This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json) Hash identifier: 1ccsACHw+V0Oh+HxPDREevf/lRwUftfLzk1q0vaq4FI= Subject key identifier: D6:3E:C3:A6:BF:57:F0:59:3A:C3:47:C5:37:75:DC:B6:B7:31:E3:D4 Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Certificate serial: 019B3E35843D6F520117A12FB1A79FE3F9D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft Manifest number: 01DF Signing time: Sun 21 Dec 2025 00:00:53 +0000 Manifest this update: Sun 21 Dec 2025 00:00:53 +0000 Manifest next update: Mon 22 Dec 2025 00:00:53 +0000 Files and hashes: 1: S_KGny0V2oEXYwCcr5dtwWcRsJA.roa (hash: M1AuhFAujciHfpbA/eogA50Y0iOEp0xBeyr+x1qiwDE=) 2: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: sUpfHmRrJ+xxtWBX01iTzSR6kjLhgH4rALIzPBRnT2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:84:3d:6f:52:01:17:a1:2f:b1:a7:9f:e3:f9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Validity Not Before: Dec 21 00:00:53 2025 GMT Not After : Dec 22 00:00:53 2025 GMT Subject: CN=d63ec3a6bf57f0593ac347c53775dcb6b731e3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:14:0f:96:5e:8e:1f:ce:e2:81:55:83:29: 0b:f9:c1:b9:a4:bc:1e:28:bc:03:c7:57:2a:e0:f2: 66:33:6d:f5:0a:d4:d4:ae:62:d2:e7:28:35:f0:29: 0a:00:3a:02:da:02:ad:33:80:97:86:92:b4:ec:77: f9:3c:5c:13:fd:f6:78:20:78:68:5e:db:3a:20:36: 14:a3:15:83:a0:47:41:c3:55:a5:1b:c5:31:02:2e: c7:70:05:61:36:38:1d:e7:5f:ef:4e:09:46:e5:d4: 00:7b:31:82:fe:f9:68:a1:2d:1b:18:4a:1c:7b:8f: dd:b8:ac:69:54:85:66:0a:86:a1:0d:79:34:85:04: ac:f2:c8:3c:fd:ee:c4:8a:d1:bf:3c:66:07:0f:7b: 4e:3d:12:97:40:93:e0:02:3e:9e:7b:bf:bf:41:5e: 50:32:1e:04:aa:81:f3:53:da:11:cb:28:ba:09:10: 66:61:3e:9c:99:cf:57:44:56:32:d2:45:a4:ac:b7: 0d:81:17:67:9b:f5:3f:86:fb:54:ea:f3:9f:da:4f: 5d:cc:0a:9f:d2:22:89:f5:ba:e2:6f:c1:d5:b0:c8: 85:40:6c:b9:9a:e1:fc:9c:c1:0b:50:ec:44:f3:8b: 4c:84:ba:ee:0d:79:e6:5c:b6:b1:90:f0:36:fd:63: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3E:C3:A6:BF:57:F0:59:3A:C3:47:C5:37:75:DC:B6:B7:31:E3:D4 X509v3 Authority Key Identifier: keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ec:52:2a:93:e8:6f:12:8a:22:64:de:fe:38:63:0e:ea:96: 0a:19:f7:22:99:cd:e7:8a:78:c7:7c:ec:56:ed:00:35:58:d7: ff:39:86:27:31:38:2a:1e:85:ef:ad:86:93:a6:4f:37:73:67: 32:b4:09:4f:76:a7:47:b3:aa:a3:b6:1e:f6:a2:22:5d:e0:8a: 65:6c:69:48:e7:59:07:77:86:a6:73:44:02:4a:46:f3:46:89: 07:09:99:d3:18:5e:f0:db:2f:3f:97:1a:16:25:83:e2:c9:80: 2a:93:11:ef:19:77:e2:95:2c:1e:80:be:c2:96:c0:cb:11:4d: 9b:0a:1c:75:17:81:8f:aa:3f:2e:f1:1a:06:62:5d:e1:f7:22: 0e:77:f4:c1:48:70:68:71:18:e2:3b:8e:2f:f3:ec:65:af:24: d8:56:33:ca:26:45:88:93:d9:4d:b8:2b:7d:dd:b9:be:e7:d5: dd:68:a4:a5:49:73:b9:70:d6:6d:74:37:0d:3b:e9:d2:0a:dd: e7:c9:96:86:a3:85:b8:52:d1:86:3b:e9:83:cc:7f:8a:d4:7f: 7e:cc:3b:4f:82:2c:79:c5:10:b0:3c:6e:ad:e0:f4:37:90:1d: 04:9a:45:58:62:0b:5a:ad:1a:0f:bc:bd:ac:bc:8b:15:b2:11: 02:dd:4f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NYQ9b1IBF6Evsaef4/nYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj YzcwYTkwHhcNMjUxMjIxMDAwMDUzWhcNMjUxMjIyMDAwMDUzWjAzMTEwLwYDVQQD EyhkNjNlYzNhNmJmNTdmMDU5M2FjMzQ3YzUzNzc1ZGNiNmI3MzFlM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufoUD5Zejh/O4oFVgykL+cG5pLwe KLwDx1cq4PJmM231CtTUrmLS5yg18CkKADoC2gKtM4CXhpK07Hf5PFwT/fZ4IHho Xts6IDYUoxWDoEdBw1WlG8UxAi7HcAVhNjgd51/vTglG5dQAezGC/vlooS0bGEoc e4/duKxpVIVmCoahDXk0hQSs8sg8/e7EitG/PGYHD3tOPRKXQJPgAj6ee7+/QV5Q Mh4EqoHzU9oRyyi6CRBmYT6cmc9XRFYy0kWkrLcNgRdnm/U/hvtU6vOf2k9dzAqf 0iKJ9brib8HVsMiFQGy5muH8nMELUOxE84tMhLruDXnmXLaxkPA2/WPfAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY+w6a/V/BZOsNHxTd13La3MePUMB8GA1UdIwQY MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeexSKpPo bxKKImTe/jhjDuqWChn3IpnN54p4x3zsVu0ANVjX/zmGJzE4Kh6F762Gk6ZPN3Nn MrQJT3anR7Oqo7Ye9qIiXeCKZWxpSOdZB3eGpnNEAkpG80aJBwmZ0xhe8NsvP5ca FiWD4smAKpMR7xl34pUsHoC+wpbAyxFNmwocdReBj6o/LvEaBmJd4fciDnf0wUhw aHEY4juOL/PsZa8k2FYzyiZFiJPZTbgrfd25vufV3WikpUlzuXDWbXQ3DTvp0grd 58mWhqOFuFLRhjvpg8x/itR/fsw7T4IsecUQsDxureD0N5AdBJpFWGILWq0aD7y9 rLyLFbIRAt1P6g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:22 2025 by rpki-client