This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft File: ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json) Hash identifier: 9kn4dpmB2U9KfG44gEXwyz6xVmgvmECBUQ7VLiQCYBM= Subject key identifier: D8:DD:E9:7C:42:3F:34:1E:1E:B7:F3:EA:06:75:EA:8C:90:97:D1:1F Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF Certificate issuer: /CN=cadc74e10830421d4eeea98244cfd1b4119037ff Certificate serial: 019B3D9079B10145690DB11DFE79A47575A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:00:37 +0000 Manifest this update: Sat 20 Dec 2025 21:00:37 +0000 Manifest next update: Sun 21 Dec 2025 21:00:37 +0000 Files and hashes: 1: 2ba1m8Gy_1XOQ9HVKpmmzSbnedQ.roa (hash: nQyh0Ol7+Fw/xV4Vz5V2aR6KWFx7hjc+pCgRAL93L9k=) 2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: IEvJ48SrLSYaISPQfh0nDuBU9yAs85I+a5lRRpe5Mcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:79:b1:01:45:69:0d:b1:1d:fe:79:a4:75:75:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff Validity Not Before: Dec 20 21:00:37 2025 GMT Not After : Dec 21 21:00:37 2025 GMT Subject: CN=d8dde97c423f341e1eb7f3ea0675ea8c9097d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:f6:3c:57:e2:2e:50:be:53:1d:4e:c4:af: 4f:1f:6a:97:f7:f9:61:b9:05:c9:ab:ed:95:b0:49: 35:97:c6:f9:35:40:a1:58:b2:ed:f7:69:81:bb:59: 9d:fe:57:ad:70:37:3e:4e:98:87:e8:37:80:38:6a: c4:d7:bb:4e:d9:62:6b:90:8b:8b:21:0c:d1:a1:7a: 89:0a:f3:10:84:ed:1a:fd:0c:73:79:59:83:3e:7d: d4:ba:dd:17:3a:37:bd:e6:be:c1:e3:95:01:f6:1e: 69:03:b9:d8:84:a6:40:c2:d8:ff:51:c2:25:67:e1: 6c:3a:cf:6b:f3:9e:c1:8b:05:96:d4:81:89:af:c0: fe:d7:6a:b4:6d:d0:a6:d2:f1:c3:68:1c:f1:a8:95: 3c:7f:03:f7:c1:f0:1c:be:f5:de:99:fd:a5:b4:46: 60:28:06:69:79:be:ee:38:32:97:64:95:11:0d:a8: 82:d8:8f:1b:65:da:33:bb:d6:19:64:3e:17:12:bb: f4:39:48:c9:62:b5:7a:e0:df:c0:c6:70:37:57:b7: b8:da:05:7e:02:e7:af:c9:2f:b5:ea:b7:69:04:33: be:b4:f9:79:1d:ca:45:46:de:19:40:b9:25:b9:de: 3a:79:cf:59:c6:8e:63:aa:24:34:b2:08:08:21:3f: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DD:E9:7C:42:3F:34:1E:1E:B7:F3:EA:06:75:EA:8C:90:97:D1:1F X509v3 Authority Key Identifier: keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:34:96:e2:11:2c:62:b6:e4:3e:8d:b1:b9:4f:40:22:6c: d6:af:7b:fc:d6:49:63:b4:2e:b3:a8:db:42:e1:b7:83:4e:a6: 5a:73:03:b8:b9:97:f2:2e:ab:b7:ae:72:b3:3d:98:03:ad:c5: 3e:d8:5a:b2:0d:e7:f9:bb:c6:25:ed:85:4c:4b:5d:44:85:17: 58:10:4c:0a:b2:d7:a6:f4:13:34:f2:c0:3d:9b:e9:f6:9c:94: 0d:be:76:3a:58:d0:eb:25:38:fd:16:10:39:09:3a:1b:f4:1a: f2:b6:39:bc:7e:f1:19:63:97:7c:28:9a:ce:c3:66:47:e8:4c: 03:09:1f:b2:b8:fe:c0:98:27:f2:d7:72:b8:78:74:8d:c4:5d: 26:ed:92:6d:8c:6f:b4:4e:02:20:2e:80:92:b9:4d:bd:37:e0: 3c:d4:34:29:92:0d:f0:bf:2d:d8:07:2e:9f:6d:00:e1:a1:95: 5b:85:71:84:a5:91:dd:c8:b6:2d:2b:14:93:9a:a2:d3:18:5a: 3f:08:a4:46:fa:19:02:fa:f4:ec:c7:dd:cd:50:46:4d:17:f4: 1e:ef:8e:18:09:d7:8d:a6:30:6d:77:54:6a:3a:df:76:e1:31: 98:69:29:67:97:59:e5:55:5e:cb:da:d0:d9:b4:a6:b3:03:b3: f2:e4:ed:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHmxAUVpDbEd/nmkdXWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZGM3NGUxMDgzMDQyMWQ0ZWVlYTk4MjQ0Y2ZkMWI0MTE5 MDM3ZmYwHhcNMjUxMjIwMjEwMDM3WhcNMjUxMjIxMjEwMDM3WjAzMTEwLwYDVQQD EyhkOGRkZTk3YzQyM2YzNDFlMWViN2YzZWEwNjc1ZWE4YzkwOTdkMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9D2PFfiLlC+Ux1OxK9PH2qX9/lh uQXJq+2VsEk1l8b5NUChWLLt92mBu1md/letcDc+TpiH6DeAOGrE17tO2WJrkIuL IQzRoXqJCvMQhO0a/QxzeVmDPn3Uut0XOje95r7B45UB9h5pA7nYhKZAwtj/UcIl Z+FsOs9r857BiwWW1IGJr8D+12q0bdCm0vHDaBzxqJU8fwP3wfAcvvXemf2ltEZg KAZpeb7uODKXZJURDaiC2I8bZdozu9YZZD4XErv0OUjJYrV64N/AxnA3V7e42gV+ AuevyS+16rdpBDO+tPl5HcpFRt4ZQLklud46ec9Zxo5jqiQ0sggIIT/HawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjd6XxCPzQeHrfz6gZ16oyQl9EfMB8GA1UdIwQY MBaAFMrcdOEIMEIdTu6pgkTP0bQRkDf/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzIt N2ViNGMwODg1OTBmLzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84YmZmNzItNWMxNi00NDg0LWFjYzItN2ViNGMwODg1OTBm LzEveXR4MDRRZ3dRaDFPN3FtQ1JNX1J0QkdRTl84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacw0luIR LGK25D6NsblPQCJs1q97/NZJY7Qus6jbQuG3g06mWnMDuLmX8i6rt65ysz2YA63F Pthasg3n+bvGJe2FTEtdRIUXWBBMCrLXpvQTNPLAPZvp9pyUDb52OljQ6yU4/RYQ OQk6G/Qa8rY5vH7xGWOXfCiazsNmR+hMAwkfsrj+wJgn8tdyuHh0jcRdJu2SbYxv tE4CIC6AkrlNvTfgPNQ0KZIN8L8t2Acun20A4aGVW4VxhKWR3ci2LSsUk5qi0xha PwikRvoZAvr07MfdzVBGTRf0Hu+OGAnXjaYwbXdUajrfduExmGkpZ5dZ5VVey9rQ 2bSmswOz8uTtHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:23 2025 by rpki-client