This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json) Hash identifier: C8LM5kl8GeK2fBRsV8hU57rVcDcbdo7M98bwgSyKHyw= Subject key identifier: 09:D8:72:31:32:68:1A:AD:02:8F:65:11:32:47:E2:06:85:BB:A1:DF Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Certificate serial: 019AF465820DDD189A1D3CACED9F32404659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:24 +0000 Manifest this update: Sat 06 Dec 2025 16:01:24 +0000 Manifest next update: Sun 07 Dec 2025 16:01:24 +0000 Files and hashes: 1: sKW5v2bg-eASuutBZh0CS6XvA0c.roa (hash: RTFdNjg/wTloxfdOEoaa5K25++7OcHUzDE+24NBipvg=) 2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: 8ciVTFjwCXK+jU1hL9vmgj0jaixnrgW85IosuVr6eQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:82:0d:dd:18:9a:1d:3c:ac:ed:9f:32:40:46:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba Validity Not Before: Dec 6 16:01:24 2025 GMT Not After : Dec 7 16:01:24 2025 GMT Subject: CN=09d8723132681aad028f65113247e20685bba1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:fe:b8:43:20:f9:67:32:d6:9e:3f:39:11: df:e2:c2:97:28:da:78:c5:38:1e:1b:a2:06:9d:46: 41:98:fc:1d:77:30:5a:9d:de:e7:b6:43:a7:ce:8b: d1:95:b0:ff:bc:14:bf:e9:0e:81:11:0b:98:39:36: 0b:83:1a:7e:e7:68:d8:6f:58:2c:54:f8:70:a1:dd: 11:f6:6a:02:d2:34:a3:c5:37:d6:e5:7e:30:2f:f6: 94:86:d4:84:05:68:17:f1:3f:c3:ca:f8:81:a0:13: 4f:64:e6:6c:62:2d:96:e3:03:2e:d8:84:5c:c9:54: 4d:42:54:b1:a0:3a:f9:45:77:60:69:8d:c8:7a:ca: b1:36:f8:6b:85:2d:b1:2e:8c:87:e7:22:49:f0:46: 38:f4:7e:3c:8c:43:5c:13:dc:3e:ae:11:cb:3a:e3: 1f:4e:e6:c5:a0:52:23:9c:70:05:70:86:ee:c3:57: 55:c3:4d:a0:75:d2:46:79:5d:b1:2a:08:ff:6f:39: 45:38:0f:a7:78:cd:18:4d:00:72:5b:bc:df:eb:40: ef:13:2e:51:87:04:ab:5b:09:6b:01:f9:72:34:01: 90:c4:c1:71:82:7f:26:01:7a:91:1e:27:c6:b4:72: c9:f3:38:01:19:81:be:b1:51:09:4a:7d:0e:a4:92: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D8:72:31:32:68:1A:AD:02:8F:65:11:32:47:E2:06:85:BB:A1:DF X509v3 Authority Key Identifier: keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:bc:8f:a1:f7:cb:ae:4b:06:8c:5d:a7:dd:3d:c9:66:4e: 9e:8d:94:c6:e2:63:18:e3:31:11:d1:f0:d1:6c:b1:73:eb:c0: 30:02:43:64:f7:2d:71:ae:cb:5b:ef:b0:76:3a:d1:ae:11:08: 15:32:32:8b:ef:37:3b:99:c3:5d:cf:ec:eb:d0:dc:d3:f2:27: 03:e1:6f:20:5e:51:62:50:e6:b7:45:ad:f9:36:8a:8c:22:7e: 2d:63:62:f5:4f:35:9a:0d:77:c3:18:4e:35:76:50:33:83:9f: 11:f6:6c:f0:2b:c7:79:a8:8d:00:c3:5f:3d:b5:dd:39:61:c3: ed:eb:09:57:d9:19:8c:f8:a1:16:64:da:9d:6d:5e:d4:5b:c3: f3:7d:e4:f4:e0:ae:b8:bd:ae:f1:8f:8f:40:9e:a3:4b:cf:78: b6:90:02:dd:63:f0:98:79:49:9f:ce:d6:a0:84:19:02:15:2c: d8:e9:6d:58:ea:44:75:85:29:c2:8c:5d:7c:9e:83:1a:d6:ff: f1:ed:50:43:b6:1e:ca:5e:4f:83:de:c6:40:52:90:03:b2:48: 36:84:a7:a8:ae:92:43:8e:14:43:6a:6f:af:e5:6b:9d:06:d8: c5:57:6f:86:c8:c2:d1:9d:2e:04:f6:62:f5:7c:ed:ec:75:da: eb:8e:13:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYIN3RiaHTys7Z8yQEZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGQ0MjI0MzE5Nzg2NGJiNDgxNjQ2MWQ0ZDA2NTNhYjBi YTMyYmEwHhcNMjUxMjA2MTYwMTI0WhcNMjUxMjA3MTYwMTI0WjAzMTEwLwYDVQQD EygwOWQ4NzIzMTMyNjgxYWFkMDI4ZjY1MTEzMjQ3ZTIwNjg1YmJhMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7v+uEMg+Wcy1p4/ORHf4sKXKNp4 xTgeG6IGnUZBmPwddzBand7ntkOnzovRlbD/vBS/6Q6BEQuYOTYLgxp+52jYb1gs VPhwod0R9moC0jSjxTfW5X4wL/aUhtSEBWgX8T/DyviBoBNPZOZsYi2W4wMu2IRc yVRNQlSxoDr5RXdgaY3IesqxNvhrhS2xLoyH5yJJ8EY49H48jENcE9w+rhHLOuMf TubFoFIjnHAFcIbuw1dVw02gddJGeV2xKgj/bzlFOA+neM0YTQByW7zf60DvEy5R hwSrWwlrAflyNAGQxMFxgn8mAXqRHifGtHLJ8zgBGYG+sVEJSn0OpJLOswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnYcjEyaBqtAo9lETJH4gaFu6HfMB8GA1UdIwQY MBaAFMndQiQxl4ZLtIFkYdTQZTqwujK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2Et NjRhNzE1YTVmNjliLzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81ZGExNWEtOTdhMC00YTc3LTliY2EtNjRhNzE1YTVmNjli LzEveWQxQ0pER1hoa3UwZ1dSaDFOQmxPckM2TXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXK8j6H3 y65LBoxdp909yWZOno2UxuJjGOMxEdHw0Wyxc+vAMAJDZPctca7LW++wdjrRrhEI FTIyi+83O5nDXc/s69Dc0/InA+FvIF5RYlDmt0Wt+TaKjCJ+LWNi9U81mg13wxhO NXZQM4OfEfZs8CvHeaiNAMNfPbXdOWHD7esJV9kZjPihFmTanW1e1FvD833k9OCu uL2u8Y+PQJ6jS894tpAC3WPwmHlJn87WoIQZAhUs2OltWOpEdYUpwoxdfJ6DGtb/ 8e1QQ7Yeyl5Pg97GQFKQA7JINoSnqK6SQ44UQ2pvr+VrnQbYxVdvhsjC0Z0uBPZi 9Xzt7HXa644Tow== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:08 2025 by rpki-client