This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json) Hash identifier: ehPBwDjJNGIx6/4VOEIoXXCeqJ8+Yub5OA9E4UR5lq8= Subject key identifier: A3:05:35:23:4A:FE:AF:0F:D2:CA:A8:F0:C8:70:EE:6E:C8:8C:99:0A Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da Certificate serial: 019B6241E6E777F5D0BBF66412735D394F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft Manifest number: 1483 Signing time: Sun 28 Dec 2025 00:00:44 +0000 Manifest this update: Sun 28 Dec 2025 00:00:44 +0000 Manifest next update: Mon 29 Dec 2025 00:00:44 +0000 Files and hashes: 1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=) 2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: qeaPREPnkYvr/VUXPehIcpXf893mbn9464oPvZWwfoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:41:e6:e7:77:f5:d0:bb:f6:64:12:73:5d:39:4f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da Validity Not Before: Dec 28 00:00:44 2025 GMT Not After : Dec 29 00:00:44 2025 GMT Subject: CN=a30535234afeaf0fd2caa8f0c870ee6ec88c990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:11:c9:af:52:c1:3e:1d:9d:00:4b:fd:2f: ee:5e:16:e0:e1:08:34:8d:f1:f4:5a:12:26:6f:a9: 1a:ea:36:dc:f9:b5:e2:0d:fc:22:12:45:99:4c:24: 64:39:aa:af:9f:69:c5:b1:28:cb:41:16:3e:55:61: 3e:44:6c:08:5d:22:38:3f:a8:93:73:50:00:2a:87: 03:58:73:ec:7e:c9:e5:1d:ec:04:76:93:56:e1:65: 54:c9:68:9a:90:d2:c3:e9:62:b6:78:75:c6:dd:12: 82:80:0f:02:af:64:f6:67:55:01:e6:d3:71:e8:cf: ae:3f:c2:9f:61:a1:20:3e:d3:1e:e2:f5:3a:b9:3d: 21:3d:0c:93:7f:fd:f8:65:9d:1a:52:e9:a2:b4:3d: f3:bd:7a:dd:cd:2d:15:6c:4b:ef:9c:4a:ec:64:c4: d3:ed:8e:84:9c:f7:2c:43:ea:bb:fe:a9:f1:50:e2: b8:72:78:f7:8b:7c:67:23:80:cb:49:e2:af:f2:db: ca:11:0f:bf:2a:e5:d2:e4:6c:07:1e:4f:cb:0e:f5: 28:18:43:34:3d:62:75:26:c7:2a:ba:61:27:fa:32: 77:cd:dc:7c:42:c7:a6:2e:03:f2:88:74:97:20:77: aa:f6:d4:46:ff:e9:2e:fa:f4:c6:09:5a:13:b2:19: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:05:35:23:4A:FE:AF:0F:D2:CA:A8:F0:C8:70:EE:6E:C8:8C:99:0A X509v3 Authority Key Identifier: keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:a1:20:4b:40:6c:67:03:e4:a8:7d:8c:ed:be:59:62:51:80: 6d:7e:78:f9:4d:a7:ab:9a:f0:5a:af:d2:87:bf:91:02:fc:d7: 93:6b:cd:44:6a:5e:08:17:90:ed:51:8a:35:73:15:18:34:d9: cf:69:21:fb:1a:ae:ee:c0:85:c3:a0:7f:bd:6e:6e:4e:52:7c: 5a:2f:4e:ce:5f:0c:a3:3b:46:bd:9f:87:a2:14:50:cf:61:9d: 67:f8:b2:b0:03:fd:25:9d:7a:0d:17:2a:50:0e:c7:a2:68:f9: cb:ba:41:3f:ca:76:e7:0f:77:26:06:42:f3:cd:e7:b1:b0:c6: 92:99:02:1d:ad:c9:5f:17:bf:26:9e:f6:e2:93:4e:05:05:bc: 8e:a7:32:69:35:95:97:85:4b:17:ed:72:1b:1f:8e:cd:a5:df: 74:08:5f:7e:9f:9d:f6:7b:2b:d6:af:24:93:fd:fb:70:aa:01: 8e:cd:5d:1e:b9:ee:15:f8:a3:b5:53:fa:8f:62:60:35:f4:3a: 04:d6:e3:98:3b:32:ae:2a:e7:6d:9f:29:6c:05:69:d2:4f:c2: 96:82:33:31:6c:aa:ea:a5:0b:06:e4:6b:07:be:48:00:a3:47: 65:9f:29:5f:f0:e7:7a:09:31:5b:a4:77:07:cb:f4:37:2f:00: 7a:5d:aa:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQebnd/XQu/ZkEnNdOU9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk NTE5ZGEwHhcNMjUxMjI4MDAwMDQ0WhcNMjUxMjI5MDAwMDQ0WjAzMTEwLwYDVQQD EyhhMzA1MzUyMzRhZmVhZjBmZDJjYWE4ZjBjODcwZWU2ZWM4OGM5OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2YRya9SwT4dnQBL/S/uXhbg4Qg0 jfH0WhImb6ka6jbc+bXiDfwiEkWZTCRkOaqvn2nFsSjLQRY+VWE+RGwIXSI4P6iT c1AAKocDWHPsfsnlHewEdpNW4WVUyWiakNLD6WK2eHXG3RKCgA8Cr2T2Z1UB5tNx 6M+uP8KfYaEgPtMe4vU6uT0hPQyTf/34ZZ0aUumitD3zvXrdzS0VbEvvnErsZMTT 7Y6EnPcsQ+q7/qnxUOK4cnj3i3xnI4DLSeKv8tvKEQ+/KuXS5GwHHk/LDvUoGEM0 PWJ1JscqumEn+jJ3zdx8QsemLgPyiHSXIHeq9tRG/+ku+vTGCVoTshnmmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMFNSNK/q8P0sqo8Mhw7m7IjJkKMB8GA1UdIwQY MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt Yjg5YWEwMWVkYzgwLzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqEgS0Bs ZwPkqH2M7b5ZYlGAbX54+U2nq5rwWq/Sh7+RAvzXk2vNRGpeCBeQ7VGKNXMVGDTZ z2kh+xqu7sCFw6B/vW5uTlJ8Wi9Ozl8MoztGvZ+HohRQz2GdZ/iysAP9JZ16DRcq UA7Homj5y7pBP8p25w93JgZC883nsbDGkpkCHa3JXxe/Jp724pNOBQW8jqcyaTWV l4VLF+1yGx+OzaXfdAhffp+d9nsr1q8kk/37cKoBjs1dHrnuFfijtVP6j2JgNfQ6 BNbjmDsyrirnbZ8pbAVp0k/CloIzMWyq6qULBuRrB75IAKNHZZ8pX/DnegkxW6R3 B8v0Ny8Ael2qsA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:42:58 2025 by rpki-client