This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json) Hash identifier: L8VFJuxN32Fn1dz7dv3ILIzN2wsM2ph7RBPGX3gAwIg= Subject key identifier: E0:98:83:30:F2:6A:FF:83:01:91:6F:37:53:81:D0:0C:B8:EB:13:4C Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2 Certificate serial: 019B4136D639147D6DC7FE197CCA80646EF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft Manifest number: 07F1 Signing time: Sun 21 Dec 2025 14:01:11 +0000 Manifest this update: Sun 21 Dec 2025 14:01:11 +0000 Manifest next update: Mon 22 Dec 2025 14:01:11 +0000 Files and hashes: 1: A5EznUVEP4Si0TCm7JP0g-fJ2zA.roa (hash: P87warA/sxgPpSILGT3rzWqyvJsB40eA4IbxWKqMVaU=) 2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: B4e+43WyfADdr6jjqtFhaKg+oD2ZYU0CxCy5bev0NiE=) 3: fPNzH31qX0DZ8V4rij7Xo2sRGO8.roa (hash: fPCz6t8saFe/YCV6Ne6vHfZKosVB2msyYYqQELy/A2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:d6:39:14:7d:6d:c7:fe:19:7c:ca:80:64:6e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2 Validity Not Before: Dec 21 14:01:11 2025 GMT Not After : Dec 22 14:01:11 2025 GMT Subject: CN=e0988330f26aff8301916f375381d00cb8eb134c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:68:2c:a9:de:c3:00:6c:a4:7a:63:b1:52: b7:f6:c5:fd:41:b8:35:58:3e:a6:a0:37:e7:43:e8: e1:bf:c1:47:5e:18:35:21:f1:1b:6e:c6:de:26:fd: 4c:9c:4f:fd:2c:8e:5c:16:16:87:cb:cc:d8:de:6b: d6:33:6b:09:62:b5:99:af:c9:11:97:76:a3:b3:d5: 9c:b5:6a:71:be:2b:c8:f9:e5:72:ec:05:80:b7:c1: d4:09:df:64:f5:5c:f6:77:97:30:70:a1:10:08:ed: 73:f8:ff:80:b7:ce:d5:fa:01:57:83:93:c6:67:d6: 87:1a:38:e4:28:8e:22:a0:87:af:07:3c:2a:9f:e0: db:44:33:44:8a:f0:2a:41:7b:f3:30:6c:43:ce:dd: 80:e1:09:ca:0e:da:9a:c1:d0:9a:18:fc:58:64:32: 2b:aa:25:68:97:85:3b:42:ca:2f:c3:eb:0e:e8:8f: 04:1a:31:c6:87:a0:d6:03:88:e5:3e:8d:13:09:ce: b1:24:57:64:5e:cb:c2:7f:2e:36:61:90:0a:57:46: 10:4b:99:78:97:fe:fd:c4:0d:fb:80:e0:55:7e:35: b6:e0:f0:f5:cb:6c:82:1a:97:6e:31:08:6b:58:c3: ea:a6:19:3d:5f:03:e6:fb:f0:4d:ed:df:41:f6:14: 03:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:98:83:30:F2:6A:FF:83:01:91:6F:37:53:81:D0:0C:B8:EB:13:4C X509v3 Authority Key Identifier: keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6a:1a:4d:3a:16:aa:4a:35:d6:e3:09:d5:16:4f:90:c9:7a: 66:3e:ba:9c:38:bd:62:92:ec:a7:af:f3:60:1b:f5:ed:1b:00: 2d:2b:98:90:65:19:fa:fa:3e:0b:0b:5a:3a:97:69:16:e4:de: 2b:6a:c2:fe:7d:5d:06:fb:6d:c7:3b:59:bb:04:c9:0a:ee:9b: 15:1a:bd:ec:be:5b:be:d9:59:2e:50:94:04:d3:8a:5e:a8:57: 6c:16:af:6b:c8:ea:7c:21:33:23:26:7a:74:82:42:ec:e4:4f: 12:6a:99:3c:76:e1:cc:0c:0b:62:ab:ea:ec:85:ae:e9:70:7f: 9f:d3:b0:58:3c:d0:3e:96:f2:c0:e5:97:33:9d:92:7e:67:c2: 8b:e0:91:ce:5d:3b:e1:70:f6:73:57:1e:37:5e:f6:f6:c5:03: a1:fd:44:01:70:4a:d6:00:42:56:70:e1:6e:c9:56:d2:e1:5f: 24:71:03:44:7d:ce:3e:ad:be:d2:d4:46:91:ad:ef:c9:5d:3a: 5c:b2:b8:7d:43:84:25:81:af:58:ac:7c:31:0e:60:4f:e0:ee: e0:88:c7:a5:d3:ec:3f:f0:0c:31:74:ab:1a:5f:a6:e8:af:17: ff:01:28:b2:4d:23:6e:dd:db:68:fc:0b:a2:e8:18:40:25:46: 14:76:31:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNtY5FH1tx/4ZfMqAZG7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDgyZDZkM2ExZGM1MDE3OTU3Mzc1MzdjYTc0ZDI3YTgw MjY1YTIwHhcNMjUxMjIxMTQwMTExWhcNMjUxMjIyMTQwMTExWjAzMTEwLwYDVQQD EyhlMDk4ODMzMGYyNmFmZjgzMDE5MTZmMzc1MzgxZDAwY2I4ZWIxMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyhoLKnewwBspHpjsVK39sX9Qbg1 WD6moDfnQ+jhv8FHXhg1IfEbbsbeJv1MnE/9LI5cFhaHy8zY3mvWM2sJYrWZr8kR l3ajs9WctWpxvivI+eVy7AWAt8HUCd9k9Vz2d5cwcKEQCO1z+P+At87V+gFXg5PG Z9aHGjjkKI4ioIevBzwqn+DbRDNEivAqQXvzMGxDzt2A4QnKDtqawdCaGPxYZDIr qiVol4U7Qsovw+sO6I8EGjHGh6DWA4jlPo0TCc6xJFdkXsvCfy42YZAKV0YQS5l4 l/79xA37gOBVfjW24PD1y2yCGpduMQhrWMPqphk9XwPm+/BN7d9B9hQDOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCYgzDyav+DAZFvN1OB0Ay46xNMMB8GA1UdIwQY MBaAFGMILW06HcUBeVc3U3ynTSeoAmWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMt YzE4YWQzNmE3YjMwLzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85N2UxZTItNTY3Zi00MTRlLTliMDMtYzE4YWQzNmE3YjMw LzEvWXdndGJUb2R4UUY1VnpkVGZLZE5KNmdDWmFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGoaTToW qko11uMJ1RZPkMl6Zj66nDi9YpLsp6/zYBv17RsALSuYkGUZ+vo+CwtaOpdpFuTe K2rC/n1dBvttxztZuwTJCu6bFRq97L5bvtlZLlCUBNOKXqhXbBava8jqfCEzIyZ6 dIJC7ORPEmqZPHbhzAwLYqvq7IWu6XB/n9OwWDzQPpbywOWXM52SfmfCi+CRzl07 4XD2c1ceN1729sUDof1EAXBK1gBCVnDhbslW0uFfJHEDRH3OPq2+0tRGka3vyV06 XLK4fUOEJYGvWKx8MQ5gT+Du4IjHpdPsP/AMMXSrGl+m6K8X/wEosk0jbt3baPwL ougYQCVGFHYxkA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:08:24 2025 by rpki-client