This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json) Hash identifier: 0302QIRoanb/SxjXxPfvi2+eCDzVXAm8ildQ1Z6Ywjk= Subject key identifier: 22:81:9B:08:E0:BE:8E:06:AA:98:CD:55:23:3D:C6:1F:91:FD:08:D4 Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86 Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86 Certificate serial: 019AF61C23161720610271C949559B30A475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft Manifest number: 070E Signing time: Sun 07 Dec 2025 00:00:30 +0000 Manifest this update: Sun 07 Dec 2025 00:00:30 +0000 Manifest next update: Mon 08 Dec 2025 00:00:30 +0000 Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=) 2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: ztn9UB8JRbZX3/+SwwbDg50UID370WZszjOGjlIazBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:23:16:17:20:61:02:71:c9:49:55:9b:30:a4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86 Validity Not Before: Dec 7 00:00:30 2025 GMT Not After : Dec 8 00:00:30 2025 GMT Subject: CN=22819b08e0be8e06aa98cd55233dc61f91fd08d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:69:cc:ab:37:8f:c5:5b:ca:98:b9:33:30:ec: d6:17:e1:9b:03:89:d7:0e:ad:61:3b:89:1a:28:d0: 91:bc:12:ad:1e:6f:11:ef:ae:ba:b0:a0:76:93:d1: b8:30:17:f5:63:e1:29:8a:7e:bf:76:d7:66:0e:9f: b5:e2:3b:40:58:e2:87:62:20:06:08:bf:c5:64:d7: 46:35:af:1f:90:75:0e:06:f9:c2:29:57:5a:84:57: 9e:41:28:ae:45:b9:f8:a5:ea:c2:81:8a:eb:15:10: 50:32:56:13:ce:07:5b:05:f2:61:06:9d:e5:81:aa: 2d:33:7c:48:09:8d:ec:0f:c5:25:40:77:00:cc:27: e1:38:24:f2:8f:4a:00:3c:13:89:05:b4:cd:3d:78: dd:6a:4e:40:27:5e:f4:84:47:93:24:2e:94:ef:35: 02:cd:82:56:2a:86:02:28:67:a9:1d:2d:f1:dc:8f: 7b:ff:69:5f:ef:d2:97:62:8b:be:ac:c4:50:6b:6f: 30:9d:17:5c:38:e7:6e:89:68:59:fc:ee:c5:9f:23: 71:4f:18:68:68:78:42:5a:1d:69:37:12:c7:e4:99: 4e:79:d2:1e:5e:20:dd:86:95:c7:3f:c9:f2:0e:81: db:a6:f5:7a:63:ab:a6:a2:61:8c:c7:ad:37:b3:40: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:9B:08:E0:BE:8E:06:AA:98:CD:55:23:3D:C6:1F:91:FD:08:D4 X509v3 Authority Key Identifier: keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0c:10:56:f3:f4:e7:30:45:99:7d:1b:c3:37:c7:fa:e1:b7: bc:c4:cf:d9:76:4a:71:2f:51:2d:4a:89:27:41:b9:67:de:4f: 83:25:11:cd:b5:f1:1e:7c:b9:b2:cb:1a:fd:e8:ef:65:51:74: 9a:84:ec:64:8d:24:5d:45:a0:3a:7b:52:bc:9f:a5:e8:3a:56: b0:b1:10:69:67:e2:f2:c3:8d:2b:88:44:c4:69:4a:5d:82:93: d0:be:68:f6:78:47:87:63:49:77:fc:40:bf:34:29:87:83:5b: f5:91:aa:e1:25:5c:63:c3:9f:5f:36:04:64:df:72:e7:45:8e: 96:f6:b3:64:eb:a5:d6:bb:2e:6a:b9:2f:6f:6d:2f:d1:5e:05: c2:00:df:02:7a:be:ef:e2:f6:36:43:69:46:e2:6d:fd:60:bc: 7b:f5:95:37:a9:e4:7a:3b:ef:2c:cd:09:b4:43:8b:a6:e4:ee: 6b:ee:be:48:87:6e:a2:4e:67:27:2d:0a:2e:7e:4f:71:e5:c9: 2e:ba:e2:87:38:4a:e0:dd:71:cc:de:5e:60:40:50:c2:2a:3e: 7c:9e:a5:b7:4d:67:fc:d0:9d:14:b6:cc:12:3a:e7:f1:85:95: 0c:dc:67:6d:ab:83:b8:e3:5b:c6:f3:08:dd:5e:a4:29:d0:42: 5f:5e:f1:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCMWFyBhAnHJSVWbMKR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTkyOTVkM2FkYTdlNmViMzI5ODQ0OTYxY2FhMTAwMmNh YTRkODYwHhcNMjUxMjA3MDAwMDMwWhcNMjUxMjA4MDAwMDMwWjAzMTEwLwYDVQQD EygyMjgxOWIwOGUwYmU4ZTA2YWE5OGNkNTUyMzNkYzYxZjkxZmQwOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52nMqzePxVvKmLkzMOzWF+GbA4nX Dq1hO4kaKNCRvBKtHm8R7666sKB2k9G4MBf1Y+Epin6/dtdmDp+14jtAWOKHYiAG CL/FZNdGNa8fkHUOBvnCKVdahFeeQSiuRbn4perCgYrrFRBQMlYTzgdbBfJhBp3l gaotM3xICY3sD8UlQHcAzCfhOCTyj0oAPBOJBbTNPXjdak5AJ170hEeTJC6U7zUC zYJWKoYCKGepHS3x3I97/2lf79KXYou+rMRQa28wnRdcOOduiWhZ/O7FnyNxTxho aHhCWh1pNxLH5JlOedIeXiDdhpXHP8nyDoHbpvV6Y6umomGMx603s0CL6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKBmwjgvo4GqpjNVSM9xh+R/QjUMB8GA1UdIwQY MBaAFGMZKV062n5usymESWHKoQAsqk2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2Et N2U0ZTJmOGI1YjE2LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2EtN2U0ZTJmOGI1YjE2 LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQwQVvP0 5zBFmX0bwzfH+uG3vMTP2XZKcS9RLUqJJ0G5Z95PgyURzbXxHny5sssa/ejvZVF0 moTsZI0kXUWgOntSvJ+l6DpWsLEQaWfi8sONK4hExGlKXYKT0L5o9nhHh2NJd/xA vzQph4Nb9ZGq4SVcY8OfXzYEZN9y50WOlvazZOul1rsuarkvb20v0V4FwgDfAnq+ 7+L2NkNpRuJt/WC8e/WVN6nkejvvLM0JtEOLpuTua+6+SIduok5nJy0KLn5PceXJ LrrihzhK4N1xzN5eYEBQwio+fJ6lt01n/NCdFLbMEjrn8YWVDNxnbauDuONbxvMI 3V6kKdBCX17x7w== -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:02 2025 by rpki-client