This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json) Hash identifier: 30PK6WpyK+sXHdwSIkrUPB7D67mwFCdofnHHDMZTWww= Subject key identifier: 59:27:36:83:8B:1F:5F:E7:29:B0:10:45:4E:EA:9E:9F:4A:CD:33:DD Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c Certificate serial: 019B522AAC69D81D4CE2DE944AB0EB70A4B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 21:01:26 +0000 Manifest this update: Wed 24 Dec 2025 21:01:26 +0000 Manifest next update: Thu 25 Dec 2025 21:01:26 +0000 Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=) 2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: MxL6ltPx0HhZ9rnHVmE8c+Y/MyAZ2G1xeDrvy9sJRs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:ac:69:d8:1d:4c:e2:de:94:4a:b0:eb:70:a4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c Validity Not Before: Dec 24 21:01:26 2025 GMT Not After : Dec 25 21:01:26 2025 GMT Subject: CN=592736838b1f5fe729b010454eea9e9f4acd33dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:40:c3:33:de:8f:f5:9a:52:89:39:d0:86: cf:f5:32:f1:5a:51:e6:a9:52:3d:73:85:39:cc:fe: 8e:50:85:00:6c:c4:7d:38:93:45:19:28:b1:94:fb: 1d:1b:de:b7:ea:ac:e7:53:6a:a4:fe:12:86:06:56: 36:77:55:77:07:bc:1f:0a:8e:17:ae:15:91:ea:f4: 48:bd:fb:83:6d:d1:c5:e4:74:66:a2:6c:dc:c7:e3: ab:34:ed:22:93:9a:d0:47:1d:f5:7d:ce:55:1e:ea: b1:68:2a:89:b6:1d:b8:c8:5b:06:f3:7f:a9:e4:92: 12:df:6d:a7:16:e5:33:93:c5:f4:74:30:da:5b:9c: a4:0e:3f:a6:d8:24:e6:be:f0:3a:79:60:80:c3:be: d7:5b:20:55:76:d0:30:53:d5:37:78:7a:4d:60:50: a8:d5:64:85:b8:c1:48:e5:c1:8e:c7:22:56:a9:6f: c5:b8:4e:a7:4a:8b:65:95:46:3d:5b:e0:14:02:f0: 7c:be:83:94:1c:61:51:78:90:64:52:3f:58:09:e3: 3c:21:7b:48:fe:80:db:dd:f3:e8:a1:03:ea:aa:70: f3:de:3c:c3:8a:da:77:03:65:b9:cb:6f:bd:11:58: d9:52:4a:0a:a7:2c:ea:96:5b:e6:8f:24:0e:c1:c5: 07:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:27:36:83:8B:1F:5F:E7:29:B0:10:45:4E:EA:9E:9F:4A:CD:33:DD X509v3 Authority Key Identifier: keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:86:67:cf:b0:f8:37:d0:95:ff:bc:3f:49:ae:b6:e3:da:2e: c2:06:82:1d:94:49:66:83:7d:23:3e:ea:82:3e:ec:e9:19:0c: 53:49:77:92:79:d4:6f:8b:ac:ba:01:66:3b:ea:61:e6:83:26: ed:75:42:de:85:02:a3:01:d4:b1:20:74:21:b7:10:15:86:ab: 44:7b:28:54:ea:66:18:1c:9d:28:a6:b2:ec:23:c0:90:76:ff: 4f:a7:5f:25:8e:de:30:93:58:9e:59:61:10:02:f2:2c:53:df: 99:8c:63:93:07:97:de:fa:46:4c:e8:20:7f:7c:fc:53:cb:dc: 81:ca:a9:86:1c:c8:c6:14:ab:04:8f:5c:c0:55:e9:d7:ff:fd: de:16:ad:83:bf:bf:00:7e:f5:ea:9f:b1:fb:9c:0c:99:a8:44: 80:75:fe:ac:b1:16:ad:9c:94:94:52:e2:89:b0:14:c3:b4:65: 3f:06:f2:68:58:06:45:49:e2:54:ef:4d:e5:8e:f1:d9:44:06: b5:2a:32:0a:41:e9:51:7d:b3:14:b4:c4:4c:3e:fe:d0:ae:68: 36:e4:48:21:2b:90:f7:25:8f:ed:d3:79:1b:8f:98:d0:bb:b7: 76:6b:5a:0b:51:53:b1:c3:a3:25:e1:be:d3:12:53:8e:30:fb: 66:51:0b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKqxp2B1M4t6USrDrcKS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDIxM2FiYTFlYTkyOGI5ZWQzMjQ5MWRlOWJhMTA0NjRi MDYzNmMwHhcNMjUxMjI0MjEwMTI2WhcNMjUxMjI1MjEwMTI2WjAzMTEwLwYDVQQD Eyg1OTI3MzY4MzhiMWY1ZmU3MjliMDEwNDU0ZWVhOWU5ZjRhY2QzM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/JAwzPej/WaUok50IbP9TLxWlHm qVI9c4U5zP6OUIUAbMR9OJNFGSixlPsdG9636qznU2qk/hKGBlY2d1V3B7wfCo4X rhWR6vRIvfuDbdHF5HRmomzcx+OrNO0ik5rQRx31fc5VHuqxaCqJth24yFsG83+p 5JIS322nFuUzk8X0dDDaW5ykDj+m2CTmvvA6eWCAw77XWyBVdtAwU9U3eHpNYFCo 1WSFuMFI5cGOxyJWqW/FuE6nSotllUY9W+AUAvB8voOUHGFReJBkUj9YCeM8IXtI /oDb3fPooQPqqnDz3jzDitp3A2W5y2+9EVjZUkoKpyzqllvmjyQOwcUHsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFknNoOLH1/nKbAQRU7qnp9KzTPdMB8GA1UdIwQY MBaAFGMCE6uh6pKLntMkkd6boQRksGNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQt OGY0YzU5ZWMyMGJlLzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hY2NjNzYtZTEyMy00NWIxLTk2YjQtOGY0YzU5ZWMyMGJl LzEvWXdJVHE2SHFrb3VlMHlTUjNwdWhCR1N3WTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoZnz7D4 N9CV/7w/Sa6249ouwgaCHZRJZoN9Iz7qgj7s6RkMU0l3knnUb4usugFmO+ph5oMm 7XVC3oUCowHUsSB0IbcQFYarRHsoVOpmGBydKKay7CPAkHb/T6dfJY7eMJNYnllh EALyLFPfmYxjkweX3vpGTOggf3z8U8vcgcqphhzIxhSrBI9cwFXp1//93hatg7+/ AH716p+x+5wMmahEgHX+rLEWrZyUlFLiibAUw7RlPwbyaFgGRUniVO9N5Y7x2UQG tSoyCkHpUX2zFLTETD7+0K5oNuRIISuQ9yWP7dN5G4+Y0Lu3dmtaC1FTscOjJeG+ 0xJTjjD7ZlEL8g== -----END CERTIFICATE-----Generated at Thu Dec 25 02:41:25 2025 by rpki-client