This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft File: YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json) Hash identifier: vL9mqITJZJbSSRolI24ZQQdUUaeJyVZkD4A+zF7dLds= Subject key identifier: B1:00:30:19:1F:33:0C:A1:BA:16:9D:AA:BE:90:F4:3C:9E:32:8B:86 Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB Certificate issuer: /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb Certificate serial: 019B2EF9D3DC417FC1D34AF59592514A2166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft Manifest number: 1660 Signing time: Thu 18 Dec 2025 01:01:23 +0000 Manifest this update: Thu 18 Dec 2025 01:01:23 +0000 Manifest next update: Fri 19 Dec 2025 01:01:23 +0000 Files and hashes: 1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: qQ93NTcbYwXJkz0sGH/mBdXrStN4x9pZ45QoWoEVPRc=) 2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:d3:dc:41:7f:c1:d3:4a:f5:95:92:51:4a:21:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb Validity Not Before: Dec 18 01:01:23 2025 GMT Not After : Dec 19 01:01:23 2025 GMT Subject: CN=b10030191f330ca1ba169daabe90f43c9e328b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:31:ca:e3:6b:c6:ec:b4:19:36:31:8a:3b: 6a:a6:7d:af:0e:24:e7:c2:1a:a2:4d:55:1e:f5:a7: 4a:1f:64:3f:f8:2a:f4:a0:22:a5:8e:ad:3d:a7:4e: d1:ba:65:b7:c9:21:35:86:eb:82:fa:20:61:36:16: 94:11:f7:07:dc:56:7f:55:98:44:8e:e3:93:13:6a: 1e:18:8a:73:5e:55:5f:5b:12:37:a3:dc:c6:41:f2: 86:e2:db:07:0f:e6:14:9b:f0:df:38:58:e0:8a:1a: c5:0f:01:c5:4d:c6:61:d6:23:bf:74:fc:a5:ce:fd: 97:92:1e:8a:78:4b:64:63:b1:33:d1:0d:da:8a:b5: 3d:73:51:1c:59:56:a3:75:17:b0:1e:33:4b:9f:dc: 98:2a:00:f1:c3:50:61:4a:5e:a0:f1:9e:01:a8:e4: a3:c8:32:5f:91:79:ea:eb:03:06:57:94:50:0a:9a: f3:f6:73:6d:98:bf:35:97:24:5d:7d:ec:02:d1:08: f6:b7:c4:7a:c9:7f:ee:37:f3:ce:bb:bd:22:4c:2d: 37:8f:c6:32:4e:bc:15:26:95:bc:62:f3:b7:50:72: b0:9f:36:d8:d8:18:6d:c5:8a:e0:d1:f2:8c:40:3f: 47:31:c0:3a:53:9a:4d:49:e0:6c:be:5d:7e:0d:69: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:30:19:1F:33:0C:A1:BA:16:9D:AA:BE:90:F4:3C:9E:32:8B:86 X509v3 Authority Key Identifier: keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a6:28:e3:71:35:53:ae:56:77:35:f7:25:e4:74:b2:ea:14: c5:6a:e3:4e:81:34:7e:9f:61:aa:ad:11:cd:32:3c:85:6e:11: 8d:bc:f2:55:dc:32:91:02:f4:20:7b:b4:e3:a1:c2:77:61:7c: 9b:f3:1a:39:d4:c8:e7:b5:79:74:48:0a:28:21:13:ea:0d:03: df:6e:ba:84:51:09:34:cd:ba:bf:ee:8d:0a:95:b9:e9:50:df: a9:7c:f5:f4:e4:00:ec:32:e5:b2:cb:01:f3:27:f6:90:a9:63: da:9b:b1:77:6f:d9:d1:ab:b4:a5:be:44:5f:56:d6:9d:8f:a9: 2c:7a:15:03:9c:32:ea:ef:0d:c9:bd:b6:99:29:f4:44:1b:5a: b5:56:61:a7:38:4b:d2:8d:a4:16:df:f7:ab:c5:cb:16:6b:b0: ec:4a:f8:e4:e2:db:9e:1a:9a:60:a0:fc:27:0a:1b:d7:3a:e1: 9f:55:63:53:b4:4e:1d:31:a1:3a:15:62:d9:16:5c:55:85:30: bf:1e:18:91:fe:2a:64:dd:b4:06:5e:ca:62:9a:4f:6c:ee:ae: ba:03:03:b2:10:66:ba:0f:54:55:e9:03:7d:b1:2d:62:50:14: dc:75:00:36:2f:d2:a5:e1:90:99:27:bf:b8:29:12:0f:f8:68: bf:49:cf:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+dPcQX/B00r1lZJRSiFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxM2Q1ZTEzNzlmZWE5ZDFkMGY3MjU2ZWQwZmM5MTgzYmU3 NGZlZmIwHhcNMjUxMjE4MDEwMTIzWhcNMjUxMjE5MDEwMTIzWjAzMTEwLwYDVQQD EyhiMTAwMzAxOTFmMzMwY2ExYmExNjlkYWFiZTkwZjQzYzllMzI4Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcsxyuNrxuy0GTYxijtqpn2vDiTn whqiTVUe9adKH2Q/+Cr0oCKljq09p07RumW3ySE1huuC+iBhNhaUEfcH3FZ/VZhE juOTE2oeGIpzXlVfWxI3o9zGQfKG4tsHD+YUm/DfOFjgihrFDwHFTcZh1iO/dPyl zv2Xkh6KeEtkY7Ez0Q3airU9c1EcWVajdRewHjNLn9yYKgDxw1BhSl6g8Z4BqOSj yDJfkXnq6wMGV5RQCprz9nNtmL81lyRdfewC0Qj2t8R6yX/uN/POu70iTC03j8Yy TrwVJpW8YvO3UHKwnzbY2BhtxYrg0fKMQD9HMcA6U5pNSeBsvl1+DWl9HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEAMBkfMwyhuhadqr6Q9DyeMouGMB8GA1UdIwQY MBaAFGE9XhN5/qnR0PclbtD8kYO+dP77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUt N2Y3M2E0NjcxYTFlLzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mZDYwNzAtOWUwYi00MzNhLThhNzUtN2Y3M2E0NjcxYTFl LzEvWVQxZUUzbi1xZEhROXlWdTBQeVJnNzUwX3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKYo43E1 U65WdzX3JeR0suoUxWrjToE0fp9hqq0RzTI8hW4RjbzyVdwykQL0IHu046HCd2F8 m/MaOdTI57V5dEgKKCET6g0D3266hFEJNM26v+6NCpW56VDfqXz19OQA7DLlsssB 8yf2kKlj2puxd2/Z0au0pb5EX1bWnY+pLHoVA5wy6u8Nyb22mSn0RBtatVZhpzhL 0o2kFt/3q8XLFmuw7Er45OLbnhqaYKD8Jwob1zrhn1VjU7ROHTGhOhVi2RZcVYUw vx4Ykf4qZN20Bl7KYppPbO6uugMDshBmug9UVekDfbEtYlAU3HUANi/SpeGQmSe/ uCkSD/hov0nPNQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:04:10 2025 by rpki-client