This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json) Hash identifier: LJoFtwIjAHof4tbPSQAflqToMtFZ4c9HRtQNhIGmcTQ= Subject key identifier: B1:0B:95:75:2C:4D:A4:1E:46:37:CB:2B:5D:F2:BA:15:65:54:62:01 Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019AF49C64DB4616BC13717F12FB1E336809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft Manifest number: 1049 Signing time: Sat 06 Dec 2025 17:01:21 +0000 Manifest this update: Sat 06 Dec 2025 17:01:21 +0000 Manifest next update: Sun 07 Dec 2025 17:01:21 +0000 Files and hashes: 1: 0iPJ2Dh0D4LzrYF2tobncG31bno.roa (hash: Agw0WqN/VV08aCvp6BEcIrMtpqo5iMZ3tN+s+tu8iOA=) 2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: 51HtT2nOplq4crRkXLLtSp2btQcazM6BHk2psMtAStM=) 3: z9SG77lfTVyCRLoqp7jIC_9mXq8.roa (hash: IXpMEmP0C8uUOjQ/aQFRstq5yGkWLGGJFEJv+E+mBs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:64:db:46:16:bc:13:71:7f:12:fb:1e:33:68:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Dec 6 17:01:21 2025 GMT Not After : Dec 7 17:01:21 2025 GMT Subject: CN=b10b95752c4da41e4637cb2b5df2ba1565546201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:66:e6:50:bc:ae:ee:81:6e:29:c1:4a:16: 78:96:ed:9e:88:2b:9a:5a:92:70:d9:70:5e:d0:31: 8b:6c:3d:bf:5a:9a:9e:cf:86:f9:ba:05:06:e2:60: 75:90:7e:b8:0b:fa:ec:8c:28:52:26:ab:39:0e:78: dd:95:dc:fb:00:f3:36:c0:b2:02:83:40:4e:91:b8: 43:fb:d4:f0:90:06:ba:ef:71:89:c8:7c:fd:59:e4: d7:09:d3:5e:0d:2d:e6:bb:3d:fc:6c:3c:1b:35:e3: 3c:cb:8a:6f:11:6e:49:24:e1:02:b3:2e:15:65:2e: e7:3b:41:e5:9e:87:bf:cd:27:5e:9d:f6:a4:97:c0: 9f:f7:74:56:32:a3:2f:6a:54:74:97:ac:23:84:ab: 9f:08:69:45:af:84:96:5e:40:66:2d:97:b4:aa:35: c5:a6:04:7b:fa:9f:e8:8f:8f:e9:3c:4a:42:fa:e4: 70:2c:09:15:ef:a6:ef:2e:27:2d:e8:36:c7:12:31: df:c4:c2:02:a8:2c:a7:98:4b:96:84:07:7f:cf:e8: d2:4d:61:e9:8f:6a:dd:ec:30:bb:4b:ef:61:9a:87: 83:cd:83:79:17:02:d6:c4:b7:53:c5:90:1e:91:c5: f5:58:c8:ac:83:3d:c7:27:28:a7:05:fc:b5:55:11: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0B:95:75:2C:4D:A4:1E:46:37:CB:2B:5D:F2:BA:15:65:54:62:01 X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d4:09:3d:0e:36:fe:66:6c:9d:1c:4f:f6:02:67:bf:22:51: b6:33:1c:d8:da:ea:10:77:88:b8:59:1c:ad:88:19:8a:79:7c: f2:a1:62:6e:0f:b9:1b:80:e9:03:30:86:de:89:d3:e9:da:f9: 98:e4:30:76:98:b2:91:19:04:8e:c3:8e:0d:2e:bf:36:1d:e8: 3a:e6:bd:2c:c5:20:ad:c0:9b:a2:bf:ab:8f:a6:91:89:e4:56: 7c:a5:8c:03:87:d4:b1:04:08:19:6c:c0:5a:ad:ca:20:42:f7: a0:1b:a7:bd:c8:7b:08:19:7d:c9:bb:08:7a:bb:6d:06:d6:d2: 44:1b:27:f5:20:f7:ca:25:ee:82:27:e3:1b:06:3b:e6:90:3f: e2:23:11:8a:af:d1:81:16:11:60:ce:22:5a:8d:77:26:33:de: 6f:91:eb:23:e7:2f:99:fd:6d:3d:a9:92:ae:25:69:87:d1:42: c6:f2:54:f0:e8:98:44:33:de:73:7d:66:53:63:f6:41:3b:40: ba:0e:e6:7c:8d:0a:65:e5:fe:f6:4e:76:a9:3e:74:a2:d8:f7: 45:69:18:ba:f2:df:e0:8a:e8:50:03:f1:63:81:54:dd:8d:b7: b3:a1:87:47:06:6e:a4:37:50:04:75:95:0b:16:c8:5e:41:06: 38:57:0d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGTbRha8E3F/EvseM2gJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjUxMjA2MTcwMTIxWhcNMjUxMjA3MTcwMTIxWjAzMTEwLwYDVQQD EyhiMTBiOTU3NTJjNGRhNDFlNDYzN2NiMmI1ZGYyYmExNTY1NTQ2MjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusJm5lC8ru6BbinBShZ4lu2eiCua WpJw2XBe0DGLbD2/Wpqez4b5ugUG4mB1kH64C/rsjChSJqs5Dnjdldz7APM2wLIC g0BOkbhD+9TwkAa673GJyHz9WeTXCdNeDS3muz38bDwbNeM8y4pvEW5JJOECsy4V ZS7nO0Hlnoe/zSdenfakl8Cf93RWMqMvalR0l6wjhKufCGlFr4SWXkBmLZe0qjXF pgR7+p/oj4/pPEpC+uRwLAkV76bvLict6DbHEjHfxMICqCynmEuWhAd/z+jSTWHp j2rd7DC7S+9hmoeDzYN5FwLWxLdTxZAekcX1WMisgz3HJyinBfy1VRFNPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLELlXUsTaQeRjfLK13yuhVlVGIBMB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNQJPQ42 /mZsnRxP9gJnvyJRtjMc2NrqEHeIuFkcrYgZinl88qFibg+5G4DpAzCG3onT6dr5 mOQwdpiykRkEjsOODS6/Nh3oOua9LMUgrcCbor+rj6aRieRWfKWMA4fUsQQIGWzA Wq3KIEL3oBunvch7CBl9ybsIerttBtbSRBsn9SD3yiXugifjGwY75pA/4iMRiq/R gRYRYM4iWo13JjPeb5HrI+cvmf1tPamSriVph9FCxvJU8OiYRDPec31mU2P2QTtA ug7mfI0KZeX+9k52qT50otj3RWkYuvLf4IroUAPxY4FU3Y23s6GHRwZupDdQBHWV CxbIXkEGOFcN0A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:14 2025 by rpki-client