This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json) Hash identifier: c1Tsn2zMxiRfTnCWIfROwtDiu51t2EQjmYtwwRAoSPc= Subject key identifier: AC:7D:52:B4:01:A9:B7:C1:0E:83:2A:2C:21:6C:BD:C9:A8:FD:3E:6E Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68 Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68 Certificate serial: 019AF31B533D74B4DD4591B3EFD637BEB517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft Manifest number: 0FE9 Signing time: Sat 06 Dec 2025 10:00:45 +0000 Manifest this update: Sat 06 Dec 2025 10:00:45 +0000 Manifest next update: Sun 07 Dec 2025 10:00:45 +0000 Files and hashes: 1: NKs11rmttdxb4erj66XSi3ux60c.roa (hash: g/w9HbLFeSyX3EjhAjkTnAEYRLxJvbXYid4txxbFY6E=) 2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: G0HxI/gIRXC/b2d2V/g3OJoskOgKnpOB/xROOFYFMO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:53:3d:74:b4:dd:45:91:b3:ef:d6:37:be:b5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68 Validity Not Before: Dec 6 10:00:45 2025 GMT Not After : Dec 7 10:00:45 2025 GMT Subject: CN=ac7d52b401a9b7c10e832a2c216cbdc9a8fd3e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:9e:4c:d2:d9:a7:5a:19:4a:74:05:d5:bd: a1:4f:13:41:18:47:6f:69:90:45:da:3a:33:a6:66: 29:e4:a2:c3:5b:dd:de:c2:24:02:9f:72:72:4a:d0: 6a:d9:be:54:43:99:de:2c:29:ca:2f:c2:ad:9e:32: aa:bf:c8:7f:f9:34:e8:1a:c5:d3:02:4d:0a:32:4d: a6:97:bd:a2:41:60:90:c6:6b:37:0a:a2:5d:6f:dc: 75:e9:8c:7f:1b:9a:16:8b:aa:21:8e:5d:50:de:10: bb:9a:94:3a:7f:d8:6a:29:76:6c:cf:0a:cc:d5:47: 90:dd:37:23:ec:7e:18:46:74:ae:e1:14:7f:51:b5: cf:2e:34:06:e3:ac:f7:2d:91:2c:65:6a:e7:56:e4: 75:9f:00:ec:48:98:dc:32:00:9d:10:87:d6:e6:b9: 31:d5:15:61:3d:9d:21:bf:d4:c4:1c:64:74:92:23: c9:9b:44:45:11:5a:4e:d9:45:bb:ea:8c:d0:c8:1b: 81:49:e7:a2:59:de:b3:53:66:5d:a4:42:8d:f8:95: 5e:80:2a:7f:c8:1e:e2:71:b1:89:09:28:f0:a1:94: 3d:09:2b:d4:83:7b:5c:1a:9c:b5:03:5f:ae:f4:17: 26:99:84:f4:b1:b7:57:ef:52:4a:bf:fe:f8:9a:9c: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7D:52:B4:01:A9:B7:C1:0E:83:2A:2C:21:6C:BD:C9:A8:FD:3E:6E X509v3 Authority Key Identifier: keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:61:97:25:39:18:c3:19:a0:c7:51:60:20:66:9d:e4:24:84: ef:f5:4f:a7:f9:56:d6:80:75:2d:86:0e:8a:b1:5c:29:6e:3a: 07:46:21:36:2b:83:ee:d7:e9:15:6e:b5:04:48:4c:76:3c:c8: 11:50:07:ce:7e:af:2f:f6:e8:9b:95:4f:51:e7:4b:39:06:bc: 61:d5:48:55:40:86:28:26:86:dd:73:83:8f:7e:30:ee:58:47: 77:19:a3:d8:46:0a:62:0e:62:54:5c:f0:68:e8:45:7e:10:64: dd:99:96:8a:b0:63:26:d0:5a:ba:30:d8:8c:25:dd:3c:d0:bf: 54:19:27:18:09:3c:61:af:da:15:e7:15:88:2f:3e:cb:f6:10: 01:8c:73:46:12:74:e4:c4:ee:c5:49:d2:db:30:fe:b8:fd:08: 71:e7:2f:29:50:f0:0e:a4:00:e2:ad:bf:f2:c4:ee:42:a0:ee: d8:3e:06:04:91:ca:36:51:f7:0f:c6:cc:fd:42:fb:fe:d1:e7: 77:ed:a3:21:5d:fc:b3:7d:60:d3:00:83:ea:1f:fe:3c:c8:05: 50:39:7a:7f:ab:e9:4d:50:01:61:14:69:d0:71:c9:df:f1:d5: 23:f3:b7:05:b5:81:9a:f5:27:05:d1:50:c0:19:65:10:dd:69: 38:53:58:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1M9dLTdRZGz79Y3vrUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNDZiZDAwZGFhNGRhOTJhMGMzNmZhY2RkOWNkNjk0OTFk OTZjNjgwHhcNMjUxMjA2MTAwMDQ1WhcNMjUxMjA3MTAwMDQ1WjAzMTEwLwYDVQQD EyhhYzdkNTJiNDAxYTliN2MxMGU4MzJhMmMyMTZjYmRjOWE4ZmQzZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c+eTNLZp1oZSnQF1b2hTxNBGEdv aZBF2jozpmYp5KLDW93ewiQCn3JyStBq2b5UQ5neLCnKL8KtnjKqv8h/+TToGsXT Ak0KMk2ml72iQWCQxms3CqJdb9x16Yx/G5oWi6ohjl1Q3hC7mpQ6f9hqKXZszwrM 1UeQ3Tcj7H4YRnSu4RR/UbXPLjQG46z3LZEsZWrnVuR1nwDsSJjcMgCdEIfW5rkx 1RVhPZ0hv9TEHGR0kiPJm0RFEVpO2UW76ozQyBuBSeeiWd6zU2ZdpEKN+JVegCp/ yB7icbGJCSjwoZQ9CSvUg3tcGpy1A1+u9BcmmYT0sbdX71JKv/74mpy+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx9UrQBqbfBDoMqLCFsvcmo/T5uMB8GA1UdIwQY MBaAFGJGvQDapNqSoMNvrN2c1pSR2WxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAt MGQ2MGQ2NDczMmJmLzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzQ3MzgtNTgzMC00MTdjLTgzNjAtMGQ2MGQ2NDczMmJm LzEvWWthOUFOcWsycEtndzItczNaeldsSkhaYkdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGGXJTkY wxmgx1FgIGad5CSE7/VPp/lW1oB1LYYOirFcKW46B0YhNiuD7tfpFW61BEhMdjzI EVAHzn6vL/bom5VPUedLOQa8YdVIVUCGKCaG3XODj34w7lhHdxmj2EYKYg5iVFzw aOhFfhBk3ZmWirBjJtBaujDYjCXdPNC/VBknGAk8Ya/aFecViC8+y/YQAYxzRhJ0 5MTuxUnS2zD+uP0IcecvKVDwDqQA4q2/8sTuQqDu2D4GBJHKNlH3D8bM/UL7/tHn d+2jIV38s31g0wCD6h/+PMgFUDl6f6vpTVABYRRp0HHJ3/HVI/O3BbWBmvUnBdFQ wBllEN1pOFNYzg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:40 2025 by rpki-client