This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json) Hash identifier: GBY/I3nbNiHJIBHmNTw8MShYodQdqXKgDDnvNrKsOVk= Subject key identifier: DD:F0:F3:05:86:76:5E:81:BF:82:9D:43:30:CC:A0:48:48:02:01:10 Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55 Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155 Certificate serial: 019B3E6E2226D530AA74F8812B79C08501DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft Manifest number: 0A0F Signing time: Sun 21 Dec 2025 01:02:43 +0000 Manifest this update: Sun 21 Dec 2025 01:02:43 +0000 Manifest next update: Mon 22 Dec 2025 01:02:43 +0000 Files and hashes: 1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=) 2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=) 3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=) 4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: CswXwUCcNP9ZtHFMwIGg0G3ltwZicEw+SMocSpg/UR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:22:26:d5:30:aa:74:f8:81:2b:79:c0:85:01:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155 Validity Not Before: Dec 21 01:02:43 2025 GMT Not After : Dec 22 01:02:43 2025 GMT Subject: CN=ddf0f30586765e81bf829d4330cca04848020110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:3b:22:c1:68:e0:dd:7a:e0:f0:c0:70:9b: 25:2a:9a:3a:34:b7:98:e2:6b:3f:55:aa:fc:7b:93: 5e:6a:9b:b3:02:85:5c:23:38:57:a2:0b:37:3a:d8: d6:a8:f8:b1:de:22:d5:e0:ca:69:00:51:86:0f:88: 6a:54:42:85:50:b7:9c:5b:78:93:6c:08:60:9a:81: 08:bc:a0:5f:b9:3a:4a:d6:a5:47:93:03:43:3e:fa: be:a9:06:44:56:68:38:fe:57:1a:a3:ae:09:db:11: 24:77:1a:26:39:20:4e:9d:bf:44:c0:2e:02:e3:82: ab:97:8b:f4:85:e7:9c:ee:98:48:d8:38:4d:28:fd: a1:9f:16:2b:02:b0:85:73:3a:de:d8:2b:09:cd:88: 07:82:7c:cc:8d:0a:83:c1:b1:68:1b:17:f1:5c:f5: 2e:32:9e:cb:b7:ee:5b:2f:25:a4:de:74:d9:da:d0: 98:eb:0e:ca:d2:66:00:9f:f1:9b:3e:64:95:ad:bf: 8f:c6:90:83:a4:c2:b2:35:b0:6c:b3:af:78:ab:42: 44:3f:43:f2:1c:f6:ce:5d:84:fd:26:27:ef:1a:99: f0:d3:75:21:13:63:f6:37:b2:8f:03:67:42:ae:bc: 01:25:89:21:33:24:8d:8b:ac:57:43:db:fe:36:e9: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:F3:05:86:76:5E:81:BF:82:9D:43:30:CC:A0:48:48:02:01:10 X509v3 Authority Key Identifier: keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:dc:2e:24:67:e7:52:c6:03:1e:d4:f4:02:3f:4d:1a:ec:33: 90:fa:d4:4c:d1:5c:c8:c8:d7:61:4e:c8:bf:ee:ac:98:e3:f7: 08:40:8e:a9:d1:6e:61:5b:15:47:3e:68:e2:ca:51:87:0b:9f: 41:40:00:56:66:60:cd:df:0d:dd:7c:a0:7d:44:bb:bd:92:53: b7:ef:94:f6:2c:3c:1f:5f:8e:32:75:4c:93:9b:e8:5b:cf:6f: fd:4c:33:5b:61:32:96:b1:d3:9d:1a:f7:ea:53:55:3c:61:ff: a5:67:45:67:6a:77:1e:51:0e:d4:d4:89:62:6e:49:c8:4a:c3: 88:a7:23:5c:9d:7c:d0:0a:83:b5:23:76:41:09:97:0f:c7:03: 70:0c:52:a5:48:ba:fc:bb:13:26:19:f3:96:14:11:ca:31:63: 36:73:a8:0f:af:69:1f:0d:6b:a6:58:28:ca:ac:16:96:dd:21: 33:37:f0:0c:d3:94:27:8f:d9:93:c7:97:0e:af:5d:40:b0:31: 16:90:f6:52:e9:55:0f:0e:ad:7c:b3:27:af:5a:1d:6d:60:39: d6:81:56:67:86:ac:c1:a3:4e:5e:6e:9b:19:42:d4:75:25:eb: f9:aa:38:b5:4c:4e:4c:5f:ad:03:7c:2a:23:61:a6:e0:e7:bc: 7a:8a:d8:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+biIm1TCqdPiBK3nAhQHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw YTUxNTUwHhcNMjUxMjIxMDEwMjQzWhcNMjUxMjIyMDEwMjQzWjAzMTEwLwYDVQQD EyhkZGYwZjMwNTg2NzY1ZTgxYmY4MjlkNDMzMGNjYTA0ODQ4MDIwMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxk7IsFo4N164PDAcJslKpo6NLeY 4ms/Var8e5NeapuzAoVcIzhXogs3OtjWqPix3iLV4MppAFGGD4hqVEKFULecW3iT bAhgmoEIvKBfuTpK1qVHkwNDPvq+qQZEVmg4/lcao64J2xEkdxomOSBOnb9EwC4C 44Krl4v0heec7phI2DhNKP2hnxYrArCFczre2CsJzYgHgnzMjQqDwbFoGxfxXPUu Mp7Lt+5bLyWk3nTZ2tCY6w7K0mYAn/GbPmSVrb+PxpCDpMKyNbBss694q0JEP0Py HPbOXYT9JifvGpnw03UhE2P2N7KPA2dCrrwBJYkhMySNi6xXQ9v+NumvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3w8wWGdl6Bv4KdQzDMoEhIAgEQMB8GA1UdIwQY MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt MWE2Y2U1ZmFmOTE2LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2 LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdwuJGfn UsYDHtT0Aj9NGuwzkPrUTNFcyMjXYU7Iv+6smOP3CECOqdFuYVsVRz5o4spRhwuf QUAAVmZgzd8N3XygfUS7vZJTt++U9iw8H1+OMnVMk5voW89v/UwzW2EylrHTnRr3 6lNVPGH/pWdFZ2p3HlEO1NSJYm5JyErDiKcjXJ180AqDtSN2QQmXD8cDcAxSpUi6 /LsTJhnzlhQRyjFjNnOoD69pHw1rplgoyqwWlt0hMzfwDNOUJ4/Zk8eXDq9dQLAx FpD2UulVDw6tfLMnr1odbWA51oFWZ4aswaNOXm6bGULUdSXr+ao4tUxOTF+tA3wq I2Gm4Oe8eorYfQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:15:26 2025 by rpki-client