This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft File: yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json) Hash identifier: 8hz/9PtCl4HI1vGiSn8sYdxg02nCTojdUXA/x3z+mWM= Subject key identifier: 6B:63:10:FD:CB:48:7F:FD:39:76:9D:CE:02:39:E0:33:99:BF:58:B4 Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 Certificate issuer: /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Certificate serial: 019B3C7DCB9CBB68C3D4C828EF45D713E620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft Manifest number: 1398 Signing time: Sat 20 Dec 2025 16:00:35 +0000 Manifest this update: Sat 20 Dec 2025 16:00:35 +0000 Manifest next update: Sun 21 Dec 2025 16:00:35 +0000 Files and hashes: 1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=) 2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: HcoWteTfNVGKLCpZIYShuH0vGozsRG/4/TeUUD8gUWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:cb:9c:bb:68:c3:d4:c8:28:ef:45:d7:13:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64 Validity Not Before: Dec 20 16:00:35 2025 GMT Not After : Dec 21 16:00:35 2025 GMT Subject: CN=6b6310fdcb487ffd39769dce0239e03399bf58b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:a3:d2:8b:55:f6:cf:0a:dc:eb:59:c9:39: 28:ef:8c:23:27:3b:99:3b:24:6b:c2:72:a4:89:dc: c9:c1:f3:8d:c0:17:25:4f:61:e9:d1:79:19:a7:1a: fc:e1:75:85:ff:63:f3:bd:97:12:fb:df:c2:43:95: 91:49:44:0c:da:1e:0f:19:c5:3a:de:82:b6:de:bd: 6d:68:5c:96:02:6f:2e:c2:e6:33:d1:8d:6c:8b:44: 68:22:f5:c0:f5:45:67:f4:47:fd:62:13:dd:5f:97: b1:5b:97:0a:53:b2:28:ba:54:bb:4b:7e:ed:8b:21: e5:17:76:3d:b6:8d:aa:4f:80:f3:92:f7:c9:2f:89: a1:ba:93:d7:ff:0d:3d:d8:1a:fa:5e:b9:62:b2:0b: e8:2f:0a:a6:cf:76:b8:9e:3c:c1:d5:4f:25:40:f5: 91:ac:40:0d:53:57:cc:87:fc:4a:69:0e:18:a3:d4: 62:70:d5:a4:63:20:c3:f5:24:9d:67:68:56:a7:a1: 34:74:d2:35:49:49:05:34:27:69:62:8e:e8:69:1b: f9:37:de:b6:18:a3:21:79:26:4b:32:37:dc:f3:83: c4:0e:f3:30:95:5a:3c:96:e9:3a:6b:9c:9b:a8:50: 2e:f4:49:4b:47:2a:ef:f6:5d:74:8d:85:e7:02:38: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:63:10:FD:CB:48:7F:FD:39:76:9D:CE:02:39:E0:33:99:BF:58:B4 X509v3 Authority Key Identifier: keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:20:95:43:32:16:22:19:65:53:67:dd:c5:61:e5:ba:02:03: 85:6a:fc:69:18:7c:0f:94:9f:97:9e:9d:2d:ab:40:ea:98:88: 4c:00:5b:03:b9:16:41:2c:27:2e:7c:11:8c:5a:bc:96:0b:79: 1e:a2:59:f2:fa:5b:1f:4d:2b:4b:5a:14:45:73:3a:37:cb:0b: 1c:3c:fa:9d:65:48:a8:94:43:08:a5:60:99:e2:89:cf:fa:36: c3:8b:c6:f5:1a:82:ca:19:19:e1:81:78:22:32:46:ed:53:12: dc:1e:b6:07:9d:52:f4:df:10:3a:78:40:9a:6c:9a:5c:ef:ed: 9e:42:0b:73:b5:4f:cd:37:a5:74:23:21:ba:cc:87:cd:99:69: 7b:8c:2c:2c:e1:ef:bd:b4:15:3e:e2:c4:ca:46:23:90:93:75: 01:77:8a:af:3c:7f:bc:85:a2:da:88:81:ed:82:e5:b6:16:9b: ea:0b:e3:7b:45:b8:e8:26:1e:33:00:20:c7:10:3a:51:67:e5: 02:e6:f0:ca:68:36:88:8d:03:fd:b3:d4:8e:d7:03:92:95:e7: 24:54:e7:27:22:1f:59:f6:9d:17:83:98:aa:62:ab:94:ac:25: 55:46:02:b5:6c:59:c9:e9:9d:f4:ab:fd:90:07:41:d9:fa:63: 3d:95:dc:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcucu2jD1Mgo70XXE+YgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl ZWRiNjQwHhcNMjUxMjIwMTYwMDM1WhcNMjUxMjIxMTYwMDM1WjAzMTEwLwYDVQQD Eyg2YjYzMTBmZGNiNDg3ZmZkMzk3NjlkY2UwMjM5ZTAzMzk5YmY1OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoGj0otV9s8K3OtZyTko74wjJzuZ OyRrwnKkidzJwfONwBclT2Hp0XkZpxr84XWF/2PzvZcS+9/CQ5WRSUQM2h4PGcU6 3oK23r1taFyWAm8uwuYz0Y1si0RoIvXA9UVn9Ef9YhPdX5exW5cKU7IoulS7S37t iyHlF3Y9to2qT4DzkvfJL4mhupPX/w092Br6XrlisgvoLwqmz3a4njzB1U8lQPWR rEANU1fMh/xKaQ4Yo9RicNWkYyDD9SSdZ2hWp6E0dNI1SUkFNCdpYo7oaRv5N962 GKMheSZLMjfc84PEDvMwlVo8luk6a5ybqFAu9ElLRyrv9l10jYXnAjhpyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtjEP3LSH/9OXadzgI54DOZv1i0MB8GA1UdIwQY MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSCVQzIW IhllU2fdxWHlugIDhWr8aRh8D5Sfl56dLatA6piITABbA7kWQSwnLnwRjFq8lgt5 HqJZ8vpbH00rS1oURXM6N8sLHDz6nWVIqJRDCKVgmeKJz/o2w4vG9RqCyhkZ4YF4 IjJG7VMS3B62B51S9N8QOnhAmmyaXO/tnkILc7VPzTeldCMhusyHzZlpe4wsLOHv vbQVPuLEykYjkJN1AXeKrzx/vIWi2oiB7YLlthab6gvje0W46CYeMwAgxxA6UWfl Aubwymg2iI0D/bPUjtcDkpXnJFTnJyIfWfadF4OYqmKrlKwlVUYCtWxZyemd9Kv9 kAdB2fpjPZXcig== -----END CERTIFICATE-----Generated at Sat Dec 20 21:23:53 2025 by rpki-client