This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json) Hash identifier: 8unToyJHjshelQdBfY4PHLh9O7n4cah7Vkkb/6otOGg= Subject key identifier: 7B:7D:A3:CA:14:A4:55:FE:9B:F3:18:AD:30:9F:25:41:DD:A2:8E:0B Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21 Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721 Certificate serial: 019B6D6AADD0AF177A505BA02AB6706EECE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft Manifest number: 08AE Signing time: Tue 30 Dec 2025 04:01:06 +0000 Manifest this update: Tue 30 Dec 2025 04:01:06 +0000 Manifest next update: Wed 31 Dec 2025 04:01:06 +0000 Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=) 2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: TNNgCuxrok3E4pw9xe1iSistcmfF6i49L//8yXPUvZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:ad:d0:af:17:7a:50:5b:a0:2a:b6:70:6e:ec:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721 Validity Not Before: Dec 30 04:01:06 2025 GMT Not After : Dec 31 04:01:06 2025 GMT Subject: CN=7b7da3ca14a455fe9bf318ad309f2541dda28e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:ef:7b:48:1e:4a:13:77:d3:82:e5:b6:96: 1c:47:24:4d:d4:c5:e6:59:76:4a:75:5d:ee:26:36: 67:e9:e5:69:a1:92:05:31:e5:09:0b:5f:c5:4e:9e: 45:f0:fa:e2:6a:aa:68:e5:9d:7b:2a:18:65:55:d9: 38:46:94:d5:dd:ba:c5:3f:aa:59:24:73:11:29:0d: f8:23:41:c4:6a:47:9d:76:11:d8:2d:40:9d:b2:5f: 60:b6:07:22:60:68:ec:62:be:11:2a:e7:42:47:b4: d3:03:c2:f6:bb:e4:d1:3b:51:07:25:f6:23:5e:8c: 5f:bf:7f:12:1d:0d:0c:6f:2e:c2:af:29:43:1a:a4: 08:e0:b1:54:14:8e:d2:f2:59:c1:f2:a9:d1:9a:8f: 31:34:ac:8b:3e:a3:f6:4b:ad:d1:a2:f2:90:c6:db: cb:3d:75:45:53:6b:d4:1d:59:ef:36:4d:8c:10:b3: 99:20:3b:7a:b9:5a:6a:c6:62:98:60:36:73:1c:94: fa:4c:d1:e6:5c:e4:00:84:1b:8e:aa:97:11:9b:a6: c7:88:81:5f:cc:16:e7:78:e8:83:21:40:d5:54:a5: 74:bb:fb:f1:83:f8:3c:09:9e:5f:6b:68:95:68:91: ba:71:8d:ab:0c:ca:44:05:66:ff:a4:b5:a3:4b:d7: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7D:A3:CA:14:A4:55:FE:9B:F3:18:AD:30:9F:25:41:DD:A2:8E:0B X509v3 Authority Key Identifier: keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2f:8d:3b:72:20:3e:41:19:99:7e:82:c6:0a:5f:49:47:31: 8e:27:45:82:31:13:93:27:41:2b:5a:6f:e5:6d:11:ac:94:c5: 5a:f6:21:4b:5a:cc:65:1f:f2:c6:ca:39:c3:ce:9c:61:2c:11: 1b:59:95:6d:d8:9a:a8:6d:6d:9f:7c:4c:29:85:3a:24:01:7f: ed:65:d1:6a:8c:b5:05:2d:a2:df:0e:4d:53:b6:90:a0:6c:20: 67:4d:cb:15:cf:15:bd:57:a3:24:53:f5:99:4c:3e:c5:64:dd: 77:de:ce:4d:f5:1e:af:33:50:5e:78:c2:39:be:84:29:39:4f: 81:1a:ee:d3:2a:ea:d5:48:c5:53:13:4c:b2:6e:3d:58:58:a8: ce:f9:5d:38:90:f5:ef:b9:12:fc:1b:ab:0e:d7:24:5c:e0:c7: 5c:90:1c:aa:7b:cd:b3:13:3f:06:8f:b3:c5:66:10:d3:7c:3a: c3:b1:a9:02:dd:d1:f3:44:e2:4a:41:85:25:1a:3b:eb:c3:9b: 26:2f:7a:59:29:a5:92:43:9b:ca:40:20:9f:0f:04:1c:ee:37: 51:53:2c:b4:a6:4d:0a:63:74:23:0e:12:c4:f1:b2:6f:5c:74: c6:c3:d8:54:d6:5a:df:d5:54:82:20:eb:3c:3a:c3:e0:74:10: eb:ab:86:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaq3Qrxd6UFugKrZwbuzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx ZWU3MjEwHhcNMjUxMjMwMDQwMTA2WhcNMjUxMjMxMDQwMTA2WjAzMTEwLwYDVQQD Eyg3YjdkYTNjYTE0YTQ1NWZlOWJmMzE4YWQzMDlmMjU0MWRkYTI4ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Dve0geShN304LltpYcRyRN1MXm WXZKdV3uJjZn6eVpoZIFMeUJC1/FTp5F8Priaqpo5Z17KhhlVdk4RpTV3brFP6pZ JHMRKQ34I0HEakeddhHYLUCdsl9gtgciYGjsYr4RKudCR7TTA8L2u+TRO1EHJfYj Xoxfv38SHQ0Mby7CrylDGqQI4LFUFI7S8lnB8qnRmo8xNKyLPqP2S63RovKQxtvL PXVFU2vUHVnvNk2MELOZIDt6uVpqxmKYYDZzHJT6TNHmXOQAhBuOqpcRm6bHiIFf zBbneOiDIUDVVKV0u/vxg/g8CZ5fa2iVaJG6cY2rDMpEBWb/pLWjS9exSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt9o8oUpFX+m/MYrTCfJUHdoo4LMB8GA1UdIwQY MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt Y2M4ODU4NTdmYWYyLzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy+NO3Ig PkEZmX6CxgpfSUcxjidFgjETkydBK1pv5W0RrJTFWvYhS1rMZR/yxso5w86cYSwR G1mVbdiaqG1tn3xMKYU6JAF/7WXRaoy1BS2i3w5NU7aQoGwgZ03LFc8VvVejJFP1 mUw+xWTdd97OTfUerzNQXnjCOb6EKTlPgRru0yrq1UjFUxNMsm49WFiozvldOJD1 77kS/BurDtckXODHXJAcqnvNsxM/Bo+zxWYQ03w6w7GpAt3R80TiSkGFJRo768Ob Ji96WSmlkkObykAgnw8EHO43UVMstKZNCmN0Iw4SxPGyb1x0xsPYVNZa39VUgiDr PDrD4HQQ66uGyQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:13:00 2025 by rpki-client