This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json) Hash identifier: ah2VQTlb8+34yHgD6FjhoUAcLxNK7scL0jubUFRqDzk= Subject key identifier: 20:9B:75:96:D1:0A:37:81:0F:75:69:B0:AA:59:C3:63:1C:DE:1E:9A Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Certificate serial: 019B6DA18C48525928C48B0AEFD518540071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft Manifest number: 1065 Signing time: Tue 30 Dec 2025 05:01:02 +0000 Manifest this update: Tue 30 Dec 2025 05:01:02 +0000 Manifest next update: Wed 31 Dec 2025 05:01:02 +0000 Files and hashes: 1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=) 2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: 0JDhg41q0D0s19f48RHyttnGGjasuArrA/Y9kC7aqM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:8c:48:52:59:28:c4:8b:0a:ef:d5:18:54:00:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401 Validity Not Before: Dec 30 05:01:02 2025 GMT Not After : Dec 31 05:01:02 2025 GMT Subject: CN=209b7596d10a37810f7569b0aa59c3631cde1e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2e:47:8d:26:f0:fe:5c:4e:43:50:1d:d2:f8: 41:cb:33:c6:36:05:f1:56:8c:32:e0:9a:a4:90:c0: 5f:79:c2:3b:ee:4a:82:c4:68:44:45:14:d0:87:73: 7b:1e:25:36:7a:14:fc:aa:b1:ed:31:c7:cb:9a:fd: 52:ba:da:5a:6e:52:a9:08:1d:33:0f:c4:c4:f6:a1: 2e:32:46:25:a1:ca:6e:e6:6a:92:49:65:2b:09:9a: 63:48:6c:0a:b3:ba:fc:ae:fc:7a:dc:71:39:1d:83: f6:cf:51:56:63:f1:ac:64:28:c4:06:b6:17:df:84: a9:84:12:8a:87:b3:45:c2:83:29:24:a4:f4:21:0d: 75:34:73:ba:5d:c6:77:7b:20:1f:13:3e:3d:11:45: cc:91:ca:5f:db:94:11:fb:21:b8:39:43:13:d0:b8: b2:bb:db:c0:22:e6:3b:3b:8d:f0:57:7f:9c:be:77: f8:7b:5c:03:67:34:a5:46:2f:12:cd:a3:75:76:fe: a4:0b:94:72:93:ca:38:5d:2a:9d:1e:e2:3f:0c:1a: 5d:02:a4:99:32:bf:3a:44:74:4b:1e:9c:e1:8d:92: 90:1b:76:76:c3:94:a4:22:b8:dc:49:7c:a0:84:c8: d5:5b:e8:58:e1:ee:7d:1d:7c:db:64:12:35:3f:ae: 64:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9B:75:96:D1:0A:37:81:0F:75:69:B0:AA:59:C3:63:1C:DE:1E:9A X509v3 Authority Key Identifier: keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f4:f8:7a:fb:ff:32:e1:8e:0d:10:7e:98:c3:2d:91:ae:3e: 59:4c:96:f9:4f:4e:06:b3:13:39:28:47:12:fa:1d:ce:f5:e4: d5:4e:71:35:51:6f:88:25:29:ed:66:d6:f9:30:2a:b2:2d:e4: 5b:54:15:3d:b7:b1:a2:83:1b:e9:d8:8d:ea:00:4d:b4:42:b1: 9c:b2:9a:ec:ed:b8:b5:8d:c6:0a:11:60:e0:90:05:04:0b:d7: c9:60:34:77:72:9b:24:84:98:21:d4:65:f4:84:e2:11:29:6c: 0a:89:c1:44:87:84:73:ec:5c:2c:e7:c7:07:93:3a:cf:93:2c: 1c:e5:97:49:03:5c:70:04:af:7a:b0:71:99:35:40:12:b3:06: ea:98:c4:3f:8a:39:38:ba:12:cd:c1:97:cd:bc:3a:ae:81:29: 59:4e:13:17:e1:c6:df:51:a6:b2:0b:e6:4c:47:28:b3:b2:39: 47:78:36:22:2c:c4:ec:52:c5:9b:72:a1:4e:e6:0f:49:53:46: f3:ea:e7:2b:f5:9a:2e:9f:0d:c8:8e:b9:76:02:fd:ff:1b:54: c6:ed:08:f1:6f:91:41:0a:43:c1:af:b1:72:7c:0a:eb:1e:17: 8e:37:b3:7b:ab:aa:73:7a:16:d3:1a:bc:bd:c2:b5:36:d5:ad: 7a:6c:5b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoYxIUlkoxIsK79UYVABxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxY2UyZTU3ZjZmODYyY2EzMDU2ZTVmZDViM2U2ZWFjMzU1 NDA0MDEwHhcNMjUxMjMwMDUwMTAyWhcNMjUxMjMxMDUwMTAyWjAzMTEwLwYDVQQD EygyMDliNzU5NmQxMGEzNzgxMGY3NTY5YjBhYTU5YzM2MzFjZGUxZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS5HjSbw/lxOQ1Ad0vhByzPGNgXx Vowy4JqkkMBfecI77kqCxGhERRTQh3N7HiU2ehT8qrHtMcfLmv1SutpablKpCB0z D8TE9qEuMkYlocpu5mqSSWUrCZpjSGwKs7r8rvx63HE5HYP2z1FWY/GsZCjEBrYX 34SphBKKh7NFwoMpJKT0IQ11NHO6XcZ3eyAfEz49EUXMkcpf25QR+yG4OUMT0Liy u9vAIuY7O43wV3+cvnf4e1wDZzSlRi8SzaN1dv6kC5Ryk8o4XSqdHuI/DBpdAqSZ Mr86RHRLHpzhjZKQG3Z2w5SkIrjcSXyghMjVW+hY4e59HXzbZBI1P65kyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCbdZbRCjeBD3VpsKpZw2Mc3h6aMB8GA1UdIwQY MBaAFGHOLlf2+GLKMFbl/Vs+bqw1VAQBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzIt OTkwMzg1NTU5ZDFjLzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NzYyMDMtZThmZC00NzJmLWFmYzItOTkwMzg1NTU5ZDFj LzEvWWM0dVZfYjRZc293VnVYOVd6NXVyRFZVQkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvT4evv/ MuGODRB+mMMtka4+WUyW+U9OBrMTOShHEvodzvXk1U5xNVFviCUp7WbW+TAqsi3k W1QVPbexooMb6diN6gBNtEKxnLKa7O24tY3GChFg4JAFBAvXyWA0d3KbJISYIdRl 9ITiESlsConBRIeEc+xcLOfHB5M6z5MsHOWXSQNccASverBxmTVAErMG6pjEP4o5 OLoSzcGXzbw6roEpWU4TF+HG31GmsgvmTEcos7I5R3g2IizE7FLFm3KhTuYPSVNG 8+rnK/WaLp8NyI65dgL9/xtUxu0I8W+RQQpDwa+xcnwK6x4Xjjeze6uqc3oW0xq8 vcK1NtWtemxbkw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:13:23 2025 by rpki-client