This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft File: YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json) Hash identifier: 2cnnlpLAXVCkfFNmscHvpZIC5Y9zNmnqoFKg5aeKFBo= Subject key identifier: D5:D1:40:7C:61:30:ED:57:34:70:71:39:72:05:40:49:6A:81:4B:2F Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A Certificate issuer: /CN=6311a69c8172044854931f100a59bd089cb8881a Certificate serial: 019B3B34B098DA1912628C3020D552ECEDB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 10:01:07 +0000 Manifest this update: Sat 20 Dec 2025 10:01:07 +0000 Manifest next update: Sun 21 Dec 2025 10:01:07 +0000 Files and hashes: 1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=) 2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: SlfSnq8IduwxMpjk41idO6tSPF6aMmzttyEId/KUBBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b0:98:da:19:12:62:8c:30:20:d5:52:ec:ed:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a Validity Not Before: Dec 20 10:01:07 2025 GMT Not After : Dec 21 10:01:07 2025 GMT Subject: CN=d5d1407c6130ed5734707139720540496a814b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:a3:dc:6d:66:fd:5c:55:07:0e:51:b2:79: 2e:42:f0:24:1c:bd:3d:ce:c7:58:7b:41:8f:f2:81: a8:54:ff:5f:28:00:60:74:35:04:e5:67:b1:a6:27: 3e:2d:4c:46:49:73:da:98:a6:85:d1:43:ec:29:97: ae:30:bf:31:5a:39:7a:ab:e3:97:06:85:b4:cc:fc: f0:37:75:58:37:59:51:47:a0:15:fd:b1:14:a6:64: 67:80:d2:2a:b9:55:1f:29:35:15:b7:1e:0f:2a:48: eb:3d:58:7b:07:56:da:fb:de:f8:91:81:3f:62:ca: 8a:93:c2:f7:ca:08:cc:e4:34:7d:ee:d3:20:45:1a: 36:53:f3:73:1a:95:a4:b6:86:67:78:2c:41:d3:15: 7b:7a:45:9b:0f:57:b5:9a:67:62:3c:9c:95:6e:17: 53:51:3f:ec:86:73:44:72:99:b9:aa:7b:cc:39:ef: 5a:a8:6f:d4:e5:8b:31:fe:2b:b2:2c:fa:48:2e:c3: a8:c1:8b:be:05:be:31:d0:c0:bf:ff:1d:c0:9e:f2: f6:07:eb:16:53:a8:db:5e:c5:9e:f6:69:c8:28:a7: f8:5d:8c:18:94:11:4b:9c:04:01:05:5d:b6:88:10: 98:a7:d4:e1:b8:a3:74:42:b1:d0:d7:ac:d6:a9:48: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D1:40:7C:61:30:ED:57:34:70:71:39:72:05:40:49:6A:81:4B:2F X509v3 Authority Key Identifier: keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0a:00:a2:48:dd:72:fa:dc:ce:2b:16:bb:cc:45:e4:02:dd: 8b:64:e8:ac:ee:2e:13:ac:d6:e9:78:b1:0b:4a:3e:d6:34:d9: 64:d1:5e:aa:29:82:0d:5b:cb:45:97:e8:ee:ec:30:be:60:88: f7:8e:11:92:f2:59:70:6c:f9:d5:53:f4:b2:c2:aa:5a:d1:75: c3:d5:cc:63:bb:3b:1a:a4:c1:e8:93:db:47:2b:8d:ef:e3:c2: 57:6d:1a:06:bb:29:eb:1f:64:c9:63:1c:7f:fa:aa:bf:d6:1d: a9:ea:f2:65:8c:6e:56:e8:07:a8:b7:e8:7d:02:28:a2:92:62: 68:ba:66:c8:81:b0:18:92:6c:38:f6:00:9a:e4:3f:80:c0:96: 81:e2:c1:f3:9e:b1:31:fd:4c:b5:24:2c:8c:fa:94:38:5b:16: c9:be:e9:68:37:ab:30:87:88:1a:d4:f0:ca:30:e4:74:a8:1c: ce:5e:c2:92:3c:d8:66:3b:0c:ab:98:2d:9d:0d:65:51:88:9e: f2:32:90:d9:1c:f2:cc:79:2e:4b:25:48:67:be:17:ae:9d:85: 6a:fb:eb:81:75:a4:c9:cb:71:0e:43:7d:49:30:90:e2:f0:e9: f8:f1:30:f5:b2:36:92:4d:41:c4:a1:cf:b0:05:e2:92:03:67: 63:d9:9c:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLCY2hkSYowwINVS7O25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhNjljODE3MjA0NDg1NDkzMWYxMDBhNTliZDA4OWNi ODg4MWEwHhcNMjUxMjIwMTAwMTA3WhcNMjUxMjIxMTAwMTA3WjAzMTEwLwYDVQQD EyhkNWQxNDA3YzYxMzBlZDU3MzQ3MDcxMzk3MjA1NDA0OTZhODE0YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeaj3G1m/VxVBw5RsnkuQvAkHL09 zsdYe0GP8oGoVP9fKABgdDUE5Wexpic+LUxGSXPamKaF0UPsKZeuML8xWjl6q+OX BoW0zPzwN3VYN1lRR6AV/bEUpmRngNIquVUfKTUVtx4PKkjrPVh7B1ba+974kYE/ YsqKk8L3ygjM5DR97tMgRRo2U/NzGpWktoZneCxB0xV7ekWbD1e1mmdiPJyVbhdT UT/shnNEcpm5qnvMOe9aqG/U5Ysx/iuyLPpILsOowYu+Bb4x0MC//x3AnvL2B+sW U6jbXsWe9mnIKKf4XYwYlBFLnAQBBV22iBCYp9ThuKN0QrHQ16zWqUjzjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXRQHxhMO1XNHBxOXIFQElqgUsvMB8GA1UdIwQY MBaAFGMRppyBcgRIVJMfEApZvQicuIgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMt ZDBlMGYyMTM5MzZjLzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jNGFiZmUtYThlNi00YTE0LThiNWMtZDBlMGYyMTM5MzZj LzEvWXhHbW5JRnlCRWhVa3g4UUNsbTlDSnk0aUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAoAokjd cvrczisWu8xF5ALdi2TorO4uE6zW6XixC0o+1jTZZNFeqimCDVvLRZfo7uwwvmCI 944RkvJZcGz51VP0ssKqWtF1w9XMY7s7GqTB6JPbRyuN7+PCV20aBrsp6x9kyWMc f/qqv9YdqeryZYxuVugHqLfofQIoopJiaLpmyIGwGJJsOPYAmuQ/gMCWgeLB856x Mf1MtSQsjPqUOFsWyb7paDerMIeIGtTwyjDkdKgczl7CkjzYZjsMq5gtnQ1lUYie 8jKQ2RzyzHkuSyVIZ74Xrp2FavvrgXWkyctxDkN9STCQ4vDp+PEw9bI2kk1BxKHP sAXikgNnY9mcgg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:55:59 2025 by rpki-client