This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json) Hash identifier: wjUAKKeCapPc+WwfuIpb4f+w2UxQ8vCmVOcA3ZVS/8o= Subject key identifier: 60:EE:BF:B1:D6:AB:87:77:3E:78:F6:8C:4A:83:E3:7E:C8:88:97:44 Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29 Certificate serial: 019B3D232129A7157B4C973B978CF74262C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft Manifest number: 12CC Signing time: Sat 20 Dec 2025 19:01:10 +0000 Manifest this update: Sat 20 Dec 2025 19:01:10 +0000 Manifest next update: Sun 21 Dec 2025 19:01:10 +0000 Files and hashes: 1: juTNVsKtR118cxI6QcWd767caRM.roa (hash: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=) 2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: sCQfGugVpfHDFV1oZlZR5B/wAF2nx9i7mCvUoI2zQ2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:21:29:a7:15:7b:4c:97:3b:97:8c:f7:42:62:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29 Validity Not Before: Dec 20 19:01:10 2025 GMT Not After : Dec 21 19:01:10 2025 GMT Subject: CN=60eebfb1d6ab87773e78f68c4a83e37ec8889744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:97:f2:cb:8f:12:78:28:65:d7:73:08:04:94: 65:64:aa:f3:e3:a8:f3:ef:f9:99:75:56:39:2c:75: e1:a2:fa:a0:21:b9:a7:fa:e4:cf:09:60:a6:8a:63: 96:c2:21:d6:70:93:ec:31:c2:da:c2:aa:92:6d:51: e6:96:e7:ee:58:ff:b0:3d:1c:1d:7a:5c:d1:09:64: d4:cf:d2:d1:64:86:90:8d:89:9b:3f:7e:9d:d6:31: 13:48:8f:26:9c:e5:44:a8:8c:d7:9b:7b:23:67:20: 35:3c:ab:c6:2c:ec:b3:fd:a1:14:90:1c:ae:c5:07: f5:ec:16:cc:9b:ee:6e:62:3d:fc:83:eb:43:fc:db: 28:9c:12:29:c8:4d:94:e7:8f:e4:7d:08:0c:bf:af: 73:3d:e2:5f:cf:a7:bc:07:48:c7:e5:dd:8b:1e:58: b2:d5:72:97:2c:df:63:93:73:0f:85:6d:87:cc:1e: d7:0e:11:19:0c:81:24:3d:25:c2:c7:9c:60:ec:ab: a2:ff:6d:44:af:19:6b:44:a7:17:e6:ad:a2:15:eb: 8d:12:f7:75:78:58:d2:26:bd:aa:5f:ca:c5:cd:b6: cf:7e:93:48:83:c2:b2:45:c7:19:9f:a9:ba:26:72: a1:d5:3e:1c:5e:f1:d8:02:1c:f3:3e:63:fb:0a:e4: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:BF:B1:D6:AB:87:77:3E:78:F6:8C:4A:83:E3:7E:C8:88:97:44 X509v3 Authority Key Identifier: keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:44:00:3e:b8:c0:9f:fb:89:a4:dd:ae:f7:78:93:df:da:3b: f7:20:b3:6e:81:1b:10:a7:0d:42:10:31:11:e0:83:ab:ff:91: e4:9c:26:9d:b4:d6:2f:9d:a9:79:66:a3:a6:af:dd:43:d7:fb: 7a:b9:ab:52:54:df:c6:9b:b7:d4:97:bf:ed:13:ec:ea:9f:5e: 32:da:b0:67:64:79:5d:3f:9c:b1:31:a7:43:99:ce:24:e5:71: f7:71:bd:5e:bc:92:0f:c5:08:1e:ff:fe:96:6c:a2:2c:f6:1d: 84:4e:ef:0e:e5:de:83:52:65:35:29:4d:12:7e:f5:6e:5d:59: 37:5c:40:27:98:49:ea:9c:bf:9a:05:79:27:65:8e:c5:ee:6d: cf:44:2c:d1:ab:0d:84:16:73:34:7b:03:71:d7:10:59:3e:24: d6:21:17:d3:2a:c3:15:51:11:85:a5:88:b3:87:5d:4a:71:a3: 3f:6f:5d:71:f3:3f:f6:6f:25:46:43:42:71:c4:51:61:7e:f6: 61:2c:e1:ef:a5:ad:60:16:fa:6f:3b:be:6a:2f:8f:59:ec:05: 96:3f:ee:79:e6:d9:eb:8f:7a:11:77:67:7e:9e:90:b3:ab:5f: b0:1b:a3:fb:f3:3e:30:03:9c:bd:bf:3c:a2:bc:db:ee:0b:94: f9:26:88:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyEppxV7TJc7l4z3QmLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy ZjRjMjkwHhcNMjUxMjIwMTkwMTEwWhcNMjUxMjIxMTkwMTEwWjAzMTEwLwYDVQQD Eyg2MGVlYmZiMWQ2YWI4Nzc3M2U3OGY2OGM0YTgzZTM3ZWM4ODg5NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55fyy48SeChl13MIBJRlZKrz46jz 7/mZdVY5LHXhovqgIbmn+uTPCWCmimOWwiHWcJPsMcLawqqSbVHmlufuWP+wPRwd elzRCWTUz9LRZIaQjYmbP36d1jETSI8mnOVEqIzXm3sjZyA1PKvGLOyz/aEUkByu xQf17BbMm+5uYj38g+tD/NsonBIpyE2U54/kfQgMv69zPeJfz6e8B0jH5d2LHliy 1XKXLN9jk3MPhW2HzB7XDhEZDIEkPSXCx5xg7Kui/21ErxlrRKcX5q2iFeuNEvd1 eFjSJr2qX8rFzbbPfpNIg8KyRccZn6m6JnKh1T4cXvHYAhzzPmP7CuRlXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDuv7HWq4d3Pnj2jEqD437IiJdEMB8GA1UdIwQY MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt ZWVjMTRjOTcxYzRkLzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUQAPrjA n/uJpN2u93iT39o79yCzboEbEKcNQhAxEeCDq/+R5JwmnbTWL52peWajpq/dQ9f7 ermrUlTfxpu31Je/7RPs6p9eMtqwZ2R5XT+csTGnQ5nOJOVx93G9XrySD8UIHv/+ lmyiLPYdhE7vDuXeg1JlNSlNEn71bl1ZN1xAJ5hJ6py/mgV5J2WOxe5tz0Qs0asN hBZzNHsDcdcQWT4k1iEX0yrDFVERhaWIs4ddSnGjP29dcfM/9m8lRkNCccRRYX72 YSzh76WtYBb6bzu+ai+PWewFlj/ueebZ6496EXdnfp6Qs6tfsBuj+/M+MAOcvb88 orzb7guU+SaI6A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:29 2025 by rpki-client