This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft File: YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json) Hash identifier: xLAYorjUcFd57hP44OS8Tn2l+7pjtXnl5u2GOf5E838= Subject key identifier: 8E:88:5E:2F:76:4D:8D:65:F7:F9:D1:83:72:70:9F:D8:FC:11:4E:C8 Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35 Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35 Certificate serial: 019B3E6D5D1189DC1100956AB86EE8D9EDE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft Manifest number: 102E Signing time: Sun 21 Dec 2025 01:01:53 +0000 Manifest this update: Sun 21 Dec 2025 01:01:53 +0000 Manifest next update: Mon 22 Dec 2025 01:01:53 +0000 Files and hashes: 1: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: dbpJWO3PPVJqXhYH4hkZVoWgCQRBlpgkSfT9CFXW1PM=) 2: orR6QmUobPq58IiNnqewDNf0I7s.roa (hash: cEMGLelbH1U4lpzSE43pcUZRdK2/HRG/uJ16sgFxOVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:5d:11:89:dc:11:00:95:6a:b8:6e:e8:d9:ed:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35 Validity Not Before: Dec 21 01:01:53 2025 GMT Not After : Dec 22 01:01:53 2025 GMT Subject: CN=8e885e2f764d8d65f7f9d18372709fd8fc114ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:d7:d6:3a:0a:ea:b8:2b:5a:15:33:c2:58: 31:b3:04:d6:74:2e:29:4f:57:49:4e:09:0d:2d:67: af:e8:5f:4f:a8:4a:4b:49:79:21:b8:83:33:87:7a: 0a:6d:cd:e8:a5:7d:ec:97:6a:59:5e:48:4f:c4:fc: d4:17:90:c6:3c:c1:fa:23:71:4f:7d:59:00:68:04: fb:72:c7:ed:a8:14:b6:b0:a4:83:4b:3c:9d:94:96: a8:7c:c7:75:5b:5c:2d:6b:0d:b3:4a:03:d2:21:c3: 42:22:f0:8a:85:11:31:e1:16:a9:87:41:c3:75:7f: 32:21:31:2d:79:99:c4:71:7f:84:b6:7b:60:d1:7e: b1:7c:0f:f5:24:19:98:bd:fa:25:59:bc:05:a8:6b: d2:e3:60:3c:de:e0:3a:43:d4:d0:78:9e:50:7f:6b: d2:83:78:78:a4:14:42:f4:28:91:c5:04:1b:24:e6: ed:c9:be:fa:82:c1:f7:d3:48:d2:a3:07:17:f9:9e: 3a:7f:fb:66:27:42:9b:74:49:6c:8f:5f:a6:11:01: 7b:b5:6a:0c:cf:63:5e:35:81:e3:a1:82:2b:37:05: 93:3e:02:28:bf:dd:09:ea:d6:58:97:4e:e2:11:58: 97:2d:2f:a3:06:49:8f:8f:14:c6:d9:fa:04:33:1c: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:88:5E:2F:76:4D:8D:65:F7:F9:D1:83:72:70:9F:D8:FC:11:4E:C8 X509v3 Authority Key Identifier: keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:94:54:0c:5d:94:c5:d1:bc:9d:93:c7:39:36:c6:e3:8e:e3: 88:9a:75:69:96:1b:4e:63:2d:85:c3:b0:1a:38:99:71:71:4b: f7:94:c4:16:bc:41:96:52:38:43:fe:f2:56:3b:57:3c:32:17: 06:4c:0a:06:b4:90:88:c4:ab:f8:43:c4:64:15:f5:20:8e:74: 40:b0:c6:47:67:bb:9a:ee:41:1c:cf:4b:84:2e:55:fc:21:7e: f4:86:36:c1:eb:13:02:13:f1:89:31:c4:35:8a:fc:f4:3e:30: c3:31:0a:f4:dc:60:92:fb:6d:d9:30:b1:8a:06:4f:dc:58:7f: 2d:a2:35:b0:27:4c:6d:4a:a4:09:3f:1c:d0:59:44:74:82:ff: 81:68:a1:87:dd:be:01:18:57:34:1b:8d:92:50:cf:99:5e:cb: 1d:ad:2f:5a:a2:e6:e3:6a:d9:3c:7d:e8:f6:6d:d6:01:1d:e9: c4:7e:b1:82:a7:79:a3:c7:b6:b4:b8:3a:45:7c:3d:a4:b3:b4: b5:c8:b0:70:63:05:86:4a:01:4b:a4:cf:16:53:fe:0e:f5:7d: 9b:08:10:b6:61:48:d5:34:e7:b1:d4:fe:f0:5a:16:4c:69:61: 51:4c:97:40:18:6f:c1:d6:40:63:0c:be:f7:31:7b:07:bf:54: 1c:b9:98:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bV0RidwRAJVquG7o2e3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjg0MTczNjFjMWM0MDZhZTlhNzI1N2RhYTlmYjA2MjA3 ODJkMzUwHhcNMjUxMjIxMDEwMTUzWhcNMjUxMjIyMDEwMTUzWjAzMTEwLwYDVQQD Eyg4ZTg4NWUyZjc2NGQ4ZDY1ZjdmOWQxODM3MjcwOWZkOGZjMTE0ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjDX1joK6rgrWhUzwlgxswTWdC4p T1dJTgkNLWev6F9PqEpLSXkhuIMzh3oKbc3opX3sl2pZXkhPxPzUF5DGPMH6I3FP fVkAaAT7csftqBS2sKSDSzydlJaofMd1W1wtaw2zSgPSIcNCIvCKhREx4Raph0HD dX8yITEteZnEcX+Etntg0X6xfA/1JBmYvfolWbwFqGvS42A83uA6Q9TQeJ5Qf2vS g3h4pBRC9CiRxQQbJObtyb76gsH300jSowcX+Z46f/tmJ0KbdElsj1+mEQF7tWoM z2NeNYHjoYIrNwWTPgIov90J6tZYl07iEViXLS+jBkmPjxTG2foEMxwT6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6IXi92TY1l9/nRg3Jwn9j8EU7IMB8GA1UdIwQY MBaAFGIoQXNhwcQGrppyV9qp+wYgeC01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEt NGQzYTU5Y2I5NDM5LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC83MWYyZTgtYmQ4Ni00YzVlLTk1NTEtNGQzYTU5Y2I5NDM5 LzEvWWloQmMySEJ4QWF1bW5KWDJxbjdCaUI0TFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZRUDF2U xdG8nZPHOTbG447jiJp1aZYbTmMthcOwGjiZcXFL95TEFrxBllI4Q/7yVjtXPDIX BkwKBrSQiMSr+EPEZBX1II50QLDGR2e7mu5BHM9LhC5V/CF+9IY2wesTAhPxiTHE NYr89D4wwzEK9Nxgkvtt2TCxigZP3Fh/LaI1sCdMbUqkCT8c0FlEdIL/gWihh92+ ARhXNBuNklDPmV7LHa0vWqLm42rZPH3o9m3WAR3pxH6xgqd5o8e2tLg6RXw9pLO0 tciwcGMFhkoBS6TPFlP+DvV9mwgQtmFI1TTnsdT+8FoWTGlhUUyXQBhvwdZAYwy+ 9zF7B79UHLmYMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:11 2025 by rpki-client