This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft File: yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json) Hash identifier: 2Bcm9j16o0ZfJNMyyBE30S4mOKNPG6YnU7THzlX1Z50= Subject key identifier: 5A:41:5D:55:CD:A2:EB:C2:29:67:0B:05:74:4F:A4:BA:8F:E3:B6:D9 Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019B397DCFAC987DE84FFA9F9F340E8ECA56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft Manifest number: 028E Signing time: Sat 20 Dec 2025 02:01:45 +0000 Manifest this update: Sat 20 Dec 2025 02:01:45 +0000 Manifest next update: Sun 21 Dec 2025 02:01:45 +0000 Files and hashes: 1: TV9MBnLCdq0YXMlS7n0N6-374eE.roa (hash: 29vVPe5fMsq8wMs3CBPsJgBaxcV4vylFIV1zsoy0JlI=) 2: lAJZYJJzGp5HPbuIC7fuB-JbImQ.roa (hash: KjiWHR4FndPu1pOu7SlliXtRRkAXn6COl4Ndm2nMAAw=) 3: nGx1SbHdnrm1rX0qlOFShwhhrvk.roa (hash: vTyHGstj9RMJZ9VP2y031XxQBN2W9t1AKq82ozdPQVw=) 4: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=) 5: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: /VEvKyiIYoZRCaxUcy3CctF9Q21MVnNhIZYMDXt9ZkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:cf:ac:98:7d:e8:4f:fa:9f:9f:34:0e:8e:ca:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Dec 20 02:01:45 2025 GMT Not After : Dec 21 02:01:45 2025 GMT Subject: CN=5a415d55cda2ebc229670b05744fa4ba8fe3b6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:40:25:74:ea:c1:45:fa:e5:a4:77:53:e1: e1:07:3a:31:b4:00:ca:ef:8b:11:57:e0:e3:1f:54: 71:02:ae:32:36:f6:5b:c3:b9:4d:34:dc:ff:41:e1: e3:c9:36:dc:e3:62:19:48:7b:f7:8b:3d:fb:82:38: c3:ca:42:db:4a:f5:c0:6f:6b:5f:ec:6a:22:17:93: 02:dd:42:b4:37:07:8e:15:20:4c:b6:51:a4:73:fb: 6f:5f:11:1e:f4:6a:31:40:dc:ec:47:9a:31:fc:5d: d0:07:84:02:00:b9:b0:21:8e:ff:94:6a:e8:bf:db: 71:e2:31:ee:f0:7c:04:58:7d:23:2b:5a:ba:76:58: 20:25:60:51:2e:1b:06:8c:fb:d6:be:8a:28:63:26: 92:cf:12:26:3f:fb:ac:0e:c7:9e:81:37:b3:3c:38: c4:53:4b:aa:89:48:9d:ce:41:2b:71:6a:8b:47:b2: 6d:5d:c4:6c:9f:80:79:cd:29:99:b1:d1:e2:c1:d2: 5f:7b:3b:df:20:b6:a9:9c:34:84:a2:bd:b7:d0:53: bc:b9:17:d3:b3:14:69:f6:bb:c8:09:f7:25:ec:7e: f0:0d:57:a4:7a:69:6b:ae:49:66:46:f7:d8:f6:6c: 7c:de:b9:74:41:fa:1a:3e:5f:ad:8b:02:88:f9:7e: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:41:5D:55:CD:A2:EB:C2:29:67:0B:05:74:4F:A4:BA:8F:E3:B6:D9 X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f2:fd:04:13:37:9a:53:f7:c6:b3:1a:15:07:16:a3:f3:6f: c7:55:77:f2:e0:d2:df:65:92:00:37:39:b1:74:f2:93:a8:c0: cc:d0:65:3c:3e:c4:a6:57:4b:ab:3b:07:74:17:17:39:bf:83: fe:ac:c4:b5:e6:4e:ed:52:f6:e7:cd:aa:a2:90:17:ef:be:8a: a8:7b:18:e4:e4:1b:89:09:35:3e:43:e5:66:29:0f:ef:2c:a1: 29:3f:bd:52:70:f9:34:ab:f5:77:eb:55:17:14:2e:5a:9d:49: 01:84:80:b0:dc:bf:19:51:19:2f:32:dc:ed:d0:87:ef:69:14: e8:9e:b4:b4:1a:f4:55:a2:9f:e5:09:cc:04:bd:0d:11:9d:31: e1:18:12:cc:1b:fb:30:05:03:9d:8c:77:6e:6e:72:82:05:64: 2e:cd:66:4d:1e:95:77:7f:65:22:dc:a3:70:d1:e9:70:b5:28: fd:92:e4:bd:aa:15:82:da:2c:d7:50:61:fb:59:ab:02:4f:ba: 1e:ff:f6:72:5b:40:c2:55:d8:8b:7b:61:1e:bd:3f:0e:cb:3d: a5:eb:18:1d:fb:0f:7b:78:bb:39:09:c0:f6:b9:d6:65:7f:db: a4:d1:2c:f7:39:86:33:07:d4:86:c8:78:d8:e5:4f:43:43:5a: 76:3f:56:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fc+smH3oT/qfnzQOjspWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjUxMjIwMDIwMTQ1WhcNMjUxMjIxMDIwMTQ1WjAzMTEwLwYDVQQD Eyg1YTQxNWQ1NWNkYTJlYmMyMjk2NzBiMDU3NDRmYTRiYThmZTNiNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuFAJXTqwUX65aR3U+HhBzoxtADK 74sRV+DjH1RxAq4yNvZbw7lNNNz/QeHjyTbc42IZSHv3iz37gjjDykLbSvXAb2tf 7GoiF5MC3UK0NweOFSBMtlGkc/tvXxEe9GoxQNzsR5ox/F3QB4QCALmwIY7/lGro v9tx4jHu8HwEWH0jK1q6dlggJWBRLhsGjPvWvoooYyaSzxImP/usDseegTezPDjE U0uqiUidzkErcWqLR7JtXcRsn4B5zSmZsdHiwdJfezvfILapnDSEor230FO8uRfT sxRp9rvICfcl7H7wDVekemlrrklmRvfY9mx83rl0QfoaPl+tiwKI+X5fjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpBXVXNouvCKWcLBXRPpLqP47bZMB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfL9BBM3 mlP3xrMaFQcWo/Nvx1V38uDS32WSADc5sXTyk6jAzNBlPD7EpldLqzsHdBcXOb+D /qzEteZO7VL2582qopAX776KqHsY5OQbiQk1PkPlZikP7yyhKT+9UnD5NKv1d+tV FxQuWp1JAYSAsNy/GVEZLzLc7dCH72kU6J60tBr0VaKf5QnMBL0NEZ0x4RgSzBv7 MAUDnYx3bm5yggVkLs1mTR6Vd39lItyjcNHpcLUo/ZLkvaoVgtos11Bh+1mrAk+6 Hv/2cltAwlXYi3thHr0/Dss9pesYHfsPe3i7OQnA9rnWZX/bpNEs9zmGMwfUhsh4 2OVPQ0Nadj9W2w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:27:13 2025 by rpki-client