This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft File: YIYxT4djXnk7wuPbvtZkBbisZ3E.mft (raw, json) Hash identifier: s8A6WVLi2y3dmKdMw8jjuUHj3el+mXW7EuI4q7DJGeE= Subject key identifier: 55:F6:0C:B7:48:8F:7E:BB:FB:E1:87:5A:B2:03:80:FD:1A:E4:59:38 Authority key identifier: 60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71 Certificate issuer: /CN=6086314f87635e793bc2e3dbbed66405b8ac6771 Certificate serial: 019B4E167583C42CFBDFE7F4918E38EDAAF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 02:00:53 +0000 Manifest this update: Wed 24 Dec 2025 02:00:53 +0000 Manifest next update: Thu 25 Dec 2025 02:00:53 +0000 Files and hashes: 1: YIYxT4djXnk7wuPbvtZkBbisZ3E.crl (hash: 0WSePveR1Gba/g9QmQPHxFFbcAVcNvK3KmKywu74qm4=) 2: ul5EPC9Jg-xhzDe3-EnpTxgh7Dw.roa (hash: pDodgoORM1hTtwe+JSl0g3mWRdcfDqaXlT1wiKFyqck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:75:83:c4:2c:fb:df:e7:f4:91:8e:38:ed:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6086314f87635e793bc2e3dbbed66405b8ac6771 Validity Not Before: Dec 24 02:00:53 2025 GMT Not After : Dec 25 02:00:53 2025 GMT Subject: CN=55f60cb7488f7ebbfbe1875ab20380fd1ae45938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:66:31:f7:14:e0:cf:7d:4f:df:40:10:f4: 28:05:bf:df:aa:2d:68:8f:1f:44:89:c0:a8:c8:e2: a2:2a:f0:f1:66:cf:b8:92:25:bf:75:62:27:e9:07: b6:77:5a:3a:33:22:d9:2a:2b:9d:38:41:20:0f:20: 45:09:bc:ca:8d:33:bf:e6:e8:5b:ec:b1:ec:b0:b1: d3:d7:3b:0f:77:87:5e:da:6d:67:93:f3:0b:91:5b: ef:cc:c9:b4:4c:e5:b4:81:52:c3:10:35:fd:64:2a: 4f:ee:92:d8:cb:9b:c6:f7:ea:53:f4:e3:ea:07:b9: 7f:db:b1:5c:a4:c5:2f:71:21:72:36:d9:4e:43:80: 26:de:4d:75:49:53:83:01:bf:c1:ff:5a:43:c7:d1: 1f:61:30:5e:27:5c:6e:15:1f:2e:fb:e8:70:1d:90: cd:81:87:ea:d8:1d:33:ec:3b:b3:93:ad:63:89:fb: 54:47:1a:55:9d:f9:62:32:63:22:87:21:2d:86:46: a2:ad:d3:14:45:1d:94:31:c4:ac:9c:83:23:d8:50: 43:99:d8:a1:a7:c5:0b:f1:f8:69:4f:7c:5f:47:f3: 2a:ae:51:a4:12:ae:9d:9d:6a:2d:eb:ea:01:25:2b: a5:6c:54:20:38:fc:c0:7a:c6:5b:4c:94:e6:fe:68: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F6:0C:B7:48:8F:7E:BB:FB:E1:87:5A:B2:03:80:FD:1A:E4:59:38 X509v3 Authority Key Identifier: keyid:60:86:31:4F:87:63:5E:79:3B:C2:E3:DB:BE:D6:64:05:B8:AC:67:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIYxT4djXnk7wuPbvtZkBbisZ3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0fbc5f-7c04-40da-9d5a-0280598f19e3/1/YIYxT4djXnk7wuPbvtZkBbisZ3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:48:90:56:57:23:63:d0:c0:9c:55:52:82:48:a7:6c:d8:87: