This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json) Hash identifier: wZlto/UbPeL6CnJxQzNHhpkvfvAF0fCOMcvOh0RVcVo= Subject key identifier: D0:84:9F:13:2F:29:BE:ED:6B:C0:46:F4:53:57:B8:2C:B7:C9:F2:BF Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12 Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312 Certificate serial: 019B38335A1421503A7B35AFA73240819F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft Manifest number: 10AC Signing time: Fri 19 Dec 2025 20:00:47 +0000 Manifest this update: Fri 19 Dec 2025 20:00:47 +0000 Manifest next update: Sat 20 Dec 2025 20:00:47 +0000 Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: bZP89OeM8+eJVB38m2/nFvxpuk40v1eNbPWhoqZvkro=) 2: gqHU5wrARNT7BxKe3BSk4XNORdM.roa (hash: uD22dYfbtURUQN6zPqLnmvBkI8fmrnMLZJG7fTTS2Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:5a:14:21:50:3a:7b:35:af:a7:32:40:81:9f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312 Validity Not Before: Dec 19 20:00:47 2025 GMT Not After : Dec 20 20:00:47 2025 GMT Subject: CN=d0849f132f29beed6bc046f45357b82cb7c9f2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:e5:aa:f4:d5:86:d6:af:23:0b:31:15:99: b0:3b:f2:f0:27:60:bd:74:ff:fd:98:4a:79:59:0e: c0:f3:e9:35:b7:71:c7:ca:a3:42:a7:e7:2f:dd:d5: af:29:e0:15:2c:fc:35:09:db:21:93:ef:c3:9d:3b: b4:b7:a2:fc:35:30:3b:5c:0f:c1:86:5e:ba:d5:8c: e4:80:ee:52:67:b9:7d:a9:f1:9a:82:f5:8f:bb:17: 00:7e:5f:87:43:a9:e4:72:00:61:f6:c0:f9:64:2d: b2:55:9c:a3:90:53:47:fb:93:15:c5:66:45:89:c5: 2e:58:ca:5f:5e:5c:c5:4e:be:91:c0:05:fd:d1:8a: 14:49:e0:45:c7:9b:c5:6e:a5:96:93:59:ce:59:86: 0e:23:a3:37:bd:6c:a6:02:cb:f6:18:29:74:6a:bc: 40:c9:4c:f7:3f:18:bc:94:f5:18:9e:cd:87:fc:b5: a5:dd:cd:83:8b:c7:62:59:95:3a:2c:4b:05:9a:7a: 26:8e:87:af:cb:dc:5c:2e:17:c1:3f:fe:0a:ed:19: 6c:ba:bf:5e:69:49:ce:51:e9:c3:64:35:76:5a:1c: 44:57:84:e5:a9:75:61:b5:f4:9f:d9:5f:99:19:57: 55:4a:12:83:de:2f:45:b3:57:b3:36:34:5d:5d:ce: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:84:9F:13:2F:29:BE:ED:6B:C0:46:F4:53:57:B8:2C:B7:C9:F2:BF X509v3 Authority Key Identifier: keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:bd:73:a9:72:1a:fa:74:68:55:73:62:7c:85:e2:7d:d0:f6: 0a:9b:33:66:f9:1e:53:e3:50:cd:11:28:6d:91:37:73:f8:cb: 4c:f9:3c:e4:1a:df:10:14:be:e0:76:9d:d2:df:f1:67:5e:71: d8:a2:30:09:ba:c5:63:09:3e:72:ae:6f:6a:9a:9f:ec:41:5d: 09:38:8b:17:f8:36:c8:57:e4:81:bd:66:a5:9d:2a:29:7e:53: 00:37:87:13:13:4a:5c:0c:e4:2a:ef:2e:f7:36:53:ca:8a:d5: dd:4f:aa:44:ca:76:94:26:3c:8c:cf:9b:f9:11:0f:5f:ed:56: c4:51:59:47:31:79:4c:35:20:c8:c0:c7:d3:62:9e:b7:65:a5: dd:1c:72:79:59:8d:b1:e1:e0:0d:e3:0c:55:f2:3a:1e:99:bb: f7:2a:89:e3:49:82:7f:b2:6f:2d:91:c2:b8:a6:60:6e:58:b9: 1a:75:98:e3:c6:b0:d2:d1:b1:52:7b:28:6a:5e:64:e5:2e:fa: cd:f7:59:d2:70:69:3e:37:c5:c5:02:2e:ed:41:ee:74:ad:b4: 8c:cd:28:3c:a1:02:7c:ac:92:d7:c7:c8:6b:5c:37:08:d5:c2: 61:b3:a5:63:4f:32:10:d0:d3:60:71:1d:eb:61:0f:88:3a:c0: 04:63:1b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M1oUIVA6ezWvpzJAgZ8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYzJiNDVhNjVjMTliNjhhYmIwNTE2YzljY2FmNDU0N2E1 Y2MzMTIwHhcNMjUxMjE5MjAwMDQ3WhcNMjUxMjIwMjAwMDQ3WjAzMTEwLwYDVQQD EyhkMDg0OWYxMzJmMjliZWVkNmJjMDQ2ZjQ1MzU3YjgyY2I3YzlmMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDTlqvTVhtavIwsxFZmwO/LwJ2C9 dP/9mEp5WQ7A8+k1t3HHyqNCp+cv3dWvKeAVLPw1Cdshk+/DnTu0t6L8NTA7XA/B hl661YzkgO5SZ7l9qfGagvWPuxcAfl+HQ6nkcgBh9sD5ZC2yVZyjkFNH+5MVxWZF icUuWMpfXlzFTr6RwAX90YoUSeBFx5vFbqWWk1nOWYYOI6M3vWymAsv2GCl0arxA yUz3Pxi8lPUYns2H/LWl3c2Di8diWZU6LEsFmnomjoevy9xcLhfBP/4K7Rlsur9e aUnOUenDZDV2WhxEV4TlqXVhtfSf2V+ZGVdVShKD3i9Fs1ezNjRdXc7cTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCEnxMvKb7ta8BG9FNXuCy3yfK/MB8GA1UdIwQY MBaAFGHCtFplwZtoq7BRbJzK9FR6XMMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjIt MjJjMjdiOTkzYWUyLzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yODYyYWItMzdkZC00N2YyLThkZjItMjJjMjdiOTkzYWUy LzEvWWNLMFdtWEJtMmlyc0ZGc25NcjBWSHBjd3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwL1zqXIa +nRoVXNifIXifdD2CpszZvkeU+NQzREobZE3c/jLTPk85BrfEBS+4Had0t/xZ15x 2KIwCbrFYwk+cq5vapqf7EFdCTiLF/g2yFfkgb1mpZ0qKX5TADeHExNKXAzkKu8u 9zZTyorV3U+qRMp2lCY8jM+b+REPX+1WxFFZRzF5TDUgyMDH02Ket2Wl3RxyeVmN seHgDeMMVfI6Hpm79yqJ40mCf7JvLZHCuKZgbli5GnWY48aw0tGxUnsoal5k5S76 zfdZ0nBpPjfFxQIu7UHudK20jM0oPKECfKyS18fIa1w3CNXCYbOlY08yENDTYHEd 62EPiDrABGMbaw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:21:06 2025 by rpki-client