This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: umEB5jY8jL3sW4rdnLU5CtmX83nqI2Teb6klWHE5L4U=
Subject key identifier: CB:33:0E:D4:26:67:B5:A5:FB:E6:8B:A9:A7:5E:47:4F:32:7F:A8:A8
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019B18DF24E478ACAF24773B7FE9DF3144EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 177A
Signing time: Sat 13 Dec 2025 18:00:35 +0000
Manifest this update: Sat 13 Dec 2025 18:00:35 +0000
Manifest next update: Sun 14 Dec 2025 18:00:35 +0000
Files and hashes: 1: HQDN-aj0TQhAX2FXvaTFWzQChUg.roa (hash: blFOlAR9sydif32qAhRClbIbQgCg0n31LrtAjrgoEug=)
2: M0bYeyfyOrMV_gB5qblOfbWilh4.roa (hash: f9XZswY2l4oflWNgmE9zU0KMUAtHHlyk4r3L1HHO+uE=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: +Vm/KBuLMykZYklN0GhKubvgEijLGHw6yfrjVqr++wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:18:df:24:e4:78:ac:af:24:77:3b:7f:e9:df:31:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Dec 13 18:00:35 2025 GMT
Not After : Dec 14 18:00:35 2025 GMT
Subject: CN=cb330ed42667b5a5fbe68ba9a75e474f327fa8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:dc:1c:9a:fd:dc:35:89:5a:29:27:00:0c:
e7:25:b6:82:2a:ec:2d:f8:30:5c:5f:ca:67:33:60:
55:23:70:16:2f:89:78:3a:02:1b:d2:d7:ff:bc:39:
95:ab:77:00:4c:e3:e6:90:b6:66:b8:82:26:5e:fa:
49:00:7c:19:04:29:58:78:ca:45:c3:3d:58:32:c2:
f5:a2:7c:83:60:a4:51:9f:86:39:6e:12:ac:78:71:
95:72:8f:a6:2c:43:52:ee:9d:a8:4c:78:0f:f4:86:
3a:a8:ed:5c:d4:c4:1f:44:1b:b9:0e:03:bd:86:3c:
c6:d9:4f:88:00:7a:5d:b4:51:93:6e:71:69:7b:51:
1a:fb:c8:eb:29:36:5d:ce:8d:d6:56:8b:8c:b7:1b:
ce:4c:41:31:5a:7a:c6:76:b8:5a:86:75:40:d5:b3:
d4:d7:93:ae:b5:bd:d9:b0:5c:17:3e:5d:5e:a5:b9:
89:9a:8c:49:29:45:87:0b:9f:84:74:c0:bc:f5:80:
5b:f6:b7:2a:59:95:6b:8f:4e:67:23:94:57:ee:3e:
9c:34:4c:36:c6:6b:31:53:88:47:50:cb:c6:73:6a:
20:b0:49:6e:c4:61:d1:01:1b:f1:7d:0b:23:52:c8:
6d:6a:18:91:9f:72:57:37:10:dd:1f:1a:a3:e3:27:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:0E:D4:26:67:B5:A5:FB:E6:8B:A9:A7:5E:47:4F:32:7F:A8:A8
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a1:38:12:1d:b0:36:d0:de:4d:f2:c0:4c:68:76:56:23:20:
b0:44:e6:72:04:eb:0a:15:98:63:f4:86:24:a1:b9:f3:a8:03:
29:ea:b6:49:89:02:a5:de:3e:a2:2c:bd:b5:0c:c5:fd:96:0a:
73:ba:1e:e6:9b:9a:75:3f:b6:48:3b:f9:20:37:5f:89:2d:f7:
7b:79:18:a2:04:b4:73:a0:ae:39:37:a2:8f:59:07:92:67:28:
f5:31:d6:4c:d0:4e:d5:ed:b3:b4:a2:59:f0:b7:06:78:36:df:
84:5e:48:ac:57:07:e8:2d:4e:37:39:df:62:5d:b8:42:9e:1f:
2d:20:80:73:ef:46:2c:40:ce:df:94:4d:bd:6f:c8:5f:f0:02:
51:ac:31:cd:ce:c8:e4:7b:3c:67:8a:d6:26:e2:76:93:32:79:
d5:e4:e2:7e:99:aa:1e:7f:b3:49:98:1b:f3:fd:63:f2:c6:a4:
aa:cf:dd:c8:3a:bb:af:e6:6e:37:46:da:27:b5:01:7e:1b:fc:
35:3e:a8:63:ca:35:77:1a:50:71:cc:c9:2e:e2:52:4f:61:e5:
70:84:3e:8e:be:d0:5b:c9:e5:b7:a6:72:f3:08:3e:4d:da:12:
96:7f:fc:f2:d8:00:af:4b:7f:b8:78:1c:b8:a0:ea:b4:86:aa:
08:66:1e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 01:55:07 2025 by rpki-client