This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json) Hash identifier: Oz5lNR0RH/wIOjhB8aLC8hy9swfUAXq+3bbCeV9LzRU= Subject key identifier: BC:04:86:A3:F1:9C:D3:96:A0:C5:97:B0:98:31:A7:DA:65:B8:BE:35 Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118 Certificate serial: 019B39EB61D2DFAF501D2ACE4C1BFBD7F166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft Manifest number: 0FF4 Signing time: Sat 20 Dec 2025 04:01:25 +0000 Manifest this update: Sat 20 Dec 2025 04:01:25 +0000 Manifest next update: Sun 21 Dec 2025 04:01:25 +0000 Files and hashes: 1: 4vlmdPXJEIj9BD5XrGcncgmk5j4.roa (hash: riPKiYt/L7BDSbhqPzWMVJUAIze+SOZFasERkJ2mKqY=) 2: 6JnpDB-avLJy-XNKDDSSHNV24As.roa (hash: Y/YVn+7OJ+S4qmnI1JW4HV1PsJFLQFMKAejvFBc5SZo=) 3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: aluwUoEa/35FKXspYBVXyyTfhTiu00PnvB57nv93Zzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:61:d2:df:af:50:1d:2a:ce:4c:1b:fb:d7:f1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118 Validity Not Before: Dec 20 04:01:25 2025 GMT Not After : Dec 21 04:01:25 2025 GMT Subject: CN=bc0486a3f19cd396a0c597b09831a7da65b8be35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:ba:9f:90:d4:f5:02:2c:42:ae:8d:10:59: 8d:52:7d:3f:43:eb:92:f8:25:26:9d:3b:4e:1c:e0: 9c:17:d4:5e:c4:c5:32:99:1d:d2:96:39:b0:54:f3: 2f:4c:bf:a5:a5:13:f0:a6:75:35:22:cd:33:22:16: 7c:91:51:3f:73:cd:b1:c1:4b:b2:bb:d5:8a:75:ea: 77:84:23:a0:43:87:b5:18:31:9c:30:df:6b:49:46: 89:4a:b7:a1:4f:b1:6e:d1:7f:10:80:43:23:1f:a4: 10:b5:f4:a8:09:bc:8b:70:5b:04:9f:8f:61:71:d0: 87:e0:2e:e6:a6:0c:b3:3d:00:4d:1d:f4:eb:c6:cd: d8:94:d4:e7:c6:bf:e2:97:1e:81:63:31:4f:1f:3c: 67:fe:1c:f2:9f:ea:f3:a2:0a:a5:ec:39:29:56:87: d4:d6:2c:dc:c5:70:d9:6c:8b:91:e7:b4:f8:f9:36: 28:50:c3:6f:53:cd:fe:75:bd:50:19:9b:f1:96:f3: a5:67:e8:1e:e5:de:33:80:3a:05:75:33:23:22:6b: 4a:4e:7c:27:77:e8:71:87:e8:aa:56:f5:33:65:3d: 4e:4b:8f:15:80:b5:68:65:0d:1a:0a:40:f1:72:4e: 05:ba:a0:e9:92:4b:14:fc:9e:b7:66:1e:e8:63:49: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:86:A3:F1:9C:D3:96:A0:C5:97:B0:98:31:A7:DA:65:B8:BE:35 X509v3 Authority Key Identifier: keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:12:d9:bf:ec:a2:f6:59:cd:41:ce:fd:df:05:4a:75:b7:a0: 16:d2:a3:e9:d1:d2:14:87:c0:e4:a4:05:64:a9:d4:7a:a3:19: 84:a2:46:81:15:70:ff:19:79:59:47:a2:bd:cf:7c:a6:f5:d1: e0:6f:60:af:86:90:09:22:b8:76:be:b0:68:2e:e1:a7:61:0a: 1e:0c:d2:92:46:7e:ce:4b:7b:7d:19:4b:13:95:10:d2:a3:e3: 1f:3d:72:ef:a5:00:ec:a0:74:38:bf:e1:a5:f6:2f:78:71:49: 5b:10:5d:04:1f:8e:f3:28:07:52:7c:2e:12:a2:43:78:92:a2: 17:e4:60:72:28:9e:5c:1f:04:c3:03:f2:4a:b5:b6:a3:34:68: 33:b2:af:e7:5e:ce:51:d1:1f:c7:a4:f4:42:f9:84:45:d4:38: 9d:89:d4:15:19:3b:e5:7c:22:e9:26:f1:01:a0:50:39:58:2b: 84:f1:8e:1b:67:7c:91:d7:4e:a7:80:ca:84:16:c2:a1:c9:70: 17:66:33:57:2e:29:9f:0d:6f:d3:4c:59:5c:bc:8a:e9:ce:fd: 6b:ef:d9:88:f6:8b:19:57:e1:ba:46:7b:a1:49:01:d6:65:89: f3:43:a4:16:7d:6a:35:29:f1:6a:0d:37:61:8f:a6:a2:5c:a4: ff:c5:5d:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562HS369QHSrOTBv71/FmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZDMzNTA0MTcxOGIxODgzMGIxZjU4YzE1ZDM1MTg1MTBm ZTYxMTgwHhcNMjUxMjIwMDQwMTI1WhcNMjUxMjIxMDQwMTI1WjAzMTEwLwYDVQQD EyhiYzA0ODZhM2YxOWNkMzk2YTBjNTk3YjA5ODMxYTdkYTY1YjhiZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4a6n5DU9QIsQq6NEFmNUn0/Q+uS +CUmnTtOHOCcF9RexMUymR3SljmwVPMvTL+lpRPwpnU1Is0zIhZ8kVE/c82xwUuy u9WKdep3hCOgQ4e1GDGcMN9rSUaJSrehT7Fu0X8QgEMjH6QQtfSoCbyLcFsEn49h cdCH4C7mpgyzPQBNHfTrxs3YlNTnxr/ilx6BYzFPHzxn/hzyn+rzogql7DkpVofU 1izcxXDZbIuR57T4+TYoUMNvU83+db1QGZvxlvOlZ+ge5d4zgDoFdTMjImtKTnwn d+hxh+iqVvUzZT1OS48VgLVoZQ0aCkDxck4FuqDpkksU/J63Zh7oY0m42QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwEhqPxnNOWoMWXsJgxp9pluL41MB8GA1UdIwQY MBaAFMjTNQQXGLGIMLH1jBXTUYUQ/mEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQt YTllODQ2ODcxMGEzLzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84YTM0NGUtMGVkOC00MmIyLWE3NDQtYTllODQ2ODcxMGEz LzEveU5NMUJCY1lzWWd3c2ZXTUZkTlJoUkQtWVJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRLZv+yi 9lnNQc793wVKdbegFtKj6dHSFIfA5KQFZKnUeqMZhKJGgRVw/xl5WUeivc98pvXR 4G9gr4aQCSK4dr6waC7hp2EKHgzSkkZ+zkt7fRlLE5UQ0qPjHz1y76UA7KB0OL/h pfYveHFJWxBdBB+O8ygHUnwuEqJDeJKiF+RgciieXB8EwwPySrW2ozRoM7Kv517O UdEfx6T0QvmERdQ4nYnUFRk75Xwi6SbxAaBQOVgrhPGOG2d8kddOp4DKhBbCoclw F2YzVy4pnw1v00xZXLyK6c79a+/ZiPaLGVfhukZ7oUkB1mWJ80OkFn1qNSnxag03 YY+molyk/8Vdtg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:48:59 2025 by rpki-client