This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft File: YVbhr9Z5oqcxH9atXfaZDlYY488.mft (raw, json) Hash identifier: r2AKBJ8/tplrPFqXTzHqyiI8SnZbrEuOOPNdkfD8xzo= Subject key identifier: 09:0E:1B:FF:50:53:33:50:BC:5E:B1:79:F7:56:3E:96:AD:BF:36:12 Authority key identifier: 61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF Certificate issuer: /CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf Certificate serial: 019B5A521E792D6BB240904EA0FDE24E0B53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft Manifest number: 2D Signing time: Fri 26 Dec 2025 11:01:29 +0000 Manifest this update: Fri 26 Dec 2025 11:01:29 +0000 Manifest next update: Sat 27 Dec 2025 11:01:29 +0000 Files and hashes: 1: YVbhr9Z5oqcxH9atXfaZDlYY488.crl (hash: OifZPy9fomLZnSTKWQ9rb8EbzzumRqFPAXZvoWcDako=) 2: _JE_zjoNMnFpC-O8UaIjyYf9e0I.roa (hash: rd/HA0/VFAFuHj8+ClqZZLt+F806ETqn1YSHQVPCNIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:1e:79:2d:6b:b2:40:90:4e:a0:fd:e2:4e:0b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6156e1afd679a2a7311fd6ad5df6990e5618e3cf Validity Not Before: Dec 26 11:01:29 2025 GMT Not After : Dec 27 11:01:29 2025 GMT Subject: CN=090e1bff50533350bc5eb179f7563e96adbf3612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:3c:f7:74:0c:b7:a9:41:67:fa:db:6a:4a: 7e:24:fa:a2:80:83:fa:43:97:f1:b0:99:9e:03:fb: d4:4f:74:72:fa:8f:8a:15:ed:7f:08:98:75:41:54: 56:71:f6:6d:67:9b:0b:bd:f0:09:6c:f1:14:4b:f5: dd:ef:60:65:5d:f9:e7:25:73:3a:c6:cc:ff:05:55: 94:5c:58:0a:43:9c:e0:93:f7:27:b8:8f:1b:e9:7c: d2:ce:25:10:6c:d3:61:1c:1d:eb:e7:ff:e3:4d:d3: 2a:d7:64:b8:d2:68:ff:6d:03:77:c3:9f:59:e0:04: d6:ab:42:2b:54:c6:eb:fd:13:14:e4:c0:28:a5:0f: 19:88:7c:21:dc:dc:1e:8d:02:7f:48:ab:5e:0c:4c: b4:fd:3e:0b:d9:83:e5:f9:90:c9:7f:2d:1f:86:ce: e0:38:e6:7e:06:34:40:1a:33:a1:50:5d:35:b7:85: 70:d5:56:da:ce:ee:46:99:22:f8:78:cb:7d:b9:19: 2c:1c:31:85:1a:54:27:6e:7d:10:38:50:22:b0:96: 3e:f8:83:95:88:28:43:79:51:cf:13:61:9a:8d:91: 48:88:67:af:00:ab:fb:aa:f3:0c:42:ba:5d:26:4f: a7:30:1e:7c:d8:ed:36:ce:19:9b:46:82:6b:71:fd: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:1B:FF:50:53:33:50:BC:5E:B1:79:F7:56:3E:96:AD:BF:36:12 X509v3 Authority Key Identifier: keyid:61:56:E1:AF:D6:79:A2:A7:31:1F:D6:AD:5D:F6:99:0E:56:18:E3:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVbhr9Z5oqcxH9atXfaZDlYY488.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/735fe9-61d8-4cd8-b681-fdd2dabdef1c/1/YVbhr9Z5oqcxH9atXfaZDlYY488.