This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json) Hash identifier: S1xx3cZosaa+shoJxOfEfIQCyVYwh0JaF2ghYSR3p/U= Subject key identifier: BA:38:81:15:14:1D:BB:00:AD:71:C5:90:DB:D5:85:45:31:11:9D:04 Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb Certificate serial: 019B409178F3040D6E44180A05D85EB3F833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft Manifest number: 0DCD Signing time: Sun 21 Dec 2025 11:00:34 +0000 Manifest this update: Sun 21 Dec 2025 11:00:34 +0000 Manifest next update: Mon 22 Dec 2025 11:00:34 +0000 Files and hashes: 1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=) 2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: XMt/B4TV9Pq5PHf3/gdiE5hOFg3rudFPAWfQPXXE5Zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:78:f3:04:0d:6e:44:18:0a:05:d8:5e:b3:f8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb Validity Not Before: Dec 21 11:00:34 2025 GMT Not After : Dec 22 11:00:34 2025 GMT Subject: CN=ba388115141dbb00ad71c590dbd5854531119d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:0f:12:4b:85:49:f8:75:a3:53:e0:3c:84: 0f:67:3e:f6:6e:0c:ae:04:58:5c:b9:db:47:da:9a: 38:e6:9c:29:64:e6:49:4e:bd:96:b5:2a:90:1d:4b: 42:fb:f7:39:a3:3c:23:d6:e8:2b:d5:9e:8e:f0:da: e8:6a:82:6d:e5:23:14:56:8c:ca:d0:9a:fc:e9:c9: a5:dc:24:1d:ba:0d:17:20:ee:eb:da:e6:3a:20:13: b1:c5:cf:7d:99:35:46:01:c9:3a:49:f7:9e:34:83: 43:79:77:8d:d8:ba:ff:8f:ad:fc:55:6b:f2:7a:b7: af:28:7c:f5:9e:6f:13:7f:9b:ec:6c:c1:a6:ba:30: 62:d3:72:2d:f0:51:28:f4:6e:04:37:44:c8:df:be: 0f:d0:53:2c:d1:2f:c3:a1:84:f4:d6:2c:67:95:28: 0b:a5:4e:a8:18:8a:4c:eb:bb:7d:28:a9:dd:67:96: bd:aa:75:bb:18:21:ea:8b:61:0b:14:67:3d:02:6f: 7d:9b:c4:79:90:aa:00:f7:cc:b4:6a:ba:14:61:57: 7c:d5:b1:2b:c2:1e:71:a9:9f:ae:ff:02:e2:83:20: 3d:bf:2e:e4:d5:f1:6b:ff:4b:db:f4:e3:7f:c0:8f: 40:88:6f:90:bf:dd:ea:95:2b:82:79:1c:e3:5d:be: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:38:81:15:14:1D:BB:00:AD:71:C5:90:DB:D5:85:45:31:11:9D:04 X509v3 Authority Key Identifier: keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:23:0d:39:46:56:d9:43:ce:fe:3f:66:a1:92:a8:2c:f9:f1: 83:e5:a0:b9:c2:c0:3d:8e:55:83:b6:2d:4b:72:3a:57:66:09: 48:b1:ed:ea:5f:c0:6d:89:db:1b:9d:92:96:64:d8:6b:a1:a7: fa:4f:d6:f0:13:80:69:e5:47:d2:cc:fc:36:c8:61:49:58:b2: 4e:33:7b:45:70:13:c7:25:14:15:9c:82:bc:b9:1e:82:54:21: 26:dc:47:31:01:6e:5e:44:52:08:68:7a:b4:50:34:02:55:e1: 93:29:7d:3a:93:ef:57:17:1e:5b:f4:6e:7a:65:ff:8f:e1:ad: 9a:cf:fe:cd:d3:2e:5a:3d:77:bb:e0:37:b4:99:95:0c:94:81: b4:c3:0e:f6:f6:be:b0:3b:ac:30:8a:33:52:3b:0c:9a:2c:70: a7:6d:b9:be:f5:2d:99:5a:66:b4:3c:33:5b:83:00:93:e8:18: 86:b8:0b:8b:71:1c:9f:8d:92:66:90:c2:ad:56:53:eb:76:1d: 89:87:64:5c:d4:61:22:a0:3d:f4:e3:c2:cf:a7:46:08:e5:99: 06:13:36:97:2d:dd:13:8a:23:9c:65:3b:bc:5a:a7:5e:08:56: 88:d8:25:c3:35:03:2e:48:36:51:38:e6:a3:9c:26:3c:17:2c: b6:5e:81:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkXjzBA1uRBgKBdhes/gzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi ZTYzZWIwHhcNMjUxMjIxMTEwMDM0WhcNMjUxMjIyMTEwMDM0WjAzMTEwLwYDVQQD EyhiYTM4ODExNTE0MWRiYjAwYWQ3MWM1OTBkYmQ1ODU0NTMxMTE5ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTIPEkuFSfh1o1PgPIQPZz72bgyu BFhcudtH2po45pwpZOZJTr2WtSqQHUtC+/c5ozwj1ugr1Z6O8NroaoJt5SMUVozK 0Jr86cml3CQdug0XIO7r2uY6IBOxxc99mTVGAck6SfeeNINDeXeN2Lr/j638VWvy erevKHz1nm8Tf5vsbMGmujBi03It8FEo9G4EN0TI374P0FMs0S/DoYT01ixnlSgL pU6oGIpM67t9KKndZ5a9qnW7GCHqi2ELFGc9Am99m8R5kKoA98y0aroUYVd81bEr wh5xqZ+u/wLigyA9vy7k1fFr/0vb9ON/wI9AiG+Qv93qlSuCeRzjXb4LqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo4gRUUHbsArXHFkNvVhUUxEZ0EMB8GA1UdIwQY MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt MzIzOWE4MWM5ZmM4LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4 LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSMNOUZW 2UPO/j9moZKoLPnxg+WgucLAPY5Vg7YtS3I6V2YJSLHt6l/AbYnbG52SlmTYa6Gn +k/W8BOAaeVH0sz8NshhSViyTjN7RXATxyUUFZyCvLkeglQhJtxHMQFuXkRSCGh6 tFA0AlXhkyl9OpPvVxceW/RuemX/j+Gtms/+zdMuWj13u+A3tJmVDJSBtMMO9va+ sDusMIozUjsMmixwp225vvUtmVpmtDwzW4MAk+gYhrgLi3Ecn42SZpDCrVZT63Yd iYdkXNRhIqA99OPCz6dGCOWZBhM2ly3dE4ojnGU7vFqnXghWiNglwzUDLkg2UTjm o5wmPBcstl6B1Q== -----END CERTIFICATE-----Generated at Sun Dec 21 21:02:50 2025 by rpki-client