This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft File: ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json) Hash identifier: +CP9AXAoOZ3BXuSlT0t7dCd2ucmLjwNkYNGKCKOxM8Q= Subject key identifier: 0F:B0:FC:2E:2A:9B:B1:95:94:CD:A9:8A:E0:97:FD:89:C2:8F:B2:B8 Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55 Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155 Certificate serial: 019AF12DC5A14D5C30C3469208D872D5252E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft Manifest number: 09E7 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=) 2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=) 3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=) 4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: ZoTHtZwcqMMPPxSLWbYH96uRQZhjYAEyixkkgnY0tvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c5:a1:4d:5c:30:c3:46:92:08:d8:72:d5:25:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=0fb0fc2e2a9bb19594cda98ae097fd89c28fb2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:de:39:5c:61:4f:27:07:2f:9f:ca:32:2c: e0:76:80:f1:75:e6:8b:03:f0:92:aa:68:3d:2c:d0: c7:d1:3e:4c:d9:85:fa:ae:8a:2b:96:a6:29:4c:de: 62:82:b1:85:08:74:ee:ca:3c:0f:04:e2:f4:31:03: 28:3e:4c:73:3e:7d:9e:e8:f6:c8:d9:1b:7e:33:55: 79:50:5c:f9:a3:8e:1c:9f:f4:9e:ff:bf:32:01:ff: 95:7b:74:f5:21:e5:6d:f4:ff:9e:e9:d5:82:7a:60: b2:02:8d:67:cf:81:5e:82:93:f2:93:9a:fa:c0:bc: ee:c7:f9:40:71:8b:34:05:8b:7e:2b:fc:82:aa:55: 13:b2:23:b4:8c:99:65:ed:9a:7c:54:bf:57:20:99: 5f:85:56:9f:80:56:b6:dc:fb:68:da:5c:a3:af:7f: 79:d0:fa:76:de:d7:df:c9:5b:e7:7e:96:3f:be:bc: 7e:4e:ce:36:2b:8f:3b:ef:fa:76:2f:82:1f:3b:26: c8:1c:9a:63:72:2e:2f:8c:8e:16:8f:8e:7a:df:ac: 61:2c:fd:69:a0:c4:de:c7:45:ce:d3:6b:7f:9a:48: d0:82:55:0f:97:0e:49:b0:9e:a3:a2:16:b7:78:32: 0f:b8:b9:2e:94:e2:76:33:1f:65:fc:e4:ce:3c:57: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:FC:2E:2A:9B:B1:95:94:CD:A9:8A:E0:97:FD:89:C2:8F:B2:B8 X509v3 Authority Key Identifier: keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:2e:51:a5:d9:d8:7f:32:59:87:73:ea:0e:5b:22:90:e3:89: 1f:b2:86:fc:e1:16:04:eb:66:ca:e0:68:06:2b:06:06:a7:18: 75:04:c4:87:20:dd:72:13:b2:ca:b1:91:4c:86:cc:f3:39:54: 53:b5:49:a6:92:ce:67:c9:31:7b:5e:34:a4:00:72:33:ed:f6: 48:fe:cf:9a:00:6d:c2:32:41:55:6b:65:d2:3d:14:eb:ac:bf: dc:4d:7c:04:31:42:8d:f8:fe:1c:1f:4c:2b:f2:14:c5:22:ef: 70:af:82:ec:c1:d8:bf:11:08:b0:50:64:78:d7:2b:2f:0c:b5: 59:2d:20:10:19:85:df:63:52:dd:a6:79:80:76:8d:0d:bf:5b: 89:9d:87:71:3d:e7:57:28:fc:f3:d2:0c:7e:ce:c3:e1:c9:c6: 8d:6e:49:cd:56:fa:fe:55:ed:ba:ae:0f:90:55:60:be:ce:e4: e4:e0:64:27:b8:f1:5d:7c:b4:e5:df:3a:55:ea:d7:64:2b:1f: a9:ae:a0:f5:25:96:27:48:01:ad:69:8e:6b:b3:3e:e2:3a:31: 4a:c4:54:62:15:a1:83:5b:b4:4e:7c:cb:5e:ce:75:e5:ab:2c: 83:a1:93:df:de:6d:49:b8:3e:b5:7e:63:79:f5:cb:83:26:73: 1f:a2:52:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcWhTVwww0aSCNhy1SUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw YTUxNTUwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EygwZmIwZmMyZTJhOWJiMTk1OTRjZGE5OGFlMDk3ZmQ4OWMyOGZiMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qLeOVxhTycHL5/KMizgdoDxdeaL A/CSqmg9LNDH0T5M2YX6roorlqYpTN5igrGFCHTuyjwPBOL0MQMoPkxzPn2e6PbI 2Rt+M1V5UFz5o44cn/Se/78yAf+Ve3T1IeVt9P+e6dWCemCyAo1nz4FegpPyk5r6 wLzux/lAcYs0BYt+K/yCqlUTsiO0jJll7Zp8VL9XIJlfhVafgFa23Pto2lyjr395 0Pp23tffyVvnfpY/vrx+Ts42K4877/p2L4IfOybIHJpjci4vjI4Wj45636xhLP1p oMTex0XO02t/mkjQglUPlw5JsJ6joha3eDIPuLkulOJ2Mx9l/OTOPFcQAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+w/C4qm7GVlM2piuCX/YnCj7K4MB8GA1UdIwQY MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt MWE2Y2U1ZmFmOTE2LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2 LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy5RpdnY fzJZh3PqDlsikOOJH7KG/OEWBOtmyuBoBisGBqcYdQTEhyDdchOyyrGRTIbM8zlU U7VJppLOZ8kxe140pAByM+32SP7PmgBtwjJBVWtl0j0U66y/3E18BDFCjfj+HB9M K/IUxSLvcK+C7MHYvxEIsFBkeNcrLwy1WS0gEBmF32NS3aZ5gHaNDb9biZ2HcT3n Vyj889IMfs7D4cnGjW5JzVb6/lXtuq4PkFVgvs7k5OBkJ7jxXXy05d86VerXZCsf qa6g9SWWJ0gBrWmOa7M+4joxSsRUYhWhg1u0TnzLXs515assg6GT395tSbg+tX5j efXLgyZzH6JSqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:32 2025 by rpki-client