This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft File: YuXsnfTdA7n1AKaglH0Ue27SFmY.mft (raw, json) Hash identifier: XT0OZGkAAc0950Dh+oDOWYdxUIIAfFbeC1LTk7qXkRE= Subject key identifier: 8F:30:E7:04:1A:79:DB:1C:FC:E7:94:F8:66:1C:64:83:0F:24:85:1D Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Certificate serial: 019B530608F6AC7ABC0F6F6991AC63FBA837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft Manifest number: 11FA Signing time: Thu 25 Dec 2025 01:01:03 +0000 Manifest this update: Thu 25 Dec 2025 01:01:03 +0000 Manifest next update: Fri 26 Dec 2025 01:01:03 +0000 Files and hashes: 1: YuXsnfTdA7n1AKaglH0Ue27SFmY.crl (hash: W7huJtsEFrEzMEze7Kd8IbQVaHXaQUSfRaWELRLyMSw=) 2: kJgRBYW8FH_KB9BmG0zuAtDHIt4.roa (hash: bRkMoYbDThsAekovmWN3M4u7dfA1wfKmJ7fIKIUCTN4=) 3: v525Sv1tFND5v2x1n4f6uRe4GHA.roa (hash: 9QaN1qqDjE/05U+XFuEbIUEXZMx4HBelPUj6nwrRoso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:08:f6:ac:7a:bc:0f:6f:69:91:ac:63:fb:a8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666 Validity Not Before: Dec 25 01:01:03 2025 GMT Not After : Dec 26 01:01:03 2025 GMT Subject: CN=8f30e7041a79db1cfce794f8661c64830f24851d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:84:de:d8:4c:ee:7e:dd:ad:57:76:d9:cf: df:2a:72:53:45:cb:df:dc:89:ed:46:ef:1b:3d:17: a1:68:76:53:5e:47:cd:fb:73:ae:e6:21:c5:3c:8c: 03:24:03:6c:f8:0d:3e:d7:3a:c7:c9:80:1b:13:23: 3b:27:ea:0a:8f:d7:3d:9f:71:b1:e9:99:f6:fd:0c: f9:40:2a:9a:ff:d4:c3:f4:d2:0a:40:cf:de:fd:78: 69:ed:78:20:b0:1c:8d:7c:9c:c6:4f:f2:23:a5:57: 70:1a:bc:38:8d:37:77:31:71:de:84:19:9f:af:25: af:e8:2f:e9:a6:58:aa:8f:57:23:98:f0:be:30:62: 44:bc:a9:e6:a4:25:a7:21:10:eb:b4:74:6a:15:9d: 3c:75:1e:46:51:9e:a5:3c:34:e6:bd:68:21:8b:63: b9:43:84:fa:23:3f:40:fe:3b:3f:6a:32:ac:90:5b: 41:91:d5:2e:f4:c1:7f:48:94:d8:eb:9f:15:49:82: a7:07:eb:38:d2:0c:ff:a1:b0:8f:9a:d2:fa:6c:31: 69:79:4d:2b:30:c5:67:9a:62:a5:1e:66:f7:27:97: 51:52:db:36:e6:48:bc:22:b2:ca:11:f3:e1:79:02: 6e:87:af:8f:4a:a7:ff:db:41:ae:65:85:56:22:2c: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:E7:04:1A:79:DB:1C:FC:E7:94:F8:66:1C:64:83:0F:24:85:1D X509v3 Authority Key Identifier: keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dd:98:2c:8f:1e:8e:85:36:f3:3a:dc:28:5c:01:4f:28:c1: 