This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json) Hash identifier: 4ak+93Vr7LooD+czf7vRf1FytP2OAEhDl6RZznEPXew= Subject key identifier: BE:78:BD:16:AF:80:55:6A:25:FE:A5:56:EE:A3:CB:B3:BE:FB:77:DD Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Certificate serial: 019B33447DBED94E74A9BDEBFA81130A31FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:01:25 +0000 Manifest this update: Thu 18 Dec 2025 21:01:25 +0000 Manifest next update: Fri 19 Dec 2025 21:01:25 +0000 Files and hashes: 1: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: ZO6/K4j1fSisQKzU30cnQos2Ba4E/cFBf+UwU+8xzQQ=) 2: riaXA0o3ztBtwF7sKqg1RflsJeI.roa (hash: PkRZUeqNmDsfT7G4mjGXrdMXe4M5/AEybH+EkbWMiv4=) 3: yYaisXyChRiN2DpvBoKyqem_xcE.roa (hash: 2YMiZxn9BzAJh7sY9ViGLpVIJNMsE1y+h4ErGfBrx8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:7d:be:d9:4e:74:a9:bd:eb:fa:81:13:0a:31:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Validity Not Before: Dec 18 21:01:25 2025 GMT Not After : Dec 19 21:01:25 2025 GMT Subject: CN=be78bd16af80556a25fea556eea3cbb3befb77dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:3c:e4:da:f5:95:cf:fb:b8:52:4c:48:58: 7e:11:c3:3b:f0:0f:5d:30:44:f5:09:04:35:20:1a: ad:1c:86:48:3f:43:71:8f:16:c1:ca:c2:0c:54:e2: b7:5a:68:43:84:3e:8a:95:34:74:fc:4c:39:fb:73: 5b:b7:86:10:f4:47:5a:51:56:0c:1e:73:5e:36:29: 26:61:78:9b:c8:37:4d:43:19:5f:33:e6:f5:8d:d5: df:76:be:9f:a3:ab:df:05:59:32:18:ae:2f:db:01: f3:82:af:43:b3:3d:17:dc:5d:25:7b:1b:d5:4f:95: 62:68:06:52:59:91:7a:cb:cf:66:ff:f6:b3:f9:06: 49:1e:58:5a:c7:09:dc:8b:bf:04:6d:46:33:03:25: 0f:fa:e5:a0:e6:5d:d3:79:5d:62:a7:d5:b9:6b:83: 63:20:55:53:49:16:a0:96:3f:9c:6f:76:d2:6a:22: 65:22:c2:83:38:48:78:99:89:07:a2:0d:e8:bd:01: 2c:ef:b1:4f:ef:ba:26:23:fb:48:6e:40:94:e8:8f: 06:f4:55:17:ad:e0:1a:de:83:2c:b5:ef:78:68:79: 42:48:60:29:e6:db:85:f4:5a:8c:f3:8b:33:19:7f: 67:c4:74:f9:68:0b:68:b2:e3:41:a2:3a:bb:8d:59: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:78:BD:16:AF:80:55:6A:25:FE:A5:56:EE:A3:CB:B3:BE:FB:77:DD X509v3 Authority Key Identifier: keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:17:5b:f0:7b:e1:39:0d:40:e3:66:a5:ab:4e:11:de:68:6d: e1:5f:ad:56:76:d8:19:c4:9b:15:dd:55:c1:a9:ad:84:d6:7b: 43:c4:b0:a4:8e:ac:d7:cd:fa:40:46:f4:b2:a7:48:11:d1:46: 2e:cf:ec:60:6b:e9:31:bf:a1:cd:36:c7:1a:2e:b3:8f:3e:85: a1:d1:5c:09:4c:08:5b:93:05:da:fe:7f:1e:71:38:19:ce:f7: 33:09:c8:3f:de:c5:fb:17:07:f6:5d:b8:0e:79:1e:03:ec:0a: f4:87:77:60:c9:b0:25:96:db:fe:39:b1:f0:94:69:55:75:11: a4:dd:5e:18:d2:66:68:54:3a:3c:b5:b3:97:bd:b8:7e:2b:35: 26:8e:05:45:a4:b6:86:a4:ad:56:64:31:7b:07:ce:ec:34:b3: bf:94:0c:fd:57:6c:17:fb:10:24:91:48:a3:31:c8:6e:d9:a3: af:5d:61:f6:c2:4a:7f:52:05:6a:be:8c:a0:b2:ef:f2:c5:f4: d1:13:7d:e7:be:c1:f2:02:d0:4b:e8:f0:57:0d:3d:72:bb:67: 25:ba:ba:a5:76:22:28:80:be:4f:f5:c5:cf:ee:35:2a:31:48: c5:38:51:d9:c9:d0:e9:1b:c8:27:03:65:52:ba:f0:fb:09:ae: 74:cd:44:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRH2+2U50qb3r+oETCjH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy NjRkYzAwHhcNMjUxMjE4MjEwMTI1WhcNMjUxMjE5MjEwMTI1WjAzMTEwLwYDVQQD EyhiZTc4YmQxNmFmODA1NTZhMjVmZWE1NTZlZWEzY2JiM2JlZmI3N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtok85Nr1lc/7uFJMSFh+EcM78A9d MET1CQQ1IBqtHIZIP0NxjxbBysIMVOK3WmhDhD6KlTR0/Ew5+3Nbt4YQ9EdaUVYM HnNeNikmYXibyDdNQxlfM+b1jdXfdr6fo6vfBVkyGK4v2wHzgq9Dsz0X3F0lexvV T5ViaAZSWZF6y89m//az+QZJHlhaxwnci78EbUYzAyUP+uWg5l3TeV1ip9W5a4Nj IFVTSRaglj+cb3bSaiJlIsKDOEh4mYkHog3ovQEs77FP77omI/tIbkCU6I8G9FUX reAa3oMste94aHlCSGAp5tuF9FqM84szGX9nxHT5aAtosuNBojq7jVnYRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL54vRavgFVqJf6lVu6jy7O++3fdMB8GA1UdIwQY MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt ZDkyZGFlODYxYTdkLzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxdb8Hvh OQ1A42alq04R3mht4V+tVnbYGcSbFd1VwamthNZ7Q8SwpI6s1836QEb0sqdIEdFG Ls/sYGvpMb+hzTbHGi6zjz6FodFcCUwIW5MF2v5/HnE4Gc73MwnIP97F+xcH9l24 DnkeA+wK9Id3YMmwJZbb/jmx8JRpVXURpN1eGNJmaFQ6PLWzl724fis1Jo4FRaS2 hqStVmQxewfO7DSzv5QM/VdsF/sQJJFIozHIbtmjr11h9sJKf1IFar6MoLLv8sX0 0RN9577B8gLQS+jwVw09crtnJbq6pXYiKIC+T/XFz+41KjFIxThR2cnQ6RvIJwNl Urrw+wmudM1E3w== -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:55 2025 by rpki-client