This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json) Hash identifier: bNbUuwBHKGJGrI9Z27yVn1tFOAFvGiQZv0iZ+WQ6wHk= Subject key identifier: 8B:2E:6B:8C:27:82:4C:E1:48:08:E8:83:47:1B:E1:D7:AA:08:3E:23 Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Certificate serial: 019B45B806FF6170CA6820536FA823F15D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft Manifest number: 05DC Signing time: Mon 22 Dec 2025 11:00:46 +0000 Manifest this update: Mon 22 Dec 2025 11:00:46 +0000 Manifest next update: Tue 23 Dec 2025 11:00:46 +0000 Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=) 2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: sjtRb2TUk7GLEtVc6Cc9qXRYNos13BzHHlnLJBEuYmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:06:ff:61:70:ca:68:20:53:6f:a8:23:f1:5d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Validity Not Before: Dec 22 11:00:46 2025 GMT Not After : Dec 23 11:00:46 2025 GMT Subject: CN=8b2e6b8c27824ce14808e883471be1d7aa083e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:3e:e4:f7:51:fd:cc:66:e9:25:68:47:fa: 63:37:92:00:b1:f6:89:9b:b7:58:05:fc:cb:51:51: a2:cb:80:85:78:5e:4f:2d:e5:c6:5c:a9:b8:61:2c: 56:2f:22:86:85:26:d3:9a:5a:03:b6:6f:af:27:17: e0:dd:7e:a5:e4:ad:b3:36:8a:e0:07:7f:13:dd:d5: f5:0a:97:d5:39:98:9e:df:27:a4:6f:9c:55:de:d1: cb:22:bb:62:fb:49:93:d6:27:7d:66:93:54:d6:58: aa:de:50:00:db:91:a6:61:8f:22:f8:4a:25:31:24: 60:b3:ae:fc:52:67:0b:b8:d9:37:0e:72:ff:21:fa: 7f:f1:2f:e1:65:ea:42:f3:fb:14:3c:55:4b:d3:09: 7f:7f:89:26:69:44:ff:e7:75:16:18:c7:61:e1:60: 04:58:47:ce:f3:cb:a3:8a:62:68:80:cd:e6:68:2c: c8:af:11:a4:8c:3e:38:3c:91:45:59:52:4c:04:a3: 41:8b:25:a3:79:0e:d6:fb:f7:ac:97:c0:6e:f2:8e: d3:7f:04:1b:4a:1d:3a:4c:b9:01:3f:9f:a9:1a:42: e7:79:90:76:a1:eb:4f:7c:5c:7c:15:dc:95:50:e6: a1:7f:99:e4:7d:91:db:5b:8a:4f:0c:9e:30:d2:d7: 82:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2E:6B:8C:27:82:4C:E1:48:08:E8:83:47:1B:E1:D7:AA:08:3E:23 X509v3 Authority Key Identifier: keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:81:e9:01:9e:26:d4:33:e8:5c:5a:0a:a8:69:c0:50:82:fc: 04:eb:01:10:b3:e3:65:fa:9b:81:62:c5:bd:0b:15:5d:04:df: e8:98:32:7a:4f:57:20:b2:8a:76:ee:f0:37:71:5f:01:1c:35: 02:a0:1c:89:cd:0a:45:ee:1c:4b:56:6e:1b:6e:d4:48:84:bd: a1:ce:48:57:8a:d7:8b:b8:4e:af:f6:0e:af:c9:38:6d:6d:3e: 25:df:e0:d7:6c:ec:b2:ab:5e:7e:75:a3:6e:48:6f:35:06:93: 32:34:88:f9:1f:66:c9:b4:78:ba:97:cf:e3:1b:2a:80:03:ae: 66:53:db:af:1a:fd:bd:c1:21:3e:12:90:41:e2:54:e6:f9:0b: 85:70:4f:e8:a6:f4:4c:31:a5:b8:83:e8:7c:e3:ce:c0:de:94: 31:d2:0c:e7:75:f6:22:29:f2:e3:7b:46:e0:12:06:5e:4f:44: 34:d7:99:35:ff:1a:17:66:50:17:02:0f:17:76:43:b7:9c:28: 42:3b:72:66:51:76:72:9a:49:78:e0:f3:12:52:e3:98:e3:00: 81:6f:fe:cb:87:33:e8:06:0b:c1:89:6f:fb:43:0c:d8:c1:d5: ab:98:c1:25:b8:04:bd:b3:6c:a8:ff:ac:06:2c:61:7d:49:1c: b2:fd:10:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuAb/YXDKaCBTb6gj8V1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj NjI3MTUwHhcNMjUxMjIyMTEwMDQ2WhcNMjUxMjIzMTEwMDQ2WjAzMTEwLwYDVQQD Eyg4YjJlNmI4YzI3ODI0Y2UxNDgwOGU4ODM0NzFiZTFkN2FhMDgzZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Bc+5PdR/cxm6SVoR/pjN5IAsfaJ m7dYBfzLUVGiy4CFeF5PLeXGXKm4YSxWLyKGhSbTmloDtm+vJxfg3X6l5K2zNorg B38T3dX1CpfVOZie3yekb5xV3tHLIrti+0mT1id9ZpNU1liq3lAA25GmYY8i+Eol MSRgs678UmcLuNk3DnL/Ifp/8S/hZepC8/sUPFVL0wl/f4kmaUT/53UWGMdh4WAE WEfO88ujimJogM3maCzIrxGkjD44PJFFWVJMBKNBiyWjeQ7W+/esl8Bu8o7TfwQb Sh06TLkBP5+pGkLneZB2oetPfFx8FdyVUOahf5nkfZHbW4pPDJ4w0teCRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsua4wngkzhSAjog0cb4deqCD4jMB8GA1UdIwQY MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIHpAZ4m 1DPoXFoKqGnAUIL8BOsBELPjZfqbgWLFvQsVXQTf6Jgyek9XILKKdu7wN3FfARw1 AqAcic0KRe4cS1ZuG27USIS9oc5IV4rXi7hOr/YOr8k4bW0+Jd/g12zssqtefnWj bkhvNQaTMjSI+R9mybR4upfP4xsqgAOuZlPbrxr9vcEhPhKQQeJU5vkLhXBP6Kb0 TDGluIPofOPOwN6UMdIM53X2Iiny43tG4BIGXk9ENNeZNf8aF2ZQFwIPF3ZDt5wo QjtyZlF2cppJeODzElLjmOMAgW/+y4cz6AYLwYlv+0MM2MHVq5jBJbgEvbNsqP+s BixhfUkcsv0QQA== -----END CERTIFICATE-----Generated at Mon Dec 22 16:06:10 2025 by rpki-client