This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft File: YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json) Hash identifier: JkkgYT0G7p2sFliO30fT101Rls5diMSEITQFMPs5EeY= Subject key identifier: E4:4A:B9:A3:64:63:26:EA:8C:1C:17:5E:A4:5B:C6:C1:E6:46:C2:AE Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b Certificate serial: 019B337AF21CAC0AFDA564F5AFE065F11783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 22:00:53 +0000 Manifest this update: Thu 18 Dec 2025 22:00:53 +0000 Manifest next update: Fri 19 Dec 2025 22:00:53 +0000 Files and hashes: 1: 3CApeUyJD6bQwRWKiM1EMQF3kvY.roa (hash: ybH4Bx/zM0Uzd/7q3lf5ZQTsjL4RIUspa20ZvnQgIGU=) 2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: 6M/wBAnJ8Pj4m1vP9KZHvP+xeoeU/lE1IMvtljZikXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:f2:1c:ac:0a:fd:a5:64:f5:af:e0:65:f1:17:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b Validity Not Before: Dec 18 22:00:53 2025 GMT Not After : Dec 19 22:00:53 2025 GMT Subject: CN=e44ab9a3646326ea8c1c175ea45bc6c1e646c2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c2:ef:9c:6b:35:43:0d:d8:a2:53:3c:e9:e4: 1f:88:fa:b5:60:ff:52:93:c2:1f:b7:59:a6:2d:85: 1f:57:de:cb:20:8c:04:30:3a:a1:db:ce:8f:80:fb: ef:14:89:6e:4d:6f:d7:5f:d2:dc:9e:16:72:8c:48: 72:9c:e5:1b:10:b3:a7:be:79:18:27:00:ab:f4:47: a8:00:9d:11:f9:d8:ac:c0:90:27:13:76:38:b2:29: aa:20:fb:a9:cf:94:72:a7:f8:c6:39:a7:b3:3a:0b: 84:ef:04:42:75:0e:ea:b0:e6:19:ab:ce:5c:7a:01: 80:7c:4c:19:84:d7:b8:cc:17:14:d2:f5:a0:8a:fc: 43:81:0f:6e:42:8c:0d:ca:49:54:c1:fd:52:5e:94: d2:53:1f:0b:c6:9b:81:0e:0b:e9:d4:e3:f9:44:35: e6:b9:3c:db:9f:8f:ae:ff:04:36:20:a4:85:96:8b: d2:ff:0a:ce:28:7c:a7:2b:88:f1:e1:13:d8:79:f4: bb:f1:9f:1e:84:a8:15:6b:b8:2f:2a:42:1a:ab:fc: 94:02:5a:dd:19:ee:49:29:da:23:fa:ab:12:31:d0: e6:b3:0f:83:b1:f5:9a:48:62:f9:95:db:de:e7:8f: 0d:35:f0:b4:0c:92:d3:e2:04:75:d4:3f:8d:69:c7: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4A:B9:A3:64:63:26:EA:8C:1C:17:5E:A4:5B:C6:C1:E6:46:C2:AE X509v3 Authority Key Identifier: keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ce:46:b1:2c:31:53:9a:0c:a0:ba:0f:8d:8e:ec:9a:c0:6a: c4:71:22:a8:78:3e:ff:dc:b6:e9:6d:89:60:db:fe:a3:6f:28: 8e:b0:22:84:6b:d3:69:de:a3:71:f2:bb:ec:46:bb:02:fb:5f: 50:e3:62:a9:9c:ac:ca:c8:67:1d:bb:03:58:1c:58:c7:06:94: 34:96:1a:bd:48:5a:f5:ed:68:70:92:fc:aa:f1:00:15:94:6d: 80:08:a6:74:76:9c:d2:01:f9:0c:d6:f5:22:0f:b4:97:43:21: cc:c6:5d:30:52:54:ac:30:0c:2f:a0:83:76:12:50:26:b9:01: 80:36:ea:09:ec:ec:d5:86:25:2a:81:b3:ae:d7:ae:d7:ae:58: 80:0d:7d:6a:a9:e7:0d:b6:4a:d3:bf:b7:0c:2f:95:cc:ce:7d: 48:f0:af:8a:3a:e7:c9:ab:35:a5:cd:1e:a0:d8:fd:7e:e3:ad: c0:6d:c2:98:0a:6f:a0:7d:4c:e4:f5:1d:e6:4c:10:83:d4:21: b5:ed:9d:74:cc:b5:5d:c9:01:41:a4:c7:c9:1c:26:48:df:1a: 39:17:82:cc:1d:60:93:13:71:fb:d5:30:cf:e4:8b:9e:c1:1f: fc:25:c9:90:16:3d:50:fb:cd:7d:b8:90:29:38:11:57:e9:94: 74:9c:8b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevIcrAr9pWT1r+Bl8ReDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGI3MGZmOWMyMmZmZTBiNzdmNDNmNDFjMDgwNzRkZTZm MzZlMWIwHhcNMjUxMjE4MjIwMDUzWhcNMjUxMjE5MjIwMDUzWjAzMTEwLwYDVQQD EyhlNDRhYjlhMzY0NjMyNmVhOGMxYzE3NWVhNDViYzZjMWU2NDZjMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocLvnGs1Qw3YolM86eQfiPq1YP9S k8Ift1mmLYUfV97LIIwEMDqh286PgPvvFIluTW/XX9LcnhZyjEhynOUbELOnvnkY JwCr9EeoAJ0R+diswJAnE3Y4simqIPupz5Ryp/jGOaezOguE7wRCdQ7qsOYZq85c egGAfEwZhNe4zBcU0vWgivxDgQ9uQowNyklUwf1SXpTSUx8LxpuBDgvp1OP5RDXm uTzbn4+u/wQ2IKSFlovS/wrOKHynK4jx4RPYefS78Z8ehKgVa7gvKkIaq/yUAlrd Ge5JKdoj+qsSMdDmsw+DsfWaSGL5ldve548NNfC0DJLT4gR11D+NacfNGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORKuaNkYybqjBwXXqRbxsHmRsKuMB8GA1UdIwQY MBaAFGFLcP+cIv/gt39D9BwIB03m824bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3Njgt NTVmZWMxMjUyYWIwLzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3NjgtNTVmZWMxMjUyYWIw LzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs5GsSwx U5oMoLoPjY7smsBqxHEiqHg+/9y26W2JYNv+o28ojrAihGvTad6jcfK77Ea7Avtf UONiqZysyshnHbsDWBxYxwaUNJYavUha9e1ocJL8qvEAFZRtgAimdHac0gH5DNb1 Ig+0l0MhzMZdMFJUrDAML6CDdhJQJrkBgDbqCezs1YYlKoGzrteu165YgA19aqnn DbZK07+3DC+VzM59SPCvijrnyas1pc0eoNj9fuOtwG3CmApvoH1M5PUd5kwQg9Qh te2ddMy1XckBQaTHyRwmSN8aOReCzB1gkxNx+9Uwz+SLnsEf/CXJkBY9UPvNfbiQ KTgRV+mUdJyL0A== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:19 2025 by rpki-client