This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json) Hash identifier: GXHsAgAcV4kJ6wSg6L36NmlVSjltxw05khwJaU1XWc4= Subject key identifier: CF:33:3D:00:98:4E:70:CC:B6:DA:A3:0C:73:9E:4A:31:F9:AE:38:61 Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Certificate serial: 019B33B1977187886014F9D1D23D342F7936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft Manifest number: 0371 Signing time: Thu 18 Dec 2025 23:00:35 +0000 Manifest this update: Thu 18 Dec 2025 23:00:35 +0000 Manifest next update: Fri 19 Dec 2025 23:00:35 +0000 Files and hashes: 1: FRrrM4yAfnu6pnFh5wowlvqVDWA.roa (hash: Hv8/4ynB8VDf7OX62BWXwwqyCndg3mMaA+WdwhpJSlw=) 2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: yyEk3m2B1IC+9Ovf3e+aQBWJn/7JV1MvgqTzLQBMLBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:97:71:87:88:60:14:f9:d1:d2:3d:34:2f:79:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Validity Not Before: Dec 18 23:00:35 2025 GMT Not After : Dec 19 23:00:35 2025 GMT Subject: CN=cf333d00984e70ccb6daa30c739e4a31f9ae3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:fd:48:7a:cd:e3:7d:66:dd:42:cd:8e:21: dd:bb:51:9b:21:0f:47:08:8c:a7:37:02:1c:39:f7: 2a:ea:8a:65:1e:78:0a:31:62:a3:bf:32:52:02:97: 8f:03:50:ff:82:b1:56:91:4f:0c:23:35:e8:4e:3e: 44:32:8f:68:04:cf:29:b3:41:52:ef:77:f5:63:4b: 3a:bc:b4:22:a8:27:63:a3:e0:c8:bc:ae:01:89:65: ff:62:5a:9e:4b:2a:ab:a2:12:32:9a:8b:b9:cb:9b: 92:99:43:3f:cd:76:da:04:33:df:0f:69:c8:fa:be: 84:7b:3f:a1:ab:cc:14:1e:1b:ae:26:86:77:40:54: b1:1b:7a:e3:dd:83:d2:9a:97:13:0d:5f:91:bf:2d: bc:81:30:67:dd:de:a0:be:47:ff:12:5a:b0:d8:b3: 4e:ab:8a:d2:3e:fd:3f:23:ab:ca:9a:47:b8:bf:0c: 1d:4e:cc:16:5e:57:ba:ad:c8:9f:4e:d9:b9:75:cb: 86:3d:34:e7:e6:08:31:15:ef:8d:fb:bb:91:52:93: 32:36:52:df:1d:5d:ab:8e:c2:f7:12:9c:d3:6c:a2: 25:dd:d0:ad:87:d7:13:ad:62:e7:22:7f:14:c2:36: 4d:39:53:0a:f4:75:45:cf:ab:e2:a6:54:76:30:98: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:3D:00:98:4E:70:CC:B6:DA:A3:0C:73:9E:4A:31:F9:AE:38:61 X509v3 Authority Key Identifier: keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:77:79:64:d5:fb:a2:83:0f:83:e7:40:2d:26:89:2b:97:51: 4b:2e:f7:94:4e:53:ee:70:c5:7b:ac:78:4a:48:31:95:91:9c: c2:50:6a:1e:bb:58:a0:e9:30:8b:04:66:f2:ad:a1:af:db:e4: 30:b1:f7:d8:7c:5a:07:10:3b:1a:a2:66:f1:d8:b9:59:ad:20: 5e:8d:9e:e9:24:ca:50:fb:6f:19:b6:c3:e8:f8:cd:db:3b:a3: df:a2:8e:5a:c5:96:3e:a8:c5:e2:fd:ca:0f:e4:6a:48:23:a8: 73:6f:5f:11:72:06:79:ab:aa:d1:17:c1:8b:37:ea:f5:45:e3: 3d:0c:0d:26:df:fd:63:e7:fd:a0:72:a9:9a:76:59:25:86:c7: 45:35:92:8c:08:4f:3d:2f:51:2a:bf:f3:4c:85:cf:07:df:6f: c6:e6:63:eb:55:87:aa:8c:3a:45:01:f7:e8:4b:af:96:46:cd: 1c:98:1d:4b:48:42:cc:d9:52:7e:e0:16:31:0a:90:23:f3:ab: a0:bc:50:c8:5c:42:3d:88:c7:d9:c2:8f:cb:ce:d1:39:0e:e7: 84:3f:d2:0c:94:6b:aa:3d:4d:53:3f:ad:ad:5a:59:84:18:75: 27:4c:de:a6:0b:56:e8:92:80:bf:df:ec:69:8c:c6:fe:b4:70: c7:6f:50:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZdxh4hgFPnR0j00L3k2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyN2E5OTUwOWVkNTFkZjkzYTMzZjJhNGUyZmQ2NjJkMWM4 ZDY2MGIwHhcNMjUxMjE4MjMwMDM1WhcNMjUxMjE5MjMwMDM1WjAzMTEwLwYDVQQD EyhjZjMzM2QwMDk4NGU3MGNjYjZkYWEzMGM3MzllNGEzMWY5YWUzODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9H9SHrN431m3ULNjiHdu1GbIQ9H CIynNwIcOfcq6oplHngKMWKjvzJSApePA1D/grFWkU8MIzXoTj5EMo9oBM8ps0FS 73f1Y0s6vLQiqCdjo+DIvK4BiWX/YlqeSyqrohIymou5y5uSmUM/zXbaBDPfD2nI +r6Eez+hq8wUHhuuJoZ3QFSxG3rj3YPSmpcTDV+Rvy28gTBn3d6gvkf/Elqw2LNO q4rSPv0/I6vKmke4vwwdTswWXle6rcifTtm5dcuGPTTn5ggxFe+N+7uRUpMyNlLf HV2rjsL3EpzTbKIl3dCth9cTrWLnIn8UwjZNOVMK9HVFz6viplR2MJj6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8zPQCYTnDMttqjDHOeSjH5rjhhMB8GA1UdIwQY MBaAFGJ6mVCe1R35OjPypOL9Zi0cjWYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMt MDEyOGQ5NzE3OWU4LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMtMDEyOGQ5NzE3OWU4 LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3d5ZNX7 ooMPg+dALSaJK5dRSy73lE5T7nDFe6x4SkgxlZGcwlBqHrtYoOkwiwRm8q2hr9vk MLH32HxaBxA7GqJm8di5Wa0gXo2e6STKUPtvGbbD6PjN2zuj36KOWsWWPqjF4v3K D+RqSCOoc29fEXIGeauq0RfBizfq9UXjPQwNJt/9Y+f9oHKpmnZZJYbHRTWSjAhP PS9RKr/zTIXPB99vxuZj61WHqow6RQH36EuvlkbNHJgdS0hCzNlSfuAWMQqQI/Or oLxQyFxCPYjH2cKPy87ROQ7nhD/SDJRrqj1NUz+trVpZhBh1J0zepgtW6JKAv9/s aYzG/rRwx29QrQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:52 2025 by rpki-client