This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json) Hash identifier: 782kMwTrWlZGt+yn7KgXt1riLjHcgsxwa4vOg6O7xWk= Subject key identifier: 4A:6D:4D:E9:E7:80:A1:59:90:78:85:BF:4C:1E:34:B6:A8:AE:DA:E8 Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7 Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7 Certificate serial: 019B4324AAC666AB0133921D6F8120F18711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft Manifest number: 0D45 Signing time: Sun 21 Dec 2025 23:00:35 +0000 Manifest this update: Sun 21 Dec 2025 23:00:35 +0000 Manifest next update: Mon 22 Dec 2025 23:00:35 +0000 Files and hashes: 1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=) 2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: Y1i8E04I8QmE5X1ydR3WijB1d6Mxx2cJeAtEDIVmSxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:aa:c6:66:ab:01:33:92:1d:6f:81:20:f1:87:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7 Validity Not Before: Dec 21 23:00:35 2025 GMT Not After : Dec 22 23:00:35 2025 GMT Subject: CN=4a6d4de9e780a159907885bf4c1e34b6a8aedae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:9e:d8:36:47:6a:2d:a9:8d:2e:5a:34:88: bd:ab:4b:ec:93:17:3b:0b:5b:4d:78:d3:3c:6a:65: 48:2b:23:a4:07:0b:3b:b7:63:d6:3b:f2:9e:5e:43: 48:5d:f2:e2:20:f1:c1:93:cc:f1:f2:a6:40:b1:2a: b6:f9:e3:82:2a:58:e8:89:ef:6d:c4:a0:3a:3d:86: 4e:17:65:b2:6d:70:70:51:c5:31:cb:41:3f:4c:eb: 63:32:c2:08:c9:6e:b3:92:2b:13:e3:ce:38:9c:dd: bf:15:aa:62:f8:9b:65:ba:10:17:54:3f:9c:d5:0b: d3:ea:c2:5e:bc:00:c9:f0:41:90:ba:0a:db:7f:42: a8:c5:08:2b:10:f5:6b:aa:f5:0a:df:3c:c2:64:6b: 91:60:3e:5d:82:89:c1:eb:2f:c7:63:31:95:fd:20: 08:1f:23:3e:2b:dd:12:bf:79:31:86:42:d0:f6:4a: 6e:92:14:0c:79:10:ee:11:26:8e:17:1e:be:7f:03: 6c:ad:56:7f:65:6d:d4:16:ab:25:f2:97:d6:d9:51: 2d:27:72:37:a6:3c:65:c6:57:fe:23:1d:05:5b:72: 83:4e:d3:68:8e:6b:af:54:f2:c2:71:99:ba:0a:6b: 26:45:6b:e3:af:8e:b6:33:e4:4f:e9:c4:da:22:8e: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:4D:E9:E7:80:A1:59:90:78:85:BF:4C:1E:34:B6:A8:AE:DA:E8 X509v3 Authority Key Identifier: keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:72:c9:4d:a4:51:51:e1:77:a8:40:42:13:f0:79:63:5c:ac: ff:1e:7e:7a:d4:65:cc:e1:ce:84:1c:f1:c3:a9:f9:36:5b:af: d1:d1:a5:2b:70:b1:9f:86:34:0d:7b:34:f1:ea:d7:73:0d:d5: 57:3a:93:f6:88:c0:da:e3:d0:27:fb:a2:40:58:0b:c1:3a:79: 62:9a:0c:6f:08:f1:88:93:a1:ec:4a:ca:55:37:54:00:09:98: d6:af:7a:df:35:23:1a:c3:7e:06:27:e1:4a:83:12:58:6c:48: 23:89:2c:54:51:a7:06:73:6c:16:92:fb:32:5f:c0:a9:a1:e9: 8f:6e:d1:a6:7a:ec:91:bf:81:42:a1:0c:f5:1e:e1:23:43:36: 15:0e:bd:67:7b:33:27:11:51:1f:cf:ad:36:5d:99:e8:df:f8: d4:0e:f6:ea:42:8a:60:ca:75:4b:c1:9f:fd:ef:37:4b:9f:f4: 0c:39:cc:cc:d0:9d:aa:77:32:ab:e6:69:44:da:01:13:4d:0d: 4e:2f:96:74:01:38:c3:a0:6b:b4:78:21:e7:d0:7d:bc:4b:7a: c2:49:2e:38:1a:1f:ec:4a:a7:53:9c:1d:3e:f5:16:69:4e:c8: 42:c7:6c:50:c4:dc:36:ea:25:fd:c6:b3:da:22:c5:36:05:21: 87:d5:3f:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJKrGZqsBM5Idb4Eg8YcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YzFkY2Y0YzAyMzQ2N2RiM2JmMmVlZjNkZDE1YjJlZmVl YjJiZDcwHhcNMjUxMjIxMjMwMDM1WhcNMjUxMjIyMjMwMDM1WjAzMTEwLwYDVQQD Eyg0YTZkNGRlOWU3ODBhMTU5OTA3ODg1YmY0YzFlMzRiNmE4YWVkYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ie2DZHai2pjS5aNIi9q0vskxc7 C1tNeNM8amVIKyOkBws7t2PWO/KeXkNIXfLiIPHBk8zx8qZAsSq2+eOCKljoie9t xKA6PYZOF2WybXBwUcUxy0E/TOtjMsIIyW6zkisT4844nN2/Fapi+JtluhAXVD+c 1QvT6sJevADJ8EGQugrbf0KoxQgrEPVrqvUK3zzCZGuRYD5dgonB6y/HYzGV/SAI HyM+K90Sv3kxhkLQ9kpukhQMeRDuESaOFx6+fwNsrVZ/ZW3UFqsl8pfW2VEtJ3I3 pjxlxlf+Ix0FW3KDTtNojmuvVPLCcZm6CmsmRWvjr462M+RP6cTaIo5QLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEptTenngKFZkHiFv0weNLaortroMB8GA1UdIwQY MBaAFMjB3PTAI0Z9s78u7z3RWy7+6yvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMt NDRkOTJkZTQzOGM5LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9hMmZmZDQtMjM4Mi00Y2EyLTg2MDMtNDRkOTJkZTQzOGM5 LzEveU1IYzlNQWpSbjJ6dnk3dlBkRmJMdjdySzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnLJTaRR UeF3qEBCE/B5Y1ys/x5+etRlzOHOhBzxw6n5Nluv0dGlK3Cxn4Y0DXs08erXcw3V VzqT9ojA2uPQJ/uiQFgLwTp5YpoMbwjxiJOh7ErKVTdUAAmY1q963zUjGsN+Bifh SoMSWGxII4ksVFGnBnNsFpL7Ml/AqaHpj27Rpnrskb+BQqEM9R7hI0M2FQ69Z3sz JxFRH8+tNl2Z6N/41A726kKKYMp1S8Gf/e83S5/0DDnMzNCdqncyq+ZpRNoBE00N Ti+WdAE4w6BrtHgh59B9vEt6wkkuOBof7EqnU5wdPvUWaU7IQsdsUMTcNuol/caz 2iLFNgUhh9U/Zw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:06:40 2025 by rpki-client