This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json) Hash identifier: FgWj9CmCQSid0HeCh18Q24zpRSzqfcjHSakPoMVVOCI= Subject key identifier: 52:FE:53:0A:DC:81:07:E5:4A:74:D7:AA:2B:06:B1:0B:30:D8:00:77 Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85 Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585 Certificate serial: 019AF16410F4A53D144DED4F286CE4F89F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 02:00:58 +0000 Manifest this update: Sat 06 Dec 2025 02:00:58 +0000 Manifest next update: Sun 07 Dec 2025 02:00:58 +0000 Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=) 2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: mbUN1DsvKxG8jG9e6ppoECro/3/UKImFDTxjrBYwKQI=) 3: Rd3HOWCgIifcE20uT6ZwMTd010E.roa (hash: Iyh7ZN8yRmO6xUm0HuFbl9LY6LaOBla7JBeUoV6oKtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:10:f4:a5:3d:14:4d:ed:4f:28:6c:e4:f8:9f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585 Validity Not Before: Dec 6 02:00:58 2025 GMT Not After : Dec 7 02:00:58 2025 GMT Subject: CN=52fe530adc8107e54a74d7aa2b06b10b30d80077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:36:77:2d:b6:ba:35:25:39:55:16:53:f3:31: 7b:2e:09:0f:44:a0:a5:91:f8:e0:fa:fb:a8:2f:9f: d8:bf:f3:c6:8c:50:3b:50:97:55:2e:cd:4f:be:d7: f1:e7:1e:ab:90:09:1a:81:22:de:f8:d3:18:a9:50: e6:23:4d:1d:6a:37:40:5f:c7:a6:34:2a:d0:0f:7e: e5:71:06:d9:ed:0a:91:7d:45:c2:87:3a:52:a6:91: 22:9c:24:78:9b:d7:3a:aa:6c:19:cc:3b:c6:65:32: 2b:32:50:72:44:0d:64:87:5e:89:31:56:9f:aa:81: 7b:24:7a:58:6f:11:1a:92:b9:8b:e2:6a:03:a9:d0: 32:fa:db:ea:56:ea:56:30:9c:1f:1b:0b:b9:eb:ea: 73:14:47:18:79:c7:97:6e:10:ba:3a:11:b7:45:b4: e3:d7:77:99:5d:5f:3c:71:76:f8:8a:f8:c3:15:19: 92:1b:b6:c3:da:7f:00:28:83:ad:b7:c5:db:26:11: 70:76:df:3c:45:77:de:e2:38:10:d8:c3:19:66:c2: ac:b2:62:31:83:80:53:97:c6:b4:58:96:4f:18:51: f1:93:44:75:fb:86:e6:7a:41:c3:b3:6c:5c:2e:5d: 1a:bf:49:37:43:13:7b:7f:e6:05:9e:42:4a:fd:1f: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:53:0A:DC:81:07:E5:4A:74:D7:AA:2B:06:B1:0B:30:D8:00:77 X509v3 Authority Key Identifier: keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5d:25:08:3a:5c:f6:d4:55:d2:57:07:0d:2e:7c:2a:3f:91: 6b:30:07:96:4b:d7:62:c1:56:52:cd:54:c8:54:8e:fe:b5:72: e6:37:cf:83:aa:48:a2:dc:2d:ba:94:75:e0:3c:b9:a9:22:4a: 29:9e:45:6b:ee:03:04:d4:84:fe:c8:b8:f8:5a:9e:c5:86:6d: 9e:0d:6a:16:2c:d7:52:2b:f2:f8:f8:74:7b:c8:34:ba:45:40: 23:8b:5c:e9:41:11:2f:8d:e0:e2:ef:42:1f:3c:00:51:66:b7: e2:df:6d:82:2a:88:6f:07:76:25:ca:7b:17:08:49:ff:c4:a6: 9f:64:0c:b1:50:25:43:e9:28:e6:06:7a:29:ac:06:7a:b8:f9: ef:c5:ae:9a:23:7d:b6:c7:46:59:9f:bb:8b:8a:d5:bb:9e:3a: 33:dc:db:8b:53:c7:e5:58:5a:e6:aa:fa:df:6c:ed:21:0e:cc: 0f:c0:3c:eb:18:55:3f:6f:3c:1f:8b:2c:1a:f7:b1:df:c2:57: dc:cb:9f:da:df:14:53:98:30:4b:df:ea:8b:08:d4:6c:df:c4: 89:c7:81:e8:57:d8:ba:13:ab:d2:e0:be:01:53:6d:8d:af:f5: e6:db:6b:7f:34:92:64:24:98:b9:a8:fa:53:b1:b5:30:d5:86: d5:80:b1:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBD0pT0UTe1PKGzk+J9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll ZDQ1ODUwHhcNMjUxMjA2MDIwMDU4WhcNMjUxMjA3MDIwMDU4WjAzMTEwLwYDVQQD Eyg1MmZlNTMwYWRjODEwN2U1NGE3NGQ3YWEyYjA2YjEwYjMwZDgwMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzZ3Lba6NSU5VRZT8zF7LgkPRKCl kfjg+vuoL5/Yv/PGjFA7UJdVLs1Pvtfx5x6rkAkagSLe+NMYqVDmI00dajdAX8em NCrQD37lcQbZ7QqRfUXChzpSppEinCR4m9c6qmwZzDvGZTIrMlByRA1kh16JMVaf qoF7JHpYbxEakrmL4moDqdAy+tvqVupWMJwfGwu56+pzFEcYeceXbhC6OhG3RbTj 13eZXV88cXb4ivjDFRmSG7bD2n8AKIOtt8XbJhFwdt88RXfe4jgQ2MMZZsKssmIx g4BTl8a0WJZPGFHxk0R1+4bmekHDs2xcLl0av0k3QxN7f+YFnkJK/R/7YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFL+UwrcgQflSnTXqisGsQsw2AB3MB8GA1UdIwQY MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt YTMxMTQzNDYzYmU5LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5 LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEV0lCDpc 9tRV0lcHDS58Kj+RazAHlkvXYsFWUs1UyFSO/rVy5jfPg6pIotwtupR14Dy5qSJK KZ5Fa+4DBNSE/si4+FqexYZtng1qFizXUivy+Ph0e8g0ukVAI4tc6UERL43g4u9C HzwAUWa34t9tgiqIbwd2Jcp7FwhJ/8Smn2QMsVAlQ+ko5gZ6KawGerj578WumiN9 tsdGWZ+7i4rVu546M9zbi1PH5Vha5qr632ztIQ7MD8A86xhVP288H4ssGvex38JX 3Muf2t8UU5gwS9/qiwjUbN/EiceB6FfYuhOr0uC+AVNtja/15ttrfzSSZCSYuaj6 U7G1MNWG1YCxqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:26 2025 by rpki-client