This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json) Hash identifier: kk2rbcrKwcxJPDR1CPcgUvAKcQKqTSgQmsEauMzLbIk= Subject key identifier: 15:84:B2:E7:15:FB:42:28:83:5C:6E:98:20:B1:10:56:B3:2A:50:BA Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Certificate serial: 019B40C8EAA063A870EB00A1410261282F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:01:07 +0000 Manifest this update: Sun 21 Dec 2025 12:01:07 +0000 Manifest next update: Mon 22 Dec 2025 12:01:07 +0000 Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: LalsNQU4eu/qV17DxjM3Kz0tBNaN4l1MTyw3ZDm/uYc=) 2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=) 3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ea:a0:63:a8:70:eb:00:a1:41:02:61:28:2f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Validity Not Before: Dec 21 12:01:07 2025 GMT Not After : Dec 22 12:01:07 2025 GMT Subject: CN=1584b2e715fb4228835c6e9820b11056b32a50ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:35:95:43:90:e5:a9:aa:d4:11:ff:49:02: 23:07:8b:01:1e:2c:2f:55:10:f4:61:69:49:a5:79: f1:69:ac:b5:0b:36:a0:f5:38:70:4f:5b:3b:c4:25: 6f:79:69:e8:3d:b5:02:ae:20:cc:70:10:fd:ca:f4: d9:40:a3:d8:61:ba:3c:86:28:88:a6:3f:be:90:8a: 36:57:28:c6:10:0c:9e:9c:13:e3:87:af:b4:42:59: 3f:23:6a:94:86:a0:f5:fb:db:41:6d:fa:25:0b:54: e4:70:7d:65:01:5b:1f:b4:44:bb:6f:86:da:ca:74: 76:ce:ae:7b:19:bf:a1:8e:e8:26:ad:77:cf:96:27: 58:ae:97:a9:98:92:97:36:23:a3:28:be:ee:09:2a: bc:14:1c:41:01:f5:49:0d:25:58:4f:85:25:ec:87: 02:29:23:f7:00:4e:b2:fd:40:c7:97:db:d5:c4:93: 13:79:3b:61:eb:bf:27:41:e1:b2:94:4d:4b:d8:88: 38:d5:49:d8:25:46:f4:a0:9f:6e:77:1a:67:5b:1f: bb:70:66:50:db:27:fe:10:58:3e:3d:a3:e2:27:88: 62:09:f8:16:28:e6:d9:4f:b3:b5:17:c1:d5:42:1e: 17:eb:68:3e:44:11:25:25:c3:9b:36:67:fd:ac:5e: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:B2:E7:15:FB:42:28:83:5C:6E:98:20:B1:10:56:B3:2A:50:BA X509v3 Authority Key Identifier: keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ac:8f:2c:c7:81:e9:21:79:28:25:22:99:cd:5d:2f:f3:f5: 9b:d1:d0:13:ce:22:38:55:ce:50:26:19:44:27:87:95:63:dc: 47:27:f6:13:b7:ae:d9:58:f3:46:44:3c:13:a8:ff:b4:50:54: 1c:5a:66:b7:86:57:2b:94:86:84:67:cc:94:2e:59:b7:21:71: 81:fa:31:9d:63:12:0e:bf:a8:0b:6c:58:68:32:6c:ba:88:0a: 78:90:65:d8:75:40:67:a1:9a:91:26:fa:4d:96:35:96:b0:45: 72:94:1b:6b:1a:36:71:c4:c7:f4:ad:54:cf:14:9a:57:e3:86: f9:a9:a7:ac:78:12:28:9d:04:e7:c3:22:90:05:cd:13:55:64: e5:b9:c7:2b:ee:94:f3:18:c2:70:5d:c8:74:a8:56:77:1c:26: 12:7e:58:43:d3:f1:bb:13:45:99:c1:6d:69:78:13:f0:81:9c: af:eb:9c:31:2d:06:03:a3:37:6f:17:5c:bf:58:e4:f0:27:e8: d3:0b:da:68:66:db:6d:76:22:61:b2:18:45:53:6d:06:bf:c7: 8d:29:d0:d5:db:cd:95:d6:17:cd:ac:67:c1:b6:25:9b:07:b1: 53:61:84:4d:f1:b8:12:fa:fb:6c:7a:99:fe:4d:ae:ed:49:54: 6e:e2:18:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOqgY6hw6wChQQJhKC+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy NjRkYzAwHhcNMjUxMjIxMTIwMTA3WhcNMjUxMjIyMTIwMTA3WjAzMTEwLwYDVQQD EygxNTg0YjJlNzE1ZmI0MjI4ODM1YzZlOTgyMGIxMTA1NmIzMmE1MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutU1lUOQ5amq1BH/SQIjB4sBHiwv VRD0YWlJpXnxaay1Czag9ThwT1s7xCVveWnoPbUCriDMcBD9yvTZQKPYYbo8hiiI pj++kIo2VyjGEAyenBPjh6+0Qlk/I2qUhqD1+9tBbfolC1TkcH1lAVsftES7b4ba ynR2zq57Gb+hjugmrXfPlidYrpepmJKXNiOjKL7uCSq8FBxBAfVJDSVYT4Ul7IcC KSP3AE6y/UDHl9vVxJMTeTth678nQeGylE1L2Ig41UnYJUb0oJ9udxpnWx+7cGZQ 2yf+EFg+PaPiJ4hiCfgWKObZT7O1F8HVQh4X62g+RBElJcObNmf9rF7t5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWEsucV+0Iog1xumCCxEFazKlC6MB8GA1UdIwQY MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt ZDkyZGFlODYxYTdkLzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqyPLMeB 6SF5KCUimc1dL/P1m9HQE84iOFXOUCYZRCeHlWPcRyf2E7eu2VjzRkQ8E6j/tFBU HFpmt4ZXK5SGhGfMlC5ZtyFxgfoxnWMSDr+oC2xYaDJsuogKeJBl2HVAZ6GakSb6 TZY1lrBFcpQbaxo2ccTH9K1UzxSaV+OG+amnrHgSKJ0E58MikAXNE1Vk5bnHK+6U 8xjCcF3IdKhWdxwmEn5YQ9PxuxNFmcFtaXgT8IGcr+ucMS0GA6M3bxdcv1jk8Cfo 0wvaaGbbbXYiYbIYRVNtBr/HjSnQ1dvNldYXzaxnwbYlmwexU2GETfG4Evr7bHqZ /k2u7UlUbuIYXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:21:35 2025 by rpki-client