This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json) Hash identifier: to+GKS03SvZ8c+MGupSS4nxE+k/O/owva/nv9uCZiNQ= Subject key identifier: 54:22:4C:68:3B:BA:AA:54:01:E2:0C:9D:A8:2F:BB:60:F9:82:6D:C5 Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f Certificate serial: 019B533C91C530D64220C5B4F2E65991CDCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft Manifest number: 0C3D Signing time: Thu 25 Dec 2025 02:00:36 +0000 Manifest this update: Thu 25 Dec 2025 02:00:36 +0000 Manifest next update: Fri 26 Dec 2025 02:00:36 +0000 Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: 8IsZ19pFKFnrnnKIzXYKsLBXWvtDPx96hL90zpwxf20=) 2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:91:c5:30:d6:42:20:c5:b4:f2:e6:59:91:cd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f Validity Not Before: Dec 25 02:00:36 2025 GMT Not After : Dec 26 02:00:36 2025 GMT Subject: CN=54224c683bbaaa5401e20c9da82fbb60f9826dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:64:20:82:91:5b:d1:0a:1e:57:9e:08:83: f2:49:c6:aa:7e:32:60:fc:58:18:70:d7:cf:e0:42: f3:bd:4e:95:74:82:69:d8:fa:18:ba:a1:81:54:b4: ae:38:6c:a4:b5:cf:da:9c:be:3d:1d:fd:5a:76:71: c9:cd:5e:fa:f3:ef:df:70:f2:28:8a:70:9f:7f:ba: 2a:86:33:28:ba:28:26:4e:e8:22:35:c1:fb:5a:b2: c0:86:51:bf:1f:0f:48:64:8c:0a:70:9e:db:67:9f: 1c:95:97:48:5c:62:da:96:89:82:15:27:aa:ef:c2: 06:a9:b3:7d:fd:6b:c5:41:75:3a:09:68:c8:90:48: 19:3a:31:fe:9f:84:50:b5:9c:61:36:6b:66:1a:10: 84:4e:06:08:d4:85:dd:38:74:5d:0d:d4:8b:0c:62: e0:8e:9a:8e:0e:ea:26:5f:8c:7d:5f:67:fa:55:1f: 05:ec:e5:c6:4c:b5:0a:5b:1a:66:0a:e0:76:36:8e: bd:16:ae:89:69:6b:01:7b:af:33:82:26:18:bf:14: 61:01:aa:38:d5:0d:ef:9f:3a:44:d5:69:3d:0b:44: 8e:95:56:4a:97:0b:fd:2e:03:80:39:3d:a8:58:1f: 02:95:df:3c:a5:70:c8:44:34:df:36:15:86:65:0d: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:22:4C:68:3B:BA:AA:54:01:E2:0C:9D:A8:2F:BB:60:F9:82:6D:C5 X509v3 Authority Key Identifier: keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b7:d1:90:d3:c1:6e:1d:fd:cf:43:7b:fd:89:8b:5b:43:37: fe:95:0a:f6:b4:ea:b6:47:71:e6:3c:f2:7d:7f:6b:bc:05:58: 7a:90:ad:d6:9e:be:ec:e9:e5:bf:56:84:19:f8:50:bd:7e:f6: 5d:d4:a2:93:3c:68:c6:81:dc:29:b7:ff:c1:f4:27:e9:e6:c6: 58:a2:25:59:f6:76:91:07:63:c5:e3:f7:ec:cb:89:80:ef:44: 5c:3a:1d:55:e7:31:1a:bf:4f:35:d2:76:d0:1a:d8:10:f6:57: 53:63:2c:5d:4d:92:ee:7f:64:81:c4:c4:7f:0e:d6:13:c0:0c: 7e:16:c7:86:02:4e:d7:a4:25:86:a8:65:ff:3d:86:2a:06:96: 7d:07:19:58:a8:87:6a:78:b4:a7:42:e2:89:71:df:95:74:4e: ac:65:d6:7c:cf:cf:81:87:28:87:f0:ae:0d:62:06:c7:e9:e1: a8:20:f9:69:c7:3e:8c:46:1f:08:85:7b:89:bd:00:87:49:00: 64:f2:86:6b:c9:5e:6b:30:87:97:09:a4:cc:a0:7c:20:06:ee: a9:b7:b9:6d:95:c2:ed:3f:c6:76:e5:2e:94:9b:b8:e8:4e:b3: e8:62:60:82:c4:aa:d0:f1:a0:66:d2:22:58:1e:57:e1:cb:20: b0:20:d1:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPJHFMNZCIMW08uZZkc3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTAwOTllMzM1NDA5ZGIwM2FjMTEzM2QxNjRmMDJhMGQ1 ZGM2NmYwHhcNMjUxMjI1MDIwMDM2WhcNMjUxMjI2MDIwMDM2WjAzMTEwLwYDVQQD Eyg1NDIyNGM2ODNiYmFhYTU0MDFlMjBjOWRhODJmYmI2MGY5ODI2ZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtahkIIKRW9EKHleeCIPyScaqfjJg /FgYcNfP4ELzvU6VdIJp2PoYuqGBVLSuOGyktc/anL49Hf1adnHJzV768+/fcPIo inCff7oqhjMouigmTugiNcH7WrLAhlG/Hw9IZIwKcJ7bZ58clZdIXGLalomCFSeq 78IGqbN9/WvFQXU6CWjIkEgZOjH+n4RQtZxhNmtmGhCETgYI1IXdOHRdDdSLDGLg jpqODuomX4x9X2f6VR8F7OXGTLUKWxpmCuB2No69Fq6JaWsBe68zgiYYvxRhAao4 1Q3vnzpE1Wk9C0SOlVZKlwv9LgOAOT2oWB8Cld88pXDIRDTfNhWGZQ2RMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQiTGg7uqpUAeIMnagvu2D5gm3FMB8GA1UdIwQY MBaAFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUt NGM2NWJkMzNkNmY2LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUtNGM2NWJkMzNkNmY2 LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbfRkNPB bh39z0N7/YmLW0M3/pUK9rTqtkdx5jzyfX9rvAVYepCt1p6+7Onlv1aEGfhQvX72 XdSikzxoxoHcKbf/wfQn6ebGWKIlWfZ2kQdjxeP37MuJgO9EXDodVecxGr9PNdJ2 0BrYEPZXU2MsXU2S7n9kgcTEfw7WE8AMfhbHhgJO16Qlhqhl/z2GKgaWfQcZWKiH ani0p0LiiXHflXROrGXWfM/PgYcoh/CuDWIGx+nhqCD5acc+jEYfCIV7ib0Ah0kA ZPKGa8leazCHlwmkzKB8IAbuqbe5bZXC7T/GduUulJu46E6z6GJggsSq0PGgZtIi WB5X4csgsCDRfA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:18:04 2025 by rpki-client