This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json) Hash identifier: RbziyipoLT/9WxK6xhb/4o3iR4QRpLsuiQzkW7Nrp+o= Subject key identifier: 18:1D:72:85:E2:06:31:38:B2:64:D4:C2:52:14:FE:60:C9:F1:8D:7D Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Certificate serial: 019B3BA22F750F4E9E70F7AE9AC6121AE82C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft Manifest number: 0D53 Signing time: Sat 20 Dec 2025 12:00:43 +0000 Manifest this update: Sat 20 Dec 2025 12:00:43 +0000 Manifest next update: Sun 21 Dec 2025 12:00:43 +0000 Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=) 2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: QVpqX/AbdE3B83ZWcZN7vajmqKGbQRAohkU0XaRdc64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:2f:75:0f:4e:9e:70:f7:ae:9a:c6:12:1a:e8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Validity Not Before: Dec 20 12:00:43 2025 GMT Not After : Dec 21 12:00:43 2025 GMT Subject: CN=181d7285e2063138b264d4c25214fe60c9f18d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:6c:90:21:09:ff:b5:0d:c0:09:c1:1a:93: 83:fa:8a:97:00:42:e1:4c:d1:1b:74:61:b1:31:84: ef:80:83:c3:b7:c0:5a:71:bd:40:1b:8c:48:d6:68: ae:4f:20:0f:09:d9:0c:be:88:9b:34:99:3d:0c:70: 4d:81:1c:48:73:3d:55:33:15:8d:20:bf:43:ff:91: bc:ef:2b:98:52:4c:43:7a:9e:86:07:1c:eb:88:e1: 30:82:e9:06:d8:49:26:23:f2:83:44:00:c4:49:33: a7:ad:e0:66:cf:ee:9e:6c:dc:10:ce:79:60:3b:4d: 87:5e:45:42:62:db:3c:c7:d9:32:90:04:d6:ee:32: e0:d0:23:2d:bf:ee:cd:77:5e:44:f5:05:e2:28:ee: c9:f9:11:4e:92:ed:8b:de:72:91:0d:b2:fd:b4:48: e3:60:66:93:b1:44:04:f3:a5:c6:13:f0:bb:90:dd: 6c:e7:82:dc:76:75:bc:69:bc:99:f2:1b:85:41:66: 1a:10:52:1e:db:c3:4e:6e:ac:ac:55:d7:3e:f8:9d: 49:95:86:19:ff:5e:c7:7a:6f:e3:03:4f:57:38:01: f3:9b:47:87:22:31:ed:89:35:03:71:3b:dd:20:8a: ea:ab:27:70:19:91:9c:e6:14:5c:0a:66:c1:02:d3: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1D:72:85:E2:06:31:38:B2:64:D4:C2:52:14:FE:60:C9:F1:8D:7D X509v3 Authority Key Identifier: keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:21:6c:6a:35:ab:c8:60:5c:b6:c4:39:d4:b0:69:95:cd:83: fb:69:4d:5f:bf:da:35:b1:ee:f2:98:9c:9f:94:cc:e0:13:da: ce:ab:e3:7f:02:cd:48:9a:e0:e0:e0:1e:8d:1f:c6:93:1a:b5: 72:c7:4b:88:5a:66:65:b0:a1:ea:e4:ab:02:96:60:99:9a:08: 1e:16:17:fd:b0:78:56:23:67:d2:00:dd:20:02:f0:9b:1d:9d: d4:65:5e:3b:7b:31:d6:76:97:02:23:ef:ae:9f:8f:8b:12:12: 0e:f3:74:d9:b8:41:12:96:84:23:f2:56:b6:d4:ac:c9:a0:c1: d7:81:af:2a:c8:32:05:02:22:10:64:0a:f6:f2:b4:d2:c8:5f: 5e:0b:60:a0:e7:b4:b3:26:61:12:f3:c2:f5:20:ba:79:de:26: bb:da:2a:29:18:1f:b2:93:9f:95:48:1d:12:3e:61:40:34:ae: e8:7e:c6:2e:2c:44:11:a1:7e:ef:91:e0:1c:05:a0:d7:40:16: 9c:6b:0d:37:79:5e:d2:fc:4c:85:c9:95:61:c7:f0:5c:c4:ad: 8a:4d:a5:73:c7:b8:b9:bb:84:77:ab:0f:2f:f2:a2:31:34:22: 62:c0:b6:2b:ea:2e:97:9d:00:91:11:c2:ce:38:e2:82:aa:8b: dd:3c:d1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oi91D06ecPeumsYSGugsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4 NWM3ZGUwHhcNMjUxMjIwMTIwMDQzWhcNMjUxMjIxMTIwMDQzWjAzMTEwLwYDVQQD EygxODFkNzI4NWUyMDYzMTM4YjI2NGQ0YzI1MjE0ZmU2MGM5ZjE4ZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq5skCEJ/7UNwAnBGpOD+oqXAELh TNEbdGGxMYTvgIPDt8Bacb1AG4xI1miuTyAPCdkMvoibNJk9DHBNgRxIcz1VMxWN IL9D/5G87yuYUkxDep6GBxzriOEwgukG2EkmI/KDRADESTOnreBmz+6ebNwQznlg O02HXkVCYts8x9kykATW7jLg0CMtv+7Nd15E9QXiKO7J+RFOku2L3nKRDbL9tEjj YGaTsUQE86XGE/C7kN1s54LcdnW8abyZ8huFQWYaEFIe28NObqysVdc++J1JlYYZ /17Hem/jA09XOAHzm0eHIjHtiTUDcTvdIIrqqydwGZGc5hRcCmbBAtPk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgdcoXiBjE4smTUwlIU/mDJ8Y19MB8GA1UdIwQY MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSFsajWr yGBctsQ51LBplc2D+2lNX7/aNbHu8picn5TM4BPazqvjfwLNSJrg4OAejR/Gkxq1 csdLiFpmZbCh6uSrApZgmZoIHhYX/bB4ViNn0gDdIALwmx2d1GVeO3sx1naXAiPv rp+PixISDvN02bhBEpaEI/JWttSsyaDB14GvKsgyBQIiEGQK9vK00shfXgtgoOe0 syZhEvPC9SC6ed4mu9oqKRgfspOflUgdEj5hQDSu6H7GLixEEaF+75HgHAWg10AW nGsNN3le0vxMhcmVYcfwXMStik2lc8e4ubuEd6sPL/KiMTQiYsC2K+oul50AkRHC zjjigqqL3TzR0g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:56:53 2025 by rpki-client