This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json) Hash identifier: EtmZxzmQreQ6ctGF/OlLLvrMHq/YapL03DHFWoWTFw4= Subject key identifier: 91:8B:76:7C:AA:56:D0:91:AB:16:D0:AE:83:03:4C:7A:8F:FD:1A:F8 Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b Certificate serial: 019B3F48BFB7585B6A8E995B66A1C3843BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 05:01:30 +0000 Manifest this update: Sun 21 Dec 2025 05:01:30 +0000 Manifest next update: Mon 22 Dec 2025 05:01:30 +0000 Files and hashes: 1: WskaznLEMYwubtusiQFBluw68yw.roa (hash: uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=) 2: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: 7B6rTmNhc106/mtNatSciVsegPxcMWlF2mig3y9+A9Q=) 3: nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (hash: TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:bf:b7:58:5b:6a:8e:99:5b:66:a1:c3:84:3b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b Validity Not Before: Dec 21 05:01:30 2025 GMT Not After : Dec 22 05:01:30 2025 GMT Subject: CN=918b767caa56d091ab16d0ae83034c7a8ffd1af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:c4:27:0c:81:b9:0a:88:b9:b2:15:06:95: 93:6b:0b:5b:2f:72:da:3d:d8:2e:ec:9d:33:25:89: 30:9c:f7:21:b3:ad:5e:d6:93:02:d7:5a:9a:28:d7: 73:d5:1f:d4:72:c8:89:b9:73:39:b4:38:89:5e:06: f5:bc:50:cf:97:31:df:9c:08:8c:29:26:62:0d:00: c6:a4:90:ae:2a:f6:9d:d3:4e:2a:c7:95:2c:53:e1: 5e:be:b9:ff:bf:37:14:98:82:f1:71:b0:44:33:9b: 9b:25:47:09:f6:5b:9a:c3:97:5c:78:5d:f6:21:8f: e3:8f:bb:17:e0:67:ce:4c:cf:31:17:59:15:a3:e8: e4:a6:be:60:99:5e:3b:11:26:af:8e:9f:16:22:63: f7:2d:a4:79:b8:d1:b5:f6:83:25:25:bd:11:65:ef: 38:42:0e:34:fb:0f:58:bf:37:d6:f0:a5:8d:12:ff: 77:ed:9f:f0:c5:8c:25:f4:0e:84:81:21:84:b3:24: d0:4d:0b:25:b8:25:7f:bf:c4:4a:13:44:ab:b2:e5: 38:a2:46:4b:73:bc:a1:bb:17:c1:dc:3e:48:ce:8e: 4e:be:4d:2e:05:b1:c4:a3:4d:8f:1b:0c:85:3d:bb: 88:db:31:94:f2:69:ec:3f:57:c7:41:1e:c0:0e:2b: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8B:76:7C:AA:56:D0:91:AB:16:D0:AE:83:03:4C:7A:8F:FD:1A:F8 X509v3 Authority Key Identifier: keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:ea:6e:2e:ce:91:78:f6:8c:2b:17:db:5e:1d:1b:6d:30: f0:9c:bb:f1:f4:81:e2:c4:ff:4c:0b:12:16:1a:30:63:bb:f7: ed:54:c6:90:0f:62:81:c6:40:3e:1e:fc:0d:3f:c0:38:4d:a2: 3e:fe:8c:29:fb:b9:e1:45:c9:93:e8:d4:7b:53:1a:ee:28:f6: 7b:c7:6e:80:68:77:57:df:ed:8c:61:7c:03:40:9c:69:05:c6: 32:48:41:9d:69:2b:65:58:e1:61:1b:a1:dc:e2:c4:8a:72:2c: e1:1a:1c:06:79:53:0e:90:a7:4d:05:91:9b:8e:d7:31:b1:be: 6c:fa:97:22:ca:c2:a8:ea:38:f3:c4:c2:99:6d:fa:e6:b9:ae: bc:75:64:0b:ae:59:60:3e:4b:00:32:c6:d2:2a:33:d1:49:1b: 2a:73:11:9e:e2:be:8b:0f:a9:64:83:43:7e:97:32:a7:06:92: 1c:42:01:3d:93:83:ed:58:01:10:ee:12:9c:bf:87:e7:14:fe: 9f:ab:4e:22:ac:81:33:7e:bb:c3:22:5c:00:12:b9:3a:63:70: 22:85:db:96:54:b0:96:b8:8a:48:6a:30:ba:47:db:07:04:91: bb:1d:34:32:34:28:2d:dc:63:5c:f3:e7:11:54:23:12:1d:20: b7:96:c1:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SL+3WFtqjplbZqHDhDu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNjc5OTk2NDVlMTViNjUyNjhhMGQ5M2JiMTRjNGY1MTcy NDQ1MWIwHhcNMjUxMjIxMDUwMTMwWhcNMjUxMjIyMDUwMTMwWjAzMTEwLwYDVQQD Eyg5MThiNzY3Y2FhNTZkMDkxYWIxNmQwYWU4MzAzNGM3YThmZmQxYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R7EJwyBuQqIubIVBpWTawtbL3La Pdgu7J0zJYkwnPchs61e1pMC11qaKNdz1R/UcsiJuXM5tDiJXgb1vFDPlzHfnAiM KSZiDQDGpJCuKvad004qx5UsU+Fevrn/vzcUmILxcbBEM5ubJUcJ9luaw5dceF32 IY/jj7sX4GfOTM8xF1kVo+jkpr5gmV47ESavjp8WImP3LaR5uNG19oMlJb0RZe84 Qg40+w9YvzfW8KWNEv937Z/wxYwl9A6EgSGEsyTQTQsluCV/v8RKE0SrsuU4okZL c7yhuxfB3D5Izo5Ovk0uBbHEo02PGwyFPbuI2zGU8mnsP1fHQR7ADiuKnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGLdnyqVtCRqxbQroMDTHqP/Rr4MB8GA1UdIwQY MBaAFGFnmZZF4VtlJooNk7sUxPUXJEUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzct ODgwN2Y5NWFlNzVkLzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMzFhMjUtMjUwNy00NzFkLWFkYzctODgwN2Y5NWFlNzVk LzEvWVdlWmxrWGhXMlVtaWcyVHV4VEU5UmNrUlJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFDqbi7O kXj2jCsX214dG20w8Jy78fSB4sT/TAsSFhowY7v37VTGkA9igcZAPh78DT/AOE2i Pv6MKfu54UXJk+jUe1Ma7ij2e8dugGh3V9/tjGF8A0CcaQXGMkhBnWkrZVjhYRuh 3OLEinIs4RocBnlTDpCnTQWRm47XMbG+bPqXIsrCqOo488TCmW365rmuvHVkC65Z YD5LADLG0ioz0UkbKnMRnuK+iw+pZINDfpcypwaSHEIBPZOD7VgBEO4SnL+H5xT+ n6tOIqyBM367wyJcABK5OmNwIoXbllSwlriKSGowukfbBwSRux00MjQoLdxjXPPn EVQjEh0gt5bBOw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:41 2025 by rpki-client