86:50:d7:d1:ac:a4:df:45:06:f3:98:37:40:0a:90:ff:ed:d7: 05:89:fe:48:3d:90:a3:c3:98:0b:41:c0:36:2b:f7:ad:79:71: 7e:9a:43:23:7a:5a:8d:ea:03:5b:9e:80:52:ab:bd:4c:61:c5: 10:69:52:c7:94:ef:1e:b3:1a:1a:b2:be:56:59:4d:00:9a:78: 46:2c:4b:fb:e6:3b:21:46:74:4c:cd:83:f1:4a:62:ce:7b:45: 53:fe:f6:e4:52:2e:91:6c:d7:c6:0e:cc:32:ce:77:68:c0:b1: 7a:f3:d2:90:a1:b5:ef:41:58:18:92:8f:c5:7a:b8:91:e7:2e: e8:94:4b:02:66:21:ec:92:65:01:e7:b8:42:2e:18:56:29:4b: 4a:05:20:91:eb:f1:bf:08:ae:dd:a6:62:6a:86:85:02:70:d8: 95:00:52:e5:75:82:df:f7:47:b6:68:30:e3:20:91:36:f8:b0: 41:c9:d9:58:17:15:72:e6:35:ba:95:e2:af:6e:ad:9b:f0:d3: a1:9b:19:f5:e0:15:be:7f:39:71:86:18:ed:3b:13:88:60:d0: 3f:c8:46:0f:7e:d0:7b:36:f8:5a:d0:04:34:f9:97:7d:02:2b: 65:21:75:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBgj2rHq8D29pkaxj+6g3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlYzlkZjRkZDAzYjlmNTAwYTZhMDk0N2QxNDdiNmVk MjE2NjYwHhcNMjUxMjI1MDEwMTAzWhcNMjUxMjI2MDEwMTAzWjAzMTEwLwYDVQQD Eyg4ZjMwZTcwNDFhNzlkYjFjZmNlNzk0Zjg2NjFjNjQ4MzBmMjQ4NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqKE3thM7n7drVd22c/fKnJTRcvf 3IntRu8bPRehaHZTXkfN+3Ou5iHFPIwDJANs+A0+1zrHyYAbEyM7J+oKj9c9n3Gx 6Zn2/Qz5QCqa/9TD9NIKQM/e/Xhp7XggsByNfJzGT/IjpVdwGrw4jTd3MXHehBmf ryWv6C/ppliqj1cjmPC+MGJEvKnmpCWnIRDrtHRqFZ08dR5GUZ6lPDTmvWghi2O5 Q4T6Iz9A/js/ajKskFtBkdUu9MF/SJTY658VSYKnB+s40gz/obCPmtL6bDFpeU0r MMVnmmKlHmb3J5dRUts25ki8IrLKEfPheQJuh6+PSqf/20GuZYVWIiyskQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8w5wQaedsc/OeU+GYcZIMPJIUdMB8GA1UdIwQY MBaAFGLl7J303QO59QCmoJR9FHtu0hZmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQt YTgxNTQ0ZWE1YjY3LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hN2NlMDMtMWYxNS00ZGJjLTlhOGQtYTgxNTQ0ZWE1YjY3 LzEvWXVYc25mVGRBN24xQUthZ2xIMFVlMjdTRm1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC92YLI8e joU28zrcKFwBTyjBhlDX0ayk30UG85g3QAqQ/+3XBYn+SD2Qo8OYC0HANiv3rXlx fppDI3pajeoDW56AUqu9TGHFEGlSx5TvHrMaGrK+VllNAJp4RixL++Y7IUZ0TM2D 8UpizntFU/725FIukWzXxg7MMs53aMCxevPSkKG170FYGJKPxXq4kecu6JRLAmYh 7JJlAee4Qi4YVilLSgUgkevxvwiu3aZiaoaFAnDYlQBS5XWC3/dHtmgw4yCRNviw QcnZWBcVcuY1upXir26tm/DToZsZ9eAVvn85cYYY7TsTiGDQP8hGD37Qezb4WtAE NPmXfQIrZSF13w== -----END CERTIFICATE-----Generated at Thu Dec 25 10:41:21 2025 by rpki-client