This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft File: Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json) Hash identifier: 7t9QETsbsKWGKQ0ugTVADxfc2CXcD4bfBr4UPzH57kI= Subject key identifier: 51:53:C3:F9:0C:63:93:87:6F:4D:A4:BD:F1:45:E9:E2:94:A1:8B:B2 Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0 Certificate issuer: /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0 Certificate serial: 019B341FD08CFAD89F11AED34988DE4A8351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 01:00:58 +0000 Manifest this update: Fri 19 Dec 2025 01:00:58 +0000 Manifest next update: Sat 20 Dec 2025 01:00:58 +0000 Files and hashes: 1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: o0xUMnu8d94mBJFWHWnsluoQ9a5yh2joYM4M1gBIcwU=) 2: dZjzanZ5Xa3WwYz-n1bsR4-cdN4.roa (hash: x2Q62dC7uuAXO8D8ST0Y3bzPEAD8rzw3v3/5eqKnb5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:d0:8c:fa:d8:9f:11:ae:d3:49:88:de:4a:83:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0 Validity Not Before: Dec 19 01:00:58 2025 GMT Not After : Dec 20 01:00:58 2025 GMT Subject: CN=5153c3f90c6393876f4da4bdf145e9e294a18bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9a:d6:df:c3:85:77:8a:9e:01:8e:ce:12:42: 0d:c7:2a:8e:22:a8:1d:64:41:de:84:67:02:08:1d: d5:eb:9d:c2:1b:31:ce:dd:a3:7d:18:0e:42:3e:b9: 99:cd:ca:6b:33:9e:03:0d:4a:19:95:b9:b2:d6:10: 62:f5:5a:24:1d:51:90:08:07:d5:d7:9f:a2:ef:a3: f7:58:b4:e1:d8:f3:89:01:2b:28:09:48:4e:d7:65: 59:e7:0f:9f:b2:28:17:17:66:90:04:62:97:42:2f: 58:1c:d5:64:e0:ef:5e:9e:b6:0e:61:df:22:28:fb: 81:6c:dc:28:7b:c2:7c:37:ba:46:8a:6f:4f:63:82: df:8b:ac:38:da:db:27:b0:f4:17:95:c7:f3:35:8b: 7e:e2:03:f2:e9:12:46:78:7c:4d:3b:20:49:16:ca: 96:4b:71:6c:c8:36:e0:50:19:53:57:65:49:cf:6f: 8a:ab:3a:53:c9:a0:49:79:f0:83:c0:ee:16:4d:e6: af:13:f8:43:81:46:4b:bf:45:c9:3a:e5:94:2b:e8: 9b:c1:83:03:ea:53:29:ad:ec:6b:99:86:e5:22:c3: 5d:ac:13:60:9b:9e:bb:88:a6:b1:56:37:61:6a:88: 25:a5:7f:36:58:c3:af:76:fb:14:1f:a4:e5:b1:e3: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:53:C3:F9:0C:63:93:87:6F:4D:A4:BD:F1:45:E9:E2:94:A1:8B:B2 X509v3 Authority Key Identifier: keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b5:ea:30:32:30:4b:c3:10:e3:92:6b:ca:24:37:ed:c2:40: 19:83:59:df:06:48:03:d0:4d:16:75:e8:ca:b8:2f:3a:ca:5e: b2:80:ad:85:40:14:20:37:58:c7:5d:94:a4:01:4c:08:5f:fd: 8b:e0:0e:88:95:c4:53:8e:32:81:8f:26:7f:ae:85:1e:5f:f6: 5a:c2:64:44:31:e9:03:d8:f6:ea:53:9d:79:8e:ec:aa:1e:d3: 90:91:a7:7f:ed:ba:7b:9b:8c:7e:5d:90:dd:04:3a:0e:71:01: 74:1d:40:d0:4f:35:4a:db:f7:b9:5c:97:bb:fe:19:68:2a:f0: 78:3b:c4:58:c1:bc:41:c1:ae:55:3b:d5:27:4c:6b:86:35:bd: 58:b6:83:3f:a0:86:28:22:a7:3e:2f:69:d4:c1:67:6f:5c:e1: c5:17:3c:2f:44:cb:49:f1:2f:5a:3f:72:eb:28:fe:f4:d6:da: a3:14:e0:4e:ee:56:80:f2:4e:13:d0:e1:d7:e4:1d:ce:d9:ac: 61:f8:23:8b:4e:78:a1:4f:3b:fd:eb:a5:a1:69:19:1f:f7:b7: 10:7e:46:93:d2:ab:45:93:3f:b3:ef:c8:c9:52:bb:cd:1a:82: ee:be:ad:f8:e3:e9:0c:7e:8d:a9:4b:e7:c7:42:f6:30:3b:c2: 31:7b:b1:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H9CM+tifEa7TSYjeSoNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDZlNGJmZmEyYjRkMWJjNDBlOTJiMzBhZjBkMjFhNzRi MGJiZDAwHhcNMjUxMjE5MDEwMDU4WhcNMjUxMjIwMDEwMDU4WjAzMTEwLwYDVQQD Eyg1MTUzYzNmOTBjNjM5Mzg3NmY0ZGE0YmRmMTQ1ZTllMjk0YTE4YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZrW38OFd4qeAY7OEkINxyqOIqgd ZEHehGcCCB3V653CGzHO3aN9GA5CPrmZzcprM54DDUoZlbmy1hBi9VokHVGQCAfV 15+i76P3WLTh2POJASsoCUhO12VZ5w+fsigXF2aQBGKXQi9YHNVk4O9enrYOYd8i KPuBbNwoe8J8N7pGim9PY4Lfi6w42tsnsPQXlcfzNYt+4gPy6RJGeHxNOyBJFsqW S3FsyDbgUBlTV2VJz2+KqzpTyaBJefCDwO4WTeavE/hDgUZLv0XJOuWUK+ibwYMD 6lMprexrmYblIsNdrBNgm567iKaxVjdhaoglpX82WMOvdvsUH6TlseO2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFTw/kMY5OHb02kvfFF6eKUoYuyMB8GA1UdIwQY MBaAFGLW5L/6K00bxA6Sswrw0hp0sLvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzY3NTAtYTIzMC00ZjI2LWI0NDIt ZjE1NTU0ZmE0YjBiLzEvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzY3NTAtYTIzMC00ZjI2LWI0NDItZjE1NTU0ZmE0YjBi LzEvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbXqMDIw S8MQ45JryiQ37cJAGYNZ3wZIA9BNFnXoyrgvOspesoCthUAUIDdYx12UpAFMCF/9 i+AOiJXEU44ygY8mf66FHl/2WsJkRDHpA9j26lOdeY7sqh7TkJGnf+26e5uMfl2Q 3QQ6DnEBdB1A0E81Stv3uVyXu/4ZaCrweDvEWMG8QcGuVTvVJ0xrhjW9WLaDP6CG KCKnPi9p1MFnb1zhxRc8L0TLSfEvWj9y6yj+9NbaoxTgTu5WgPJOE9Dh1+Qdztms Yfgji054oU87/euloWkZH/e3EH5Gk9KrRZM/s+/IyVK7zRqC7r6t+OPpDH6NqUvn x0L2MDvCMXuxog== -----END CERTIFICATE-----Generated at Fri Dec 19 05:46:08 2025 by rpki-client