This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft File: YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json) Hash identifier: aWA2+vqBXuWq1SfQROy2S47Y2BS7AU4bLXGvgYDT7+U= Subject key identifier: 3C:B9:40:08:D8:12:17:73:CF:2B:50:51:BF:CD:BE:B2:83:FB:34:CC Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87 Certificate issuer: /CN=614f5665059abc7be3475ef9e77a9797b716fc87 Certificate serial: 019B3456FA12F554DE5E5A634EB1487E6349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft Manifest number: 136E Signing time: Fri 19 Dec 2025 02:01:13 +0000 Manifest this update: Fri 19 Dec 2025 02:01:13 +0000 Manifest next update: Sat 20 Dec 2025 02:01:13 +0000 Files and hashes: 1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=) 2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: IMF3BUAhtMfmCY2kBrJg3HHdQzMvjHf9kP7LiVWScXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:fa:12:f5:54:de:5e:5a:63:4e:b1:48:7e:63:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87 Validity Not Before: Dec 19 02:01:13 2025 GMT Not After : Dec 20 02:01:13 2025 GMT Subject: CN=3cb94008d8121773cf2b5051bfcdbeb283fb34cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:d6:02:a6:5e:05:23:e8:e9:52:d4:f3:18: 1e:a8:79:c6:b1:1d:06:30:42:de:37:12:1b:54:3f: eb:49:02:33:70:bc:36:61:2f:6f:c7:a3:cb:a4:b5: 45:b8:ae:84:ba:eb:f5:6c:6c:5e:b7:65:2d:42:fb: b9:3d:95:f0:9b:7c:10:9b:72:97:eb:97:17:5f:db: 7a:1a:8c:ce:bb:4b:59:9c:de:94:82:ff:5d:a4:e9: 1e:99:04:fd:03:9e:82:91:53:df:88:60:d6:4e:20: 4e:53:2c:71:da:93:cf:ff:4c:ef:99:49:ab:bb:5f: cc:d2:f1:f8:b9:f6:f1:74:3d:89:eb:89:6b:8f:ae: 39:21:9d:b2:1d:4b:a6:5c:54:f8:cd:1d:61:00:d0: e9:c1:4c:d2:c7:97:c2:f7:5c:f9:aa:2a:5b:99:ac: 69:ff:6f:05:2a:0f:f9:43:bc:7b:28:f5:49:db:eb: 76:d6:63:03:52:27:7c:58:c7:27:67:2a:2e:96:31: 09:2b:cb:c5:80:82:64:2a:02:cb:8c:fe:d2:69:18: 26:6f:36:79:31:22:a1:b9:8c:38:9a:31:35:7d:85: ea:39:38:d6:84:78:9f:d5:ed:a4:27:e8:3a:a8:03: 40:f3:45:de:e3:4e:bb:2b:f4:88:d4:71:31:05:fb: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B9:40:08:D8:12:17:73:CF:2B:50:51:BF:CD:BE:B2:83:FB:34:CC X509v3 Authority Key Identifier: keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c6:70:a7:4b:fb:be:e8:bd:71:62:4b:04:e7:84:35:8b:c5: 15:f0:89:a4:aa:57:58:85:f1:ab:78:12:3a:67:1b:57:2b:fa: 81:8e:4e:14:ac:65:2b:58:77:8c:d0:4f:53:fe:5d:59:28:59: 36:86:02:a7:64:2f:b1:2b:57:40:b0:5c:27:83:5a:bd:da:b1: 6b:61:0b:64:9f:03:2e:a5:e5:86:0b:a3:f0:4f:eb:a5:b3:d5: 43:b2:b4:d6:77:5e:1f:d5:a7:8a:07:b1:1c:86:d2:37:e4:aa: ac:89:14:a1:1d:d7:8e:fc:a3:d3:39:cc:46:95:c3:ab:fa:f1: 39:fe:06:63:40:aa:cf:ff:c0:3c:b0:83:9d:cd:e5:34:71:43: c6:9b:eb:e5:5e:8c:31:16:1f:89:43:b1:f1:1a:c4:b7:cf:55: e5:36:e2:0a:bf:1c:de:90:c0:c1:d6:03:bc:82:4f:31:39:ac: e0:7f:15:54:37:89:0a:27:14:47:d5:b7:10:6e:9e:53:84:9c: 23:4e:23:87:1e:09:7c:d3:f0:45:ce:35:8b:ed:3f:d1:62:3c: 3a:90:d7:92:7c:97:17:16:0b:5c:ad:ab:6b:2f:08:0c:b4:92: 1d:e5:87:b9:31:cf:52:4a:d9:11:1f:fa:07:a7:da:c7:54:18: 77:9e:7c:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VvoS9VTeXlpjTrFIfmNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGY1NjY1MDU5YWJjN2JlMzQ3NWVmOWU3N2E5Nzk3Yjcx NmZjODcwHhcNMjUxMjE5MDIwMTEzWhcNMjUxMjIwMDIwMTEzWjAzMTEwLwYDVQQD EygzY2I5NDAwOGQ4MTIxNzczY2YyYjUwNTFiZmNkYmViMjgzZmIzNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYzWAqZeBSPo6VLU8xgeqHnGsR0G MELeNxIbVD/rSQIzcLw2YS9vx6PLpLVFuK6Euuv1bGxet2UtQvu5PZXwm3wQm3KX 65cXX9t6GozOu0tZnN6Ugv9dpOkemQT9A56CkVPfiGDWTiBOUyxx2pPP/0zvmUmr u1/M0vH4ufbxdD2J64lrj645IZ2yHUumXFT4zR1hANDpwUzSx5fC91z5qipbmaxp /28FKg/5Q7x7KPVJ2+t21mMDUid8WMcnZyouljEJK8vFgIJkKgLLjP7SaRgmbzZ5 MSKhuYw4mjE1fYXqOTjWhHif1e2kJ+g6qANA80Xe4067K/SI1HExBfvFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy5QAjYEhdzzytQUb/NvrKD+zTMMB8GA1UdIwQY MBaAFGFPVmUFmrx740de+ed6l5e3FvyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84ODhhMDQtNzdmNC00MTU5LTk4NmMt M2NlZjU5M2QxNmI0LzEvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS84ODhhMDQtNzdmNC00MTU5LTk4NmMtM2NlZjU5M2QxNmI0 LzEvWVU5V1pRV2F2SHZqUjE3NTUzcVhsN2NXX0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnMZwp0v7 vui9cWJLBOeENYvFFfCJpKpXWIXxq3gSOmcbVyv6gY5OFKxlK1h3jNBPU/5dWShZ NoYCp2QvsStXQLBcJ4Navdqxa2ELZJ8DLqXlhguj8E/rpbPVQ7K01ndeH9Wnigex HIbSN+SqrIkUoR3Xjvyj0znMRpXDq/rxOf4GY0Cqz//APLCDnc3lNHFDxpvr5V6M MRYfiUOx8RrEt89V5TbiCr8c3pDAwdYDvIJPMTms4H8VVDeJCicUR9W3EG6eU4Sc I04jhx4JfNPwRc41i+0/0WI8OpDXknyXFxYLXK2ray8IDLSSHeWHuTHPUkrZER/6 B6fax1QYd558gQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:58:57 2025 by rpki-client