This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json) Hash identifier: O+3iWrj9F3QB3U++97HwvFbgpl+M3JGVzWl9HQn83Tg= Subject key identifier: 22:E4:6F:0E:C4:ED:14:99:84:5A:BA:C4:CB:67:08:CA:B6:7E:FA:7A Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Certificate serial: 019AF16442D5C719C3A8AD39E005206D28D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft Manifest number: 07B7 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: d6sgkQbNQYkqYXcedUvxxcDi_RY.roa (hash: qNUbQpwyqYmbMOUJJoCyiXY3LQNxqUvVSzT1Kq6z0rI=) 2: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: fC4PDO+mTZ8Y+jhDF4dxinWTMZq7uRFW7/VoNRVyeSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:42:d5:c7:19:c3:a8:ad:39:e0:05:20:6d:28:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=22e46f0ec4ed1499845abac4cb6708cab67efa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:9f:7a:d0:6d:60:d4:17:9c:26:d7:bb:e7:03: ae:e3:3b:df:94:13:1f:6f:8b:a4:04:72:e0:75:81: fb:67:a6:f7:67:22:cd:59:c2:17:a5:fa:ac:5c:72: 13:da:af:47:d5:d3:53:a7:77:6c:6e:b1:54:c2:7b: 5c:8a:4e:8a:9f:1e:df:17:ac:b5:a9:fe:23:78:1a: dd:dc:4a:56:ca:69:68:5b:ed:0e:a1:18:bd:f1:64: 71:c6:48:ab:db:53:99:66:6d:23:ce:99:6f:fc:68: 2f:9a:ea:2f:80:0d:bd:65:de:4b:35:e9:33:0c:f8: 17:f3:c6:f4:61:9f:3a:e4:f1:c7:fe:21:c1:87:17: 5b:f0:05:31:16:64:76:dc:d7:55:ce:a9:c8:3e:54: 8b:2b:d9:c2:a6:65:04:b1:50:e2:77:ec:7c:40:95: ec:f0:7d:87:68:f7:c6:3b:22:84:1c:aa:33:74:b0: bf:62:0b:67:5c:05:f8:ec:ec:44:54:7d:12:07:aa: c4:05:f8:d3:7e:54:0c:9f:0e:d7:f3:24:4d:41:07: 67:98:96:7b:6a:b8:65:1c:71:2f:16:24:ca:50:c7: 81:5c:d7:be:ef:22:c5:b7:ac:14:b6:db:7f:e6:42: d8:ce:88:1a:41:df:b2:49:2c:03:d8:20:e0:75:82: 65:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E4:6F:0E:C4:ED:14:99:84:5A:BA:C4:CB:67:08:CA:B6:7E:FA:7A X509v3 Authority Key Identifier: keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c8:13:86:c7:9c:c2:72:e0:80:c5:2b:4e:1d:54:26:7c:82: ea:0b:4b:d3:86:af:ab:a8:81:b8:a2:26:26:a6:fe:3e:bd:b2: c7:a7:60:d6:01:9e:e3:02:80:61:c5:56:8a:da:48:e9:d7:fa: af:0d:a4:65:e7:7f:ab:af:a5:37:8e:86:13:79:f2:6c:46:1d: b9:ee:20:2e:9c:54:83:71:3e:b7:4d:13:dd:4d:ce:a6:32:41: 87:f8:4c:54:e5:72:4d:48:36:1f:75:00:cf:f8:35:62:ab:37: 4e:3c:85:43:08:85:52:0e:29:f1:87:d2:99:3a:e0:1c:02:41: 15:92:b2:60:a0:d2:ef:e2:f9:6a:85:cc:4d:1b:d2:34:aa:6a: 29:fc:ce:b6:57:6a:19:9f:a1:b1:49:ae:84:27:8d:2a:3f:1d: fe:ec:f3:8d:f7:fd:2a:3d:44:24:7f:ed:39:9c:73:d3:b5:bf: 7f:df:97:40:e3:a8:35:ce:3c:13:bf:4f:84:20:d2:a6:ac:ab: 13:60:2e:f6:53:f9:a6:79:b0:57:fe:3a:1e:52:eb:37:9d:6a: d0:39:be:0d:f2:8b:49:20:50:a5:c0:46:30:d8:de:2d:90:71: d5:1b:fa:1a:cd:67:15:e6:69:aa:bc:a4:6e:1a:b9:1b:f5:8f: f1:9d:1c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZELVxxnDqK054AUgbSjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5 NzM0M2MwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EygyMmU0NmYwZWM0ZWQxNDk5ODQ1YWJhYzRjYjY3MDhjYWI2N2VmYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/p960G1g1BecJte75wOu4zvflBMf b4ukBHLgdYH7Z6b3ZyLNWcIXpfqsXHIT2q9H1dNTp3dsbrFUwntcik6Knx7fF6y1 qf4jeBrd3EpWymloW+0OoRi98WRxxkir21OZZm0jzplv/GgvmuovgA29Zd5LNekz DPgX88b0YZ865PHH/iHBhxdb8AUxFmR23NdVzqnIPlSLK9nCpmUEsVDid+x8QJXs 8H2HaPfGOyKEHKozdLC/YgtnXAX47OxEVH0SB6rEBfjTflQMnw7X8yRNQQdnmJZ7 arhlHHEvFiTKUMeBXNe+7yLFt6wUttt/5kLYzogaQd+ySSwD2CDgdYJlBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLkbw7E7RSZhFq6xMtnCMq2fvp6MB8GA1UdIwQY MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5 LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcgThsec wnLggMUrTh1UJnyC6gtL04avq6iBuKImJqb+Pr2yx6dg1gGe4wKAYcVWitpI6df6 rw2kZed/q6+lN46GE3nybEYdue4gLpxUg3E+t00T3U3OpjJBh/hMVOVyTUg2H3UA z/g1Yqs3TjyFQwiFUg4p8YfSmTrgHAJBFZKyYKDS7+L5aoXMTRvSNKpqKfzOtldq GZ+hsUmuhCeNKj8d/uzzjff9Kj1EJH/tOZxz07W/f9+XQOOoNc48E79PhCDSpqyr E2Au9lP5pnmwV/46HlLrN51q0Dm+DfKLSSBQpcBGMNjeLZBx1Rv6Gs1nFeZpqryk bhq5G/WP8Z0cEg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:42 2025 by rpki-client