f9:93:f4:20:b9:6f:09:72:22:96:e9:7a:6c:5d:6d:b3:99:1f: a2:89:7d:00:43:4d:8a:30:c9:e3:cc:0c:48:90:dc:5b:57:ce: 5b:98:b5:60:8c:8c:dc:5d:c4:df:99:64:f3:ca:a9:3f:2c:01: ef:83:89:eb:9e:33:7a:8b:33:4a:f8:2c:0b:30:cd:77:f6:ba: 27:c2:1f:7c:5b:82:a4:6f:a0:a1:38:63:38:6c:13:ef:f2:97: 66:73:97:5b:cc:30:cc:a9:45:78:3b:3a:9b:b9:45:00:20:49: 6d:0d:63:0a:b4:d4:50:36:08:62:91:8c:32:56:af:89:91:10: 41:54:0d:0a:72:16:a3:c0:c5:55:9a:fb:a1:e7:1a:7a:e0:6b: 87:a9:99:4e:d2:ac:62:f1:07:bf:f2:cd:46:06:de:f5:ec:54: f1:50:a6:84:c3:68:51:49:ee:c7:70:03:51:28:78:53:7c:40: c6:63:d1:99:2f:d6:17:ce:61:96:68:c7:c2:cd:b7:1a:2c:89: d0:cb:e9:27:95:76:9e:3f:c0:a3:d2:70:46:26:8e:4c:29:fe: 49:70:f8:c7:f1:14:37:1b:85:e4:84:79:4f:1b:5b:55:44:d4: f2:b7:2b:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFnWDxCz73+f0kY447ar4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwODYzMTRmODc2MzVlNzkzYmMyZTNkYmJlZDY2NDA1Yjhh YzY3NzEwHhcNMjUxMjI0MDIwMDUzWhcNMjUxMjI1MDIwMDUzWjAzMTEwLwYDVQQD Eyg1NWY2MGNiNzQ4OGY3ZWJiZmJlMTg3NWFiMjAzODBmZDFhZTQ1OTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZBmMfcU4M99T99AEPQoBb/fqi1o jx9EicCoyOKiKvDxZs+4kiW/dWIn6Qe2d1o6MyLZKiudOEEgDyBFCbzKjTO/5uhb 7LHssLHT1zsPd4de2m1nk/MLkVvvzMm0TOW0gVLDEDX9ZCpP7pLYy5vG9+pT9OPq B7l/27FcpMUvcSFyNtlOQ4Am3k11SVODAb/B/1pDx9EfYTBeJ1xuFR8u++hwHZDN gYfq2B0z7Duzk61jiftURxpVnfliMmMihyEthkairdMURR2UMcSsnIMj2FBDmdih p8UL8fhpT3xfR/MqrlGkEq6dnWot6+oBJSulbFQgOPzAesZbTJTm/mjJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX2DLdIj367++GHWrIDgP0a5Fk4MB8GA1UdIwQY MBaAFGCGMU+HY155O8Lj277WZAW4rGdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEt MDI4MDU5OGYxOWUzLzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wZmJjNWYtN2MwNC00MGRhLTlkNWEtMDI4MDU5OGYxOWUz LzEvWUlZeFQ0ZGpYbms3d3VQYnZ0WmtCYmlzWjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkiQVlcj Y9DAnFVSgkinbNiH+ZP0ILlvCXIilul6bF1ts5kfool9AENNijDJ48wMSJDcW1fO W5i1YIyM3F3E35lk88qpPywB74OJ654zeoszSvgsCzDNd/a6J8IffFuCpG+goThj OGwT7/KXZnOXW8wwzKlFeDs6m7lFACBJbQ1jCrTUUDYIYpGMMlaviZEQQVQNCnIW o8DFVZr7oecaeuBrh6mZTtKsYvEHv/LNRgbe9exU8VCmhMNoUUnux3ADUSh4U3xA xmPRmS/WF85hlmjHws23GiyJ0MvpJ5V2nj/Ao9JwRiaOTCn+SXD4x/EUNxuF5IR5 TxtbVUTU8rcruA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:35 2025 by rpki-client