This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json) Hash identifier: Ac1jCvTBWBtidDF2pc5hEcb4VrWSWznrHB9anviXF5Q= Subject key identifier: 28:E0:6F:51:DB:A8:4C:D7:63:0D:9A:AF:71:51:42:D3:30:BD:D9:6B Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Certificate serial: 019B39EA9A449D7ED4DB7E4644CD27F517EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 04:00:34 +0000 Manifest this update: Sat 20 Dec 2025 04:00:34 +0000 Manifest next update: Sun 21 Dec 2025 04:00:34 +0000 Files and hashes: 1: GUCAqvQ0tMU-bensdtba-Wc3xJ0.roa (hash: WEDF5d5E+5ca0KR+0265vV9lQ4jW9zrbyE6qVfdzth4=) 2: hZOD7Y_mupZOHap9fLf6vk7q8ec.roa (hash: S7Xh16GME3MVdYv3MI3CqwSYnk2TD7axisWzIQZKMnA=) 3: kkgbITx0NnDqrc6NrPVjFVrJ5sk.roa (hash: 8TkKYybnSajtPi7S+EAIdOJJM4TQV3tglJHQvRJJM1E=) 4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: speBu9iTmuyQl3QdFP4TfTJ4t6AqyuH/yq1KbZfiFxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:9a:44:9d:7e:d4:db:7e:46:44:cd:27:f5:17:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40 Validity Not Before: Dec 20 04:00:34 2025 GMT Not After : Dec 21 04:00:34 2025 GMT Subject: CN=28e06f51dba84cd7630d9aaf715142d330bdd96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:1a:ec:07:bd:a8:50:12:ea:e1:49:b8:92: 03:74:4b:60:f9:7e:7d:b3:00:e8:9c:84:63:6d:8a: bd:4b:81:ef:25:34:b4:b8:51:7c:c5:98:89:9b:2c: 13:77:30:32:5d:37:61:b2:1b:71:7d:5d:10:03:fc: cb:1f:ff:26:bd:86:df:08:94:ba:1b:4f:1b:e2:18: 70:dc:08:8f:a3:99:5a:c3:91:d2:ed:7d:12:86:80: 02:80:c6:1a:a3:ac:a4:5d:e9:49:18:a0:11:66:6b: 54:fd:52:86:e8:89:b0:70:cf:1a:12:08:47:7b:b0: f2:94:8b:2d:3c:68:3f:22:8c:58:73:3c:59:44:c1: 5f:23:4e:32:61:d0:b3:7a:95:22:30:ab:00:b3:5b: 35:89:a8:40:f5:e5:5f:54:28:89:4c:af:4b:2d:43: d6:a2:e7:64:40:32:db:3c:6d:38:ba:7c:39:47:e6: a9:cb:d1:73:06:27:b1:36:56:2f:43:aa:43:42:16: b8:7b:73:f8:83:7a:45:2a:79:a6:34:20:ff:ce:de: c1:93:51:fd:14:e8:8f:d5:92:90:33:09:20:f5:fc: 96:f7:05:ed:69:09:e1:e1:1d:11:ea:4c:be:70:ed: 96:0b:33:cf:e1:19:be:d4:1f:4c:98:49:30:94:79: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E0:6F:51:DB:A8:4C:D7:63:0D:9A:AF:71:51:42:D3:30:BD:D9:6B X509v3 Authority Key Identifier: keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a2:f9:ba:49:37:52:95:4e:93:98:e0:8b:7d:b7:5a:0f:09: 63:e2:ab:ed:89:1c:61:81:39:35:8d:b0:a4:6d:33:d0:10:f5: 16:2e:ca:dd:b4:ac:97:f2:77:fa:db:97:f1:01:85:95:f0:16: 18:2b:0c:17:50:66:99:b4:39:66:b8:60:f5:0a:52:6d:04:ff: cd:25:9e:34:f7:8a:ad:4e:81:16:e9:47:e9:85:fe:e5:8d:6b: 2d:a7:6e:43:e0:66:6c:1c:34:d3:77:3c:34:fa:63:55:d2:1c: fc:e9:65:76:2e:83:33:2c:96:92:00:19:10:2c:3d:70:33:f8: 67:eb:74:be:73:5f:fa:7f:84:f7:e9:de:c9:55:32:47:9e:75: 28:a5:65:12:af:43:f3:7a:15:e6:a5:1b:86:93:92:31:a5:2e: 6e:6a:c7:39:9c:b0:b2:65:06:f6:a5:54:47:d5:22:12:09:e7: 49:a9:0c:ab:a6:b8:0c:16:56:b7:96:c5:a1:2a:5b:22:96:cd: 07:41:4a:70:3b:21:3e:fb:03:58:9a:b6:37:70:b8:39:f7:5c: b0:15:c8:37:39:ba:3d:06:f5:c1:69:e7:10:01:07:54:86:96: 93:14:b2:fd:aa:70:58:ee:65:81:e4:d7:75:7b:bf:78:d8:fd: 1c:b7:c4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ppEnX7U235GRM0n9RfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTI2Zjk2MzUxMTg5M2ZhNGQ5ZmJkNWU2NGUwZjhhNDM4 MzdlNDAwHhcNMjUxMjIwMDQwMDM0WhcNMjUxMjIxMDQwMDM0WjAzMTEwLwYDVQQD EygyOGUwNmY1MWRiYTg0Y2Q3NjMwZDlhYWY3MTUxNDJkMzMwYmRkOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutka7Ae9qFAS6uFJuJIDdEtg+X59 swDonIRjbYq9S4HvJTS0uFF8xZiJmywTdzAyXTdhshtxfV0QA/zLH/8mvYbfCJS6 G08b4hhw3AiPo5law5HS7X0ShoACgMYao6ykXelJGKARZmtU/VKG6ImwcM8aEghH e7DylIstPGg/IoxYczxZRMFfI04yYdCzepUiMKsAs1s1iahA9eVfVCiJTK9LLUPW oudkQDLbPG04unw5R+apy9FzBiexNlYvQ6pDQha4e3P4g3pFKnmmNCD/zt7Bk1H9 FOiP1ZKQMwkg9fyW9wXtaQnh4R0R6ky+cO2WCzPP4Rm+1B9MmEkwlHl+DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjgb1HbqEzXYw2ar3FRQtMwvdlrMB8GA1UdIwQY MBaAFMqSb5Y1EYk/pNn71eZOD4pDg35AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEt MTQ2MDVkYjU0M2QwLzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80NGI3YmItMjYwNS00MjViLWIzNDEtMTQ2MDVkYjU0M2Qw LzEveXBKdmxqVVJpVC1rMmZ2VjVrNFBpa09EZmtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKL5ukk3 UpVOk5jgi323Wg8JY+Kr7YkcYYE5NY2wpG0z0BD1Fi7K3bSsl/J3+tuX8QGFlfAW GCsMF1BmmbQ5Zrhg9QpSbQT/zSWeNPeKrU6BFulH6YX+5Y1rLaduQ+BmbBw003c8 NPpjVdIc/Olldi6DMyyWkgAZECw9cDP4Z+t0vnNf+n+E9+neyVUyR551KKVlEq9D 83oV5qUbhpOSMaUubmrHOZywsmUG9qVUR9UiEgnnSakMq6a4DBZWt5bFoSpbIpbN B0FKcDshPvsDWJq2N3C4OfdcsBXINzm6PQb1wWnnEAEHVIaWkxSy/apwWO5lgeTX dXu/eNj9HLfEkQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:34:59 2025 by rpki-client