This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft File: YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json) Hash identifier: dyJYSFd7gtW9VZQaImVv+8G0MXFDh++TBwnyw5VZPBg= Subject key identifier: 77:AF:B5:A2:31:0D:18:C8:1D:15:62:F3:30:5E:6D:9C:A2:1E:DF:6C Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4 Certificate serial: 019B4C5F7E0CE082B55C2A4041E96262707E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft Manifest number: 0699 Signing time: Tue 23 Dec 2025 18:01:25 +0000 Manifest this update: Tue 23 Dec 2025 18:01:25 +0000 Manifest next update: Wed 24 Dec 2025 18:01:25 +0000 Files and hashes: 1: 5B2v-t9G6c4XLHchTlmKyr_cKIc.roa (hash: TNnzqom3GkwHYObP+jkKUQTCGEpJ+jMjRi9PWCmkNiY=) 2: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: SOsALIcSzAr4Ek3FhIHLEZS2sVXnV/jbDtv/XyTi+Fw=) 3: ZVHsY6ZkuvPvVgJnwVYAlKRfxu4.roa (hash: 5El1EqcO/tfZoHxTGK3Q7453jTBDE3FBJF97kpTWkjY=) 4: zEzHWCJriZKeuyYdBpl4VovFYcI.roa (hash: EKtQ2jHsCQ+lmT20oOt4vBuFgcYh84fbdOE/3vv/6ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:7e:0c:e0:82:b5:5c:2a:40:41:e9:62:62:70:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4 Validity Not Before: Dec 23 18:01:25 2025 GMT Not After : Dec 24 18:01:25 2025 GMT Subject: CN=77afb5a2310d18c81d1562f3305e6d9ca21edf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:1d:9b:f6:3f:21:09:7c:60:95:7d:d8:46: 4c:e3:dd:a7:90:f4:31:1e:48:0f:bb:96:7f:51:45: 47:bc:b3:28:53:af:cb:b2:75:b3:dc:3a:ff:75:64: 8b:02:b7:bd:04:ef:c5:0d:dd:59:0b:62:fd:57:00: 1a:e6:5d:da:6e:5b:df:8d:08:16:f8:62:f8:7d:7c: c2:7f:c6:7a:d7:3c:cd:ae:dd:75:a5:ab:43:6e:2a: 8b:03:e1:0d:f9:67:55:84:42:48:03:62:44:58:4f: 02:18:dd:e2:e8:40:c8:d9:81:05:57:30:df:c6:21: f2:e7:5c:aa:bd:79:ce:7b:21:71:5d:ac:a2:46:bd: 42:67:d1:37:fa:db:c7:4a:84:f9:64:c1:90:e7:ee: 23:0d:e8:63:0c:d3:86:1d:ab:1e:b0:34:ce:8e:bf: 15:ad:47:99:4b:fb:94:4b:42:45:5d:3f:79:8a:3f: 8f:36:86:48:4b:c0:b3:b5:74:88:2a:46:e0:48:29: 41:fb:31:51:75:a3:01:b1:ef:60:e4:28:dc:54:db: 92:da:75:d7:e0:8d:63:0e:65:9b:f3:a6:cd:1a:4b: 15:c5:47:5c:2c:cc:71:a2:c9:0a:05:00:e1:34:63: e8:4c:90:48:68:84:48:61:d4:dd:3d:71:a9:63:9b: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:B5:A2:31:0D:18:C8:1D:15:62:F3:30:5E:6D:9C:A2:1E:DF:6C X509v3 Authority Key Identifier: keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:87:c5:59:7c:d7:36:b4:e6:00:6d:37:2e:c5:86:fe:61:94: 4e:d0:6c:64:2c:26:9e:44:d8:34:02:30:99:99:fb:d7:14:92: 94:33:ad:05:0b:4c:fa:5e:d8:9d:95:fc:90:d5:ff:c3:4f:4f: 0a:90:23:d9:b0:98:a3:6b:26:ca:ab:48:8d:d8:26:81:f3:79: 49:7f:9d:ba:b1:d8:86:cb:14:49:bf:e6:ec:c5:4d:9e:13:36: 1d:cf:7e:de:81:0a:32:bd:aa:27:09:3b:ef:b2:5a:02:3b:18: 6d:64:db:85:84:d4:7d:6e:09:a4:65:9c:75:cc:43:83:4f:79: 82:90:c0:b3:63:04:25:f8:9e:d0:43:e5:54:55:6e:72:2d:99: 2f:c6:6f:c8:83:c3:17:1b:79:ec:1c:7e:5c:1f:0a:67:30:e9: 95:03:34:3c:02:2e:fd:b4:a0:61:80:d0:1a:5a:e2:b7:b0:77: d4:d7:38:d3:ae:05:79:f7:9f:d7:4b:fd:33:e6:73:fb:49:80: ea:0d:2c:a5:51:cb:00:a1:59:a5:3e:d2:e0:19:47:7b:d8:27: 32:38:fb:5c:50:f8:89:81:fb:06:cf:5b:18:6f:3b:a1:f0:e2: 07:0b:72:fe:53:c2:16:37:5c:a8:0a:b8:b7:0c:80:b4:f7:32: 9c:28:f8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX34M4IK1XCpAQeliYnB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOGNjNDZkNzFlNzg0ODk3ODQ4ODk2MWQ3YjUxYWJhMTU0 MWYzYzQwHhcNMjUxMjIzMTgwMTI1WhcNMjUxMjI0MTgwMTI1WjAzMTEwLwYDVQQD Eyg3N2FmYjVhMjMxMGQxOGM4MWQxNTYyZjMzMDVlNmQ5Y2EyMWVkZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TUdm/Y/IQl8YJV92EZM492nkPQx HkgPu5Z/UUVHvLMoU6/LsnWz3Dr/dWSLAre9BO/FDd1ZC2L9VwAa5l3ablvfjQgW +GL4fXzCf8Z61zzNrt11patDbiqLA+EN+WdVhEJIA2JEWE8CGN3i6EDI2YEFVzDf xiHy51yqvXnOeyFxXayiRr1CZ9E3+tvHSoT5ZMGQ5+4jDehjDNOGHasesDTOjr8V rUeZS/uUS0JFXT95ij+PNoZIS8CztXSIKkbgSClB+zFRdaMBse9g5CjcVNuS2nXX 4I1jDmWb86bNGksVxUdcLMxxoskKBQDhNGPoTJBIaIRIYdTdPXGpY5ujTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHevtaIxDRjIHRVi8zBebZyiHt9sMB8GA1UdIwQY MBaAFGGMxG1x54SJeEiJYde1GroVQfPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTIt NGVmMTljY2M1N2QwLzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMjc0MzAtZDRlOC00ZGEzLWJlYTItNGVmMTljY2M1N2Qw LzEvWVl6RWJYSG5oSWw0U0lsaDE3VWF1aFZCODhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIfFWXzX NrTmAG03LsWG/mGUTtBsZCwmnkTYNAIwmZn71xSSlDOtBQtM+l7YnZX8kNX/w09P CpAj2bCYo2smyqtIjdgmgfN5SX+durHYhssUSb/m7MVNnhM2Hc9+3oEKMr2qJwk7 77JaAjsYbWTbhYTUfW4JpGWcdcxDg095gpDAs2MEJfie0EPlVFVuci2ZL8ZvyIPD Fxt57Bx+XB8KZzDplQM0PAIu/bSgYYDQGlrit7B31Nc4064Fefef10v9M+Zz+0mA 6g0spVHLAKFZpT7S4BlHe9gnMjj7XFD4iYH7Bs9bGG87ofDiBwty/lPCFjdcqAq4 twyAtPcynCj4DA== -----END CERTIFICATE-----Generated at Wed Dec 24 00:29:44 2025 by rpki-client