This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json) Hash identifier: XlRi8CmskFaElzaXg1d1s42CuaXFnTUrd5GlD24e0Wk= Subject key identifier: C1:C2:A6:A9:14:A4:23:96:B4:4E:7B:83:8B:28:8D:28:19:FE:3E:8F Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Certificate serial: 019AF050FCDF29A56AA9298338FE5C5EE7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft Manifest number: 0D2C Signing time: Fri 05 Dec 2025 21:00:30 +0000 Manifest this update: Fri 05 Dec 2025 21:00:30 +0000 Manifest next update: Sat 06 Dec 2025 21:00:30 +0000 Files and hashes: 1: O5Qp4JElVe0um1Rnuz-9xQyVCpc.roa (hash: 73YKFKe5WyNrwSKLy76+GejDIV4ldqnve1bMw3FlzZM=) 2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: HJVQljSpA9zh2jka2iyBFr+Yads3o1ePgjOK+GNG81w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:50:fc:df:29:a5:6a:a9:29:83:38:fe:5c:5e:e7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de Validity Not Before: Dec 5 21:00:30 2025 GMT Not After : Dec 6 21:00:30 2025 GMT Subject: CN=c1c2a6a914a42396b44e7b838b288d2819fe3e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:40:91:f9:10:f0:2d:73:be:9e:ea:3b:68: 09:eb:41:2b:c6:58:55:5b:6b:88:e9:61:ff:66:c3: 69:c4:7c:b0:21:fb:e4:23:e0:cf:59:8d:98:8c:84: db:eb:0e:d0:ab:9a:65:0d:df:8f:e8:df:1f:ef:5e: 0c:02:86:d8:9c:60:57:34:fe:28:25:a5:0f:f5:57: 55:4c:75:8c:3b:f5:c1:f8:73:f0:27:72:0b:de:bb: 7d:ab:a4:3b:38:f8:88:17:db:f9:3f:10:f7:b9:3f: 71:23:5b:e1:b6:27:f2:de:43:b9:f9:14:d1:14:2d: 3e:3a:11:ee:cd:0e:45:81:0a:6c:da:3e:53:86:60: 66:43:fc:07:57:fd:dc:b7:2f:58:4d:cb:2d:21:79: 47:e2:16:b8:fc:93:f8:de:27:79:94:1c:76:e5:f6: 17:39:6e:b2:90:0d:c7:dd:e8:37:49:1e:93:cc:71: ef:a5:fb:1f:16:97:d2:f7:77:e7:91:aa:48:e3:bf: 7a:1e:d1:4e:91:3e:4d:38:56:8a:76:d2:30:ea:9d: d0:90:46:57:6e:9d:f3:d7:38:f5:59:23:4f:80:ba: 00:ae:a3:a1:7d:04:9d:af:74:b1:9e:28:4d:e7:7b: 8b:01:4b:df:2d:6a:7f:a9:c8:00:bb:51:fb:b8:96: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:A6:A9:14:A4:23:96:B4:4E:7B:83:8B:28:8D:28:19:FE:3E:8F X509v3 Authority Key Identifier: keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:11:53:ec:91:6b:93:54:c6:46:69:ba:38:d0:46:ad:d7:2b: da:21:6d:5a:ba:06:f8:8c:77:65:dc:1a:5a:93:c0:9d:d1:06: 02:c0:f0:b9:dd:57:b3:58:1c:ae:0a:59:14:82:5c:3b:13:8f: dc:8f:e7:e9:66:56:f9:2e:1c:d1:db:1e:35:c9:ff:ca:26:e6: 64:28:35:22:3e:ec:db:79:89:9a:ea:27:5c:85:bd:48:3c:43: bf:81:b4:34:b1:77:be:93:cd:55:06:2b:db:48:3d:fe:08:0a: af:c8:27:00:27:71:4d:1a:b1:ef:ac:08:02:c5:e5:4f:18:03: 08:c3:37:7b:88:74:71:49:48:00:3b:c8:ae:a6:4f:34:66:bb: 25:53:eb:ee:12:ec:ba:96:b6:3b:51:8d:11:db:e9:aa:8c:b3: 1a:62:f5:aa:90:27:87:58:03:a3:e0:73:6a:36:89:29:d8:76: 35:e2:76:f4:7f:4b:4c:36:9e:75:db:de:b4:20:40:d1:8c:55: 3f:31:e2:ba:f5:52:e8:07:55:c2:d6:2e:38:87:ba:05:fa:00: 5f:c8:db:3d:90:0b:5a:33:0f:41:4b:ab:22:b8:b3:3f:27:fe: b7:46:32:2a:1c:36:cc:f4:e6:11:d1:ce:40:cb:f0:30:0d:20: ea:4b:6a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUPzfKaVqqSmDOP5cXuewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzRjNzQzZDVjMmFmY2YyN2YxMDRlYjZlMDMxNjExNmM4 NWM3ZGUwHhcNMjUxMjA1MjEwMDMwWhcNMjUxMjA2MjEwMDMwWjAzMTEwLwYDVQQD EyhjMWMyYTZhOTE0YTQyMzk2YjQ0ZTdiODM4YjI4OGQyODE5ZmUzZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOdAkfkQ8C1zvp7qO2gJ60ErxlhV W2uI6WH/ZsNpxHywIfvkI+DPWY2YjITb6w7Qq5plDd+P6N8f714MAobYnGBXNP4o JaUP9VdVTHWMO/XB+HPwJ3IL3rt9q6Q7OPiIF9v5PxD3uT9xI1vhtify3kO5+RTR FC0+OhHuzQ5FgQps2j5ThmBmQ/wHV/3cty9YTcstIXlH4ha4/JP43id5lBx25fYX OW6ykA3H3eg3SR6TzHHvpfsfFpfS93fnkapI4796HtFOkT5NOFaKdtIw6p3QkEZX bp3z1zj1WSNPgLoArqOhfQSdr3SxnihN53uLAUvfLWp/qcgAu1H7uJYepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHCpqkUpCOWtE57g4sojSgZ/j6PMB8GA1UdIwQY MBaAFGLEx0PVwq/PJ/EE624DFhFshcfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUt ZGUzNTJhOTJmNmJhLzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83MjhjNDAtZjcxMi00ZmVmLTg5NDUtZGUzNTJhOTJmNmJh LzEvWXNUSFE5WENyODhuOFFUcmJnTVdFV3lGeDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRFT7JFr k1TGRmm6ONBGrdcr2iFtWroG+Ix3ZdwaWpPAndEGAsDwud1Xs1gcrgpZFIJcOxOP 3I/n6WZW+S4c0dseNcn/yibmZCg1Ij7s23mJmuonXIW9SDxDv4G0NLF3vpPNVQYr 20g9/ggKr8gnACdxTRqx76wIAsXlTxgDCMM3e4h0cUlIADvIrqZPNGa7JVPr7hLs upa2O1GNEdvpqoyzGmL1qpAnh1gDo+BzajaJKdh2NeJ29H9LTDaeddvetCBA0YxV PzHiuvVS6AdVwtYuOIe6BfoAX8jbPZALWjMPQUurIrizPyf+t0YyKhw2zPTmEdHO QMvwMA0g6ktq2g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client