This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft File: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json) Hash identifier: yYrKKGftHIBJwHhRuKP/uLlFcGPThKpn6SdnhdpclOY= Subject key identifier: D7:89:33:E0:50:FE:C9:C4:62:34:E4:EB:B0:46:83:C9:17:22:BF:97 Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B Certificate issuer: /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b Certificate serial: 019B5D89758EDDC64E5CABA86A1B7397DFF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 02:00:48 +0000 Manifest this update: Sat 27 Dec 2025 02:00:48 +0000 Manifest next update: Sun 28 Dec 2025 02:00:48 +0000 Files and hashes: 1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=) 2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: YRddhU2zNnwYbR/fH4TLclflgoswG2yIwhjE4On2pII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:75:8e:dd:c6:4e:5c:ab:a8:6a:1b:73:97:df:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b Validity Not Before: Dec 27 02:00:48 2025 GMT Not After : Dec 28 02:00:48 2025 GMT Subject: CN=d78933e050fec9c46234e4ebb04683c91722bf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:c3:a4:4c:94:58:7c:49:aa:84:9e:e9:34: 3e:54:ec:58:a2:3d:05:4b:ad:78:ca:e0:22:83:e9: de:8f:8c:7b:68:cb:17:6a:b3:cb:20:48:df:f4:c6: da:b0:01:69:f6:6f:80:9b:03:c0:6f:1b:de:6d:15: 81:a2:3a:30:74:97:c4:4a:9e:f4:30:fd:91:e3:40: 2e:41:49:c5:2d:bc:e8:0c:6e:a3:87:36:50:4a:5f: 23:be:06:23:a2:d4:27:39:61:a4:25:78:dc:cc:5f: bf:a4:23:89:18:f1:c2:77:89:c0:cc:bb:1b:cb:2d: a6:7a:26:a2:4f:d7:f6:d0:27:c9:77:b6:c9:6f:cd: 87:14:93:8f:fc:af:41:99:f2:0f:6f:8a:9a:a5:f1: 25:63:c2:03:fd:b7:0c:20:65:03:a4:ed:2e:52:46: 3a:10:67:e9:fe:89:38:4b:b2:93:f6:7d:b3:7c:0a: 0d:70:85:a6:b0:ee:1c:5a:03:fe:61:25:20:1b:7e: af:29:0e:01:e5:c6:f2:c0:1f:52:75:60:5c:92:0b: 53:e5:96:6a:c8:85:b4:9d:05:a3:f1:0c:ea:78:65: dd:f0:b0:3c:7a:e2:8c:70:77:4e:73:e9:4e:e3:7a: bc:dc:d7:9c:3c:ff:a1:32:de:7b:36:ed:ad:b9:04: 58:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:33:E0:50:FE:C9:C4:62:34:E4:EB:B0:46:83:C9:17:22:BF:97 X509v3 Authority Key Identifier: keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a5:5e:5f:47:f5:6f:a3:00:85:ac:df:db:e8:7b:8c:59:f4: fa:f6:3a:5c:e7:56:75:24:1a:c7:30:ef:61:01:8c:cc:9b:9b: 4a:1e:48:61:c6:1d:67:c2:1c:c6:8a:98:fa:26:0b:ce:be:9b: c4:57:66:a1:d2:41:50:32:12:90:05:3e:3b:61:26:1c:42:e9: 80:78:d0:ea:ed:61:2e:5b:98:b1:ab:e1:e9:38:44:1c:9d:50: 86:c8:5e:b1:3a:7d:7d:00:d7:8a:de:46:ed:21:ed:3d:86:90: 23:d0:75:35:3f:ad:b0:57:dd:f6:ef:bc:0b:cd:82:80:3b:40: 70:c1:05:88:40:19:2c:d4:ce:90:97:d0:7a:cd:72:e6:e0:d4: d7:14:a1:23:6b:5b:0f:cb:f5:04:fb:64:1f:57:07:b7:73:b6: ba:d2:5f:e4:e8:6d:f4:10:0c:ae:66:cd:63:31:f0:7f:d3:0b: 0c:dc:1b:c6:cf:e5:0d:7e:db:1d:b1:ac:c1:86:6b:c8:ae:b5: fa:0b:87:de:68:df:11:f6:f2:37:c0:b1:c0:b1:a5:4b:03:e2: a8:c6:e3:92:03:fb:58:fe:3b:e9:4d:f7:67:3b:5b:78:2b:c2: 03:0a:b1:ae:e9:c1:ec:5d:4f:5a:7b:b8:e0:05:61:88:0f:b6: c8:90:55:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiXWO3cZOXKuoahtzl9/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZTJkMWYzMjU3Y2ZhZTBmZmU2NzNjMWY3NzUzNDY1MzMx MmYwNmIwHhcNMjUxMjI3MDIwMDQ4WhcNMjUxMjI4MDIwMDQ4WjAzMTEwLwYDVQQD EyhkNzg5MzNlMDUwZmVjOWM0NjIzNGU0ZWJiMDQ2ODNjOTE3MjJiZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdfDpEyUWHxJqoSe6TQ+VOxYoj0F S614yuAig+nej4x7aMsXarPLIEjf9MbasAFp9m+AmwPAbxvebRWBojowdJfESp70 MP2R40AuQUnFLbzoDG6jhzZQSl8jvgYjotQnOWGkJXjczF+/pCOJGPHCd4nAzLsb yy2meiaiT9f20CfJd7bJb82HFJOP/K9BmfIPb4qapfElY8ID/bcMIGUDpO0uUkY6 EGfp/ok4S7KT9n2zfAoNcIWmsO4cWgP+YSUgG36vKQ4B5cbywB9SdWBckgtT5ZZq yIW0nQWj8QzqeGXd8LA8euKMcHdOc+lO43q83NecPP+hMt57Nu2tuQRYqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeJM+BQ/snEYjTk67BGg8kXIr+XMB8GA1UdIwQY MBaAFMji0fMlfPrg/+Zzwfd1NGUzEvBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU9MUjh5VjgtdURfNW5QQjkzVTBaVE1TOEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kMGU4MjQtZjdkMy00ZjBkLWJkZDQt Yjk2MjhhMjRkOWQxLzEveU9MUjh5VjgtdURfNW5QQjkzVTBaVE1TOEdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9kMGU4MjQtZjdkMy00ZjBkLWJkZDQtYjk2MjhhMjRkOWQx LzEveU9MUjh5VjgtdURfNW5QQjkzVTBaVE1TOEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6VeX0f1 b6MAhazf2+h7jFn0+vY6XOdWdSQaxzDvYQGMzJubSh5IYcYdZ8IcxoqY+iYLzr6b xFdmodJBUDISkAU+O2EmHELpgHjQ6u1hLluYsavh6ThEHJ1QhshesTp9fQDXit5G 7SHtPYaQI9B1NT+tsFfd9u+8C82CgDtAcMEFiEAZLNTOkJfQes1y5uDU1xShI2tb D8v1BPtkH1cHt3O2utJf5Oht9BAMrmbNYzHwf9MLDNwbxs/lDX7bHbGswYZryK61 +guH3mjfEfbyN8CxwLGlSwPiqMbjkgP7WP476U33ZztbeCvCAwqxrunB7F1PWnu4 4AVhiA+2yJBVSg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:28 2025 by rpki-client