This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json) Hash identifier: 3RWvc83BGKmc1N9UEBbzStRzu+TeowWrQywIekyFbsk= Subject key identifier: 26:D7:24:30:2E:60:2C:F9:6C:7F:C6:8C:BF:66:38:0F:95:19:15:12 Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Certificate serial: 019AF12F129A1E8368D8EE527E5F6926DB6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft Manifest number: 1280 Signing time: Sat 06 Dec 2025 01:03:05 +0000 Manifest this update: Sat 06 Dec 2025 01:03:05 +0000 Manifest next update: Sun 07 Dec 2025 01:03:05 +0000 Files and hashes: 1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=) 2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: pZh72SW0Zkied5wCxF/w1I9FMra60xIc7ukldlLGlh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:12:9a:1e:83:68:d8:ee:52:7e:5f:69:26:db:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447 Validity Not Before: Dec 6 01:03:05 2025 GMT Not After : Dec 7 01:03:05 2025 GMT Subject: CN=26d724302e602cf96c7fc68cbf66380f95191512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:4f:c9:a1:0c:48:c7:4f:2b:7d:7c:9c:91: 1c:db:eb:52:f4:f9:cd:fc:d7:09:52:cb:96:95:25: 69:22:72:cb:79:b4:3b:67:bb:fd:53:17:c3:62:82: 1f:9e:06:85:c4:31:99:0b:50:be:b6:64:a5:b9:a3: 42:38:69:85:ac:0f:0e:87:61:c9:04:42:a8:16:f0: 2b:95:16:e7:c0:eb:d0:96:c2:8b:ec:ea:e7:df:8e: 1d:c0:74:db:6c:19:c5:91:2f:ce:67:d1:b4:74:cf: 86:6c:79:01:d3:49:e6:bd:07:4b:fa:4f:02:28:32: 09:3b:68:57:76:5b:29:99:ef:6f:98:f8:ac:57:7c: 78:a7:e4:22:bc:44:fb:6e:dd:b4:e0:92:43:ef:b6: 47:a7:3a:71:19:8a:79:7b:d8:73:43:2e:f2:e4:79: 76:ee:29:6b:54:97:cf:c5:89:8a:59:dd:d4:e2:48: ce:83:4d:ae:b6:af:aa:a2:b5:4d:8f:41:55:99:01: b0:e2:ae:7f:17:1a:54:ca:c8:1d:53:fa:fa:c5:3f: 64:c8:a5:ee:ed:11:93:16:c2:71:aa:b1:32:a9:fe: 1d:55:a2:4f:a6:fd:30:f4:99:ce:00:74:12:6d:5e: f4:cb:c7:6a:23:1b:62:33:ea:5e:97:0c:64:db:2b: 18:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D7:24:30:2E:60:2C:F9:6C:7F:C6:8C:BF:66:38:0F:95:19:15:12 X509v3 Authority Key Identifier: keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:69:f9:12:fc:68:26:52:8c:cb:e3:cd:71:6f:bd:48:06:04: 35:e5:0c:0e:74:7a:8e:e4:61:67:05:44:11:5a:40:87:26:58: 89:e2:8f:21:a9:c9:db:72:75:c6:d0:bc:ea:dc:63:2a:0b:9b: 4a:2d:b3:c9:dc:de:17:f2:9e:84:c6:54:37:50:ee:99:09:99: 62:3a:02:c9:9c:f7:c9:04:49:1f:b3:50:df:a3:a2:da:98:9a: 68:7a:64:ea:32:9c:5d:ed:9f:c7:6a:6c:da:52:92:1a:e2:7b: a4:7d:4a:9c:e8:c7:b3:48:89:12:fb:8d:79:4b:d5:af:ed:c0: 00:44:9b:fc:14:47:ce:f5:96:96:57:78:24:88:c6:bb:81:4d: 1b:ef:47:ad:aa:ee:a0:9b:17:cb:e4:b5:af:af:df:fd:3a:01: 51:98:85:27:2a:77:c0:a0:dc:6b:3c:86:cf:6f:6c:13:df:65: 81:c1:3f:b2:a3:8e:2a:a2:f9:df:38:a9:57:f1:2e:86:27:f2: 68:e0:d6:2d:ed:b2:88:89:8b:1b:0a:cd:28:cf:81:ef:f1:3f: 0b:30:4a:9a:f2:37:8f:a1:db:cb:8e:92:9e:d6:ba:50:45:37: 84:6a:38:9c:ef:83:8d:38:46:67:ea:be:09:63:99:52:c9:a8: 30:81:bf:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLxKaHoNo2O5Sfl9pJttqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODkzODEzMDdhZTVlM2IxYmE4NjU4Y2RhN2VlMmFkYTQx NDE0NDcwHhcNMjUxMjA2MDEwMzA1WhcNMjUxMjA3MDEwMzA1WjAzMTEwLwYDVQQD EygyNmQ3MjQzMDJlNjAyY2Y5NmM3ZmM2OGNiZjY2MzgwZjk1MTkxNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDlPyaEMSMdPK318nJEc2+tS9PnN /NcJUsuWlSVpInLLebQ7Z7v9UxfDYoIfngaFxDGZC1C+tmSluaNCOGmFrA8Oh2HJ BEKoFvArlRbnwOvQlsKL7Orn344dwHTbbBnFkS/OZ9G0dM+GbHkB00nmvQdL+k8C KDIJO2hXdlspme9vmPisV3x4p+QivET7bt204JJD77ZHpzpxGYp5e9hzQy7y5Hl2 7ilrVJfPxYmKWd3U4kjOg02utq+qorVNj0FVmQGw4q5/FxpUysgdU/r6xT9kyKXu 7RGTFsJxqrEyqf4dVaJPpv0w9JnOAHQSbV70y8dqIxtiM+pelwxk2ysYgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbXJDAuYCz5bH/GjL9mOA+VGRUSMB8GA1UdIwQY MBaAFP2JOBMHrl47G6hljNp+4q2kFBRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTct NjQ2ZWU2ZGZhNmI2LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kY2Y5YjctNmQ3Mi00NzVhLWJhYTctNjQ2ZWU2ZGZhNmI2 LzEvX1lrNEV3ZXVYanNicUdXTTJuN2lyYVFVRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmn5Evxo JlKMy+PNcW+9SAYENeUMDnR6juRhZwVEEVpAhyZYieKPIanJ23J1xtC86txjKgub Si2zydzeF/KehMZUN1DumQmZYjoCyZz3yQRJH7NQ36Oi2piaaHpk6jKcXe2fx2ps 2lKSGuJ7pH1KnOjHs0iJEvuNeUvVr+3AAESb/BRHzvWWlld4JIjGu4FNG+9Hraru oJsXy+S1r6/f/ToBUZiFJyp3wKDcazyGz29sE99lgcE/sqOOKqL53zipV/Euhify aODWLe2yiImLGwrNKM+B7/E/CzBKmvI3j6Hby46Snta6UEU3hGo4nO+DjThGZ+q+ CWOZUsmoMIG/vA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:58 2025 by rpki-client