This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft File: YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json) Hash identifier: RoK5ggrfZCSjj+wDU4ULo1aToDcbJ7mhuIMajIci53A= Subject key identifier: 2E:48:C3:A2:1C:98:B2:05:97:45:B3:F3:40:E5:63:FB:66:5E:35:1C Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8 Certificate serial: 019AF31B89C43A3EF21447FB33D6AD4005AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft Manifest number: 1356 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: DWd1OJAlcB2kSAEMao72mBJOdXY.roa (hash: AUWrMkI+mL2Ml+jd7sUK/SrRZUJ6V8L3ibna7HmKGhM=) 2: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (hash: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=) 3: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: Ae9YhdcJcVFEwE++fQBvSYjTXRLwblz1X3e7+f/ad/E=) 4: iBynxkBNgbzstPi8YjTQg23GPp8.roa (hash: 1ul4Px7X5BB0Iif+/FHz4HFwB9Mu3DthKPuzgZoc0E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:89:c4:3a:3e:f2:14:47:fb:33:d6:ad:40:05:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613d23f2121327d917d708d8fe153382455959a8 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=2e48c3a21c98b2059745b3f340e563fb665e351c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:ca:13:00:ee:38:8d:32:ed:92:5b:ab:9d: ff:6a:bc:88:32:83:95:07:2b:2b:cd:d7:1a:b1:50: 54:ad:ab:85:e1:0b:8f:ca:cf:74:7c:5a:16:d4:04: bd:2e:95:a5:37:c3:c0:b3:cf:6c:12:1c:49:f8:dd: 4b:46:0e:65:0b:0a:7b:45:5e:02:b1:98:9b:1e:f6: 57:5f:ed:ec:7c:d0:3a:c0:9f:51:60:ad:7b:39:97: 04:b9:5f:80:43:f2:f6:54:4c:66:a8:95:1d:38:92: 7b:19:1f:b9:2f:c5:38:67:7a:b2:89:3d:2f:0b:f1: 54:c8:73:78:01:28:9a:62:32:52:e1:fd:12:7e:fc: a9:c8:35:61:89:ed:65:a8:bb:cd:7e:ac:9b:d0:e8: ce:cb:8a:f4:17:02:70:09:a1:4e:22:cb:1b:df:d8: 93:ec:4d:9b:f6:4d:cb:ee:ed:80:92:ce:3a:43:0d: cd:24:95:9a:e3:29:c0:db:7a:f6:e8:66:51:da:48: 2a:a9:98:58:74:70:cf:d3:5a:ed:92:84:28:5d:d7: d9:14:c0:23:75:2d:64:3a:65:79:0f:99:42:b1:c9: 7e:3b:90:ec:d7:8a:19:05:67:a7:61:49:71:f3:9a: be:f7:75:ee:76:92:94:f4:0e:08:95:b7:f0:76:43: 00:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:48:C3:A2:1C:98:B2:05:97:45:B3:F3:40:E5:63:FB:66:5E:35:1C X509v3 Authority Key Identifier: keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fa:b4:e7:68:46:e7:ac:fc:1f:67:e8:4b:68:4c:c2:28:7c: df:52:6b:cb:2d:fb:62:e1:df:e5:51:bf:e8:84:c1:c4:1e:5a: 00:ae:4b:93:ee:48:49:57:a3:b0:79:8b:4c:99:03:01:78:51: ae:96:7f:16:e7:cf:dd:e5:6a:dd:1f:09:b9:a7:36:60:17:9a: 0b:f2:89:8b:6e:4f:d5:d8:34:7b:24:92:f6:b0:01:fb:e2:8e: db:45:8e:c8:fe:91:72:9b:39:6b:6a:be:47:f6:d1:12:49:3c: 37:5f:00:d8:e3:76:b1:c8:14:7f:4b:9e:c4:09:33:9e:a8:78: 68:49:e2:c8:58:d4:5e:fe:87:76:1f:f3:32:ff:0a:cc:76:19: a8:86:f0:d9:59:5f:cf:49:ef:5e:f6:72:a1:db:20:31:0b:19: 6f:52:5e:cc:52:c6:ef:2c:aa:16:b4:0d:cd:1b:d9:1d:0c:a7: a7:e7:a3:9c:15:59:ae:d3:bc:e2:0f:73:46:f1:4d:0c:d4:a9: 4c:cb:47:da:5f:d2:0b:c6:26:51:42:72:08:8e:a1:0e:65:6a: 82:03:a2:a2:03:75:02:db:57:bb:de:91:86:d3:03:45:f9:57: 86:4e:bf:35:48:3a:ec:f6:4c:b1:ef:80:2f:32:70:7c:43:7e: 1a:16:fe:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4nEOj7yFEf7M9atQAWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxM2QyM2YyMTIxMzI3ZDkxN2Q3MDhkOGZlMTUzMzgyNDU1 OTU5YTgwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EygyZTQ4YzNhMjFjOThiMjA1OTc0NWIzZjM0MGU1NjNmYjY2NWUzNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuorKEwDuOI0y7ZJbq53/aryIMoOV BysrzdcasVBUrauF4QuPys90fFoW1AS9LpWlN8PAs89sEhxJ+N1LRg5lCwp7RV4C sZibHvZXX+3sfNA6wJ9RYK17OZcEuV+AQ/L2VExmqJUdOJJ7GR+5L8U4Z3qyiT0v C/FUyHN4ASiaYjJS4f0SfvypyDVhie1lqLvNfqyb0OjOy4r0FwJwCaFOIssb39iT 7E2b9k3L7u2Aks46Qw3NJJWa4ynA23r26GZR2kgqqZhYdHDP01rtkoQoXdfZFMAj dS1kOmV5D5lCscl+O5Ds14oZBWenYUlx85q+93XudpKU9A4IlbfwdkMAXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5Iw6IcmLIFl0Wz80DlY/tmXjUcMB8GA1UdIwQY MBaAFGE9I/ISEyfZF9cI2P4VM4JFWVmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQt N2E2MDViYTQwYzFlLzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mY2U2YmUtMDg5Ni00NDg3LWFhMzQtN2E2MDViYTQwYzFl LzEvWVQwajhoSVRKOWtYMXdqWV9oVXpna1ZaV2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfq052hG 56z8H2foS2hMwih831Jryy37YuHf5VG/6ITBxB5aAK5Lk+5ISVejsHmLTJkDAXhR rpZ/FufP3eVq3R8Juac2YBeaC/KJi25P1dg0eySS9rAB++KO20WOyP6Rcps5a2q+ R/bREkk8N18A2ON2scgUf0uexAkznqh4aEniyFjUXv6Hdh/zMv8KzHYZqIbw2Vlf z0nvXvZyodsgMQsZb1JezFLG7yyqFrQNzRvZHQynp+ejnBVZrtO84g9zRvFNDNSp TMtH2l/SC8YmUUJyCI6hDmVqggOiogN1AttXu96RhtMDRflXhk6/NUg67PZMse+A LzJwfEN+Ghb+Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:00 2025 by rpki-client