This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft File: ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json) Hash identifier: TopYVAl+cFNc7J61xX7KBzDtWdRvLC5KidB82+LPkOU= Subject key identifier: B3:1E:13:F6:68:4F:40:83:AE:0A:6E:7F:C0:9D:D1:0A:6E:3A:C5:8F Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64 Certificate issuer: /CN=ca64dabd9bc46485f6a91636ede753da38c8f364 Certificate serial: 019AF2770F1547D73B9FF02E4831D483F692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=) 2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: CB8XkglR5KqeaHWYldCXUUCcgAK75WlfZ+T6wQMWO0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0f:15:47:d7:3b:9f:f0:2e:48:31:d4:83:f6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=b31e13f6684f4083ae0a6e7fc09dd10a6e3ac58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:93:f6:61:9c:0c:02:f3:b1:9e:5f:0a:67: ba:e3:1a:7a:66:cb:1e:e6:19:9d:1c:d8:03:ff:40: e0:01:25:21:78:23:77:ae:e3:47:c5:12:dc:61:40: 7b:a0:e7:fb:7f:ed:0f:d0:3b:2a:bf:fd:6d:7d:a9: 49:0f:82:98:a7:ca:86:8a:bf:fa:74:d7:ff:5d:ff: 8b:21:72:c6:68:f8:99:35:79:38:27:78:b1:33:49: 0c:24:ea:a0:e8:2a:81:b2:0a:5f:30:41:6a:73:e0: c9:46:33:02:71:32:3f:23:9a:db:f7:b2:e1:cf:46: f5:9c:8e:60:f2:63:94:f2:e5:a8:20:8e:a2:41:b7: f7:6d:6a:4a:78:88:6b:b1:24:c5:6a:e7:dc:83:fa: ab:f1:ee:93:34:64:6d:96:35:04:3f:83:96:7c:c5: 48:af:7e:6f:fd:41:bc:45:92:32:a4:a8:68:c1:f2: 9d:4e:6b:9e:b8:3a:5c:a8:5c:6c:c3:5b:d3:b0:76: 02:4a:6f:34:e0:5b:1a:15:12:6e:cb:be:3b:52:34: 13:ab:21:a9:ce:c7:10:1b:e2:60:81:7a:b9:3f:d6: 0e:39:10:22:2f:9d:3e:0b:49:87:5c:f2:e7:72:d6: d9:d4:ec:0d:62:6f:7b:88:5e:9f:23:3b:1f:f6:e0: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:13:F6:68:4F:40:83:AE:0A:6E:7F:C0:9D:D1:0A:6E:3A:C5:8F X509v3 Authority Key Identifier: keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:0c:b6:c0:2f:41:45:7c:6e:17:df:fc:34:28:38:19:bf: d4:58:fa:e3:80:75:a2:d2:cc:28:c1:ef:91:4c:72:1a:57:2f: 04:f7:62:6e:38:39:a6:09:7a:18:01:a7:aa:25:5e:b3:5c:c3: c1:6f:dc:43:df:c1:ed:10:83:0f:26:a2:85:32:78:40:4c:4c: 99:9e:55:a0:d5:46:d4:20:3f:ca:b4:05:b5:db:5e:51:50:56: 71:9c:eb:7c:2c:33:82:e1:b2:0b:f4:2b:dc:27:bc:58:03:34: 9d:b2:27:72:df:bb:a4:6e:3c:c5:7c:5f:ba:2e:18:fa:5c:5d: 6c:7a:3b:81:db:d0:95:80:ad:0b:89:33:a1:dc:3b:f3:56:72: 6f:8e:f4:b4:a0:22:77:3d:32:49:58:d5:4a:e7:b8:6e:19:c5: 62:13:8e:b0:dc:7e:21:0d:9c:2f:7e:a7:e4:5d:96:54:8a:80: a2:3c:7f:6a:fb:5c:08:11:b7:cd:97:21:cb:4c:96:09:e3:4f: ec:fd:17:f3:6c:e6:be:7f:f0:fb:56:2f:17:7c:04:eb:e8:cb: 3b:3e:3f:23:69:91:57:f1:ae:2b:0b:8e:7e:cc:b3:14:e7:b2: 59:c4:1a:fb:c9:e8:be:9c:9a:80:dd:49:6d:c7:a0:27:60:0b: 28:12:f0:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydw8VR9c7n/AuSDHUg/aSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjRkYWJkOWJjNDY0ODVmNmE5MTYzNmVkZTc1M2RhMzhj OGYzNjQwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhiMzFlMTNmNjY4NGY0MDgzYWUwYTZlN2ZjMDlkZDEwYTZlM2FjNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI2T9mGcDALzsZ5fCme64xp6Zsse 5hmdHNgD/0DgASUheCN3ruNHxRLcYUB7oOf7f+0P0Dsqv/1tfalJD4KYp8qGir/6 dNf/Xf+LIXLGaPiZNXk4J3ixM0kMJOqg6CqBsgpfMEFqc+DJRjMCcTI/I5rb97Lh z0b1nI5g8mOU8uWoII6iQbf3bWpKeIhrsSTFaufcg/qr8e6TNGRtljUEP4OWfMVI r35v/UG8RZIypKhowfKdTmueuDpcqFxsw1vTsHYCSm804FsaFRJuy747UjQTqyGp zscQG+JggXq5P9YOORAiL50+C0mHXPLnctbZ1OwNYm97iF6fIzsf9uDHvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMeE/ZoT0CDrgpuf8Cd0QpuOsWPMB8GA1UdIwQY MBaAFMpk2r2bxGSF9qkWNu3nU9o4yPNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUt NTAyOGMyNTliMjY3LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNDE4ODItYTQzNy00YWIzLWIzOGUtNTAyOGMyNTliMjY3 LzEveW1UYXZadkVaSVgycVJZMjdlZFQyampJODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXQMtsAv QUV8bhff/DQoOBm/1Fj644B1otLMKMHvkUxyGlcvBPdibjg5pgl6GAGnqiVes1zD wW/cQ9/B7RCDDyaihTJ4QExMmZ5VoNVG1CA/yrQFtdteUVBWcZzrfCwzguGyC/Qr 3Ce8WAM0nbInct+7pG48xXxfui4Y+lxdbHo7gdvQlYCtC4kzodw781Zyb470tKAi dz0ySVjVSue4bhnFYhOOsNx+IQ2cL36n5F2WVIqAojx/avtcCBG3zZchy0yWCeNP 7P0X82zmvn/w+1YvF3wE6+jLOz4/I2mRV/GuKwuOfsyzFOeyWcQa+8novpyagN1J bcegJ2ALKBLwlA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:38 2025 by rpki-client