This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json) Hash identifier: r7tZgOPb5IpfjQO0f5OSLA2+Ibd/BXus7oFxN+Z3NSc= Subject key identifier: 8B:1E:80:27:9D:50:5C:D6:9D:25:29:1C:A8:A8:80:77:ED:95:BA:CB Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Certificate serial: 019AF12DED4306C5C7F96E78779342044FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft Manifest number: 13BF Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=) 2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: Y5YKH6VOfIT6uDMBdqET1C/OKBx1diXPaEPd6LXAZsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ed:43:06:c5:c7:f9:6e:78:77:93:42:04:4f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898 Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=8b1e80279d505cd69d25291ca8a88077ed95bacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:9c:96:94:11:83:03:25:70:05:18:65:84:54: 02:f8:e6:24:c9:57:16:f0:64:bd:e3:90:c2:a1:c2: 36:3d:cb:ff:83:a3:15:90:b1:29:e8:99:1f:44:24: 19:06:01:62:66:2a:bf:d4:51:f4:6d:56:2d:50:c7: 8e:14:08:7e:50:d3:83:6c:97:6c:e6:b0:98:a7:6f: 4a:72:a5:f1:f2:4c:8c:67:62:e9:fc:75:0c:80:c8: f0:ea:26:3c:f7:cb:2b:6e:24:bc:50:3b:64:9e:95: 27:0b:3b:39:4b:ca:a0:1a:cc:f6:6a:69:0d:65:6c: a4:39:81:70:64:15:f1:d2:04:12:76:ee:a5:24:56: 30:f7:a9:05:fa:27:0c:19:7d:03:dc:9b:8a:4c:df: 5b:83:c0:eb:e6:03:38:de:3b:34:b6:9b:78:3c:04: 7a:e0:0c:e6:08:72:df:ba:4b:3e:18:00:99:a3:8a: 07:aa:06:d8:06:6e:00:34:1c:7c:0c:19:8e:f9:c5: 25:0e:54:39:6c:24:50:34:cd:07:fc:68:af:01:12: 35:ad:5d:f6:4b:7b:7f:da:4c:25:3c:0e:3d:81:3d: 78:49:6f:e4:4b:42:e3:58:3c:6a:76:95:c4:fa:b8: 59:8c:71:1b:f9:fc:a4:92:d0:fb:04:03:f4:ef:e0: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1E:80:27:9D:50:5C:D6:9D:25:29:1C:A8:A8:80:77:ED:95:BA:CB X509v3 Authority Key Identifier: keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:dd:b2:27:dd:95:75:93:9b:6e:67:97:4c:f1:2c:0b:e4:fb: 39:2e:2b:5d:ae:78:7f:ed:ee:2e:29:6f:4c:d5:38:6e:55:45: 45:af:f1:21:78:fe:83:1c:1f:af:fb:8d:83:d5:de:27:62:3f: 8d:82:13:42:87:0f:f7:6b:d5:3a:2a:c4:5c:f1:4b:46:52:12: 3c:38:47:c9:29:95:af:35:c7:2e:01:14:23:20:43:53:1e:80: 29:20:46:6f:ae:8b:79:21:76:f6:d7:e6:01:3b:22:5e:c3:89: 71:6c:4a:66:b5:9f:59:61:0d:60:f3:8c:8c:da:ce:0d:b0:6e: ce:95:5f:0c:24:bc:fa:3e:f1:09:b4:f4:5a:09:dc:e6:cf:20: 6e:a7:8f:bb:0d:38:d0:61:7a:02:30:d7:d3:c6:f6:16:ed:8e: e0:ac:58:3b:11:8e:d8:e4:77:5b:08:53:3d:c6:ae:51:0f:c1: ce:e6:e6:d4:26:53:9e:f8:53:3a:1a:bd:ef:eb:3c:d8:de:7c: 49:ca:a5:73:92:b8:1b:d5:22:0c:b1:db:c0:ea:d0:a4:c0:6f: 5b:2c:f4:82:d0:ca:b2:b4:ab:9c:be:60:ac:84:cc:c7:56:0d: fb:17:75:15:b1:ca:fa:8a:d7:4e:b7:9d:dd:f7:a2:69:33:2f: 9c:44:e5:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe1DBsXH+W54d5NCBE/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2U1Y2FmZjRmNDdiMmI4ZGM4MWNjMzZjOGUzNDY2NjI2 Mzk4OTgwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD Eyg4YjFlODAyNzlkNTA1Y2Q2OWQyNTI5MWNhOGE4ODA3N2VkOTViYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95yWlBGDAyVwBRhlhFQC+OYkyVcW 8GS945DCocI2Pcv/g6MVkLEp6JkfRCQZBgFiZiq/1FH0bVYtUMeOFAh+UNODbJds 5rCYp29KcqXx8kyMZ2Lp/HUMgMjw6iY898srbiS8UDtknpUnCzs5S8qgGsz2amkN ZWykOYFwZBXx0gQSdu6lJFYw96kF+icMGX0D3JuKTN9bg8Dr5gM43js0tpt4PAR6 4AzmCHLfuks+GACZo4oHqgbYBm4ANBx8DBmO+cUlDlQ5bCRQNM0H/GivARI1rV32 S3t/2kwlPA49gT14SW/kS0LjWDxqdpXE+rhZjHEb+fykktD7BAP07+D+8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsegCedUFzWnSUpHKiogHftlbrLMB8GA1UdIwQY MBaAFGB+XK/09Hsrjcgcw2yONGZiY5iYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYt NjdmYmYyMTU1ZTRlLzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83ZDY2ZGUtNWYwYy00NzY1LWEwZjYtNjdmYmYyMTU1ZTRl LzEvWUg1Y3JfVDBleXVOeUJ6RGJJNDBabUpqbUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAd2yJ92V dZObbmeXTPEsC+T7OS4rXa54f+3uLilvTNU4blVFRa/xIXj+gxwfr/uNg9XeJ2I/ jYITQocP92vVOirEXPFLRlISPDhHySmVrzXHLgEUIyBDUx6AKSBGb66LeSF29tfm ATsiXsOJcWxKZrWfWWENYPOMjNrODbBuzpVfDCS8+j7xCbT0Wgnc5s8gbqePuw04 0GF6AjDX08b2Fu2O4KxYOxGO2OR3WwhTPcauUQ/Bzubm1CZTnvhTOhq97+s82N58 Scqlc5K4G9UiDLHbwOrQpMBvWyz0gtDKsrSrnL5grITMx1YN+xd1FbHK+orXTred 3feiaTMvnETl/w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:50 2025 by rpki-client