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2c:aa:ab:01:a0:6c:0a:05:70:19:c1:53:bb:bd:cb:84:ec: 6e:86:b8:e2:14:1a:ca:87:4d:5d:b4:c5:0f:d4:f5:27:05:ac: c6:dc:6b:ef:3c:51:21:9b:6d:90:2a:41:43:b7:53:7a:6d:f0: 51:4a:08:b0:78:64:88:98:fc:59:53:d1:f9:f7:7e:10:2c:be: 7e:d9:4a:3d:5e:79:f2:88:5c:29:e5:e5:7a:6f:92:1d:58:02: 39:a7:0c:b5:06:23:2a:33:64:66:40:32:6d:fd:93:f3:6d:60: 76:b7:68:4a:d4:41:57:ba:be:ea:4e:90:f9:66:0b:97:b5:b2: cb:4d:df:24:8a:cf:aa:d8:c9:f9:32:cb:1c:35:48:cb:d8:ee: 5c:40:b1:8a:1e:a8:fa:b2:87:76:4e:d3:93:01:e4:11:d8:98: c7:56:20:b1:74:d6:de:ea:61:21:af:d1:bb:83:56:24:90:15: 9e:d9:f8:89:1c:e6:b9:2f:69:c3:9a:a8:34:d5:e5:79:16:bb: 4a:dd:97:aa:30:e4:22:80:dc:45:21:b0:a3:57:52:59:b8:5d: bb:ec:1a:f3:47:16:05:5b:d2:ce:50:9e:09:0f:e6:43:ce:0c: b6:a1:b4:a4:c0:30:d3:99:7c:18:31:91:f0:87:23:63:f1:6f: d8:ed:f0:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUh55LWuyQJBOoP3iTgtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNTZlMWFmZDY3OWEyYTczMTFmZDZhZDVkZjY5OTBlNTYx OGUzY2YwHhcNMjUxMjI2MTEwMTI5WhcNMjUxMjI3MTEwMTI5WjAzMTEwLwYDVQQD EygwOTBlMWJmZjUwNTMzMzUwYmM1ZWIxNzlmNzU2M2U5NmFkYmYzNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfQ893QMt6lBZ/rbakp+JPqigIP6 Q5fxsJmeA/vUT3Ry+o+KFe1/CJh1QVRWcfZtZ5sLvfAJbPEUS/Xd72BlXfnnJXM6 xsz/BVWUXFgKQ5zgk/cnuI8b6XzSziUQbNNhHB3r5//jTdMq12S40mj/bQN3w59Z 4ATWq0IrVMbr/RMU5MAopQ8ZiHwh3NwejQJ/SKteDEy0/T4L2YPl+ZDJfy0fhs7g OOZ+BjRAGjOhUF01t4Vw1Vbazu5GmSL4eMt9uRksHDGFGlQnbn0QOFAisJY++IOV iChDeVHPE2GajZFIiGevAKv7qvMMQrpdJk+nMB582O02zhmbRoJrcf0wqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkOG/9QUzNQvF6xefdWPpatvzYSMB8GA1UdIwQY MBaAFGFW4a/WeaKnMR/WrV32mQ5WGOPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVZiaHI5WjVvcWN4SDlhdFhmYVpEbFlZNDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MzVmZTktNjFkOC00Y2Q4LWI2ODEt ZmRkMmRhYmRlZjFjLzEvWVZiaHI5WjVvcWN4SDlhdFhmYVpEbFlZNDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83MzVmZTktNjFkOC00Y2Q4LWI2ODEtZmRkMmRhYmRlZjFj LzEvWVZiaHI5WjVvcWN4SDlhdFhmYVpEbFlZNDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayyqqwGg bAoFcBnBU7u9y4Tsboa44hQayodNXbTFD9T1JwWsxtxr7zxRIZttkCpBQ7dTem3w UUoIsHhkiJj8WVPR+fd+ECy+ftlKPV558ohcKeXlem+SHVgCOacMtQYjKjNkZkAy bf2T821gdrdoStRBV7q+6k6Q+WYLl7Wyy03fJIrPqtjJ+TLLHDVIy9juXECxih6o +rKHdk7TkwHkEdiYx1YgsXTW3uphIa/Ru4NWJJAVntn4iRzmuS9pw5qoNNXleRa7 St2XqjDkIoDcRSGwo1dSWbhdu+wa80cWBVvSzlCeCQ/mQ84MtqG0pMAw05l8GDGR 8IcjY/Fv2O3wxg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client