This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json) Hash identifier: XeUlDiRUNcb4t1tgOVkm6D263zUt5QNbfvGBvFBC8fo= Subject key identifier: A2:6A:82:4D:4A:3C:E0:CB:1F:76:99:DB:E1:7B:BE:36:13:BB:BB:A8 Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be Certificate serial: 019B386A16AE3570EE14C32498D1CBEED0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft Manifest number: 0B19 Signing time: Fri 19 Dec 2025 21:00:35 +0000 Manifest this update: Fri 19 Dec 2025 21:00:35 +0000 Manifest next update: Sat 20 Dec 2025 21:00:35 +0000 Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=) 2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=) 3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: Q83h1Qfsw89QbGxLojZKktRQyQrFOcPYxwGOPWdksXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:16:ae:35:70:ee:14:c3:24:98:d1:cb:ee:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be Validity Not Before: Dec 19 21:00:35 2025 GMT Not After : Dec 20 21:00:35 2025 GMT Subject: CN=a26a824d4a3ce0cb1f7699dbe17bbe3613bbbba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:8f:25:8e:a4:3e:a5:5c:36:4e:db:24:83: ab:74:c5:20:d6:4d:d5:b1:b5:8e:4f:90:ab:3d:be: d7:09:c5:6d:b9:94:1b:0a:ee:cb:0e:21:16:52:1c: c0:71:0c:b2:80:0f:47:e0:06:28:18:7a:d5:82:e6: f8:e0:0c:3d:91:16:f7:38:7f:cd:0e:8d:db:52:0e: 56:10:88:ff:f5:6c:a0:75:52:52:37:e8:67:09:7a: 7c:5f:ac:af:e0:87:b8:81:1f:44:e1:2c:7d:28:4c: ff:e6:d7:41:e6:11:6d:bc:24:a4:b6:4c:1f:60:fa: 81:cd:18:58:a9:a3:b5:f4:93:44:3a:25:d1:9c:69: 47:3f:7f:5d:a9:76:12:ad:50:f9:f7:37:10:fc:68: dd:1d:07:66:34:ff:4e:1a:9b:db:7e:9b:18:5e:bd: 76:0b:88:e5:94:c6:45:c9:44:f4:05:81:29:0b:e4: 5b:ac:3a:f9:24:dc:48:d4:c3:0b:8c:f1:3c:50:42: 02:67:b7:85:1d:51:25:58:55:05:5b:41:0b:b6:5f: 0a:bf:ca:f8:8b:2e:c1:03:5b:65:90:67:56:ec:fa: 7b:4b:13:e1:64:df:c3:53:9c:82:2f:44:bb:1b:ea: 43:0e:ea:10:5b:ed:c2:c8:94:9c:17:ec:6c:92:26: 8f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6A:82:4D:4A:3C:E0:CB:1F:76:99:DB:E1:7B:BE:36:13:BB:BB:A8 X509v3 Authority Key Identifier: keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:9c:f5:1a:2d:73:9a:0f:35:2b:3e:44:17:52:11:4b:fa: 56:61:5b:ac:1a:90:2e:4c:ba:04:c3:fb:b3:11:56:2b:e5:99: 39:c5:a9:d8:eb:fc:b7:f4:6b:a9:05:08:71:82:54:81:8a:2b: 20:cb:fe:10:8c:45:4b:6e:91:04:0d:88:7f:e6:5e:5f:c2:a2: 64:ff:6b:6a:26:ef:42:2e:5e:f4:cf:86:95:94:85:03:70:64: 00:75:16:d3:98:c7:92:91:6a:f0:e8:3c:8a:22:b4:2e:61:cb: c4:70:67:1a:c0:30:2f:8e:b6:de:e5:36:05:03:ce:14:5f:35: ac:c0:23:d1:5b:96:c6:f8:b4:c3:1d:08:03:2c:1b:37:15:23: d1:53:d8:b4:80:7f:c0:7e:aa:01:01:29:b2:e1:6b:4d:a7:ab: a6:ab:32:06:56:30:27:04:fa:40:f5:72:0b:23:d9:d4:a5:cd: 9d:f2:ff:37:0d:00:b0:0b:3d:56:1e:a8:b5:9b:15:9e:43:63: 2a:70:d9:39:08:4b:f2:5a:4b:56:ee:8e:b2:b6:53:e4:ca:4e: f0:ea:05:0d:3c:10:39:a9:11:1d:fa:f2:c4:56:3a:79:37:b7: 64:89:b9:de:a1:a4:a5:61:0c:e7:8b:6e:ef:db:b0:ce:ae:b5: e5:02:ec:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahauNXDuFMMkmNHL7tC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4 OTA1YmUwHhcNMjUxMjE5MjEwMDM1WhcNMjUxMjIwMjEwMDM1WjAzMTEwLwYDVQQD EyhhMjZhODI0ZDRhM2NlMGNiMWY3Njk5ZGJlMTdiYmUzNjEzYmJiYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SGPJY6kPqVcNk7bJIOrdMUg1k3V sbWOT5CrPb7XCcVtuZQbCu7LDiEWUhzAcQyygA9H4AYoGHrVgub44Aw9kRb3OH/N Do3bUg5WEIj/9WygdVJSN+hnCXp8X6yv4Ie4gR9E4Sx9KEz/5tdB5hFtvCSktkwf YPqBzRhYqaO19JNEOiXRnGlHP39dqXYSrVD59zcQ/GjdHQdmNP9OGpvbfpsYXr12 C4jllMZFyUT0BYEpC+RbrDr5JNxI1MMLjPE8UEICZ7eFHVElWFUFW0ELtl8Kv8r4 iy7BA1tlkGdW7Pp7SxPhZN/DU5yCL0S7G+pDDuoQW+3CyJScF+xskiaPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJqgk1KPODLH3aZ2+F7vjYTu7uoMB8GA1UdIwQY MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0 LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7Sc9Rot c5oPNSs+RBdSEUv6VmFbrBqQLky6BMP7sxFWK+WZOcWp2Ov8t/RrqQUIcYJUgYor IMv+EIxFS26RBA2If+ZeX8KiZP9raibvQi5e9M+GlZSFA3BkAHUW05jHkpFq8Og8 iiK0LmHLxHBnGsAwL4623uU2BQPOFF81rMAj0VuWxvi0wx0IAywbNxUj0VPYtIB/ wH6qAQEpsuFrTaerpqsyBlYwJwT6QPVyCyPZ1KXNnfL/Nw0AsAs9Vh6otZsVnkNj KnDZOQhL8lpLVu6OsrZT5MpO8OoFDTwQOakRHfryxFY6eTe3ZIm53qGkpWEM54tu 79uwzq615QLsIg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:06 2025 by rpki-client