This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json) Hash identifier: gs7aHlzeIBPz1QYQ/w1+vW+UR531a6JJ/kr/AJZEjXU= Subject key identifier: 0F:63:A2:42:68:A8:52:C6:7E:81:7E:ED:01:76:09:60:B1:87:9E:3C Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0 Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0 Certificate serial: 019AF46584568EDC069D1B8337E26FA65175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 16:01:24 +0000 Manifest this update: Sat 06 Dec 2025 16:01:24 +0000 Manifest next update: Sun 07 Dec 2025 16:01:24 +0000 Files and hashes: 1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: ty0EK/ctM9ytHyuhjFIBecT1F6eWKWtgeo3OxFAQou4=) 2: dZjzanZ5Xa3WwYz-n1bsR4-cdN4.roa (hash: x2Q62dC7uuAXO8D8ST0Y3bzPEAD8rzw3v3/5eqKnb5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:84:56:8e:dc:06:9d:1b:83:37:e2:6f:a6:51:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0 Validity Not Before: Dec 6 16:01:24 2025 GMT Not After : Dec 7 16:01:24 2025 GMT Subject: CN=0f63a24268a852c67e817eed01760960b1879e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:88:26:d9:14:1b:79:ef:6e:b4:83:29:a4: 91:47:df:e8:67:53:b4:92:60:e3:82:2e:81:6b:3e: b4:8c:78:3a:77:0a:bb:87:e0:bd:7b:70:21:6d:e7: 91:9b:68:8f:47:f6:68:0a:5e:10:ce:df:03:30:26: 07:3a:39:fb:67:dd:ce:7a:ba:bc:85:92:2f:64:72: bf:ad:90:ae:d4:c2:0b:7a:dc:81:46:01:33:39:60: 1e:96:1d:ac:82:55:d6:71:c9:ff:96:49:7e:d3:53: 40:a9:10:52:29:e0:ea:20:e3:06:5e:03:d6:ef:0b: 52:0c:a7:8b:d4:01:7d:c6:68:0f:1e:d8:24:c7:e8: 01:ea:49:10:6a:80:4a:49:39:16:70:bc:52:32:af: 3b:24:31:2a:e4:a1:a7:86:72:ac:25:c8:99:c1:6b: 5b:7f:02:e4:a1:6e:b8:06:a5:7c:fa:b5:24:31:d3: 1e:e8:97:b7:e3:8b:fe:50:6f:05:aa:76:68:31:c0: b8:19:47:09:63:e7:61:7d:40:7e:45:62:9a:30:be: 1e:e3:23:c2:f4:03:13:1f:63:e1:ae:69:39:35:ea: dd:65:af:58:c3:f4:b9:31:70:1f:12:a1:ae:f0:f0: 5a:07:94:e3:1e:19:8c:62:e6:9b:60:c0:08:b5:0a: 0f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:63:A2:42:68:A8:52:C6:7E:81:7E:ED:01:76:09:60:B1:87:9E:3C X509v3 Authority Key Identifier: keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a7:98:84:56:0d:5c:f5:01:c4:ec:60:45:5c:2e:62:20:29: 65:da:22:7f:db:aa:68:50:9d:e3:8f:8a:13:2c:c8:9a:fd:b0: b5:89:5f:3a:3f:ba:51:20:e2:31:62:34:3f:93:ac:7e:53:7c: 80:44:47:7e:e4:26:08:69:d9:97:f5:a1:15:99:96:65:14:da: 1b:a3:00:32:45:83:10:c9:bd:93:eb:99:42:39:7d:cc:94:71: 02:2f:e9:69:b1:3e:80:5d:b5:96:4e:20:f7:e5:f7:21:56:2f: 9e:99:07:20:9e:93:32:4b:a9:08:89:f9:75:a4:b4:cf:c0:5b: 7e:b0:91:bd:9b:76:93:37:0d:cb:ad:f2:c6:52:f0:00:e5:f8: 43:22:a1:dd:a2:37:89:c4:e0:a0:38:3d:51:67:a8:c9:7f:40: 9f:cf:bb:7f:9f:a1:9d:a6:ed:97:1c:79:df:92:40:22:3e:4d: da:60:6e:80:77:f8:1c:4d:67:de:95:f7:70:69:76:81:a4:77: 0a:83:6e:b3:95:2f:a8:4a:9d:d3:44:8f:40:a0:e7:58:ab:21: ef:34:ba:3c:77:9a:6d:91:76:01:0a:01:58:6c:f3:dc:fe:ff: 38:6c:de:68:8d:91:d8:84:05:d8:21:35:bf:c1:f9:aa:bf:c9: b8:0c:88:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYRWjtwGnRuDN+JvplF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDZlNGJmZmEyYjRkMWJjNDBlOTJiMzBhZjBkMjFhNzRi MGJiZDAwHhcNMjUxMjA2MTYwMTI0WhcNMjUxMjA3MTYwMTI0WjAzMTEwLwYDVQQD EygwZjYzYTI0MjY4YTg1MmM2N2U4MTdlZWQwMTc2MDk2MGIxODc5ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOSIJtkUG3nvbrSDKaSRR9/oZ1O0 kmDjgi6Baz60jHg6dwq7h+C9e3AhbeeRm2iPR/ZoCl4Qzt8DMCYHOjn7Z93Oerq8 hZIvZHK/rZCu1MILetyBRgEzOWAelh2sglXWccn/lkl+01NAqRBSKeDqIOMGXgPW 7wtSDKeL1AF9xmgPHtgkx+gB6kkQaoBKSTkWcLxSMq87JDEq5KGnhnKsJciZwWtb fwLkoW64BqV8+rUkMdMe6Je344v+UG8FqnZoMcC4GUcJY+dhfUB+RWKaML4e4yPC 9AMTH2Phrmk5NerdZa9Yw/S5MXAfEqGu8PBaB5TjHhmMYuabYMAItQoPDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9jokJoqFLGfoF+7QF2CWCxh548MB8GA1UdIwQY MBaAFGLW5L/6K00bxA6Sswrw0hp0sLvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzY3NTAtYTIzMC00ZjI2LWI0NDIt ZjE1NTU0ZmE0YjBiLzEvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzY3NTAtYTIzMC00ZjI2LWI0NDItZjE1NTU0ZmE0YjBi LzEvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaeYhFYN XPUBxOxgRVwuYiApZdoif9uqaFCd44+KEyzImv2wtYlfOj+6USDiMWI0P5OsflN8 gERHfuQmCGnZl/WhFZmWZRTaG6MAMkWDEMm9k+uZQjl9zJRxAi/pabE+gF21lk4g 9+X3IVYvnpkHIJ6TMkupCIn5daS0z8BbfrCRvZt2kzcNy63yxlLwAOX4QyKh3aI3 icTgoDg9UWeoyX9An8+7f5+hnabtlxx535JAIj5N2mBugHf4HE1n3pX3cGl2gaR3 CoNus5UvqEqd00SPQKDnWKsh7zS6PHeabZF2AQoBWGzz3P7/OGzeaI2R2IQF2CE1 v8H5qr/JuAyImA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:44 2025 by rpki-client