This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json) Hash identifier: /KIOsjDRC79Z8HmiMP626xtplk27PU14ASTlfzYW2og= Subject key identifier: FD:48:2B:87:BE:9A:E1:75:86:38:C7:23:BB:39:BA:AF:DB:77:9E:8D Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6 Certificate serial: 019AF12EBAA875377AE6E552F19AE094A88D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft Manifest number: 0D5E Signing time: Sat 06 Dec 2025 01:02:42 +0000 Manifest this update: Sat 06 Dec 2025 01:02:42 +0000 Manifest next update: Sun 07 Dec 2025 01:02:42 +0000 Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: 81g9fJSftgLBsL57E5n22WkG9yI7/gkXGnPqhOk8oqc=) 2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ba:a8:75:37:7a:e6:e5:52:f1:9a:e0:94:a8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6 Validity Not Before: Dec 6 01:02:42 2025 GMT Not After : Dec 7 01:02:42 2025 GMT Subject: CN=fd482b87be9ae1758638c723bb39baafdb779e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:42:71:fc:72:86:41:2a:1e:60:0f:b0:3d: 77:29:08:f2:c1:d3:d7:c9:a8:6f:c2:1e:46:f6:69: af:8a:c9:5d:27:a4:2d:26:a4:14:37:31:3c:d2:ea: bd:81:88:77:8b:a7:90:72:50:a5:94:53:83:5f:18: 1d:c9:1a:c5:c8:68:08:b4:79:c5:09:f7:a5:cf:ba: 24:40:3c:c1:1a:4d:5c:bb:6f:b2:81:5f:93:0b:f6: e3:7c:72:64:d6:d1:20:8c:0b:e3:76:fb:d2:f2:3c: 29:9d:c5:47:05:d3:97:68:b2:75:d9:96:c5:ce:a9: 0d:2d:df:9a:de:95:76:af:8a:91:4b:11:df:81:b1: 2c:d5:ed:39:c5:6f:aa:52:d6:7c:33:fd:44:30:53: 51:bb:3b:7d:2d:2f:f6:68:cc:e2:4d:a1:7e:5b:4e: 5e:b1:30:7e:4c:bd:99:d5:23:3b:e5:cd:9f:f8:1a: 97:cb:ef:38:00:72:a9:da:d4:2f:37:b7:18:a1:9b: 23:81:57:a5:4c:67:e2:ac:5f:87:bc:78:cc:5b:e0: 7d:14:32:36:2b:aa:53:e5:a0:4d:19:f4:ed:ab:8f: c7:65:83:7b:87:36:f4:5c:6c:0c:06:56:74:5e:a7: 6f:c8:72:82:b3:46:f2:7d:8a:16:4a:fd:b0:6e:d7: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:48:2B:87:BE:9A:E1:75:86:38:C7:23:BB:39:BA:AF:DB:77:9E:8D X509v3 Authority Key Identifier: keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fc:5e:51:2d:50:1f:92:0e:51:35:96:06:a5:8f:46:28:93: 39:36:28:e8:e1:6e:b4:16:39:c9:93:69:9f:cd:76:90:2d:45: be:34:57:2f:d1:fb:88:2b:9c:f5:b5:cd:64:08:06:ad:f2:f3: eb:8e:6f:2a:22:77:0b:f2:9e:50:4b:66:25:65:b4:d8:80:30: 45:df:36:b3:06:15:e9:65:66:6c:22:db:e6:a4:3f:6a:00:07: 3d:d8:ed:f0:15:02:f3:bf:52:f4:01:64:3e:c9:72:93:89:dc: 63:c5:1b:e5:07:c6:62:03:3e:8b:33:63:de:48:26:fb:ea:47: ed:f2:77:0a:02:2e:29:5e:32:95:07:79:40:67:e4:78:c2:30: e4:9e:24:1b:34:46:61:a8:22:23:15:cb:ff:8a:1a:42:36:36: 31:b4:91:a6:b9:21:56:7b:aa:96:d4:c1:76:c3:d3:9a:f4:42: 57:ba:ec:02:a7:1c:8b:59:2a:69:28:84:9d:17:97:64:83:7e: ad:c2:ff:9e:98:10:74:f7:d5:98:4b:50:7c:ca:46:c6:6a:c2: 62:62:92:77:9f:22:e4:98:3f:14:29:e4:85:5b:ae:dc:a6:53: 69:b8:70:64:26:f0:52:cb:c1:83:1b:80:e8:57:d7:19:23:ba: 2d:bd:b7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrqodTd65uVS8ZrglKiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMzg0MTAzMzhlMjFlOGVhYjk0MTE5ZDgwZTQxYTM5NTg0 OTFkZTYwHhcNMjUxMjA2MDEwMjQyWhcNMjUxMjA3MDEwMjQyWjAzMTEwLwYDVQQD EyhmZDQ4MmI4N2JlOWFlMTc1ODYzOGM3MjNiYjM5YmFhZmRiNzc5ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSdCcfxyhkEqHmAPsD13KQjywdPX yahvwh5G9mmvisldJ6QtJqQUNzE80uq9gYh3i6eQclCllFODXxgdyRrFyGgItHnF Cfelz7okQDzBGk1cu2+ygV+TC/bjfHJk1tEgjAvjdvvS8jwpncVHBdOXaLJ12ZbF zqkNLd+a3pV2r4qRSxHfgbEs1e05xW+qUtZ8M/1EMFNRuzt9LS/2aMziTaF+W05e sTB+TL2Z1SM75c2f+BqXy+84AHKp2tQvN7cYoZsjgVelTGfirF+HvHjMW+B9FDI2 K6pT5aBNGfTtq4/HZYN7hzb0XGwMBlZ0XqdvyHKCs0byfYoWSv2wbtceUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1IK4e+muF1hjjHI7s5uq/bd56NMB8GA1UdIwQY MBaAFGI4QQM44h6Oq5QRnYDkGjlYSR3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQt MTNhNThlYjlkOGY1LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81YTQ1MjYtODlmYy00NjQwLTkwMWQtMTNhNThlYjlkOGY1 LzEvWWpoQkF6amlIbzZybEJHZGdPUWFPVmhKSGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfxeUS1Q H5IOUTWWBqWPRiiTOTYo6OFutBY5yZNpn812kC1FvjRXL9H7iCuc9bXNZAgGrfLz 645vKiJ3C/KeUEtmJWW02IAwRd82swYV6WVmbCLb5qQ/agAHPdjt8BUC879S9AFk Pslyk4ncY8Ub5QfGYgM+izNj3kgm++pH7fJ3CgIuKV4ylQd5QGfkeMIw5J4kGzRG YagiIxXL/4oaQjY2MbSRprkhVnuqltTBdsPTmvRCV7rsAqcci1kqaSiEnReXZIN+ rcL/npgQdPfVmEtQfMpGxmrCYmKSd58i5Jg/FCnkhVuu3KZTabhwZCbwUsvBgxuA 6FfXGSO6Lb23Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:51 2025 by rpki-client