This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json) Hash identifier: 1nxIdpmwz1I2X5Ix0oVh7KOglubZz/xXxmBxwl2mjVQ= Subject key identifier: 95:21:B1:BF:57:71:93:DA:C3:41:71:21:FA:00:07:3D:86:27:E2:11 Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Certificate serial: 019AF2AD8EEAA6D3933A46CB9E8A1938F720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=) 2: jECFVXifI2PML21GlnCLdBYUig0.roa (hash: 88xVe4+njhjbTw9qYTdy0ykyXz6/PEaM+aox252NmaU=) 3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=) 4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: IzYmG5G629+S2BR/FBuT2VFRg7YgRDHCIJaofy7i9ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8e:ea:a6:d3:93:3a:46:cb:9e:8a:19:38:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=9521b1bf577193dac3417121fa00073d8627e211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:13:8c:71:7f:5c:25:88:72:29:32:a4:7c: d5:dc:d9:ae:0a:a0:6e:bb:59:52:39:c3:45:4d:82: ec:23:f1:f1:b0:56:4d:e9:a6:08:96:39:09:a5:bd: 0e:0f:65:a8:f2:38:c3:22:23:a3:84:7c:3c:53:eb: 9d:2e:41:23:95:f6:ab:b0:05:25:b2:5d:d2:bc:d7: 26:f4:82:26:89:38:cd:67:49:28:f2:f2:8d:cc:35: ce:84:de:06:61:4e:c9:57:59:1b:e3:73:ae:75:48: fa:97:c9:1a:34:bd:72:0f:83:9e:27:15:4f:07:88: c1:ee:07:2a:83:c1:c3:d0:6b:97:b3:f6:8f:b0:c8: 2f:5f:5d:07:b0:65:8a:3a:3b:9e:bb:3e:ed:72:37: a7:61:a0:4e:68:19:bd:d2:3e:12:14:ae:0c:63:f2: ab:62:32:62:62:4f:d8:c4:c5:94:65:09:76:e6:9c: f4:a0:54:e4:91:bf:2d:d5:8d:1c:2e:5b:02:ac:a1: 78:ec:f1:04:48:47:5c:35:ea:3d:d0:f4:a3:35:11: 5b:f7:44:65:b6:d2:81:5a:6e:e5:18:a1:99:44:d4: 2a:1e:15:59:b9:37:0a:c9:68:be:d3:55:84:91:30: 6b:bb:78:6c:23:c1:a8:00:b6:7a:c2:ce:68:1d:cf: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:21:B1:BF:57:71:93:DA:C3:41:71:21:FA:00:07:3D:86:27:E2:11 X509v3 Authority Key Identifier: keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9d:4e:ba:9f:30:20:83:5d:06:01:d4:26:b0:3c:1a:56:a7: 90:a6:8f:9a:dd:29:71:a0:70:28:85:45:40:67:a1:14:5f:e0: 7c:48:0d:18:d3:03:7a:69:d3:a6:f6:77:a3:c3:c7:23:7e:db: 76:56:b1:5a:50:bf:59:9c:19:3a:9d:22:a7:59:1d:26:59:94: 71:fb:2c:59:01:a2:78:9f:c2:c0:05:8e:17:fa:c2:fa:2c:b1: c6:79:31:a1:6e:d2:a5:20:15:37:5a:8b:ea:04:61:1b:e3:c9: 74:10:6f:8f:c5:d0:94:23:a6:09:42:56:b3:85:c7:b5:e8:38: ba:ca:97:46:0b:f6:13:20:d9:75:e8:25:1a:b5:74:98:51:52: d5:cd:9c:0d:b4:35:45:ef:6a:64:bd:5c:d9:ab:06:45:19:d3: e1:f1:14:77:83:3c:0c:c8:be:a4:a8:89:17:0e:b4:de:f3:fa: 03:b4:f9:ac:06:fc:7d:c3:4b:b6:2d:b6:7e:4a:1b:7e:df:8d: 42:cc:0e:e1:ae:08:41:47:9d:f7:24:d3:5f:3c:28:c0:61:b0: ab:89:b9:ba:86:cf:7f:1c:05:c0:ea:7e:ad:8d:dc:74:f6:7b: 1b:7a:d4:29:e7:f1:d4:c0:1b:c0:8c:d0:66:70:cc:0a:4a:ba: 5e:08:de:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY7qptOTOkbLnooZOPcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx NjQwYjYwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD Eyg5NTIxYjFiZjU3NzE5M2RhYzM0MTcxMjFmYTAwMDczZDg2MjdlMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWQTjHF/XCWIcikypHzV3NmuCqBu u1lSOcNFTYLsI/HxsFZN6aYIljkJpb0OD2Wo8jjDIiOjhHw8U+udLkEjlfarsAUl sl3SvNcm9IImiTjNZ0ko8vKNzDXOhN4GYU7JV1kb43OudUj6l8kaNL1yD4OeJxVP B4jB7gcqg8HD0GuXs/aPsMgvX10HsGWKOjueuz7tcjenYaBOaBm90j4SFK4MY/Kr YjJiYk/YxMWUZQl25pz0oFTkkb8t1Y0cLlsCrKF47PEESEdcNeo90PSjNRFb90Rl ttKBWm7lGKGZRNQqHhVZuTcKyWi+01WEkTBru3hsI8GoALZ6ws5oHc9pDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUhsb9XcZPaw0FxIfoABz2GJ+IRMB8GA1UdIwQY MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ1Oup8w IINdBgHUJrA8GlankKaPmt0pcaBwKIVFQGehFF/gfEgNGNMDemnTpvZ3o8PHI37b dlaxWlC/WZwZOp0ip1kdJlmUcfssWQGieJ/CwAWOF/rC+iyxxnkxoW7SpSAVN1qL 6gRhG+PJdBBvj8XQlCOmCUJWs4XHteg4usqXRgv2EyDZdeglGrV0mFFS1c2cDbQ1 Re9qZL1c2asGRRnT4fEUd4M8DMi+pKiJFw603vP6A7T5rAb8fcNLti22fkobft+N QswO4a4IQUed9yTTXzwowGGwq4m5uobPfxwFwOp+rY3cdPZ7G3rUKefx1MAbwIzQ ZnDMCkq6Xgje0A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:31 2025 by rpki-client