This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json) Hash identifier: 3b0TgBl8Lzc9jtwhQayNKDrI5x2TPqXnZcwDnO1DcIo= Subject key identifier: E0:E9:E4:FF:BE:9A:AA:04:03:BD:55:16:7E:65:28:1E:7E:B2:84:17 Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff Certificate serial: 019AF50B43AFB03822C48D4DA073301DC86B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:02:27 +0000 Manifest this update: Sat 06 Dec 2025 19:02:27 +0000 Manifest next update: Sun 07 Dec 2025 19:02:27 +0000 Files and hashes: 1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=) 2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: ud6SCE+ePbKc1tz3DVYrvs9q87Wnj3hoD1MVRn6k05Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:43:af:b0:38:22:c4:8d:4d:a0:73:30:1d:c8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff Validity Not Before: Dec 6 19:02:27 2025 GMT Not After : Dec 7 19:02:27 2025 GMT Subject: CN=e0e9e4ffbe9aaa0403bd55167e65281e7eb28417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:73:98:45:01:9a:47:7c:ce:c2:9d:b9:a3: c2:9c:9d:45:65:9d:67:8c:bf:54:14:27:ab:45:91: 0d:33:dc:d6:79:28:25:62:03:05:8f:68:6d:af:03: f2:ec:9d:1e:bf:33:5e:14:dd:cf:75:38:88:bc:3f: 95:3f:57:ab:05:e6:76:87:67:cd:b2:14:02:00:80: c9:a9:22:03:7a:fe:50:a9:d1:f7:f7:75:87:65:68: a9:1b:ab:ad:63:eb:72:81:37:0b:41:d2:0f:ec:62: c5:22:8b:13:fd:c3:dc:57:cc:52:05:1a:c6:60:18: e8:d5:2b:35:68:ba:88:9f:e1:49:d1:ee:c2:6e:9c: 36:00:bc:b3:37:72:df:21:63:e1:c3:5f:ad:76:12: 86:fb:9e:61:66:74:ba:3f:74:37:ce:4d:b0:cf:f4: d8:d2:df:1b:7d:7e:94:1c:82:6b:c4:ed:4c:09:d9: e8:5d:ef:d7:f6:c2:c3:5c:b1:d2:81:eb:7a:09:19: 62:c1:3a:82:56:1a:ee:77:6d:94:94:50:d6:df:30: 2f:fd:4b:ad:2c:84:00:3f:f2:4a:2c:ce:8f:29:2d: 7c:20:ec:46:05:b2:d0:69:50:29:bb:35:ad:3d:d3: ab:33:16:5f:59:7f:50:07:d2:b9:79:49:74:ac:b4: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:E4:FF:BE:9A:AA:04:03:BD:55:16:7E:65:28:1E:7E:B2:84:17 X509v3 Authority Key Identifier: keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5f:74:28:74:79:f4:e8:11:ae:38:59:3e:33:f2:84:4a:54: cd:d8:c3:03:e7:4f:64:4e:93:4e:69:61:8a:46:19:26:f2:0f: 07:a5:b8:50:df:1d:e6:69:9c:c6:2f:77:e8:db:cf:1d:b0:5d: 4c:8f:5a:7c:4f:c3:51:83:c6:78:4c:92:6d:c5:be:7f:22:a3: 7a:eb:95:23:6a:c5:a9:99:f1:ad:46:90:ae:f6:16:03:0a:4e: 94:05:15:69:78:c0:f5:ee:12:33:4a:7c:88:f7:73:eb:e9:24: a8:7d:61:0a:22:44:93:47:92:05:78:4e:f2:c9:39:b2:f3:31: ae:f5:ba:58:60:b4:f3:a4:43:f4:75:d2:29:02:c9:e0:dd:eb: 23:b6:a4:d2:59:ac:cf:c3:82:af:2f:6d:da:02:d1:1c:80:59: dc:7e:1a:0e:b2:38:3b:59:c1:1a:68:31:1e:ce:9d:c3:2e:31: f1:43:69:96:7a:d3:b9:4f:58:eb:85:2e:ef:f9:e7:ae:e3:9c: fc:23:2a:86:b3:af:51:f9:9e:fa:59:d1:8d:cd:b0:d2:86:0a: 93:8d:7f:c6:e5:ac:c8:49:6d:b9:b1:6a:e9:c7:4b:c6:f1:4e: 87:4b:d6:30:55:e5:97:96:38:1f:3c:ed:ce:d3:0a:df:50:a7: a1:b4:6f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0OvsDgixI1NoHMwHchrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTRkMzBmM2IxZTExMzc0MjNjNGIyMzU5NTdmMzMwMzA2 NGRhZmYwHhcNMjUxMjA2MTkwMjI3WhcNMjUxMjA3MTkwMjI3WjAzMTEwLwYDVQQD EyhlMGU5ZTRmZmJlOWFhYTA0MDNiZDU1MTY3ZTY1MjgxZTdlYjI4NDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZxzmEUBmkd8zsKduaPCnJ1FZZ1n jL9UFCerRZENM9zWeSglYgMFj2htrwPy7J0evzNeFN3PdTiIvD+VP1erBeZ2h2fN shQCAIDJqSIDev5QqdH393WHZWipG6utY+tygTcLQdIP7GLFIosT/cPcV8xSBRrG YBjo1Ss1aLqIn+FJ0e7Cbpw2ALyzN3LfIWPhw1+tdhKG+55hZnS6P3Q3zk2wz/TY 0t8bfX6UHIJrxO1MCdnoXe/X9sLDXLHSget6CRliwTqCVhrud22UlFDW3zAv/Uut LIQAP/JKLM6PKS18IOxGBbLQaVApuzWtPdOrMxZfWX9QB9K5eUl0rLQTdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODp5P++mqoEA71VFn5lKB5+soQXMB8GA1UdIwQY MBaAFMsU0w87HhE3QjxLI1lX8zAwZNr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNjdiZjUtMDIyMC00OGIxLWI3MjMt YTVhZTViMTk5MzlhLzEveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yNjdiZjUtMDIyMC00OGIxLWI3MjMtYTVhZTViMTk5Mzlh LzEveXhUVER6c2VFVGRDUEVzaldWZnpNREJrMnY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsF90KHR5 9OgRrjhZPjPyhEpUzdjDA+dPZE6TTmlhikYZJvIPB6W4UN8d5mmcxi936NvPHbBd TI9afE/DUYPGeEySbcW+fyKjeuuVI2rFqZnxrUaQrvYWAwpOlAUVaXjA9e4SM0p8 iPdz6+kkqH1hCiJEk0eSBXhO8sk5svMxrvW6WGC086RD9HXSKQLJ4N3rI7ak0lms z8OCry9t2gLRHIBZ3H4aDrI4O1nBGmgxHs6dwy4x8UNplnrTuU9Y64Uu7/nnruOc /CMqhrOvUfme+lnRjc2w0oYKk41/xuWsyEltubFq6cdLxvFOh0vWMFXll5Y4Hzzt ztMK31CnobRvpA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:46 2025 by rpki-client