This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft File: YtHWd-U82GA27g-wYpBs1C-8G-E.mft (raw, json) Hash identifier: QO0PmwSWpGlLAlHot/BEWV4LBSbPxfXqFPQnxEM8mhQ= Subject key identifier: D4:CC:6B:B7:2D:0C:63:9D:10:33:5A:AE:77:22:DB:0E:8E:64:7B:FC Authority key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 Certificate issuer: /CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Certificate serial: 019AF0BF9ED359A32F076D746B8FDD027BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft Manifest number: 1F Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: YtHWd-U82GA27g-wYpBs1C-8G-E.crl (hash: 64TqUtfM000h2PODEIGASk/XvNf+OsoE9o8YQpnMXUI=) 2: vGAiVBVNdJYslblkvqm01Ww4NSA.roa (hash: +AJCCz11UPuNvZqhCS6Ls1F8jMG1vWB6IEnro+dLoOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9e:d3:59:a3:2f:07:6d:74:6b:8f:dd:02:7b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=d4cc6bb72d0c639d10335aae7722db0e8e647bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:a0:21:8d:2d:5a:9c:7c:aa:2f:8b:3d:8a: 1d:64:d8:43:87:72:15:dd:1d:9c:c0:ea:2a:8f:15: f4:0f:0e:d0:34:d5:22:77:a3:2a:6c:83:e2:0e:e7: a6:f7:8c:23:ff:af:da:76:6b:fb:53:0e:4c:26:a0: 12:0d:ea:42:0b:f5:71:25:3b:3c:bd:c0:b9:3c:19: 46:5a:f3:fb:fa:d5:d8:f4:ca:c7:e2:9e:f7:34:28: 6e:63:15:ee:d5:98:4e:bd:56:73:86:15:d9:a2:93: df:02:a0:d8:d2:52:78:60:27:76:93:54:81:dc:78: 63:fa:d4:34:22:0b:53:03:f6:ef:dc:13:4c:1c:10: c5:4e:8c:d2:29:8c:06:63:fc:7f:57:ae:83:a9:08: 4b:49:c6:f7:79:79:6c:97:e9:a1:4d:27:b9:ca:8f: ad:0c:21:27:56:03:b4:ae:81:ef:da:aa:d2:e9:19: be:cf:d3:6f:f3:d1:ae:94:28:c7:61:c0:53:c5:2d: 40:47:17:41:e2:28:96:35:b8:7e:a0:9e:f4:33:27: 11:a4:b0:07:e4:89:11:fb:9c:ca:0a:d2:1b:ce:04: 79:a8:6f:c7:df:c4:04:9d:f0:b8:0c:9a:8a:8c:a7: c2:b3:2d:d7:1c:89:78:75:70:1d:8f:99:ee:0d:ec: e0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CC:6B:B7:2D:0C:63:9D:10:33:5A:AE:77:22:DB:0E:8E:64:7B:FC X509v3 Authority Key Identifier: keyid:62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:82:c8:55:64:dc:5e:ec:72:07:3a:a8:fd:07:cd:f9:be:26: ef:f6:49:5c:88:f0:03:34:84:0f:a5:00:44:2c:3f:05:b4:70: 25:d9:92:5f:d1:28:e7:cc:58:e8:80:7f:c5:44:6e:b9:db:e1: 53:27:62:9c:d8:1d:41:df:fe:eb:3a:2d:4b:8b:2f:dc:ec:7e: e4:d4:cf:14:7c:b0:c4:11:2f:87:ca:ab:7b:9d:7d:5e:07:13: d9:92:1d:15:6f:6f:74:04:99:92:ec:93:89:97:dc:56:8d:21: 26:ec:d5:94:9a:75:05:5a:33:a9:0c:0d:c4:98:d7:64:05:d2: e5:e0:55:3a:aa:9a:ac:1c:bf:16:94:b7:09:d5:76:5f:94:c5: 5a:6b:06:67:68:1a:d1:23:f3:43:fe:89:51:6b:d9:27:5d:2a: d8:94:5e:7f:27:00:fd:6a:1e:9c:bc:0e:f3:fe:20:fe:d0:7f: 46:13:52:28:ff:67:f9:ae:0b:d3:70:79:ac:0a:47:d4:d3:31: e2:8e:2a:b8:3d:8a:76:d5:6d:75:a3:08:d5:7e:a4:a5:a0:e2: 11:b9:3c:26:90:73:df:20:6e:57:d6:44:9d:19:dc:c1:03:41: c5:d6:55:fc:0d:ea:98:cb:b1:75:b2:48:43:15:96:06:6e:72: 7f:02:92:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv57TWaMvB210a4/dAnvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDFkNjc3ZTUzY2Q4NjAzNmVlMGZiMDYyOTA2Y2Q0MmZi YzFiZTEwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD EyhkNGNjNmJiNzJkMGM2MzlkMTAzMzVhYWU3NzIyZGIwZThlNjQ3YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uWgIY0tWpx8qi+LPYodZNhDh3IV 3R2cwOoqjxX0Dw7QNNUid6MqbIPiDuem94wj/6/admv7Uw5MJqASDepCC/VxJTs8 vcC5PBlGWvP7+tXY9MrH4p73NChuYxXu1ZhOvVZzhhXZopPfAqDY0lJ4YCd2k1SB 3Hhj+tQ0IgtTA/bv3BNMHBDFTozSKYwGY/x/V66DqQhLScb3eXlsl+mhTSe5yo+t DCEnVgO0roHv2qrS6Rm+z9Nv89GulCjHYcBTxS1ARxdB4iiWNbh+oJ70MycRpLAH 5IkR+5zKCtIbzgR5qG/H38QEnfC4DJqKjKfCsy3XHIl4dXAdj5nuDezg6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTMa7ctDGOdEDNarnci2w6OZHv8MB8GA1UdIwQY MBaAFGLR1nflPNhgNu4PsGKQbNQvvBvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83NjRmZjItZDdlOC00MDYxLWJmZTYt M2NlZjk5NDBhNjk5LzEvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83NjRmZjItZDdlOC00MDYxLWJmZTYtM2NlZjk5NDBhNjk5 LzEvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYLIVWTc XuxyBzqo/QfN+b4m7/ZJXIjwAzSED6UARCw/BbRwJdmSX9Eo58xY6IB/xURuudvh UydinNgdQd/+6zotS4sv3Ox+5NTPFHywxBEvh8qre519XgcT2ZIdFW9vdASZkuyT iZfcVo0hJuzVlJp1BVozqQwNxJjXZAXS5eBVOqqarBy/FpS3CdV2X5TFWmsGZ2ga 0SPzQ/6JUWvZJ10q2JRefycA/WoenLwO8/4g/tB/RhNSKP9n+a4L03B5rApH1NMx 4o4quD2KdtVtdaMI1X6kpaDiEbk8JpBz3yBuV9ZEnRncwQNBxdZV/A3qmMuxdbJI QxWWBm5yfwKS7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:34 2025 by rpki-client