This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft File: YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json) Hash identifier: qX/YPHbBmk7TqzKi0k+gJ65su4t8cBJQUTShei23+A8= Subject key identifier: D7:F9:F7:AE:FB:BD:2C:A3:CD:C3:9C:B5:3E:08:5C:E7:E5:CD:E2:5E Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51 Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551 Certificate serial: 019B397D5AC4BD30F266AF9FD215E1B77A9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft Manifest number: 0968 Signing time: Sat 20 Dec 2025 02:01:14 +0000 Manifest this update: Sat 20 Dec 2025 02:01:14 +0000 Manifest next update: Sun 21 Dec 2025 02:01:14 +0000 Files and hashes: 1: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (hash: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=) 2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: AL2kV/hULZmX97I19uCnDRn9JN+QY83SmXiJOXVda0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:5a:c4:bd:30:f2:66:af:9f:d2:15:e1:b7:7a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620b0435463746f5f237d93687bec2eacf224551 Validity Not Before: Dec 20 02:01:14 2025 GMT Not After : Dec 21 02:01:14 2025 GMT Subject: CN=d7f9f7aefbbd2ca3cdc39cb53e085ce7e5cde25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:31:9c:e5:a0:7b:aa:cf:57:a2:f6:10:26: 07:40:42:b4:91:4a:cf:a4:39:79:60:e4:6a:97:96: c8:08:fb:66:3b:07:fb:d6:aa:6d:50:82:af:83:6e: c5:c7:74:3f:8c:c8:26:77:f2:53:86:ff:af:85:19: b9:13:e2:5a:c8:75:cc:a7:6c:c5:16:d5:90:9e:98: d2:e4:de:f6:31:bb:28:ca:d8:e5:e1:a3:68:5f:0b: 12:6a:71:9b:9b:c0:83:ce:5d:5c:4e:9d:5c:79:a4: 4d:e7:56:8f:81:60:24:e1:cd:78:93:ca:b7:e3:c7: 88:33:7b:1a:64:c2:c9:bb:7e:a6:15:02:07:c0:11: 93:8a:1c:97:c9:5e:b1:b1:aa:84:39:a4:21:1d:7e: 70:cb:ff:fb:48:c8:54:cc:45:75:48:2c:60:08:d4: 28:46:71:46:3c:ff:2a:6f:28:a8:28:d9:42:da:af: 0a:11:0c:b8:3f:33:64:e5:a6:a6:42:c8:db:06:3b: 6d:d6:30:51:b5:cb:68:d2:00:71:06:f9:a0:15:11: 10:5b:d4:33:43:ad:e4:8b:9a:f9:53:5b:09:18:d5: dc:69:5b:ca:26:7f:9e:5b:02:74:19:97:e5:27:bf: 2c:4c:f0:01:49:63:19:a2:e1:a4:ca:76:f8:2a:2b: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F9:F7:AE:FB:BD:2C:A3:CD:C3:9C:B5:3E:08:5C:E7:E5:CD:E2:5E X509v3 Authority Key Identifier: keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e0:11:36:4f:c8:51:20:67:ba:88:35:e4:ce:e3:9a:ce:84: 83:bd:bd:1b:cd:2c:e0:40:fe:06:1e:bd:72:85:f1:8d:4c:bd: 1d:6c:28:9a:5e:b5:21:b3:ca:29:d8:19:d5:d8:fb:30:bc:e4: 32:b2:d8:79:21:f6:ea:cb:99:d2:5b:1c:9a:f3:04:0a:0f:a4: 44:ba:b2:36:34:e6:c8:f8:e7:a4:0f:50:fc:1e:b8:e4:5e:54: 89:de:d9:44:9b:f1:2f:2a:a4:02:bd:7a:c7:a0:65:30:59:c1: 9e:73:86:e2:91:f7:f0:9a:08:f3:0b:a2:d6:e7:e2:9c:ec:14: aa:20:e2:b1:4b:39:16:e1:1e:29:40:0d:04:79:cd:9f:94:8f: 45:9b:5a:83:6a:b6:52:f1:c1:9b:1d:e3:63:90:a6:0a:0f:ab: d1:fc:b5:c8:72:7a:f4:bc:f4:7a:1d:48:77:bf:b6:d1:86:16: f6:f2:fc:ee:01:d6:de:1f:c0:6a:64:e6:2d:40:31:21:88:97: d7:b9:0c:07:fa:6d:33:46:ff:1c:68:ee:b0:c9:ba:62:01:a1: f8:46:47:be:0e:d3:79:14:ed:be:6b:35:73:ab:84:bd:ee:2d: 37:d7:4a:59:b2:00:ea:6b:d7:f4:eb:fc:20:b0:54:d4:f7:96: 24:6e:15:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVrEvTDyZq+f0hXht3qcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMGIwNDM1NDYzNzQ2ZjVmMjM3ZDkzNjg3YmVjMmVhY2Yy MjQ1NTEwHhcNMjUxMjIwMDIwMTE0WhcNMjUxMjIxMDIwMTE0WjAzMTEwLwYDVQQD EyhkN2Y5ZjdhZWZiYmQyY2EzY2RjMzljYjUzZTA4NWNlN2U1Y2RlMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXkxnOWge6rPV6L2ECYHQEK0kUrP pDl5YORql5bICPtmOwf71qptUIKvg27Fx3Q/jMgmd/JThv+vhRm5E+JayHXMp2zF FtWQnpjS5N72Mbsoytjl4aNoXwsSanGbm8CDzl1cTp1ceaRN51aPgWAk4c14k8q3 48eIM3saZMLJu36mFQIHwBGTihyXyV6xsaqEOaQhHX5wy//7SMhUzEV1SCxgCNQo RnFGPP8qbyioKNlC2q8KEQy4PzNk5aamQsjbBjtt1jBRtcto0gBxBvmgFREQW9Qz Q63ki5r5U1sJGNXcaVvKJn+eWwJ0GZflJ78sTPABSWMZouGkynb4Kiu3nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNf59677vSyjzcOctT4IXOflzeJeMB8GA1UdIwQY MBaAFGILBDVGN0b18jfZNoe+wurPIkVRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYt NjhjNTljMTliOTM1LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80YmIyYWEtNDRjZC00M2I2LWE3NmYtNjhjNTljMTliOTM1 LzEvWWdzRU5VWTNSdlh5TjlrMmg3N0M2czhpUlZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeARNk/I USBnuog15M7jms6Eg729G80s4ED+Bh69coXxjUy9HWwoml61IbPKKdgZ1dj7MLzk MrLYeSH26suZ0lscmvMECg+kRLqyNjTmyPjnpA9Q/B645F5Uid7ZRJvxLyqkAr16 x6BlMFnBnnOG4pH38JoI8wui1ufinOwUqiDisUs5FuEeKUANBHnNn5SPRZtag2q2 UvHBmx3jY5CmCg+r0fy1yHJ69Lz0eh1Id7+20YYW9vL87gHW3h/AamTmLUAxIYiX 17kMB/ptM0b/HGjusMm6YgGh+EZHvg7TeRTtvms1c6uEve4tN9dKWbIA6mvX9Ov8 ILBU1PeWJG4VOA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:15:07 2025 by rpki-client