:e1:37:77: 54:e9:bc:f8:1d:8b:ae:db:7e:45:dc:b5:d6:87:04: ae:8f:51:bb:45:e8:15:6e:3e:a5:25:34:41:5a:c8: 08:13:99:34:db:e4:4d:a5:41:9d:4c:21:d3:7c:f6: c8:0c:97:c7:71:fc:8e:28:4a:f2:02:da:6f:8d:ff: f4:ff:72:e8:80:7e:a4:f7:0d:9c:bd:3b:00:50:96: 34:38:07:64:ac:bc:41:bd:41:ed:60:1a:ff:96:bf: 96:0d:3d:53:ba:b4:83:80:34:a4:19:53:ec:63:8a: 5e:61:dd:78:3a:6f:27:58:ae:db:0a:a3:73:12:9a: 5b:73:06:36:bc:aa:78:3d:a8:d3:4c:07:d4:16:8b: 22:b2:1b:95:8b:5d:9a:b2:3a:e9:19:83:45:f0:f7: 5f:54:3f:4f:0a:11:1c:59:f1:58:82:9f:49:aa:a7: ef:45:a2:f5:c2:1d:88:6c:a2:2b:f9:cf:e1:aa:3c: 3e:e9:40:b5:64:e2:f7:a4:d5:1f:f1:72:53:ec:0a: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:31:3A:F5:59:AA:54:86:94:0D:23:05:EA:BB:B2:9A:82:46:FE:22 X509v3 Authority Key Identifier: keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:03:e2:83:83:2e:21:02:22:47:aa:8c:83:29:ed:cd:b3:f4: 80:b9:41:42:83:bf:bd:35:ae:70:3e:fa:66:bc:d1:97:89:00: 78:b0:20:90:38:ae:bb:1f:df:77:95:82:07:a3:99:d6:54:19: 4a:0b:96:1c:ec:da:56:d6:eb:ee:8d:2d:67:4c:f0:12:1b:9c: c6:55:79:f5:63:54:f0:27:25:d8:8d:fc:98:2d:75:8e:74:61: b2:9b:11:94:cc:76:53:9d:30:6d:b9:57:ed:80:15:80:99:df: 7f:81:ef:e6:61:28:81:fe:3b:51:80:e7:22:12:61:ce:18:b1: ca:ce:23:f9:72:35:4b:c0:2b:88:b4:33:39:d1:a1:bd:b6:0d: da:8f:e2:0e:a6:cc:81:29:83:41:3a:71:2f:76:e8:9b:07:2f: df:66:6b:b7:f9:1e:05:33:63:ea:f9:16:be:cd:67:d9:3b:11: 69:a3:a6:da:d7:ff:e1:c2:b5:f7:c5:c4:5d:5d:c1:48:6d:6d: e6:2d:62:73:5c:db:e6:3e:8f:35:5d:03:b3:71:3a:d9:8c:5d: 0b:ad:80:2e:5b:ed:b6:30:38:5d:e8:9a:08:a2:68:c8:46:bf: 94:7c:d9:50:ec:fe:ff:8b:c4:00:eb:09:01:b5:c5:47:fd:ec: 79:56:08:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndvAT96089DH8JqOgNFuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjU4ZDVlZmEyYTBhM2MzNmM5MjM5Mzc0MjU4YTk4Zjdm ZGEzODgwHhcNMjUxMjE2MTQwMTA0WhcNMjUxMjE3MTQwMTA0WjAzMTEwLwYDVQQD EyhkNjMxM2FmNTU5YWE1NDg2OTQwZDIzMDVlYWJiYjI5YTgyNDZmZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGpvOtzBvL2/L6qkLssPIJXXDyg9 kJaxgzIEuTNfrDt44NTqVXijlxeYhCOgwC+mDY/MW+W84mThN3dU6bz4HYuu235F 3LXWhwSuj1G7RegVbj6lJTRBWsgIE5k02+RNpUGdTCHTfPbIDJfHcfyOKEryAtpv jf/0/3LogH6k9w2cvTsAUJY0OAdkrLxBvUHtYBr/lr+WDT1TurSDgDSkGVPsY4pe Yd14Om8nWK7bCqNzEppbcwY2vKp4PajTTAfUFosishuVi12asjrpGYNF8PdfVD9P ChEcWfFYgp9JqqfvRaL1wh2IbKIr+c/hqjw+6UC1ZOL3pNUf8XJT7ApDRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYxOvVZqlSGlA0jBeq7spqCRv4iMB8GA1UdIwQY MBaAFGFljV76Kgo8Nskjk3Qlipj3/aOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAt ZGZlNmM1ZWIxZjdjLzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80YjEyOGQtZWQ0Ny00MWMxLWFhZjAtZGZlNmM1ZWIxZjdj LzEvWVdXTlh2b3FDancyeVNPVGRDV0ttUGY5bzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgPig4Mu IQIiR6qMgyntzbP0gLlBQoO/vTWucD76ZrzRl4kAeLAgkDiuux/fd5WCB6OZ1lQZ SguWHOzaVtbr7o0tZ0zwEhucxlV59WNU8Ccl2I38mC11jnRhspsRlMx2U50wbblX 7YAVgJnff4Hv5mEogf47UYDnIhJhzhixys4j+XI1S8AriLQzOdGhvbYN2o/iDqbM gSmDQTpxL3bomwcv32Zrt/keBTNj6vkWvs1n2TsRaaOm2tf/4cK198XEXV3BSG1t 5i1ic1zb5j6PNV0Ds3E62YxdC62ALlvttjA4XeiaCKJoyEa/lHzZUOz+/4vEAOsJ AbXFR/3seVYITA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:12 2025 by rpki-client