This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json) Hash identifier: JqsyTO8P6JMSzHEbUOLUDWLt5rZuZ4B4Z2yIN35F9Lk= Subject key identifier: F1:5D:44:DD:57:AD:1E:60:3F:81:9B:12:AA:09:38:64:47:CC:E8:D7 Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e Certificate serial: 019B34567FE84000BB2468AF68B9C4E17BFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft Manifest number: 04D1 Signing time: Fri 19 Dec 2025 02:00:42 +0000 Manifest this update: Fri 19 Dec 2025 02:00:42 +0000 Manifest next update: Sat 20 Dec 2025 02:00:42 +0000 Files and hashes: 1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=) 2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: dvcCCFFiTkZYaVogjuc6YuEZlJP/KDlloBU6/R5/6kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:7f:e8:40:00:bb:24:68:af:68:b9:c4:e1:7b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e Validity Not Before: Dec 19 02:00:42 2025 GMT Not After : Dec 20 02:00:42 2025 GMT Subject: CN=f15d44dd57ad1e603f819b12aa09386447cce8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:78:1c:29:c6:a1:c8:80:63:89:e5:91:c1: 78:62:98:60:c7:5d:0e:09:41:a8:5b:f0:e7:aa:3b: a6:d7:54:4d:3a:c1:c2:1f:d7:27:d5:c1:c4:a1:fe: a5:98:30:59:1f:19:e7:47:5d:f8:bc:db:82:00:e1: f5:04:1f:a3:ce:84:fe:53:33:fd:3e:2d:9e:ea:39: 2d:61:02:02:20:a1:63:48:34:95:44:16:db:93:85: d6:5c:21:5d:f7:bc:b2:34:6a:83:3e:64:0e:ad:65: 04:b0:e3:85:69:4f:da:a4:bb:e4:4d:67:37:fe:01: ae:1e:c7:a8:e1:12:f4:95:8b:58:f0:08:5c:d5:e9: 1c:52:5d:51:a3:f6:b0:2f:d1:92:82:4a:2d:e2:69: d2:f5:a7:1a:a5:6a:77:7f:16:29:ae:82:85:a2:fb: 83:e9:a0:f8:3f:13:40:66:1a:c7:a2:81:a1:0b:50: db:b8:54:33:af:dd:cd:b6:0f:04:e2:6d:d3:76:1c: 83:75:fa:e0:b2:fe:46:28:af:97:3c:8a:76:6a:99: 89:40:7b:6a:83:06:3c:85:f7:7a:4a:6d:f0:93:51: 27:b4:e9:86:81:45:b6:4f:ea:d1:80:b5:e9:70:c2: 9d:39:ff:f0:7b:e3:67:f6:70:93:aa:e8:1d:47:44: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:44:DD:57:AD:1E:60:3F:81:9B:12:AA:09:38:64:47:CC:E8:D7 X509v3 Authority Key Identifier: keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f4:ea:16:78:68:6b:cf:63:ee:f7:14:1f:cb:22:dd:d7:7b: 6e:0b:55:23:d0:0d:f5:3b:8b:84:cc:b8:f1:c6:be:fd:41:a2: 6b:64:e6:01:4c:39:9c:5b:46:79:b4:a0:0f:1a:e3:b4:d7:28: d5:17:d3:c1:5e:d4:fc:c9:2f:1c:a2:59:d9:d5:c8:5f:0f:a8: 03:30:79:29:6c:d4:30:af:ae:c2:c8:d6:95:74:85:1a:db:47: a2:41:13:ad:b9:6f:95:c0:9c:ae:aa:c7:6c:56:bc:85:1b:ea: 52:bf:b2:8a:c5:b1:69:c1:7e:f1:7f:49:d9:85:bc:a3:a3:72: e3:7c:73:69:62:b9:08:2b:ac:cf:2f:ca:ed:ea:42:ff:35:00: cf:6e:06:cd:16:e0:8f:35:d6:cc:08:8c:5e:e3:be:cb:59:67: 26:68:f7:02:f2:4f:e0:d1:ff:a0:5a:a2:db:d2:24:62:0f:5e: 8f:9d:5a:27:48:c3:4e:12:77:64:bb:b7:7e:21:e7:69:08:f9: 19:98:10:2a:14:61:26:99:da:6e:bd:82:11:cc:3b:8c:3c:d7: 28:18:c9:d2:d3:89:9d:40:96:ed:1e:1f:7f:91:70:b8:be:99: ed:c8:20:86:47:cf:60:34:84:07:d9:38:d1:70:b0:02:29:d3: 97:65:42:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vn/oQAC7JGivaLnE4Xv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzI0MTE1YTIyYzhkNDEyMWE0YTA2NzU4YWE4NjliZDFj OTNhMWUwHhcNMjUxMjE5MDIwMDQyWhcNMjUxMjIwMDIwMDQyWjAzMTEwLwYDVQQD EyhmMTVkNDRkZDU3YWQxZTYwM2Y4MTliMTJhYTA5Mzg2NDQ3Y2NlOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25l4HCnGociAY4nlkcF4Yphgx10O CUGoW/Dnqjum11RNOsHCH9cn1cHEof6lmDBZHxnnR134vNuCAOH1BB+jzoT+UzP9 Pi2e6jktYQICIKFjSDSVRBbbk4XWXCFd97yyNGqDPmQOrWUEsOOFaU/apLvkTWc3 /gGuHseo4RL0lYtY8Ahc1ekcUl1Ro/awL9GSgkot4mnS9acapWp3fxYproKFovuD 6aD4PxNAZhrHooGhC1DbuFQzr93Ntg8E4m3TdhyDdfrgsv5GKK+XPIp2apmJQHtq gwY8hfd6Sm3wk1EntOmGgUW2T+rRgLXpcMKdOf/we+Nn9nCTqugdR0RpHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFdRN1XrR5gP4GbEqoJOGRHzOjXMB8GA1UdIwQY MBaAFMrCQRWiLI1BIaSgZ1iqhpvRyToeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zZTlkOTktNjEwZS00NWI5LWI3NDkt NThjYTQ1ZjJlYmE4LzEveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zZTlkOTktNjEwZS00NWI5LWI3NDktNThjYTQ1ZjJlYmE4 LzEveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvTqFnho a89j7vcUH8si3dd7bgtVI9AN9TuLhMy48ca+/UGia2TmAUw5nFtGebSgDxrjtNco 1RfTwV7U/MkvHKJZ2dXIXw+oAzB5KWzUMK+uwsjWlXSFGttHokETrblvlcCcrqrH bFa8hRvqUr+yisWxacF+8X9J2YW8o6Ny43xzaWK5CCuszy/K7epC/zUAz24GzRbg jzXWzAiMXuO+y1lnJmj3AvJP4NH/oFqi29IkYg9ej51aJ0jDThJ3ZLu3fiHnaQj5 GZgQKhRhJpnabr2CEcw7jDzXKBjJ0tOJnUCW7R4ff5FwuL6Z7cgghkfPYDSEB9k4 0XCwAinTl2VCqQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:46 2025 by rpki-client