This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft File: YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft (raw, json) Hash identifier: zd+FS0AQYsMV9UEve+C3KW5l6FpNrOqZbP74XokS3B4= Subject key identifier: B4:DE:C2:D9:8B:B0:E1:4D:8A:A9:CB:66:58:5C:23:47:FE:75:A6:42 Authority key identifier: 60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26 Certificate issuer: /CN=602d570b542e7302885d367418df802f99494f26 Certificate serial: 019B35A0953579A442B331044980455E6FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft Manifest number: 07E0 Signing time: Fri 19 Dec 2025 08:01:14 +0000 Manifest this update: Fri 19 Dec 2025 08:01:14 +0000 Manifest next update: Sat 20 Dec 2025 08:01:14 +0000 Files and hashes: 1: Wb7gIaowM175_4hbQACvXGxElnc.roa (hash: pkwDFkxfWqeO5qm1OaqoMf2SYa+I4A9Fn1qiqLC0gYE=) 2: YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl (hash: Wli+iRtuxaZ4jVpDZXVDjmB0LhLefgG3mKpV/44ER30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:95:35:79:a4:42:b3:31:04:49:80:45:5e:6f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602d570b542e7302885d367418df802f99494f26 Validity Not Before: Dec 19 08:01:14 2025 GMT Not After : Dec 20 08:01:14 2025 GMT Subject: CN=b4dec2d98bb0e14d8aa9cb66585c2347fe75a642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:e1:39:c9:c4:94:69:8b:f0:23:e0:a9:d1: 0a:0e:d5:90:06:0a:18:90:0b:70:7d:77:72:48:00: b7:78:9e:93:d8:01:f4:d1:eb:8b:cd:6c:cb:43:fa: 02:43:18:ac:95:0e:c4:a1:af:22:88:ca:74:9d:7e: 3e:85:c1:99:d7:89:1e:b3:df:06:f0:6b:57:6d:b1: a4:f9:57:0a:f3:8e:8d:03:bc:54:b4:ef:6e:31:40: c6:e3:56:3a:4c:de:6e:5f:5c:28:18:9e:c4:ec:84: b0:81:0f:69:82:50:51:20:f6:f4:1b:81:49:15:85: 2c:aa:ec:e1:9c:50:91:c7:20:e2:b5:c8:cb:b7:70: f5:ad:d5:61:c2:bb:83:3d:0b:cb:de:da:d3:e0:68: 83:dd:26:c8:da:74:89:a7:d0:62:2b:2e:e6:2b:39: e6:e4:02:65:3e:04:d3:c3:fb:1e:ce:8c:e1:f3:79: 42:25:a1:6c:bf:2e:82:22:ba:c6:d5:ed:8b:ad:fb: b2:f7:67:1e:c2:8f:ab:35:a5:91:66:2a:16:0e:42: 3e:8f:25:9c:4d:ca:66:51:67:0d:9e:14:61:a0:f6: a8:ab:c1:22:8b:96:a3:5f:44:83:8a:33:21:17:51: f9:08:b7:5f:f1:30:54:bf:82:e1:e6:2a:34:23:bf: 2e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DE:C2:D9:8B:B0:E1:4D:8A:A9:CB:66:58:5C:23:47:FE:75:A6:42 X509v3 Authority Key Identifier: keyid:60:2D:57:0B:54:2E:73:02:88:5D:36:74:18:DF:80:2F:99:49:4F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC1XC1QucwKIXTZ0GN-AL5lJTyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37a0af-c3f6-45d6-a144-a3d3dedb2608/1/YC1XC1QucwKIXTZ0GN-AL5lJTyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4e:74:48:5b:86:c2:0e:e6:b9:09:36:92:07:65:56:b8:e0: 8f:8c:e8:e1:eb:d7:7c:db:25:00:f5:76:2d:c6:47:2c:5f:a6: f4:36:19:86:20:de:8c:d9:ba:fc:56:23:20:d7:69:99:34:c7: 1c:7b:ab:8c:d7:19:e3:a2:a5:dc:4e:e0:87:67:6e:0d:d4:cb: b8:0e:a3:36:01:d3:da:77:a6:f0:fe:51:77:c8:66:fa:75:e7: dc:5c:82:63:ab:5e:16:a8:1d:51:3d:21:b6:31:34:69:ed:c6: 8a:4b:a0:46:cd:ef:af:c1:1e:32:98:34:e8:6f:8c:22:2a:b4: cb:3f:85:23:20:27:9d:fd:89:fc:09:82:82:41:c4:90:db:a9: b2:6a:fd:0d:88:ed:2b:06:20:e8:19:09:9c:a9:95:23:aa:e1: 8d:92:d5:c4:d6:ee:02:9d:2f:1a:42:69:23:8b:f2:c7:5f:4a: 47:12:ad:37:d4:fc:33:86:8b:52:c2:b3:5c:05:72:10:01:05: 9a:65:69:a0:9e:54:45:6b:83:bd:d0:eb:ea:1c:ae:cc:c2:2f: 8c:50:99:50:9d:31:86:51:73:fd:64:05:5c:62:13:77:6b:ad: 45:44:44:69:ea:03:9f:64:b9:ef:fb:a0:75:30:16:57:8c:1b: cb:b4:77:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oJU1eaRCszEESYBFXm/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMmQ1NzBiNTQyZTczMDI4ODVkMzY3NDE4ZGY4MDJmOTk0 OTRmMjYwHhcNMjUxMjE5MDgwMTE0WhcNMjUxMjIwMDgwMTE0WjAzMTEwLwYDVQQD EyhiNGRlYzJkOThiYjBlMTRkOGFhOWNiNjY1ODVjMjM0N2ZlNzVhNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkThOcnElGmL8CPgqdEKDtWQBgoY kAtwfXdySAC3eJ6T2AH00euLzWzLQ/oCQxislQ7Eoa8iiMp0nX4+hcGZ14kes98G 8GtXbbGk+VcK846NA7xUtO9uMUDG41Y6TN5uX1woGJ7E7ISwgQ9pglBRIPb0G4FJ FYUsquzhnFCRxyDitcjLt3D1rdVhwruDPQvL3trT4GiD3SbI2nSJp9BiKy7mKznm 5AJlPgTTw/sezozh83lCJaFsvy6CIrrG1e2Lrfuy92cewo+rNaWRZioWDkI+jyWc TcpmUWcNnhRhoPaoq8Eii5ajX0SDijMhF1H5CLdf8TBUv4Lh5io0I78uSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTewtmLsOFNiqnLZlhcI0f+daZCMB8GA1UdIwQY MBaAFGAtVwtULnMCiF02dBjfgC+ZSU8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQt YTNkM2RlZGIyNjA4LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zN2EwYWYtYzNmNi00NWQ2LWExNDQtYTNkM2RlZGIyNjA4 LzEvWUMxWEMxUXVjd0tJWFRaMEdOLUFMNWxKVHlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk50SFuG wg7muQk2kgdlVrjgj4zo4evXfNslAPV2LcZHLF+m9DYZhiDejNm6/FYjINdpmTTH HHurjNcZ46Kl3E7gh2duDdTLuA6jNgHT2nem8P5Rd8hm+nXn3FyCY6teFqgdUT0h tjE0ae3GikugRs3vr8EeMpg06G+MIiq0yz+FIyAnnf2J/AmCgkHEkNupsmr9DYjt KwYg6BkJnKmVI6rhjZLVxNbuAp0vGkJpI4vyx19KRxKtN9T8M4aLUsKzXAVyEAEF mmVpoJ5URWuDvdDr6hyuzMIvjFCZUJ0xhlFz/WQFXGITd2utRUREaeoDn2S57/ug dTAWV4wby7R3yQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:49 2025 by rpki-client