This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json) Hash identifier: C6Teig7Mar/Ck5sw/vBm9rH1k27LwieKQ/BlU1HZhGo= Subject key identifier: 4A:16:7D:5B:D8:0F:71:57:E1:D7:C5:CF:ED:A5:BD:51:B3:7B:1D:45 Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35 Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435 Certificate serial: 019AF2AD497FC6D83D9E9AC50F7446948F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft Manifest number: 0A2F Signing time: Sat 06 Dec 2025 08:00:34 +0000 Manifest this update: Sat 06 Dec 2025 08:00:34 +0000 Manifest next update: Sun 07 Dec 2025 08:00:34 +0000 Files and hashes: 1: jr7Oi-VOBv_LBDGgARbH5yi0fCE.roa (hash: 9cEsiuQyqTFkaGMrbbHrCUpW4clJajhU8ds2+OGo5cc=) 2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: /UOJpPVI89HSn26HPoJXYiADyUAC03NbMt+6L2UneLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:49:7f:c6:d8:3d:9e:9a:c5:0f:74:46:94:8f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435 Validity Not Before: Dec 6 08:00:34 2025 GMT Not After : Dec 7 08:00:34 2025 GMT Subject: CN=4a167d5bd80f7157e1d7c5cfeda5bd51b37b1d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:d2:6b:eb:05:78:97:6d:e2:fb:ea:ab:41: 56:8e:f0:c1:45:b2:f5:66:87:e3:1a:0a:88:9a:1b: fe:f4:fd:68:3c:4c:1d:66:ff:18:0f:14:72:35:37: b7:98:12:d4:06:6a:dc:d0:03:57:bf:75:93:96:51: 69:06:d9:fd:e2:df:ad:e3:2d:9c:41:3b:b4:10:57: a0:f0:6c:c0:ed:3e:df:cc:0e:fe:f5:11:47:9f:19: 2d:9d:30:96:f9:2e:88:15:fc:84:d5:40:8b:75:cc: 05:53:bc:8c:0a:4d:50:a9:95:80:e3:c8:e9:4a:d4: 77:c2:4c:8c:8d:b6:a5:8b:82:b6:88:23:c7:1e:93: 0d:7e:cd:53:94:13:0c:9d:ca:c8:43:58:d9:6e:69: 70:44:88:ae:38:c7:ec:d7:a4:0a:84:33:26:08:5b: 31:f7:ab:4e:21:ba:7e:ba:2a:f1:3c:0e:e5:3e:80: da:e2:99:85:31:55:c3:db:69:59:cc:b7:53:94:9d: 1f:d8:0d:9c:49:d2:1b:60:69:b2:10:2f:d0:de:7f: ff:65:34:53:e1:1f:9b:fa:79:65:ca:01:0e:8a:dc: 11:30:0c:75:16:58:cc:a7:f0:e7:60:29:f6:5b:c0: 8d:30:e9:9b:98:ce:4e:88:0a:dc:20:e5:46:33:0e: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:16:7D:5B:D8:0F:71:57:E1:D7:C5:CF:ED:A5:BD:51:B3:7B:1D:45 X509v3 Authority Key Identifier: keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2d:45:88:56:09:6a:20:ac:b1:fb:19:f0:bf:ac:04:cd:e9: de:5b:81:5d:1e:a5:95:fc:15:79:da:58:6d:d2:5e:cf:43:9e: a7:12:1f:b7:6b:2e:6d:97:dc:6c:2b:9d:fe:d5:18:a8:26:78: 31:9f:4a:f9:65:a7:4e:81:bb:3e:87:78:82:e0:81:4a:af:38: 03:75:d6:06:4c:e8:99:28:60:f7:2f:54:b9:88:df:db:30:a8: 02:61:e4:96:b8:fb:b1:8e:a9:49:47:1a:f8:16:96:fa:e5:64: d2:13:92:a6:6d:09:ed:97:d8:06:e1:59:a8:a2:d4:49:9a:5e: 24:9f:3d:3d:e0:7c:a7:0b:9a:24:d1:89:ce:67:f8:75:0a:bf: 28:cc:e3:2e:7d:f2:a7:e1:cb:a1:46:bc:37:54:75:5a:19:20: b6:a0:11:e3:b7:b5:58:db:87:c3:e0:2c:55:f5:6c:e9:be:37: e1:f8:cc:22:93:9f:0c:19:cd:f6:79:62:4d:58:aa:80:10:d9: c5:5b:61:7e:e9:62:18:57:67:45:c5:98:3b:01:20:28:9f:28: 21:a5:57:ae:e2:08:f8:20:49:f1:57:1a:ed:06:42:52:28:f6: e0:61:90:15:ee:8d:cd:55:59:f3:fa:57:f9:04:5f:8c:02:75: e7:10:4e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUl/xtg9nprFD3RGlI8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MjllMTBlMTZiYzc5YmZjNTZjNTM1NTdlNWIxYWE1NTlj Yzc0MzUwHhcNMjUxMjA2MDgwMDM0WhcNMjUxMjA3MDgwMDM0WjAzMTEwLwYDVQQD Eyg0YTE2N2Q1YmQ4MGY3MTU3ZTFkN2M1Y2ZlZGE1YmQ1MWIzN2IxZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkDSa+sFeJdt4vvqq0FWjvDBRbL1 ZofjGgqImhv+9P1oPEwdZv8YDxRyNTe3mBLUBmrc0ANXv3WTllFpBtn94t+t4y2c QTu0EFeg8GzA7T7fzA7+9RFHnxktnTCW+S6IFfyE1UCLdcwFU7yMCk1QqZWA48jp StR3wkyMjbali4K2iCPHHpMNfs1TlBMMncrIQ1jZbmlwRIiuOMfs16QKhDMmCFsx 96tOIbp+uirxPA7lPoDa4pmFMVXD22lZzLdTlJ0f2A2cSdIbYGmyEC/Q3n//ZTRT 4R+b+nllygEOitwRMAx1FljMp/DnYCn2W8CNMOmbmM5OiArcIOVGMw7tKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoWfVvYD3FX4dfFz+2lvVGzex1FMB8GA1UdIwQY MBaAFMgp4Q4WvHm/xWxTVX5bGqVZzHQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEt Yjg0NTNlZWJiMjY3LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82NjdhNGQtNGEzYS00OGY1LWEyNmEtYjg0NTNlZWJiMjY3 LzEveUNuaERoYThlYl9GYkZOVmZsc2FwVm5NZERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi1FiFYJ aiCssfsZ8L+sBM3p3luBXR6llfwVedpYbdJez0OepxIft2subZfcbCud/tUYqCZ4 MZ9K+WWnToG7Pod4guCBSq84A3XWBkzomShg9y9UuYjf2zCoAmHklrj7sY6pSUca +BaW+uVk0hOSpm0J7ZfYBuFZqKLUSZpeJJ89PeB8pwuaJNGJzmf4dQq/KMzjLn3y p+HLoUa8N1R1WhkgtqAR47e1WNuHw+AsVfVs6b434fjMIpOfDBnN9nliTViqgBDZ xVthfuliGFdnRcWYOwEgKJ8oIaVXruII+CBJ8Vca7QZCUij24GGQFe6NzVVZ8/pX +QRfjAJ15xBOqw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:05 2025 by rpki-client