This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json) Hash identifier: MfAW8MGZgPz49mVwgVWNNht11QufY6h188ytkV8VOG4= Subject key identifier: 71:1A:1F:6F:0B:EB:2D:91:BA:42:1F:EA:0B:A1:0D:C4:9D:07:D6:51 Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018 Certificate serial: 019B33E8EA9270AAA49661143EAB39A909C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft Manifest number: 0800 Signing time: Fri 19 Dec 2025 00:01:00 +0000 Manifest this update: Fri 19 Dec 2025 00:01:00 +0000 Manifest next update: Sat 20 Dec 2025 00:01:00 +0000 Files and hashes: 1: 6eOqvZGDKFDuA6yXPPPze8WOsrA.roa (hash: ERZvSVqw/o5/S8YL0KRBFbpGBsSfCd4T3Hhjomrg6eY=) 2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: +2Mdiv47YHeycjXub0D6R/FeiUiVc1foXzbJ9pAPn60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ea:92:70:aa:a4:96:61:14:3e:ab:39:a9:09:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca334850daf371220520199229ebde90ef28b018 Validity Not Before: Dec 19 00:01:00 2025 GMT Not After : Dec 20 00:01:00 2025 GMT Subject: CN=711a1f6f0beb2d91ba421fea0ba10dc49d07d651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:4f:71:53:e4:2e:de:41:b9:4a:d1:be:ef: 83:78:54:70:cd:ef:56:52:30:73:a2:62:5e:4b:cf: a2:8d:c9:ff:08:0b:9c:a8:92:81:60:bf:d6:a1:0f: 6c:5f:4a:75:f0:1a:b3:63:2e:b5:ed:9e:03:62:8c: dc:c4:a2:a6:93:fe:9b:c5:9b:09:f3:a9:a4:b7:cc: a7:19:e7:57:97:ad:d2:12:ee:23:11:18:6c:22:fc: ba:d4:5d:aa:45:dd:33:d0:30:41:4c:8f:cc:d1:dd: ba:ce:e5:fb:e3:11:e7:da:f7:4e:58:db:a0:aa:9d: 26:8f:f6:9a:1b:7e:45:b0:95:ab:10:b2:f4:1c:c9: d8:f8:0c:1f:b1:75:f9:a8:e8:17:24:a6:6f:66:ff: b8:44:ad:92:1d:3f:5f:e3:27:88:2d:24:bd:2b:cb: 4e:74:cc:a7:0b:e0:91:0a:ad:b0:ce:8b:f4:67:8b: e8:ad:1b:96:fb:3a:92:49:c7:44:f3:ac:24:1d:7f: 6e:ae:90:f7:48:b2:e0:28:f3:d7:38:29:65:26:6b: 27:2f:2d:d6:f8:fb:19:46:c4:da:4e:a4:b5:85:93: 73:c0:52:18:cc:52:2f:37:81:1d:85:ff:4a:bc:95: ce:58:3a:2f:bc:16:25:88:f5:95:59:43:01:bd:4d: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1A:1F:6F:0B:EB:2D:91:BA:42:1F:EA:0B:A1:0D:C4:9D:07:D6:51 X509v3 Authority Key Identifier: keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:75:53:d3:68:4f:76:b6:1a:6e:19:f9:8b:26:8a:92:6d:b5: 96:6d:ea:30:5d:36:5e:db:59:55:63:d6:d0:16:d1:08:e5:e1: 41:eb:54:e7:79:8a:c4:c1:88:6e:0a:b7:be:a2:2a:50:b0:91: a2:e8:d2:17:60:95:ca:66:70:b0:57:c1:59:1a:4c:05:09:ce: fc:cb:64:16:50:01:1d:84:3d:1f:e6:e7:79:cf:a4:f8:aa:df: e4:84:78:7a:67:09:58:e5:9b:2d:34:dc:e0:8a:e4:eb:85:70: 0c:cf:8c:b7:2b:c7:6a:e4:69:59:b4:f9:60:32:a5:78:64:4a: 6d:46:a4:09:5c:22:91:01:de:e0:42:fe:70:33:df:04:31:96: ca:b8:39:c6:f7:8e:17:97:10:73:63:72:04:e9:6a:4d:2b:4d: 03:51:70:fe:b2:61:98:8c:72:f6:99:7f:35:41:0e:4f:1a:11: 63:c7:57:da:7d:70:87:e7:fa:aa:d7:7c:cd:a9:23:38:5b:d7: 22:d5:b2:b7:ef:3e:87:22:95:e7:ee:f4:20:63:81:9a:41:7a: 24:15:1d:2f:31:de:2c:dd:32:b4:6c:4d:68:83:f3:d5:ed:9c: 2d:92:fa:6b:66:a8:7c:20:7b:19:0a:bc:18:b8:ec:25:ef:77: 44:be:2d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OqScKqklmEUPqs5qQnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzM0ODUwZGFmMzcxMjIwNTIwMTk5MjI5ZWJkZTkwZWYy OGIwMTgwHhcNMjUxMjE5MDAwMTAwWhcNMjUxMjIwMDAwMTAwWjAzMTEwLwYDVQQD Eyg3MTFhMWY2ZjBiZWIyZDkxYmE0MjFmZWEwYmExMGRjNDlkMDdkNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzpPcVPkLt5BuUrRvu+DeFRwze9W UjBzomJeS8+ijcn/CAucqJKBYL/WoQ9sX0p18BqzYy617Z4DYozcxKKmk/6bxZsJ 86mkt8ynGedXl63SEu4jERhsIvy61F2qRd0z0DBBTI/M0d26zuX74xHn2vdOWNug qp0mj/aaG35FsJWrELL0HMnY+AwfsXX5qOgXJKZvZv+4RK2SHT9f4yeILSS9K8tO dMynC+CRCq2wzov0Z4vorRuW+zqSScdE86wkHX9urpD3SLLgKPPXOCllJmsnLy3W +PsZRsTaTqS1hZNzwFIYzFIvN4Edhf9KvJXOWDovvBYliPWVWUMBvU2sbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEaH28L6y2RukIf6guhDcSdB9ZRMB8GA1UdIwQY MBaAFMozSFDa83EiBSAZkinr3pDvKLAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjIt MGUwMDQ2YzhhODdiLzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZTVlNDctNGUyOS00NjAzLWI5NjItMGUwMDQ2YzhhODdi LzEveWpOSVVOcnpjU0lGSUJtU0tldmVrTzhvc0JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3VT02hP drYabhn5iyaKkm21lm3qMF02XttZVWPW0BbRCOXhQetU53mKxMGIbgq3vqIqULCR oujSF2CVymZwsFfBWRpMBQnO/MtkFlABHYQ9H+bnec+k+Krf5IR4emcJWOWbLTTc 4Irk64VwDM+MtyvHauRpWbT5YDKleGRKbUakCVwikQHe4EL+cDPfBDGWyrg5xveO F5cQc2NyBOlqTStNA1Fw/rJhmIxy9pl/NUEOTxoRY8dX2n1wh+f6qtd8zakjOFvX ItWyt+8+hyKV5+70IGOBmkF6JBUdLzHeLN0ytGxNaIPz1e2cLZL6a2aofCB7GQq8 GLjsJe93RL4tFg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:20:04 2025 by rpki-client