This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json) Hash identifier: 2jPa2DtlQVLQs9XWcrqN2GlYk6VWdrFKcXCpB8Qa0aE= Subject key identifier: 39:7A:BB:9C:79:0B:51:63:DA:DB:3A:69:1D:50:54:03:50:9F:81:52 Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Certificate serial: 019B65B121CABE9C9356F38CEBCBFEB089BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft Manifest number: 14AA Signing time: Sun 28 Dec 2025 16:01:05 +0000 Manifest this update: Sun 28 Dec 2025 16:01:05 +0000 Manifest next update: Mon 29 Dec 2025 16:01:05 +0000 Files and hashes: 1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=) 2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: OLhtIVpn8cVnpXT6XnQchv4LF0NicExDhh2e0i1t+Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:21:ca:be:9c:93:56:f3:8c:eb:cb:fe:b0:89:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Validity Not Before: Dec 28 16:01:05 2025 GMT Not After : Dec 29 16:01:05 2025 GMT Subject: CN=397abb9c790b5163dadb3a691d505403509f8152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:49:f3:57:c3:e5:9e:b2:26:17:47:30:72: ea:bf:cc:b8:1f:82:00:36:a4:96:4e:cb:84:a9:b1: b3:2e:e7:64:4b:6e:b7:28:fe:d0:08:f8:47:47:98: 4f:cf:1c:0d:22:a7:52:f4:3c:d6:cf:50:8b:ef:23: 58:0b:2f:81:a3:01:05:6e:81:ea:ae:66:c9:f8:e3: 99:a3:2c:37:4f:96:be:e0:ca:ef:63:5d:10:c8:d6: d7:54:fe:91:39:0b:15:b7:29:f3:c7:f5:b6:e3:50: 1f:ee:04:1d:45:e2:25:ec:37:8f:c3:ff:0b:02:6f: 87:c4:30:64:2b:48:b3:bc:6a:21:13:90:df:1e:5b: 5b:fe:a5:84:26:a5:1f:a0:f9:c8:ee:1f:f5:58:20: 27:bc:4d:c6:20:e1:12:2d:88:d4:c7:21:97:ac:7c: b8:e3:b8:50:d2:13:b1:28:0c:2b:e8:e9:e2:c8:79: 6d:2d:28:cb:23:a2:7d:87:37:41:38:25:55:dc:9b: a1:75:b0:9a:46:5b:99:06:19:1d:5c:43:0c:91:96: 17:e0:8b:ef:ab:62:f0:52:2c:24:71:cf:69:d7:45: b1:ea:dd:ad:d8:eb:8b:92:c8:d3:46:46:68:84:66: 34:fc:c3:8e:26:91:2f:60:a7:32:65:be:53:90:9f: 3c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:BB:9C:79:0B:51:63:DA:DB:3A:69:1D:50:54:03:50:9F:81:52 X509v3 Authority Key Identifier: keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8e:71:e9:bd:bb:d6:62:e5:ac:e1:42:3b:ad:9c:41:16:89: 6a:06:bc:b6:a5:3f:f7:d8:95:27:8e:2d:20:e0:6d:5d:f9:17: b2:e1:a3:67:44:f3:01:83:8e:08:d9:20:4a:b7:4b:32:f4:89: 2f:bb:d1:45:90:cd:fd:92:65:32:38:da:f1:5e:6e:5a:53:db: 44:7a:99:4b:8c:60:ee:a1:08:9c:bc:93:4a:30:64:50:74:de: fd:4b:46:2c:b9:c0:74:bd:be:e8:32:14:75:f8:a1:2a:a9:7d: f5:13:64:a1:15:78:df:8c:ad:c5:2e:39:de:ed:a8:59:e0:c2: 2d:82:14:c5:90:31:6d:12:a8:72:e5:d5:e7:dd:68:24:21:0b: ed:5f:41:e5:59:79:46:f0:00:12:72:57:00:bc:1c:f7:7e:05: 35:c7:16:b0:d5:3f:f7:2a:b6:6e:ff:01:c7:18:13:fd:23:c5: 3a:91:6b:a1:ef:f8:ca:cd:b1:c3:92:42:df:7c:e6:39:ce:ab: 62:96:07:36:c6:77:56:03:20:1b:1d:86:20:51:d9:4c:65:9e: 47:13:14:82:9d:73:02:ec:82:91:13:e8:29:30:90:67:f6:a6: e3:b2:e7:23:92:94:47:db:09:41:0f:3a:3f:d6:ac:ee:31:f2: 0d:2b:59:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsSHKvpyTVvOM68v+sIm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYTAxNzFhMDJkNWU0YTc1ZmI0MDYzNTU0NWFlMDA2NGM4 Y2NjYWQwHhcNMjUxMjI4MTYwMTA1WhcNMjUxMjI5MTYwMTA1WjAzMTEwLwYDVQQD EygzOTdhYmI5Yzc5MGI1MTYzZGFkYjNhNjkxZDUwNTQwMzUwOWY4MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JpJ81fD5Z6yJhdHMHLqv8y4H4IA NqSWTsuEqbGzLudkS263KP7QCPhHR5hPzxwNIqdS9DzWz1CL7yNYCy+BowEFboHq rmbJ+OOZoyw3T5a+4MrvY10QyNbXVP6ROQsVtynzx/W241Af7gQdReIl7DePw/8L Am+HxDBkK0izvGohE5DfHltb/qWEJqUfoPnI7h/1WCAnvE3GIOESLYjUxyGXrHy4 47hQ0hOxKAwr6OniyHltLSjLI6J9hzdBOCVV3JuhdbCaRluZBhkdXEMMkZYX4Ivv q2LwUiwkcc9p10Wx6t2t2OuLksjTRkZohGY0/MOOJpEvYKcyZb5TkJ88ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl6u5x5C1Fj2ts6aR1QVANQn4FSMB8GA1UdIwQY MBaAFMugFxoC1eSnX7QGNVRa4AZMjMytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NTQ0MzMtZTMyMC00MmFlLWJiNjEt NTcwYjE0ODMzNTM0LzEveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NTQ0MzMtZTMyMC00MmFlLWJiNjEtNTcwYjE0ODMzNTM0 LzEveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI5x6b27 1mLlrOFCO62cQRaJaga8tqU/99iVJ44tIOBtXfkXsuGjZ0TzAYOOCNkgSrdLMvSJ L7vRRZDN/ZJlMjja8V5uWlPbRHqZS4xg7qEInLyTSjBkUHTe/UtGLLnAdL2+6DIU dfihKql99RNkoRV434ytxS453u2oWeDCLYIUxZAxbRKocuXV591oJCEL7V9B5Vl5 RvAAEnJXALwc934FNccWsNU/9yq2bv8BxxgT/SPFOpFroe/4ys2xw5JC33zmOc6r YpYHNsZ3VgMgGx2GIFHZTGWeRxMUgp1zAuyCkRPoKTCQZ/am47LnI5KUR9sJQQ86 P9as7jHyDStZ7Q== -----END CERTIFICATE-----Generated at Sun Dec 28 20:15:12 2025 by rpki-client