This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json) Hash identifier: WatZiaoGO4J+BWa9nmly5qXPxgEKwjKC1wrUDDwolqk= Subject key identifier: D0:37:76:FA:53:B0:FB:85:32:9A:BF:C6:E2:DA:66:9C:E6:4D:EB:57 Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Certificate serial: 019B3BD9A980D007C6B9805D3368EE24C81D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft Manifest number: 0B44 Signing time: Sat 20 Dec 2025 13:01:18 +0000 Manifest this update: Sat 20 Dec 2025 13:01:18 +0000 Manifest next update: Sun 21 Dec 2025 13:01:18 +0000 Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=) 2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: Skju9XIkaojaJ3c5KP6jGoWnz9NhDOJz9a6HAu+KGDM=) 3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:a9:80:d0:07:c6:b9:80:5d:33:68:ee:24:c8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157 Validity Not Before: Dec 20 13:01:18 2025 GMT Not After : Dec 21 13:01:18 2025 GMT Subject: CN=d03776fa53b0fb85329abfc6e2da669ce64deb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fc:eb:40:69:fe:6d:e0:10:5c:81:e1:e5:ae: 86:1f:94:9a:45:30:57:ca:70:70:20:40:d5:c2:c4: 5f:b9:bb:03:00:ce:98:86:e8:9f:90:70:2e:63:3e: d9:5f:b6:89:63:1f:50:d1:a1:64:7f:88:6c:b8:65: b3:d0:c7:52:04:18:a6:2f:08:a9:fa:10:21:87:6a: 7e:8a:a0:cd:a5:ec:90:96:c7:5f:d6:42:49:81:81: 7b:77:3d:d6:bc:09:0e:1b:69:2e:10:b8:74:2b:d6: c1:16:a1:f8:88:9b:cb:c5:dc:78:f4:de:de:2a:88: c6:fa:c3:0e:dd:ac:e2:ea:ea:10:09:17:e6:c6:e4: f3:c3:0a:35:c0:15:a0:0b:40:ab:ff:2c:28:12:5a: e4:f0:9f:2a:47:4b:70:b9:92:82:11:32:53:1b:dc: 01:56:8f:5a:f4:1f:4a:8a:22:19:55:f5:fe:91:16: 48:31:bb:59:9b:68:66:25:5a:60:6c:e8:bd:9e:01: 40:6c:ef:5a:b4:b3:20:db:66:5f:e8:ac:df:54:7f: b4:4d:81:26:60:b3:3a:0b:ea:12:ec:4d:58:51:29: 5b:b8:57:28:e2:54:86:cf:79:01:92:d1:09:86:54: 94:3a:07:a4:f4:b1:81:7a:c0:54:44:9a:b3:74:1b: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:76:FA:53:B0:FB:85:32:9A:BF:C6:E2:DA:66:9C:E6:4D:EB:57 X509v3 Authority Key Identifier: keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a6:78:7f:74:8a:11:a0:b5:37:e3:0a:95:ed:72:77:ed:df: 66:c1:4e:6b:31:66:88:d3:ac:10:56:e2:d0:af:32:39:db:ba: 4b:b2:e8:fc:93:75:36:b7:36:4f:e5:7c:a5:a3:3d:32:15:b3: 9b:54:47:1c:68:56:df:ab:db:53:3f:42:d2:67:a0:9c:db:0d: 58:2b:9b:28:e3:d1:14:18:cb:ed:3c:60:7c:e5:95:65:c1:af: 18:ea:5a:f8:01:b0:1f:ba:59:75:39:95:1e:0c:49:14:07:7b: 01:05:ef:44:18:89:67:24:78:91:54:2e:52:fe:a3:f2:ef:c8: 38:86:01:08:e7:08:fc:60:38:68:3a:18:49:f9:aa:2c:8d:9f: 60:fd:98:e8:f2:e6:a9:0a:0d:c7:88:07:a3:a2:57:11:b0:68: a8:6d:ca:eb:17:b9:9c:5a:11:f1:03:07:8b:7a:7e:25:f1:da: 06:66:89:a5:b9:f5:74:b2:b6:e6:0c:8f:23:6e:40:08:5a:43: fa:ba:7d:d4:9f:85:f9:82:7e:33:92:16:a7:73:68:ad:3f:20: f2:0a:1e:c3:52:d5:d8:e0:11:77:e9:4e:22:57:3f:53:42:54: 06:d2:53:87:c5:9b:17:1b:6e:a6:af:78:49:93:0f:90:03:c5: 47:a9:ce:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72amA0AfGuYBdM2juJMgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzM2U3NTJjYTBkYzQyM2M3NGY1MDg0MDViYTUyMjhhOGMy ZTUxNTcwHhcNMjUxMjIwMTMwMTE4WhcNMjUxMjIxMTMwMTE4WjAzMTEwLwYDVQQD EyhkMDM3NzZmYTUzYjBmYjg1MzI5YWJmYzZlMmRhNjY5Y2U2NGRlYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPzrQGn+beAQXIHh5a6GH5SaRTBX ynBwIEDVwsRfubsDAM6YhuifkHAuYz7ZX7aJYx9Q0aFkf4hsuGWz0MdSBBimLwip +hAhh2p+iqDNpeyQlsdf1kJJgYF7dz3WvAkOG2kuELh0K9bBFqH4iJvLxdx49N7e KojG+sMO3azi6uoQCRfmxuTzwwo1wBWgC0Cr/ywoElrk8J8qR0twuZKCETJTG9wB Vo9a9B9KiiIZVfX+kRZIMbtZm2hmJVpgbOi9ngFAbO9atLMg22Zf6KzfVH+0TYEm YLM6C+oS7E1YUSlbuFco4lSGz3kBktEJhlSUOgek9LGBesBURJqzdBvXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNA3dvpTsPuFMpq/xuLaZpzmTetXMB8GA1UdIwQY MBaAFGM+dSyg3EI8dPUIQFulIoqMLlFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzkt ZGU2MTg3YjcyOThhLzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jOGUyMTQtOGU0NS00Yzk2LThhNzktZGU2MTg3YjcyOThh LzEvWXo1MUxLRGNRangwOVFoQVc2VWlpb3d1VVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqZ4f3SK EaC1N+MKle1yd+3fZsFOazFmiNOsEFbi0K8yOdu6S7Lo/JN1Nrc2T+V8paM9MhWz m1RHHGhW36vbUz9C0megnNsNWCubKOPRFBjL7TxgfOWVZcGvGOpa+AGwH7pZdTmV HgxJFAd7AQXvRBiJZyR4kVQuUv6j8u/IOIYBCOcI/GA4aDoYSfmqLI2fYP2Y6PLm qQoNx4gHo6JXEbBoqG3K6xe5nFoR8QMHi3p+JfHaBmaJpbn1dLK25gyPI25ACFpD +rp91J+F+YJ+M5IWp3NorT8g8goew1LV2OARd+lOIlc/U0JUBtJTh8WbFxtupq94 SZMPkAPFR6nOxw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:08:32 2025 by rpki-client