This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json) Hash identifier: t9JkpSnmjeGWjNRMh7XGamSYZQIJa96+4fgrZ/zckEc= Subject key identifier: 44:D6:B5:AD:A7:38:BC:38:3C:F0:41:0D:3D:F7:10:69:E0:EA:DD:A7 Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56 Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656 Certificate serial: 019B3B6BE4098C1883AD9CACADC61B801442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 11:01:25 +0000 Manifest this update: Sat 20 Dec 2025 11:01:25 +0000 Manifest next update: Sun 21 Dec 2025 11:01:25 +0000 Files and hashes: 1: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=) 2: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: hSDjAhUQNkU69TRmfQCJR35ZDW0PbwYkRWamb0kuyDQ=) 3: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e4:09:8c:18:83:ad:9c:ac:ad:c6:1b:80:14:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656 Validity Not Before: Dec 20 11:01:25 2025 GMT Not After : Dec 21 11:01:25 2025 GMT Subject: CN=44d6b5ada738bc383cf0410d3df71069e0eadda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e7:82:6b:7c:75:58:ed:0d:8f:d8:be:53:73: b0:d1:5f:44:58:1e:26:9f:d0:c5:c9:bf:92:8e:d7: e5:5a:cb:fd:3a:8c:8f:a1:ac:08:d5:0e:54:66:d0: 1b:d2:32:62:5b:78:ac:a9:a9:52:25:60:80:07:3f: d4:87:f3:a3:6d:66:d6:22:7a:b5:1d:8f:21:f0:f1: 12:7c:7b:4b:63:8b:bc:7a:a5:09:a0:92:bf:dd:38: 8e:cc:aa:92:91:d9:5a:63:ea:96:17:cb:c9:28:e7: 06:1e:93:2b:cc:08:23:ca:9c:ab:fd:34:e0:1e:10: 21:12:69:60:57:5d:ab:1d:36:10:18:3a:46:1d:a1: 59:91:8b:a4:43:01:bb:cf:7f:c5:c9:1e:de:0e:16: 05:5e:72:c0:85:69:4b:2e:c2:39:9c:a7:69:72:e3: b0:16:da:5b:40:11:92:df:5c:77:1b:99:20:42:c1: 72:4e:c9:4e:cd:1b:ea:fd:c2:80:0c:05:77:bf:7a: 53:b0:59:54:03:a5:de:6d:1f:6b:1a:f0:ca:a5:b5: 12:ef:54:d5:18:0e:c8:cb:95:c7:bb:65:eb:1c:d5: 41:0d:65:0a:d0:15:2f:c4:fd:d3:9d:ba:cb:9a:b0: 5f:22:d7:10:b4:6d:a4:55:49:54:ff:2e:04:f9:ad: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D6:B5:AD:A7:38:BC:38:3C:F0:41:0D:3D:F7:10:69:E0:EA:DD:A7 X509v3 Authority Key Identifier: keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bb:7b:ed:1f:5a:cc:2d:4e:84:05:fc:8f:0c:81:3a:76:5e: 6b:ac:a5:01:5d:a4:10:9c:80:26:76:30:3e:56:2f:13:a9:74: 04:09:01:9a:91:fc:78:d0:99:cf:e0:ab:cd:ef:5a:7a:55:38: e6:ce:c0:7f:f3:8d:52:4b:3e:e7:46:82:4d:49:6a:ae:5a:a8: 14:a0:55:ae:ea:97:dc:e1:20:a7:7c:61:4a:0e:71:5f:8f:7d: 0c:ec:6a:87:4c:df:51:4a:3f:01:82:f4:73:99:ec:f8:02:a2: ab:9c:ce:6f:ff:55:55:62:2c:8e:e2:c2:1c:6f:e4:86:06:f9: 40:5e:b7:65:8b:61:b4:be:67:06:28:ee:1a:bd:d1:9a:1c:12: 8f:ad:aa:de:99:c9:2c:fe:f5:a8:e6:7a:51:35:33:07:eb:aa: 32:25:6e:d4:57:64:b0:3b:fe:4b:f7:af:a6:df:8e:1d:d3:5f: b4:29:d4:48:86:26:4b:fc:d2:86:b5:86:7f:00:87:37:37:22: 6d:29:62:cc:d0:c9:bc:43:15:aa:e7:d0:7c:c6:83:96:6b:9c: 7b:ea:a1:8b:1b:26:1a:2a:eb:28:67:9e:bf:7d:97:1d:f3:7c: 01:41:99:35:f9:c4:db:d9:8d:8f:4e:4c:f6:4a:68:b6:00:7b: 9e:b5:0a:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+QJjBiDrZysrcYbgBRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMDAxYjk0ODU5NWJjZTI0OTEzZjgxMWFmZjcxZTNjY2U0 NWQ2NTYwHhcNMjUxMjIwMTEwMTI1WhcNMjUxMjIxMTEwMTI1WjAzMTEwLwYDVQQD Eyg0NGQ2YjVhZGE3MzhiYzM4M2NmMDQxMGQzZGY3MTA2OWUwZWFkZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeeCa3x1WO0Nj9i+U3Ow0V9EWB4m n9DFyb+SjtflWsv9OoyPoawI1Q5UZtAb0jJiW3isqalSJWCABz/Uh/OjbWbWInq1 HY8h8PESfHtLY4u8eqUJoJK/3TiOzKqSkdlaY+qWF8vJKOcGHpMrzAgjypyr/TTg HhAhEmlgV12rHTYQGDpGHaFZkYukQwG7z3/FyR7eDhYFXnLAhWlLLsI5nKdpcuOw FtpbQBGS31x3G5kgQsFyTslOzRvq/cKADAV3v3pTsFlUA6XebR9rGvDKpbUS71TV GA7Iy5XHu2XrHNVBDWUK0BUvxP3TnbrLmrBfItcQtG2kVUlU/y4E+a3u0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETWta2nOLw4PPBBDT33EGng6t2nMB8GA1UdIwQY MBaAFMoAG5SFlbziSRP4Ea/3HjzORdZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDIt Y2ZjNmFhMDE2NjY5LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mZmQ0Y2EtZTUxZS00NDdiLWJjZDItY2ZjNmFhMDE2NjY5 LzEveWdBYmxJV1Z2T0pKRV9nUnJfY2VQTTVGMWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrt77R9a zC1OhAX8jwyBOnZea6ylAV2kEJyAJnYwPlYvE6l0BAkBmpH8eNCZz+Crze9aelU4 5s7Af/ONUks+50aCTUlqrlqoFKBVruqX3OEgp3xhSg5xX499DOxqh0zfUUo/AYL0 c5ns+AKiq5zOb/9VVWIsjuLCHG/khgb5QF63ZYthtL5nBijuGr3RmhwSj62q3pnJ LP71qOZ6UTUzB+uqMiVu1FdksDv+S/evpt+OHdNftCnUSIYmS/zShrWGfwCHNzci bSlizNDJvEMVqufQfMaDlmuce+qhixsmGirrKGeev32XHfN8AUGZNfnE29mNj05M 9kpotgB7nrUK2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 17:01:37 2025 by rpki-client