This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft File: m-YNSucPb1WZhMdrUhzjd8we5yE.mft (raw, json) Hash identifier: RMehZMmwGCm65VzKIEgOdBGQNSw8ZEo++9CLb5PG3Zs= Subject key identifier: CD:DF:8F:01:F2:37:48:21:A4:40:82:45:03:5B:E0:F4:78:14:77:4C Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21 Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721 Certificate serial: 019B71476B97117C1C3407C0972244C801EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft Manifest number: 08B0 Signing time: Tue 30 Dec 2025 22:01:04 +0000 Manifest this update: Tue 30 Dec 2025 22:01:04 +0000 Manifest next update: Wed 31 Dec 2025 22:01:04 +0000 Files and hashes: 1: EvLIZkrQOLa3Dw1QeQY-_nsYunc.roa (hash: 7wySXJGI2LRPILtTDDd8e153b5pc8VYBaUgp6NmPV7s=) 2: m-YNSucPb1WZhMdrUhzjd8we5yE.crl (hash: oUKG9Ox7o2bkSmiWHnaxq4fMrIen12ftczNQQRx8Tc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:6b:97:11:7c:1c:34:07:c0:97:22:44:c8:01:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721 Validity Not Before: Dec 30 22:01:04 2025 GMT Not After : Dec 31 22:01:04 2025 GMT Subject: CN=cddf8f01f2374821a4408245035be0f47814774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:c6:d3:17:51:be:4c:1f:c4:9c:f1:18:1b: 4e:99:5f:63:bc:25:78:9a:ef:0f:b6:ae:91:1d:cc: 93:ed:6a:68:7b:13:c9:dc:56:53:0e:8d:95:2b:f5: 4a:72:b4:83:f2:c8:e8:7b:b1:06:74:15:3c:d2:a0: 60:43:0d:28:37:f1:be:8e:36:ff:e6:12:57:67:a6: 6d:50:56:25:2a:e1:07:70:c1:bb:27:db:7e:a2:19: ea:f1:6b:37:c4:e5:41:28:94:3a:01:40:2a:e9:2a: 53:7f:ba:2e:71:a6:8e:9d:4c:21:92:1b:16:40:41: ae:4a:53:28:40:53:72:3b:6f:e7:5b:cd:77:61:c3: 2a:1c:c2:44:e3:b2:57:2e:61:57:36:d1:d5:9a:7e: 9d:cd:b2:3f:8d:bb:c8:cc:6a:17:9c:b3:6a:27:7b: a8:52:11:82:60:4f:f3:e6:76:14:10:c3:52:30:c3: 8f:85:d7:c4:2f:77:cc:6f:e4:b2:0e:82:4c:4c:f1: fb:90:4b:3f:37:29:d3:6a:fd:81:74:c4:e0:8f:62: 29:ca:a9:35:cc:cb:7b:fc:f7:67:bb:f4:b6:20:d8: 08:81:fa:26:5a:01:c9:f7:70:cd:44:66:8c:f7:8f: 0f:3f:57:9a:95:15:62:85:4f:c6:25:9f:29:58:93: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DF:8F:01:F2:37:48:21:A4:40:82:45:03:5B:E0:F4:78:14:77:4C X509v3 Authority Key Identifier: keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f5:98:b9:cb:7b:31:b8:64:e7:70:36:f1:92:49:b2:f0:fb: 9e:d1:52:66:fb:52:3c:44:c1:eb:b9:22:74:44:8b:d9:95:ce: 95:16:bb:68:0c:38:2a:8a:c8:87:e9:8b:74:9a:40:65:fa:98: 63:35:3b:c5:23:d8:41:92:f0:a0:d2:4b:6c:1c:97:95:5b:68: 60:6b:97:65:46:e2:f8:cb:36:be:06:66:fa:16:7d:47:90:cb: 5a:47:ed:4c:aa:f1:59:68:99:9a:ff:d9:ce:8e:6b:d3:e3:c2: f9:29:ff:86:7c:fd:19:cb:41:5e:fa:17:56:f6:56:24:31:de: 82:55:0e:88:5a:9e:c7:70:0b:a6:de:e9:d8:b7:1e:45:41:58: ba:0a:97:b4:3c:d0:e3:f3:5c:37:33:ab:98:fe:b6:48:a8:fc: 91:df:a3:eb:c9:7d:51:7c:10:9e:b3:2b:aa:ab:97:4a:4a:42: 3a:f9:19:de:30:6d:ef:17:34:ef:31:ff:b8:8b:8a:81:1e:eb: b1:6a:ee:3e:d8:e0:f8:c6:59:96:b8:0f:2d:31:c3:3c:48:ed: dd:eb:f2:e5:cd:97:54:48:fe:31:1b:b2:26:13:ea:f5:a4:e6: 22:76:b0:09:1b:24:24:1b:52:35:3a:b0:36:05:a0:72:87:2d: 05:12:dd:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxR2uXEXwcNAfAlyJEyAHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTYwZDRhZTcwZjZmNTU5OTg0Yzc2YjUyMWNlMzc3Y2Mx ZWU3MjEwHhcNMjUxMjMwMjIwMTA0WhcNMjUxMjMxMjIwMTA0WjAzMTEwLwYDVQQD EyhjZGRmOGYwMWYyMzc0ODIxYTQ0MDgyNDUwMzViZTBmNDc4MTQ3NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7PG0xdRvkwfxJzxGBtOmV9jvCV4 mu8Ptq6RHcyT7WpoexPJ3FZTDo2VK/VKcrSD8sjoe7EGdBU80qBgQw0oN/G+jjb/ 5hJXZ6ZtUFYlKuEHcMG7J9t+ohnq8Ws3xOVBKJQ6AUAq6SpTf7oucaaOnUwhkhsW QEGuSlMoQFNyO2/nW813YcMqHMJE47JXLmFXNtHVmn6dzbI/jbvIzGoXnLNqJ3uo UhGCYE/z5nYUEMNSMMOPhdfEL3fMb+SyDoJMTPH7kEs/NynTav2BdMTgj2Ipyqk1 zMt7/Pdnu/S2INgIgfomWgHJ93DNRGaM948PP1ealRVihU/GJZ8pWJNIAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3fjwHyN0ghpECCRQNb4PR4FHdMMB8GA1UdIwQY MBaAFJvmDUrnD29VmYTHa1Ic43fMHuchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQt Y2M4ODU4NTdmYWYyLzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jMDI4MjAtZmI2Ni00NzkyLTlkOGQtY2M4ODU4NTdmYWYy LzEvbS1ZTlN1Y1BiMVdaaE1kclVoempkOHdlNXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/WYuct7 Mbhk53A28ZJJsvD7ntFSZvtSPETB67kidESL2ZXOlRa7aAw4KorIh+mLdJpAZfqY YzU7xSPYQZLwoNJLbByXlVtoYGuXZUbi+Ms2vgZm+hZ9R5DLWkftTKrxWWiZmv/Z zo5r0+PC+Sn/hnz9GctBXvoXVvZWJDHeglUOiFqex3ALpt7p2LceRUFYugqXtDzQ 4/NcNzOrmP62SKj8kd+j68l9UXwQnrMrqquXSkpCOvkZ3jBt7xc07zH/uIuKgR7r sWruPtjg+MZZlrgPLTHDPEjt3evy5c2XVEj+MRuyJhPq9aTmInawCRskJBtSNTqw NgWgcoctBRLd/A== -----END CERTIFICATE-----Generated at Wed Dec 31 00:08:15 2025 by rpki-client