This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json) Hash identifier: M0mf5AGjbXVGUegQ4xHuiwwclxzGGewC8ni4127BuYc= Subject key identifier: 1F:1F:D1:B7:0E:2E:85:0F:F6:2F:61:6D:2F:18:42:3E:45:A2:47:C3 Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Certificate serial: 019B6E0F35BEF6FBB8289D4E0A54D114CF00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 07:00:49 +0000 Manifest this update: Tue 30 Dec 2025 07:00:49 +0000 Manifest next update: Wed 31 Dec 2025 07:00:49 +0000 Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=) 2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: CHlME1unfMP6CeVVuFLYX0VWIvaSXPOOSzCDxcJvK3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:35:be:f6:fb:b8:28:9d:4e:0a:54:d1:14:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Validity Not Before: Dec 30 07:00:49 2025 GMT Not After : Dec 31 07:00:49 2025 GMT Subject: CN=1f1fd1b70e2e850ff62f616d2f18423e45a247c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:5c:ea:69:f1:5f:4c:d1:2f:83:43:b0:82: ab:72:dc:68:d2:66:0c:85:c4:9a:27:ad:12:71:23: a6:ab:6a:b0:c9:eb:8e:62:3c:0d:70:a1:dc:6f:3a: bf:d9:19:31:33:05:42:29:80:ce:07:ac:68:81:cd: 13:e9:c2:51:75:28:d1:81:fc:bb:d8:96:da:0b:8e: 2e:61:1c:2f:5e:fc:cc:c3:90:4a:39:0b:8c:e3:a2: 24:f8:62:a8:00:bd:e8:4e:0e:4a:f3:f6:10:a6:49: 7a:22:d8:71:30:c8:ec:56:50:aa:33:6d:74:db:e9: 07:76:ba:85:5b:b9:d5:37:01:8a:cd:8f:7c:f2:ed: 4d:20:60:a2:f5:dc:11:3e:db:31:2a:d0:e5:f2:38: cc:73:7d:2b:6c:6b:84:e9:6f:33:16:4e:b7:30:9d: 25:3f:5d:13:a4:30:b8:41:db:9d:da:60:96:65:16: 57:27:2a:9b:79:76:4f:49:1a:28:93:ad:2a:6e:41: 4f:a8:ce:fa:9d:ed:76:92:8b:e5:32:2e:e1:8d:32: 34:37:cd:9d:2c:43:f3:6a:9a:6d:b5:b1:c1:b8:91: 98:e1:f3:2f:69:7c:c7:98:e4:7c:db:84:a1:93:86: e6:e5:9d:36:8d:38:cd:ca:0b:28:ff:27:ba:47:98: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:D1:B7:0E:2E:85:0F:F6:2F:61:6D:2F:18:42:3E:45:A2:47:C3 X509v3 Authority Key Identifier: keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:26:6d:97:32:f2:97:cf:5a:ac:18:2d:08:f5:89:5e:d7:21: 76:6c:36:f5:a5:b2:7a:c7:99:f5:31:a5:8d:2b:f3:c0:12:bd: c3:34:13:a4:db:c5:10:cd:7e:b9:d3:b3:a7:12:7e:27:9e:f8: af:f1:f8:00:6c:57:07:89:f3:e9:51:26:0f:c8:df:5a:69:69: 4a:2b:db:05:ed:66:7c:7f:62:b2:76:a8:cc:5c:48:9e:c9:8b: 46:92:92:86:98:04:ef:8f:1f:f2:fd:c2:a8:ad:68:00:4a:44: af:14:76:4b:9b:27:c5:c6:ab:3b:0a:ba:63:82:17:c7:a4:31: 2e:13:cc:bb:b2:de:65:42:f0:1b:96:fe:74:24:6e:22:bf:1b: d2:a5:9f:97:c5:6f:34:89:4e:db:db:6b:1a:98:08:6b:06:5d: 68:87:da:7c:8c:5d:30:d0:6e:b2:3a:56:59:39:69:0e:0e:27: a4:0c:27:8a:79:b7:77:a4:cd:1b:5c:f8:43:f9:73:8a:33:af: 4a:2e:f9:fd:37:4f:4c:d2:6b:8b:b2:41:ed:dc:0d:c2:30:92: 33:89:06:44:f2:5b:4a:02:11:31:b7:7b:fb:09:6a:c5:18:57: f4:31:6f:d0:33:15:f0:a1:fb:93:2a:d1:e9:6e:84:b7:c8:86: 4b:9d:55:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDzW+9vu4KJ1OClTRFM8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi YTMyYmEwHhcNMjUxMjMwMDcwMDQ5WhcNMjUxMjMxMDcwMDQ5WjAzMTEwLwYDVQQD EygxZjFmZDFiNzBlMmU4NTBmZjYyZjYxNmQyZjE4NDIzZTQ1YTI0N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKtc6mnxX0zRL4NDsIKrctxo0mYM hcSaJ60ScSOmq2qwyeuOYjwNcKHcbzq/2RkxMwVCKYDOB6xogc0T6cJRdSjRgfy7 2JbaC44uYRwvXvzMw5BKOQuM46Ik+GKoAL3oTg5K8/YQpkl6IthxMMjsVlCqM210 2+kHdrqFW7nVNwGKzY988u1NIGCi9dwRPtsxKtDl8jjMc30rbGuE6W8zFk63MJ0l P10TpDC4Qdud2mCWZRZXJyqbeXZPSRook60qbkFPqM76ne12kovlMi7hjTI0N82d LEPzappttbHBuJGY4fMvaXzHmOR824Shk4bm5Z02jTjNygso/ye6R5hfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8f0bcOLoUP9i9hbS8YQj5FokfDMB8GA1UdIwQY MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et NjRhNzE1YTVmNjliLzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiZtlzLy l89arBgtCPWJXtchdmw29aWyeseZ9TGljSvzwBK9wzQTpNvFEM1+udOzpxJ+J574 r/H4AGxXB4nz6VEmD8jfWmlpSivbBe1mfH9isnaozFxInsmLRpKShpgE748f8v3C qK1oAEpErxR2S5snxcarOwq6Y4IXx6QxLhPMu7LeZULwG5b+dCRuIr8b0qWfl8Vv NIlO29trGpgIawZdaIfafIxdMNBusjpWWTlpDg4npAwninm3d6TNG1z4Q/lzijOv Si75/TdPTNJri7JB7dwNwjCSM4kGRPJbSgIRMbd7+wlqxRhX9DFv0DMV8KH7kyrR 6W6Et8iGS51VAA== -----END CERTIFICATE-----Generated at Tue Dec 30 12:13:00 2025 by rpki-client