This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json) Hash identifier: yCY+IA/ZW+Z7JfmZw8WKqdEbnDt54CqXj8Q6t4bLWFk= Subject key identifier: E1:78:DE:A8:92:BE:96:5A:6E:DD:23:43:AA:A3:B1:7C:DB:8D:EB:1C Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43 Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643 Certificate serial: 019B6CFC2A452E875C27B37E48700C7FE77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft Manifest number: 0482 Signing time: Tue 30 Dec 2025 02:00:23 +0000 Manifest this update: Tue 30 Dec 2025 02:00:23 +0000 Manifest next update: Wed 31 Dec 2025 02:00:23 +0000 Files and hashes: 1: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: HXyhsHjcXQfN4U+zqa3b7IJPcNPqiOsVsHFDbShWrzY=) 2: nsWYD62GXvXwJfFUS4kAQcZmYTU.roa (hash: jHcDfB6LIATegfSEiVgq0NQFeMD0sWc8LqYc2Z+2oaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:2a:45:2e:87:5c:27:b3:7e:48:70:0c:7f:e7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643 Validity Not Before: Dec 30 02:00:23 2025 GMT Not After : Dec 31 02:00:23 2025 GMT Subject: CN=e178dea892be965a6edd2343aaa3b17cdb8deb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:cf:3f:81:31:1d:7e:05:96:79:39:bf:29: e7:d5:5a:63:49:1d:8e:6a:0a:e1:72:4f:9e:f6:f3: c0:39:48:74:ce:db:cc:43:9a:66:0f:ad:be:82:0b: eb:3a:ed:80:1b:84:48:70:1c:40:9b:10:c4:4c:5b: 67:c5:72:60:8f:f4:10:98:e9:ec:97:19:3d:96:05: 97:f6:b8:21:ce:8d:58:5b:37:00:79:d5:96:f2:09: 6a:63:d6:42:db:2e:3b:5c:e6:58:81:87:fb:17:a9: bc:7e:10:79:ba:0c:e5:d8:0e:ea:56:b8:43:8e:41: 97:2a:84:12:2a:44:c2:f4:b7:d3:e0:27:2b:94:5f: 22:1e:ce:02:0d:ba:6d:53:5c:6f:ed:db:93:c4:f4: 1f:3f:7c:fb:05:f2:a5:73:aa:4f:f5:5a:3c:21:5c: 0e:19:5a:4c:92:e4:c1:a2:6a:cd:ee:7f:fe:98:8a: 63:6e:d9:ac:f9:3c:21:d2:1b:06:43:5c:e7:6e:f6: a2:6e:9d:27:25:46:1c:2b:76:cd:e6:75:3c:89:42: 01:4c:e9:52:ca:19:76:73:ac:4a:e1:9d:2c:7b:3b: e4:bf:ef:9d:6e:d2:f2:70:a7:51:0b:78:e2:bd:1e: 71:ec:23:02:18:1c:ea:45:bb:c0:b3:61:6c:02:67: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:78:DE:A8:92:BE:96:5A:6E:DD:23:43:AA:A3:B1:7C:DB:8D:EB:1C X509v3 Authority Key Identifier: keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0f:74:d0:fb:b0:81:88:a7:f0:08:9a:79:e5:7f:90:b0:a5: 60:43:db:fd:f0:7d:cb:07:5e:bf:06:1a:4e:76:cf:86:58:db: c4:0e:52:53:6c:b5:12:e7:dc:53:8f:8d:c6:9e:87:1b:1c:8d: 58:61:49:1e:a2:c3:3b:39:d1:bc:bc:0f:5e:6c:b8:40:63:d7: c9:32:e7:23:a3:86:84:17:f7:c9:cd:0a:97:e2:e5:d8:99:21: 58:1b:4a:6c:87:1a:b4:74:cd:d2:7e:73:bf:37:25:76:6f:ba: f8:52:0a:bd:f9:63:47:05:2b:48:e0:ad:58:86:dd:c7:a9:05: b4:b7:01:47:48:e3:41:fc:19:3d:f2:34:24:5c:4b:6b:c1:f9: b4:8e:82:31:90:db:1b:5f:6e:e5:c6:3e:e4:dc:4c:4d:ba:d8: 59:9e:97:60:67:97:f7:49:21:3f:ef:3d:ae:b0:da:74:b1:02: 8c:75:03:de:40:ed:46:fa:31:1b:99:55:43:07:aa:1f:c3:fc: c2:d1:11:22:8f:f6:c0:0a:39:45:08:f6:3d:81:23:0a:3d:7c: f4:27:99:b1:21:36:d4:06:2f:fc:4a:de:07:9e:4e:a3:da:e1: 25:a4:b8:47:3f:f6:c3:99:fe:6c:3d:3b:8d:ed:e9:8a:b5:5a: 83:4f:cc:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/CpFLodcJ7N+SHAMf+d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMjFhNGRhYTdkY2Y0YTRjYjA4YWM0NzQ3Mzc1ZjY5OGFh ZTg2NDMwHhcNMjUxMjMwMDIwMDIzWhcNMjUxMjMxMDIwMDIzWjAzMTEwLwYDVQQD EyhlMTc4ZGVhODkyYmU5NjVhNmVkZDIzNDNhYWEzYjE3Y2RiOGRlYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl7PP4ExHX4Flnk5vynn1VpjSR2O agrhck+e9vPAOUh0ztvMQ5pmD62+ggvrOu2AG4RIcBxAmxDETFtnxXJgj/QQmOns lxk9lgWX9rghzo1YWzcAedWW8glqY9ZC2y47XOZYgYf7F6m8fhB5ugzl2A7qVrhD jkGXKoQSKkTC9LfT4CcrlF8iHs4CDbptU1xv7duTxPQfP3z7BfKlc6pP9Vo8IVwO GVpMkuTBomrN7n/+mIpjbtms+Twh0hsGQ1znbvaibp0nJUYcK3bN5nU8iUIBTOlS yhl2c6xK4Z0sezvkv++dbtLycKdRC3jivR5x7CMCGBzqRbvAs2FsAmdsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOF43qiSvpZabt0jQ6qjsXzbjescMB8GA1UdIwQY MBaAFGAhpNqn3PSkywisR0c3X2mKroZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDct NGQyYTYzMzRkZTc3LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84MGY0MmMtZDI0OS00NDYxLTlmZDctNGQyYTYzMzRkZTc3 LzEvWUNHazJxZmM5S1RMQ0t4SFJ6ZGZhWXF1aGtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA900Puw gYin8AiaeeV/kLClYEPb/fB9ywdevwYaTnbPhljbxA5SU2y1EufcU4+Nxp6HGxyN WGFJHqLDOznRvLwPXmy4QGPXyTLnI6OGhBf3yc0Kl+Ll2JkhWBtKbIcatHTN0n5z vzcldm+6+FIKvfljRwUrSOCtWIbdx6kFtLcBR0jjQfwZPfI0JFxLa8H5tI6CMZDb G19u5cY+5NxMTbrYWZ6XYGeX90khP+89rrDadLECjHUD3kDtRvoxG5lVQweqH8P8 wtERIo/2wAo5RQj2PYEjCj189CeZsSE21AYv/EreB55Oo9rhJaS4Rz/2w5n+bD07 je3pirVag0/Mzw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:53 2025 by rpki-client