This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json) Hash identifier: 0RW4X6Kz7dM7yrRmfqo1aB/FonxC23/3O6fPJJSZcN0= Subject key identifier: DE:C3:F0:AD:6C:48:DF:8C:4E:93:F1:73:64:7E:A0:11:03:AE:F9:31 Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c Certificate serial: 019AF163D8B827BD812A980F9284814AB37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=) 2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: NfsE92RnytkWrwhB2V4j2e1MPdfZ3PQ+MM4NU2meI/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d8:b8:27:bd:81:2a:98:0f:92:84:81:4a:b3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=dec3f0ad6c48df8c4e93f173647ea01103aef931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:9f:d7:72:5e:3c:9a:92:58:c5:bd:c9:59: e8:f9:37:ea:8e:21:5e:d5:90:4b:bd:3f:8d:96:ab: 74:f4:76:c9:7c:02:e9:b7:0e:84:75:a7:db:bb:b6: af:06:c1:87:9a:87:ba:1d:ec:69:fe:8f:52:d5:a4: 97:d8:3e:70:c2:e0:5a:5d:a8:5e:05:94:54:58:e0: 17:cf:af:21:ab:9e:cd:78:4d:e5:52:04:75:d1:3b: 59:a0:50:4f:8e:15:1e:7b:52:13:45:a9:b9:16:30: 72:da:7c:17:b0:82:9b:49:3d:d6:4c:80:55:1a:e2: 90:2f:a0:b6:01:28:5e:a2:d1:9b:ef:cb:f9:7b:b7: 53:b3:78:5f:e5:b2:62:a3:22:63:26:d9:90:83:a2: 2d:92:8b:0f:15:d8:40:d8:ff:3d:ee:2d:05:08:16: 88:c3:98:4c:63:4f:7c:40:85:43:93:9d:44:fe:d1: e1:b5:3b:f6:9d:33:3f:f6:99:79:0f:7a:9a:65:f8: 11:cd:76:fa:61:54:33:4c:e9:35:e4:7d:8e:dd:72: 73:25:fb:89:ca:57:22:0c:e2:aa:3e:c1:14:da:f4: b9:d9:a3:22:b7:b1:ea:48:b5:83:63:08:09:d5:91: de:21:9b:b9:87:1b:b5:de:e2:1e:67:44:9d:fa:f6: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C3:F0:AD:6C:48:DF:8C:4E:93:F1:73:64:7E:A0:11:03:AE:F9:31 X509v3 Authority Key Identifier: keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:87:ae:16:38:44:be:ba:06:f9:3c:e4:be:94:e9:fd:f6:0a: 09:3d:ed:b8:c7:5b:a9:93:b1:f6:17:02:df:3a:a4:74:a6:9b: 9f:5e:a5:91:13:84:7e:93:f0:55:da:42:dd:e6:9f:13:ae:2f: 4d:f5:07:87:ea:0f:51:80:ff:07:7c:0d:73:d7:0a:c3:be:02: f2:5f:be:b8:4b:0b:42:27:9e:95:c9:75:3c:77:1b:5b:17:d9: b2:10:cd:3d:93:cf:f1:30:4c:f1:58:66:bb:25:91:cd:32:f5: ac:12:2c:21:93:fd:79:50:02:f1:44:0e:e0:b4:86:75:3f:25: a9:f6:20:d2:03:df:fa:62:e3:53:3d:24:18:4b:54:8a:c0:48: 29:fc:0b:09:a6:34:d8:ec:c3:74:fb:09:82:97:ef:43:d9:93: 36:ee:95:a1:f7:31:c0:6a:e7:52:30:c5:0c:24:d6:0f:a2:32: 6b:a0:f4:0e:25:62:12:96:a8:b2:65:18:e1:c5:86:e9:b7:00: cc:2a:65:d1:b2:b7:47:f9:6a:fb:b4:4b:94:10:12:11:5c:fa: 1a:76:da:00:25:f8:df:fe:75:3b:59:99:d8:52:fa:4d:34:f5: 81:ed:e3:d1:b8:40:ec:1d:d8:dc:c8:8f:9b:e6:09:7a:9d:74: 9a:2e:01:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9i4J72BKpgPkoSBSrN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy ZWQ3N2MwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD EyhkZWMzZjBhZDZjNDhkZjhjNGU5M2YxNzM2NDdlYTAxMTAzYWVmOTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwWf13JePJqSWMW9yVno+TfqjiFe 1ZBLvT+Nlqt09HbJfALptw6Edafbu7avBsGHmoe6Hexp/o9S1aSX2D5wwuBaXahe BZRUWOAXz68hq57NeE3lUgR10TtZoFBPjhUee1ITRam5FjBy2nwXsIKbST3WTIBV GuKQL6C2ASheotGb78v5e7dTs3hf5bJioyJjJtmQg6ItkosPFdhA2P897i0FCBaI w5hMY098QIVDk51E/tHhtTv2nTM/9pl5D3qaZfgRzXb6YVQzTOk15H2O3XJzJfuJ ylciDOKqPsEU2vS52aMit7HqSLWDYwgJ1ZHeIZu5hxu13uIeZ0Sd+vYTSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7D8K1sSN+MTpPxc2R+oBEDrvkxMB8GA1UdIwQY MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoeuFjhE vroG+TzkvpTp/fYKCT3tuMdbqZOx9hcC3zqkdKabn16lkROEfpPwVdpC3eafE64v TfUHh+oPUYD/B3wNc9cKw74C8l++uEsLQieelcl1PHcbWxfZshDNPZPP8TBM8Vhm uyWRzTL1rBIsIZP9eVAC8UQO4LSGdT8lqfYg0gPf+mLjUz0kGEtUisBIKfwLCaY0 2OzDdPsJgpfvQ9mTNu6VofcxwGrnUjDFDCTWD6Iya6D0DiViEpaosmUY4cWG6bcA zCpl0bK3R/lq+7RLlBASEVz6GnbaACX43/51O1mZ2FL6TTT1ge3j0bhA7B3Y3MiP m+YJep10mi4BuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:08 2025 by rpki-client