This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft File: YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json) Hash identifier: jWyGQhgAw0grIqUQlcOaRzMWLwkUbYQb4FrsqcxJtBU= Subject key identifier: 83:8D:C0:22:BB:B6:D3:10:89:88:8A:1C:DF:D8:81:B3:3A:8C:AD:B0 Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82 Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082 Certificate serial: 019AF5E5EC4C8C2DC10F7568AE96C888CFED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft Manifest number: 1465 Signing time: Sat 06 Dec 2025 23:01:17 +0000 Manifest this update: Sat 06 Dec 2025 23:01:17 +0000 Manifest next update: Sun 07 Dec 2025 23:01:17 +0000 Files and hashes: 1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: Y1qTJQv5ZZxBhDVX2glgnU9jnOPhSLoA1z/yFQG8X/s=) 2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:ec:4c:8c:2d:c1:0f:75:68:ae:96:c8:88:cf:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082 Validity Not Before: Dec 6 23:01:17 2025 GMT Not After : Dec 7 23:01:17 2025 GMT Subject: CN=838dc022bbb6d31089888a1cdfd881b33a8cadb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3e:92:bc:13:fc:c5:cc:63:2a:e2:09:04:c5: f1:21:05:19:e1:23:d3:60:f8:74:b9:0b:b2:b6:12: 99:c6:c2:a0:d4:d7:1f:09:9d:c4:42:f6:20:6e:f4: 24:ad:3a:e9:19:67:f2:59:84:de:55:ae:c3:21:46: 0a:1e:38:f8:ff:d2:52:06:b4:bc:dc:08:ac:7f:0d: b7:ec:dc:45:4f:7c:c1:a1:7f:b2:42:ca:9e:3e:40: d4:6c:c8:6f:0b:73:83:7d:f6:37:b5:1c:a7:60:88: 08:31:43:ed:8a:9e:5b:9d:bd:e4:55:08:e2:14:d7: 6f:aa:4f:52:c8:67:c8:97:ef:52:09:72:6e:21:55: b8:b3:84:9b:1a:94:e2:79:0d:c0:f7:1d:36:83:36: 8c:a3:71:14:cc:76:a4:fa:66:d6:0e:c7:73:8a:eb: 3f:74:09:f7:dc:a6:87:ab:f0:30:90:b7:67:e2:93: 1f:5d:76:7a:1b:5c:4e:90:86:f7:6e:c3:13:48:d6: a5:c2:a4:a5:61:c7:d1:56:fe:ef:e1:02:ed:97:91: fd:24:f1:db:4a:84:fb:d5:7f:b8:5b:1c:d8:40:d6: cd:9a:a2:3e:3b:d9:b4:02:16:07:98:2e:94:06:1f: 37:cc:f7:ce:e2:a6:7b:95:97:c7:93:51:eb:8d:b7: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:C0:22:BB:B6:D3:10:89:88:8A:1C:DF:D8:81:B3:3A:8C:AD:B0 X509v3 Authority Key Identifier: keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e0:36:7b:6a:b4:c8:9e:78:a1:b6:46:ae:5e:84:20:50:d1: f4:2e:32:f2:27:4e:57:44:c3:5b:32:db:0c:0f:82:75:fc:4a: 91:89:e3:b4:bf:ad:e9:3f:b3:b1:03:f9:9c:63:11:26:e6:1b: bf:6a:ee:ac:61:7d:f2:07:86:d2:44:5c:c2:77:bd:a0:0f:6f: e5:ef:8d:e8:ea:99:08:8c:c2:8b:bb:62:09:44:05:ac:05:32: 3d:02:2b:c7:54:34:db:23:8e:d5:50:4a:aa:33:be:5f:d7:c5: 16:3c:99:83:5d:82:75:42:52:1c:da:49:fa:10:7f:80:19:c2: 6f:3e:36:7d:35:22:9c:96:2c:23:72:d7:5a:1d:b6:2c:4c:cd: 11:dc:62:03:d3:d2:5b:50:f5:83:b9:c8:e9:8e:d4:03:b6:c1: 08:11:6d:e6:5d:dc:4b:a2:06:f9:6d:b1:b3:f6:db:bc:93:53: 14:34:91:a8:f9:3b:d3:eb:ff:47:7d:1f:40:2d:86:11:15:6c: 17:09:0a:ad:18:f1:6e:be:04:fd:02:d2:d2:3a:db:c8:e1:7b: 95:15:d8:dc:81:3b:5e:79:c4:26:55:c9:f8:f1:97:0f:b9:50: c3:06:89:ec:77:c5:15:53:37:fb:1a:bf:26:6e:3b:d3:43:84: ae:6b:ea:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15exMjC3BD3VorpbIiM/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMzc4OWU3M2M3NWNhYjZkODNhYjY5ZGEzMjhmYzJkZmZi YzkwODIwHhcNMjUxMjA2MjMwMTE3WhcNMjUxMjA3MjMwMTE3WjAzMTEwLwYDVQQD Eyg4MzhkYzAyMmJiYjZkMzEwODk4ODhhMWNkZmQ4ODFiMzNhOGNhZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z6SvBP8xcxjKuIJBMXxIQUZ4SPT YPh0uQuythKZxsKg1NcfCZ3EQvYgbvQkrTrpGWfyWYTeVa7DIUYKHjj4/9JSBrS8 3Aisfw237NxFT3zBoX+yQsqePkDUbMhvC3ODffY3tRynYIgIMUPtip5bnb3kVQji FNdvqk9SyGfIl+9SCXJuIVW4s4SbGpTieQ3A9x02gzaMo3EUzHak+mbWDsdzius/ dAn33KaHq/AwkLdn4pMfXXZ6G1xOkIb3bsMTSNalwqSlYcfRVv7v4QLtl5H9JPHb SoT71X+4WxzYQNbNmqI+O9m0AhYHmC6UBh83zPfO4qZ7lZfHk1HrjbctkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIONwCK7ttMQiYiKHN/YgbM6jK2wMB8GA1UdIwQY MBaAFGE3iec8dcq22Dq2naMo/C3/vJCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVRlSjV6eDF5cmJZT3JhZG95ajhMZi04a0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zYmFkNTItOTI0Ni00NzA5LWE2MTct YmQ5NDIzNzFjODZhLzEvWVRlSjV6eDF5cmJZT3JhZG95ajhMZi04a0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zYmFkNTItOTI0Ni00NzA5LWE2MTctYmQ5NDIzNzFjODZh LzEvWVRlSjV6eDF5cmJZT3JhZG95ajhMZi04a0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeA2e2q0 yJ54obZGrl6EIFDR9C4y8idOV0TDWzLbDA+CdfxKkYnjtL+t6T+zsQP5nGMRJuYb v2rurGF98geG0kRcwne9oA9v5e+N6OqZCIzCi7tiCUQFrAUyPQIrx1Q02yOO1VBK qjO+X9fFFjyZg12CdUJSHNpJ+hB/gBnCbz42fTUinJYsI3LXWh22LEzNEdxiA9PS W1D1g7nI6Y7UA7bBCBFt5l3cS6IG+W2xs/bbvJNTFDSRqPk70+v/R30fQC2GERVs FwkKrRjxbr4E/QLS0jrbyOF7lRXY3IE7XnnEJlXJ+PGXD7lQwwaJ7HfFFVM3+xq/ Jm4700OErmvqFw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:05 2025 by rpki-client