This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json) Hash identifier: qSzZAxUN98Gwx5RFvn3THztEK530wkgzrEKCxXRzRyE= Subject key identifier: F7:32:41:83:C1:7B:B1:82:D5:E9:54:01:51:7C:01:FB:1F:A5:A8:A2 Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6 Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6 Certificate serial: 019B5A886746D64663AD2EFC789B05C1240A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft Manifest number: 14D5 Signing time: Fri 26 Dec 2025 12:00:47 +0000 Manifest this update: Fri 26 Dec 2025 12:00:47 +0000 Manifest next update: Sat 27 Dec 2025 12:00:47 +0000 Files and hashes: 1: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (hash: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=) 2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: jtKc4dIhjbxBsYi6hQR6ukvpkpPupE01JkHHBfXtqj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:67:46:d6:46:63:ad:2e:fc:78:9b:05:c1:24:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6 Validity Not Before: Dec 26 12:00:47 2025 GMT Not After : Dec 27 12:00:47 2025 GMT Subject: CN=f7324183c17bb182d5e95401517c01fb1fa5a8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:04:9b:74:ae:4d:3b:44:b5:e5:56:4b:92: c4:2e:b3:30:fc:05:30:8c:16:09:6a:60:3f:e6:6b: 86:8e:af:09:3d:ed:70:e4:25:9c:c3:1d:ae:ac:f0: 2d:0c:ac:6e:ad:ee:2d:61:32:3f:1e:39:57:24:0a: 2e:88:40:90:b4:1a:04:5c:18:71:0c:57:7d:44:0f: 6c:ba:4f:b3:2f:ae:5e:58:1d:7c:5c:9f:82:d7:43: e4:1b:03:e1:47:d5:b5:ea:52:19:7a:95:09:4f:58: 8e:ad:b0:3d:a3:0b:3a:c7:2f:40:04:8d:2c:45:11: 0e:17:b8:9e:b6:2b:9f:66:f5:5b:72:bf:58:52:b0: fb:13:12:d3:ab:70:2e:65:0b:ec:9d:bc:0b:ac:9b: 5d:f5:98:ff:b5:3c:df:da:c3:6e:ab:56:d3:c8:a6: 77:e8:73:7c:bc:46:ce:07:c6:0c:77:fc:6b:6a:2d: af:a4:29:8b:48:fa:b7:87:3e:ea:29:55:01:4e:e9: 56:a1:73:a9:12:d4:9c:7e:b5:c4:4e:38:ea:37:fc: a8:76:dd:f6:14:2a:d7:18:78:55:0f:5e:86:15:04: 4d:74:61:15:5f:f5:50:b5:1f:6b:54:e1:64:12:1c: 91:a0:7e:57:77:36:f2:61:1d:a3:cb:57:ca:9f:5b: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:32:41:83:C1:7B:B1:82:D5:E9:54:01:51:7C:01:FB:1F:A5:A8:A2 X509v3 Authority Key Identifier: keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:80:35:63:89:a4:dc:d4:f4:6e:4e:e2:11:52:0d:e6:d4:9a: d1:22:cd:e7:0a:31:20:3a:9a:eb:14:35:b7:3d:e3:2d:6c:fa: 69:f8:eb:a1:07:e3:bd:14:70:37:60:5e:ab:29:cb:8a:93:e6: 66:34:09:ff:53:6a:3c:45:08:46:33:83:86:30:55:38:e9:1c: 38:5c:dc:43:c1:b1:40:3d:b4:21:1d:21:15:84:a5:46:f9:e8: 5c:b8:91:48:f2:de:be:49:c9:f0:98:07:22:a5:ee:ef:5a:51: 61:1f:51:f1:55:9d:66:16:e8:26:b6:9b:88:24:56:d2:77:38: 29:6a:e1:6f:12:9d:2e:c9:fc:2f:18:73:aa:e9:58:98:ba:1c: c4:e3:f1:c7:da:31:94:a6:e1:0a:c3:bd:8c:47:e0:eb:ab:53: 03:4c:9b:1f:bf:80:d0:c2:8d:93:8e:c1:4f:06:4a:1e:e0:06: a4:bf:c8:ab:f7:b9:e4:ff:f4:11:ad:96:af:c7:96:3a:91:8e: 0c:64:bf:55:44:63:66:dd:0c:b1:9b:7a:e5:f0:32:be:48:88: 23:e5:cf:6e:72:f0:10:d0:5b:59:ed:cb:93:32:8c:a1:1e:0f: 9b:00:72:98:1d:da:73:d3:77:44:83:15:d0:c8:f2:03:16:81: 01:d6:da:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiGdG1kZjrS78eJsFwSQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2NlYTZlMTAzYTIzMjVjNDhjMTY2N2E5OWM3YjE3ZWIz Y2U3YjYwHhcNMjUxMjI2MTIwMDQ3WhcNMjUxMjI3MTIwMDQ3WjAzMTEwLwYDVQQD EyhmNzMyNDE4M2MxN2JiMTgyZDVlOTU0MDE1MTdjMDFmYjFmYTVhOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ8Em3SuTTtEteVWS5LELrMw/AUw jBYJamA/5muGjq8JPe1w5CWcwx2urPAtDKxure4tYTI/HjlXJAouiECQtBoEXBhx DFd9RA9suk+zL65eWB18XJ+C10PkGwPhR9W16lIZepUJT1iOrbA9ows6xy9ABI0s RREOF7ietiufZvVbcr9YUrD7ExLTq3AuZQvsnbwLrJtd9Zj/tTzf2sNuq1bTyKZ3 6HN8vEbOB8YMd/xrai2vpCmLSPq3hz7qKVUBTulWoXOpEtScfrXETjjqN/yodt32 FCrXGHhVD16GFQRNdGEVX/VQtR9rVOFkEhyRoH5XdzbyYR2jy1fKn1uSyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcyQYPBe7GC1elUAVF8AfsfpaiiMB8GA1UdIwQY MBaAFGB86m4QOiMlxIwWZ6mcexfrPOe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWIt YzlhOWJhYTQzZjk0LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lNjE5ODUtZjg4MS00MDM1LWFiNWItYzlhOWJhYTQzZjk0 LzEvWUh6cWJoQTZJeVhFakJabnFaeDdGLXM4NTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIA1Y4mk 3NT0bk7iEVIN5tSa0SLN5woxIDqa6xQ1tz3jLWz6afjroQfjvRRwN2BeqynLipPm ZjQJ/1NqPEUIRjODhjBVOOkcOFzcQ8GxQD20IR0hFYSlRvnoXLiRSPLevknJ8JgH IqXu71pRYR9R8VWdZhboJrabiCRW0nc4KWrhbxKdLsn8LxhzqulYmLocxOPxx9ox lKbhCsO9jEfg66tTA0ybH7+A0MKNk47BTwZKHuAGpL/Iq/e55P/0Ea2Wr8eWOpGO DGS/VURjZt0MsZt65fAyvkiII+XPbnLwENBbWe3LkzKMoR4PmwBymB3ac9N3RIMV 0MjyAxaBAdbamg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:48 2025 by rpki-client