This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft File: ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft (raw, json) Hash identifier: 0d8UEB/KGXDx25+S5LQwXJfrj+hWxRQlDsYYSz+EhOw= Subject key identifier: 46:A8:02:EA:CA:1C:D8:9E:7C:F5:C3:A1:75:E8:D4:49:87:6B:6D:B6 Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2 Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2 Certificate serial: 019AF4D2A3DB24C9A70EC7F4B5416EA3279B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft Manifest number: 0107 Signing time: Sat 06 Dec 2025 18:00:36 +0000 Manifest this update: Sat 06 Dec 2025 18:00:36 +0000 Manifest next update: Sun 07 Dec 2025 18:00:36 +0000 Files and hashes: 1: pPj0AN_LbIG5edwMDA59ThE3RKk.roa (hash: tv9SuA0cMfqr0L1nuGX2Myng2miGRH68D2F/qwMX0QU=) 2: ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl (hash: 7cfxMkhrF05swbAIoAEWmA9JYpt/ootWzBsDdDRy14I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a3:db:24:c9:a7:0e:c7:f4:b5:41:6e:a3:27:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2 Validity Not Before: Dec 6 18:00:36 2025 GMT Not After : Dec 7 18:00:36 2025 GMT Subject: CN=46a802eaca1cd89e7cf5c3a175e8d449876b6db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:4d:7d:6c:79:5d:6d:f0:75:fc:dc:1a:3d: 17:42:6b:8e:36:b8:6d:fb:ae:af:62:8f:ac:9e:c3: a1:13:6e:dd:45:70:59:ad:4c:db:99:a1:ba:73:bf: b6:84:3d:cf:5f:4c:2e:40:95:c0:86:4c:c6:cf:4c: 0f:22:b2:de:15:4d:87:e9:ac:99:3c:14:32:50:b8: b1:f3:d5:3e:72:1a:57:f4:8d:8b:00:d4:02:c9:fc: cb:0f:20:ab:ac:05:48:9c:eb:6a:de:f5:31:10:cc: 3a:7b:b9:c7:b0:f0:35:3a:9b:36:d9:f0:91:2e:8a: 8e:5a:5f:54:7d:40:7a:4f:8f:1c:42:9e:7d:c9:1e: 03:99:59:f8:01:a5:7a:be:d9:f9:15:14:f6:46:52: a3:f7:06:a5:be:20:91:2c:4e:0f:6b:dc:5c:0e:3e: c1:f4:d8:7d:7b:42:ab:d3:65:63:f3:57:52:bd:77: bd:ed:a1:f9:34:8c:b9:f3:2b:3f:bc:3c:32:0a:2c: 5d:c5:ff:8d:1d:74:c1:f0:9c:b9:0c:97:a9:59:c9: 7d:0f:81:c5:50:ee:f7:4e:6f:a7:f9:cd:bb:f4:04: ee:89:9a:47:46:32:76:e0:1a:98:23:66:e5:43:5e: d6:f1:64:b8:d2:35:84:80:7c:c2:40:bb:41:e6:33: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A8:02:EA:CA:1C:D8:9E:7C:F5:C3:A1:75:E8:D4:49:87:6B:6D:B6 X509v3 Authority Key Identifier: keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:fc:59:1c:11:2e:8b:53:3e:78:6f:93:57:91:96:ba:59:04: 98:03:e1:d1:d3:0c:f2:03:e1:23:92:43:5f:76:f8:0b:c8:52: 7d:1b:b8:4f:11:27:5c:77:62:b0:85:ea:f0:7f:37:7d:c2:b7: 5d:4d:68:1e:ca:42:86:3b:83:b7:dd:e9:98:35:16:49:68:59: fc:03:25:35:21:e0:0b:fd:e8:0d:29:3d:fd:c1:a1:8e:0c:b6: 4c:54:91:03:56:62:b3:86:61:55:c4:cb:85:be:20:13:7f:18: a5:cb:39:78:53:b4:4d:51:7e:29:6c:c7:02:e3:ed:1a:08:06: b1:eb:1c:d9:31:00:30:b6:bd:bf:1a:14:d0:53:6a:c5:26:b4: ad:2d:a5:4c:a6:2f:9f:75:ae:64:8f:66:c1:b5:b9:24:08:0a: a1:cc:54:03:de:74:b9:d9:98:ed:81:42:1d:ce:cb:ad:5b:80: d5:64:3a:5b:d4:5a:55:d4:5f:d9:43:2f:68:a6:ff:29:cd:46: 68:2c:02:72:35:75:24:25:9c:81:ca:ed:f9:9f:bc:07:76:b7: d8:7c:1c:88:b1:01:35:88:ab:16:d1:05:74:55:0c:40:69:00: 3b:0a:9c:c6:86:7e:04:cb:65:9b:9d:a3:e0:b6:01:51:a1:57: ed:0b:4b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qPbJMmnDsf0tUFuoyebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzY0YzNlYTQxZTUyZGJmYWI2NDRkNzcwZjM1OGVkMDQ0 MDAzZjIwHhcNMjUxMjA2MTgwMDM2WhcNMjUxMjA3MTgwMDM2WjAzMTEwLwYDVQQD Eyg0NmE4MDJlYWNhMWNkODllN2NmNWMzYTE3NWU4ZDQ0OTg3NmI2ZGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshxNfWx5XW3wdfzcGj0XQmuONrht +66vYo+snsOhE27dRXBZrUzbmaG6c7+2hD3PX0wuQJXAhkzGz0wPIrLeFU2H6ayZ PBQyULix89U+chpX9I2LANQCyfzLDyCrrAVInOtq3vUxEMw6e7nHsPA1Ops22fCR LoqOWl9UfUB6T48cQp59yR4DmVn4AaV6vtn5FRT2RlKj9walviCRLE4Pa9xcDj7B 9Nh9e0Kr02Vj81dSvXe97aH5NIy58ys/vDwyCixdxf+NHXTB8Jy5DJepWcl9D4HF UO73Tm+n+c279ATuiZpHRjJ24BqYI2blQ17W8WS40jWEgHzCQLtB5jO5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaoAurKHNiefPXDoXXo1EmHa222MB8GA1UdIwQY MBaAFMnGTD6kHlLb+rZE13DzWO0EQAPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kYzhmMjctZWVlZS00MDkwLThjMjYt OGNiYThjY2RmOTgxLzEveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kYzhmMjctZWVlZS00MDkwLThjMjYtOGNiYThjY2RmOTgx LzEveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3fxZHBEu i1M+eG+TV5GWulkEmAPh0dMM8gPhI5JDX3b4C8hSfRu4TxEnXHdisIXq8H83fcK3 XU1oHspChjuDt93pmDUWSWhZ/AMlNSHgC/3oDSk9/cGhjgy2TFSRA1Zis4ZhVcTL hb4gE38Ypcs5eFO0TVF+KWzHAuPtGggGsesc2TEAMLa9vxoU0FNqxSa0rS2lTKYv n3WuZI9mwbW5JAgKocxUA950udmY7YFCHc7LrVuA1WQ6W9RaVdRf2UMvaKb/Kc1G aCwCcjV1JCWcgcrt+Z+8B3a32HwciLEBNYirFtEFdFUMQGkAOwqcxoZ+BMtlm52j 4LYBUaFX7QtLXg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:44 2025 by rpki-client