This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json) Hash identifier: FGzoRkRppcc7wxukXw1uTv0yGFXJN9ioBoRMs8Lax3k= Subject key identifier: B0:3D:37:5C:D5:0B:87:6C:ED:C3:CC:25:D9:7D:59:28:FB:93:91:4A Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b Certificate serial: 019AF19AF3E23EF31FA0B4AFCC2ECC0EC7B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft Manifest number: 0B27 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: GvnG-mS30kZsC0VMkjG-9H9bKNc.roa (hash: fCMqeP5mwLekpgJxD7sr/iDT7Y2EP3bkaxbq5G7CFnk=) 2: TmI7Mg0osOv9bcSkbnpna9M6d0g.roa (hash: 1lYpqMce8T6tJ64vHbX2gN5OdLdLTb07QCcWuKyM15g=) 3: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: 9znwIk5uXG6owhS27nNiXPcHKqdE6t2KVguDsMljhUE=) 4: rDRUKkzZmI7yjCKpqiCtK-fUy7Q.roa (hash: uAeF6E4mouy6Lmf4flTkP1sxauS/RBJXZig4r2f6XkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f3:e2:3e:f3:1f:a0:b4:af:cc:2e:cc:0e:c7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=b03d375cd50b876cedc3cc25d97d5928fb93914a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:eb:db:16:1c:b8:46:73:a7:33:b9:5e:ef: 9b:2d:91:02:c0:74:b5:40:53:8f:17:81:f9:f6:a1: 2d:5d:56:20:23:e4:06:c5:82:a2:eb:76:fd:59:6f: a5:de:37:69:f8:2b:f5:cb:ff:c4:6f:38:71:54:c1: aa:07:fc:e1:35:6b:1d:2f:c4:82:93:41:dc:42:14: 5f:92:30:82:8f:27:c7:aa:cc:67:d0:10:a9:eb:00: 8a:00:1a:84:ca:d4:c4:79:1f:6e:b5:aa:e2:7f:e6: 6c:c3:ca:6b:8a:ed:b8:ea:ba:28:30:69:34:8a:b0: f1:2d:f4:2d:88:86:02:04:b5:0c:0e:21:8a:59:c3: eb:45:b6:4e:77:d0:9f:b0:d7:97:d2:8e:fa:da:67: d3:ab:1d:3b:34:b4:fa:ae:ca:07:81:7a:1c:a6:e6: 56:46:ff:b8:67:1c:7f:8b:56:5d:ee:8c:ff:1d:b1: 0c:25:43:47:76:fa:5b:d8:d3:1c:cf:18:9d:0b:96: c8:9b:ac:b6:60:4d:6c:7e:b5:42:20:df:03:e0:12: 78:ad:01:e4:95:a0:b2:4c:1f:7c:51:a1:56:dd:23: d9:57:50:7e:56:19:2a:20:c9:9a:42:85:13:20:60: 72:77:c2:56:12:2a:80:23:a4:40:4c:23:1f:ee:66: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3D:37:5C:D5:0B:87:6C:ED:C3:CC:25:D9:7D:59:28:FB:93:91:4A X509v3 Authority Key Identifier: keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:2e:aa:a2:28:3f:c2:18:8e:ff:01:4c:69:54:a7:a1:c2:33: cf:67:1c:2f:b2:1f:7d:bf:5a:c5:c8:e9:29:21:4d:a0:bd:f9: 30:4f:5b:3c:8e:91:73:2e:fb:77:e9:82:2c:ec:c3:ef:04:23: a1:33:96:85:55:95:60:ac:93:11:60:5b:89:ca:98:f1:8d:86: 67:1f:86:b2:15:df:95:fd:9d:4f:ae:52:84:5b:93:30:6c:f6: bd:f9:f3:d2:82:2d:a5:6c:e3:39:da:47:bc:96:53:4b:c8:17: 7b:38:ff:43:07:b0:e8:50:4c:9b:d6:34:6e:c0:21:5d:4c:89: 49:a6:75:bf:bc:c7:44:49:ef:a3:a4:e6:18:c0:5f:e9:4f:67: 6e:06:8f:06:4c:0e:6c:41:49:f8:55:ec:76:74:ec:4d:e6:64: 5b:18:f1:8a:4c:1a:dd:bf:c1:ce:be:89:5f:bd:dd:3e:bb:1f: 00:0a:18:8b:ba:21:dd:55:29:d3:9a:4a:15:3c:f8:c5:16:45: d3:b0:f7:fe:80:0d:c2:fb:24:e1:4a:2d:50:ef:bb:1e:fa:a6: 34:bf:2a:16:9d:c2:5d:18:2c:52:09:ef:0d:48:ba:81:f5:97: 59:47:f2:b5:61:d3:fe:f5:92:af:1b:78:60:f4:2e:06:b1:9b: af:50:9c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvPiPvMfoLSvzC7MDsezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNzU0OGMzN2FiZWJjNThiOTI4ZWQyODU0MzNkNjllOTVk ZjljM2IwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EyhiMDNkMzc1Y2Q1MGI4NzZjZWRjM2NjMjVkOTdkNTkyOGZiOTM5MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9jr2xYcuEZzpzO5Xu+bLZECwHS1 QFOPF4H59qEtXVYgI+QGxYKi63b9WW+l3jdp+Cv1y//EbzhxVMGqB/zhNWsdL8SC k0HcQhRfkjCCjyfHqsxn0BCp6wCKABqEytTEeR9utarif+Zsw8priu246rooMGk0 irDxLfQtiIYCBLUMDiGKWcPrRbZOd9CfsNeX0o762mfTqx07NLT6rsoHgXocpuZW Rv+4Zxx/i1Zd7oz/HbEMJUNHdvpb2NMczxidC5bIm6y2YE1sfrVCIN8D4BJ4rQHk laCyTB98UaFW3SPZV1B+VhkqIMmaQoUTIGByd8JWEiqAI6RATCMf7mb53QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA9N1zVC4ds7cPMJdl9WSj7k5FKMB8GA1UdIwQY MBaAFGB1SMN6vrxYuSjtKFQz1p6V35w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMt MGM5OGM1NzBhNmUwLzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81MmI2MzQtNjE0OC00ZTJlLWI4ZjMtMGM5OGM1NzBhNmUw LzEvWUhWSXczcS12Rmk1S08wb1ZEUFducFhmbkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwS6qoig/ whiO/wFMaVSnocIzz2ccL7Iffb9axcjpKSFNoL35ME9bPI6Rcy77d+mCLOzD7wQj oTOWhVWVYKyTEWBbicqY8Y2GZx+GshXflf2dT65ShFuTMGz2vfnz0oItpWzjOdpH vJZTS8gXezj/Qwew6FBMm9Y0bsAhXUyJSaZ1v7zHREnvo6TmGMBf6U9nbgaPBkwO bEFJ+FXsdnTsTeZkWxjxikwa3b/Bzr6JX73dPrsfAAoYi7oh3VUp05pKFTz4xRZF 07D3/oANwvsk4UotUO+7HvqmNL8qFp3CXRgsUgnvDUi6gfWXWUfytWHT/vWSrxt4 YPQuBrGbr1CcKA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:39 2025 by rpki-client