This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json) Hash identifier: 9EMXUGMF0YfU/XOHjseBRKM3at9GRyarX6xRmc+bp9A= Subject key identifier: 33:C8:09:9E:B7:69:EA:D6:22:46:7C:F5:41:8B:58:09:AE:68:57:06 Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba Certificate serial: 019B2D0AB30524D2685E86C3FDD59131F3CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 16:00:34 +0000 Manifest this update: Wed 17 Dec 2025 16:00:34 +0000 Manifest next update: Thu 18 Dec 2025 16:00:34 +0000 Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: sRqwVIKUlK0WsTeBT1OEWO0MHtqIuMkg8hWd1jyx+v4=) 2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:b3:05:24:d2:68:5e:86:c3:fd:d5:91:31:f3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba Validity Not Before: Dec 17 16:00:34 2025 GMT Not After : Dec 18 16:00:34 2025 GMT Subject: CN=33c8099eb769ead622467cf5418b5809ae685706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:b8:7e:b6:f5:82:b1:35:e4:ee:fb:60:24: dc:99:b4:74:f4:ea:57:ad:d1:fb:a3:b5:dc:b7:c0: 73:93:0e:ce:88:50:b4:77:2f:ca:a1:bd:22:98:55: 2d:f8:26:1a:11:3e:75:44:0d:af:c6:86:37:2d:02: 5d:96:25:fd:d3:3a:50:62:61:82:fa:2c:87:51:74: 9c:37:ad:1a:58:bf:ee:9c:09:ee:bf:90:2a:e0:c6: 79:fb:3a:8a:0a:8f:1b:c2:92:01:4a:65:1b:bf:58: d8:b6:3d:9c:a7:6e:a6:27:31:1f:86:bb:c4:68:b4: cd:12:cd:19:37:3b:e2:62:f4:ba:18:ad:d0:a6:03: b2:fc:d9:fc:f5:45:97:44:b2:7a:7f:f1:bd:a3:f8: 0b:1b:61:69:d9:d7:99:f5:11:28:8e:0f:d8:5b:0a: 0e:63:76:49:ec:f1:4e:b3:db:62:90:00:ca:ad:a1: 9a:30:cd:11:2d:eb:b3:28:27:11:ef:ac:f2:d1:6a: e8:71:5b:4f:e9:4e:c4:d0:7d:0c:d3:08:e6:99:3f: 7d:c3:83:80:1e:42:1b:36:bd:a5:2f:4c:d4:06:a0: 6b:3e:51:43:a0:7a:45:ac:b6:6c:37:52:0e:92:b2: 5f:1e:ee:c8:55:54:f3:48:79:c7:af:48:2b:65:48: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:09:9E:B7:69:EA:D6:22:46:7C:F5:41:8B:58:09:AE:68:57:06 X509v3 Authority Key Identifier: keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:44:89:d8:bc:d1:06:6f:08:bf:6a:9c:25:29:c5:b6:dc:c3: 53:07:93:88:a5:d0:ab:00:92:19:eb:56:e1:d2:c5:bc:1e:05: 72:b8:b1:a8:54:18:ed:c1:0e:4f:a6:34:f8:23:11:08:d1:43: 67:0d:40:12:d0:4e:f8:4f:e9:d8:a6:23:19:4e:17:78:1c:4c: 35:de:be:44:5f:90:4b:76:df:47:5d:e7:b3:11:87:97:d2:c4: 6f:1e:c5:b6:c9:a0:76:a5:64:44:82:2a:81:f9:a3:86:c0:9c: 55:10:75:25:38:9e:52:5e:02:02:ac:4c:bc:5e:6b:e2:59:af: a3:45:1c:5e:d6:8e:55:27:0d:59:43:6c:d0:25:86:08:52:e0: 39:8c:44:c8:57:3b:64:c0:37:c6:49:fe:23:b1:a0:46:ed:24: 81:6d:7f:2c:eb:fa:b0:8f:01:5a:dc:e8:37:ac:d4:2b:27:e0: 1a:57:ca:95:c4:a1:1a:37:fe:78:1b:a2:a0:16:91:4f:5f:1c: b5:8e:f7:ce:6f:f9:15:7c:33:17:94:e2:b0:eb:96:74:fb:eb: 1d:e6:2e:3a:e4:82:36:dc:54:f8:d2:96:0b:2a:7b:b7:9c:a6: 88:8a:29:c3:94:c2:4b:8b:ea:d9:fc:b3:b1:58:b0:c0:33:f7: 61:57:de:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCrMFJNJoXobD/dWRMfPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWNjNWM3YjEyMTdjY2JiMTU1ZGRkYWU4MjZjZTZmOWZk YmFjYmEwHhcNMjUxMjE3MTYwMDM0WhcNMjUxMjE4MTYwMDM0WjAzMTEwLwYDVQQD EygzM2M4MDk5ZWI3NjllYWQ2MjI0NjdjZjU0MThiNTgwOWFlNjg1NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPm4frb1grE15O77YCTcmbR09OpX rdH7o7Xct8Bzkw7OiFC0dy/Kob0imFUt+CYaET51RA2vxoY3LQJdliX90zpQYmGC +iyHUXScN60aWL/unAnuv5Aq4MZ5+zqKCo8bwpIBSmUbv1jYtj2cp26mJzEfhrvE aLTNEs0ZNzviYvS6GK3QpgOy/Nn89UWXRLJ6f/G9o/gLG2Fp2deZ9REojg/YWwoO Y3ZJ7PFOs9tikADKraGaMM0RLeuzKCcR76zy0WrocVtP6U7E0H0M0wjmmT99w4OA HkIbNr2lL0zUBqBrPlFDoHpFrLZsN1IOkrJfHu7IVVTzSHnHr0grZUjwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPICZ63aerWIkZ89UGLWAmuaFcGMB8GA1UdIwQY MBaAFMocxcexIXzLsVXd2ugmzm+f26y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTct MmI2MjMyMzJmZjIyLzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTctMmI2MjMyMzJmZjIy LzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA10SJ2LzR Bm8Iv2qcJSnFttzDUweTiKXQqwCSGetW4dLFvB4FcrixqFQY7cEOT6Y0+CMRCNFD Zw1AEtBO+E/p2KYjGU4XeBxMNd6+RF+QS3bfR13nsxGHl9LEbx7FtsmgdqVkRIIq gfmjhsCcVRB1JTieUl4CAqxMvF5r4lmvo0UcXtaOVScNWUNs0CWGCFLgOYxEyFc7 ZMA3xkn+I7GgRu0kgW1/LOv6sI8BWtzoN6zUKyfgGlfKlcShGjf+eBuioBaRT18c tY73zm/5FXwzF5TisOuWdPvrHeYuOuSCNtxU+NKWCyp7t5ymiIopw5TCS4vq2fyz sViwwDP3YVfeGQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:45 2025 by rpki-client