This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json) Hash identifier: gEqkCO13ZC336dQhW6wIz0CzAYNOllBHkps27VOm+9A= Subject key identifier: AE:C9:95:CE:0B:1B:02:32:9C:3E:74:5F:54:76:57:80:C4:33:3F:E2 Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Certificate serial: 019B76DB9E92A5692F95FB5BC6F0ED7DE247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 00:01:02 +0000 Manifest this update: Thu 01 Jan 2026 00:01:02 +0000 Manifest next update: Fri 02 Jan 2026 00:01:02 +0000 Files and hashes: 1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: xYR+2bNHiLcYF/QJGVZEb56AcMts8dR3Wy6y/m3H+tg=) 2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:db:9e:92:a5:69:2f:95:fb:5b:c6:f0:ed:7d:e2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a Validity Not Before: Jan 1 00:01:02 2026 GMT Not After : Jan 2 00:01:02 2026 GMT Subject: CN=aec995ce0b1b02329c3e745f54765780c4333fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:55:00:37:a4:b6:42:c9:7a:a3:3f:8a:95: 12:93:62:13:ef:1f:de:b5:b9:0d:8d:1f:c4:c8:0f: 00:14:c1:24:35:3e:71:56:90:49:ba:90:8d:9f:cf: 58:24:74:ac:f5:50:38:37:17:fd:94:65:f4:97:3a: bd:86:3e:f4:80:0b:da:7b:ff:99:8b:cd:aa:c6:3b: 3e:10:23:f8:1a:15:a9:39:36:1f:f7:2a:4f:f9:72: 8b:5a:a1:a1:0b:49:7d:cf:e9:f5:23:52:85:81:8c: c1:52:9f:a7:9c:62:f7:7c:e1:33:d5:16:d5:da:12: 53:fa:e5:f7:25:e6:7a:8e:21:01:47:0c:2c:c2:c1: 7d:06:56:30:52:08:48:bf:21:09:1c:5b:d3:6a:56: d8:38:9a:53:95:ed:30:e6:57:f2:08:6b:ae:01:df: 8f:a6:e2:26:97:e4:e1:81:38:7c:a1:52:6e:d4:15: 10:37:f8:80:48:fd:46:39:85:56:a6:70:e6:ff:b3: f6:50:01:b1:ea:d4:85:2e:c5:56:bb:ea:90:6a:f6: f6:42:02:7d:cc:9a:c4:81:c6:a3:0a:71:6a:15:4a: c8:9d:19:31:b9:0d:09:d7:44:68:75:48:92:bd:27: fc:76:59:5c:38:6e:ad:a3:32:f7:bf:3b:97:e1:d0: af:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C9:95:CE:0B:1B:02:32:9C:3E:74:5F:54:76:57:80:C4:33:3F:E2 X509v3 Authority Key Identifier: keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4d:5c:97:19:4d:68:33:8c:17:6a:b0:79:9d:da:e6:c8:7c: 0b:84:c9:d5:7e:e5:4e:35:4f:ea:fa:7a:b1:2a:64:cf:65:26: 84:51:41:8e:a5:18:87:a2:9f:48:08:04:4a:f4:d2:ad:a8:ef: 63:d8:96:b0:82:e8:22:cd:23:b2:5d:15:c2:6b:28:11:6b:b0: 4c:5e:24:b0:3b:27:09:41:4d:76:65:87:b7:61:a5:36:88:f1: 06:ea:5f:cc:a8:60:72:36:3e:01:7c:b4:3c:5a:52:45:c6:97: 4c:0b:62:de:cf:86:8c:ae:36:2c:c3:12:57:5b:f9:25:80:03: e7:8e:36:4b:a9:27:49:1f:a4:46:8b:60:99:a9:05:aa:1c:f5: 31:42:cb:00:cc:70:a4:84:5f:96:54:e7:b1:fa:8c:8a:61:cb: c0:0f:80:49:0f:72:3c:69:9a:85:a9:db:22:fa:7a:42:dd:96: 65:c7:38:1c:96:b6:58:af:bc:05:ce:4a:7b:f8:8f:07:be:6a: 0e:cd:ac:17:2a:a0:45:0b:7f:3c:be:09:f3:c2:f1:80:ac:06: 7c:a6:3e:31:31:3b:cc:f6:ac:36:39:93:73:8e:1f:62:74:67: ba:fd:e3:ad:3e:03:8f:07:91:d2:83:65:ba:68:90:bb:70:82: 0f:bd:0b:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2256SpWkvlftbxvDtfeJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZmUyZWFmYTY0YWNlYWYxZmNmY2ZiY2E2MTUwYTdhMmQz NWJlNGEwHhcNMjYwMTAxMDAwMTAyWhcNMjYwMTAyMDAwMTAyWjAzMTEwLwYDVQQD EyhhZWM5OTVjZTBiMWIwMjMyOWMzZTc0NWY1NDc2NTc4MGM0MzMzZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMFVADektkLJeqM/ipUSk2IT7x/e tbkNjR/EyA8AFMEkNT5xVpBJupCNn89YJHSs9VA4Nxf9lGX0lzq9hj70gAvae/+Z i82qxjs+ECP4GhWpOTYf9ypP+XKLWqGhC0l9z+n1I1KFgYzBUp+nnGL3fOEz1RbV 2hJT+uX3JeZ6jiEBRwwswsF9BlYwUghIvyEJHFvTalbYOJpTle0w5lfyCGuuAd+P puIml+ThgTh8oVJu1BUQN/iASP1GOYVWpnDm/7P2UAGx6tSFLsVWu+qQavb2QgJ9 zJrEgcajCnFqFUrInRkxuQ0J10RodUiSvSf8dllcOG6tozL3vzuX4dCvNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7Jlc4LGwIynD50X1R2V4DEMz/iMB8GA1UdIwQY MBaAFGH+Lq+mSs6vH8/PvKYVCnotNb5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt MzlhZmQ5MzE2NTk4LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4 LzEvWWY0dXI2Wkt6cThmejgtOHBoVUtlaTAxdmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGU1clxlN aDOMF2qweZ3a5sh8C4TJ1X7lTjVP6vp6sSpkz2UmhFFBjqUYh6KfSAgESvTSrajv Y9iWsILoIs0jsl0VwmsoEWuwTF4ksDsnCUFNdmWHt2GlNojxBupfzKhgcjY+AXy0 PFpSRcaXTAti3s+GjK42LMMSV1v5JYAD5442S6knSR+kRotgmakFqhz1MULLAMxw pIRfllTnsfqMimHLwA+ASQ9yPGmahanbIvp6Qt2WZcc4HJa2WK+8Bc5Ke/iPB75q Ds2sFyqgRQt/PL4J88LxgKwGfKY+MTE7zPasNjmTc44fYnRnuv3jrT4DjweR0oNl umiQu3CCD70Lrw== -----END CERTIFICATE-----Generated at Thu Jan 1 07:35:51 2026 by rpki-client