This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json) Hash identifier: GorNkJzQI7cOGDGwL1u6HNB1J+qtSe7HFjcVFFZYQtY= Subject key identifier: 56:24:52:6D:DF:33:18:62:77:DD:13:53:C1:8B:C1:65:88:D0:97:51 Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942 Certificate serial: 019B1193BC3C364132D37620CEF38D454C86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft Manifest number: 15B9 Signing time: Fri 12 Dec 2025 08:00:53 +0000 Manifest this update: Fri 12 Dec 2025 08:00:53 +0000 Manifest next update: Sat 13 Dec 2025 08:00:53 +0000 Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: MubH5jCAv4ZABiC0I5F0nUirR5FjJ0+N0bttPKEzne0=) 2: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (hash: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:bc:3c:36:41:32:d3:76:20:ce:f3:8d:45:4c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942 Validity Not Before: Dec 12 08:00:53 2025 GMT Not After : Dec 13 08:00:53 2025 GMT Subject: CN=5624526ddf33186277dd1353c18bc16588d09751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:dd:16:50:8d:a1:c6:16:2c:a9:bf:8e:c3: 86:25:d5:4c:9e:48:b5:c2:38:13:07:a9:0c:9f:5d: 30:9c:3c:d2:8b:36:aa:f9:11:4f:76:66:66:6b:69: 78:d9:27:a8:00:0a:e1:34:ac:e4:4e:25:f8:08:97: fb:a3:96:cd:07:bc:ca:c2:5a:80:21:48:c0:a8:51: 0a:42:9c:5f:62:1a:6b:18:99:9e:02:7f:6d:3a:d1: f2:ad:7f:dc:e2:67:73:18:bb:69:95:36:dd:aa:4f: 1b:75:b0:a0:b5:0a:5c:7e:04:ba:97:83:ed:09:82: 30:78:8c:6b:0a:18:65:68:e4:64:69:dc:42:ca:1c: fc:3f:49:c7:32:59:df:75:20:d4:f7:66:56:4c:aa: 9e:d5:ae:b1:4c:ba:01:3c:06:03:48:8c:8e:46:8f: 83:4e:5c:bd:18:7f:8e:4b:ef:69:57:d3:c1:21:6e: 91:a6:07:ec:85:93:2b:b1:98:d2:8c:06:52:31:72: 46:d1:81:ee:56:90:a9:ba:c8:6c:35:e2:1d:12:fb: be:38:c0:bb:f0:d8:31:ae:53:41:67:55:b5:cc:2e: 66:76:ee:d2:33:23:7b:e9:4e:b2:44:bd:f8:1e:4b: d2:4f:19:7b:b1:cd:10:0e:2f:d7:3e:9b:55:c8:24: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:24:52:6D:DF:33:18:62:77:DD:13:53:C1:8B:C1:65:88:D0:97:51 X509v3 Authority Key Identifier: keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b2:23:d4:dd:63:fe:33:aa:67:c5:01:1c:83:50:95:a4:54: a9:a1:d6:6c:3f:cb:0e:95:b1:9c:91:a7:ad:f8:ab:d3:95:4b: d1:5f:e8:d0:fa:a9:26:b2:a5:ca:cd:49:60:f2:88:ec:07:ff: c1:37:7c:91:69:cd:2d:c5:4e:0a:03:f0:95:20:7e:2d:6f:c8: 5c:14:38:cc:d2:ca:7c:9d:94:ec:ab:0e:51:d9:5c:b5:b2:df: 54:22:4c:d8:a3:d8:ce:62:93:27:e1:36:ae:64:1a:85:ff:22: 29:0d:ad:c2:a8:95:8f:46:b4:50:1c:bc:2c:79:4d:a2:b0:bf: a1:ba:1b:5d:96:98:da:b8:01:c6:26:42:c4:57:6e:95:5f:9d: ba:8f:38:ef:5d:82:bd:37:85:65:62:d7:91:8c:44:98:1b:e0: d7:9d:1b:66:a3:a8:4b:32:21:a2:9f:8d:eb:08:00:f1:d2:1d: d9:12:9f:b0:86:84:42:93:9a:87:02:07:69:53:c2:0a:cf:d2: ab:12:36:cb:f0:c0:4b:15:3c:e2:87:95:34:0b:48:40:62:84: 80:08:75:78:36:a8:81:4d:aa:4e:fb:bc:0b:28:1d:55:c1:35: 84:3c:95:cc:91:f8:cd:4b:c9:70:1c:a5:84:7d:5f:9c:17:e6: ea:ac:0c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk7w8NkEy03YgzvONRUyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx MWQ5NDIwHhcNMjUxMjEyMDgwMDUzWhcNMjUxMjEzMDgwMDUzWjAzMTEwLwYDVQQD Eyg1NjI0NTI2ZGRmMzMxODYyNzdkZDEzNTNjMThiYzE2NTg4ZDA5NzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r3dFlCNocYWLKm/jsOGJdVMnki1 wjgTB6kMn10wnDzSizaq+RFPdmZma2l42SeoAArhNKzkTiX4CJf7o5bNB7zKwlqA IUjAqFEKQpxfYhprGJmeAn9tOtHyrX/c4mdzGLtplTbdqk8bdbCgtQpcfgS6l4Pt CYIweIxrChhlaORkadxCyhz8P0nHMlnfdSDU92ZWTKqe1a6xTLoBPAYDSIyORo+D Tly9GH+OS+9pV9PBIW6RpgfshZMrsZjSjAZSMXJG0YHuVpCpushsNeIdEvu+OMC7 8NgxrlNBZ1W1zC5mdu7SMyN76U6yRL34HkvSTxl7sc0QDi/XPptVyCRUNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYkUm3fMxhid90TU8GLwWWI0JdRMB8GA1UdIwQY MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt M2IxMTMxZTUwNGI4LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUtM2IxMTMxZTUwNGI4 LzEvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLIj1N1j /jOqZ8UBHINQlaRUqaHWbD/LDpWxnJGnrfir05VL0V/o0PqpJrKlys1JYPKI7Af/ wTd8kWnNLcVOCgPwlSB+LW/IXBQ4zNLKfJ2U7KsOUdlctbLfVCJM2KPYzmKTJ+E2 rmQahf8iKQ2twqiVj0a0UBy8LHlNorC/obobXZaY2rgBxiZCxFdulV+duo84712C vTeFZWLXkYxEmBvg150bZqOoSzIhop+N6wgA8dId2RKfsIaEQpOahwIHaVPCCs/S qxI2y/DASxU84oeVNAtIQGKEgAh1eDaogU2qTvu8CygdVcE1hDyVzJH4zUvJcByl hH1fnBfm6qwMJw== -----END CERTIFICATE-----Generated at Fri Dec 12 15:44:12 2025 by rpki-client