This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json) Hash identifier: /GO5LUHMjZxpiu23m3tsX/0ovRn/gwqLI2SFxgJijy0= Subject key identifier: 85:01:EB:9A:7E:34:B9:FE:99:80:D6:2C:93:E7:91:36:6D:7C:C5:D2 Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Certificate serial: 019B5A51A50C38F8596347A5926B9E49E9CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft Manifest number: 0485 Signing time: Fri 26 Dec 2025 11:00:58 +0000 Manifest this update: Fri 26 Dec 2025 11:00:58 +0000 Manifest next update: Sat 27 Dec 2025 11:00:58 +0000 Files and hashes: 1: 75BTAzaWIqNBNqbHGCcSmYPxzWo.roa (hash: E7g/0drvt8P/stRrLTMim2nlcTgYeQXHR6qswQWRYZY=) 2: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: PFvMi5KeiTZa2+6ToOtTJz0aHhk2OcJj80Kyx0FWHjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:a5:0c:38:f8:59:63:47:a5:92:6b:9e:49:e9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Validity Not Before: Dec 26 11:00:58 2025 GMT Not After : Dec 27 11:00:58 2025 GMT Subject: CN=8501eb9a7e34b9fe9980d62c93e791366d7cc5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:c0:6b:9a:0e:c6:13:ab:aa:aa:36:3a:33: 88:42:c1:4e:72:4b:1b:1a:56:4d:e2:95:71:0a:97: 38:93:b6:cf:3b:e1:99:97:19:96:60:c1:63:c8:6c: b0:06:47:c8:86:20:a7:66:e8:20:b3:5a:79:51:3d: 85:dc:e8:c1:39:96:e8:09:f4:b6:61:d5:d4:d6:90: b7:a2:00:75:6e:4a:f4:70:7d:ab:ab:6b:b9:be:86: d0:7d:ab:7d:12:80:11:f7:09:35:8d:1e:89:8a:73: 3b:14:fa:bf:e1:89:45:6d:17:8f:1b:46:71:26:15: be:ce:20:73:8c:ae:90:f1:51:1f:bf:33:4d:75:fc: e3:04:ed:be:6a:a5:28:92:c7:0f:da:41:1e:3f:da: 63:ef:6e:8a:26:96:99:53:31:3e:f4:6d:98:11:38: 26:05:75:4c:50:0b:4b:c9:c0:90:de:63:bb:79:10: 91:98:cb:1c:0e:c0:a3:ee:e5:2b:a5:0c:49:c1:1d: 85:5f:6f:09:71:02:8c:02:f1:a1:cc:5d:46:49:d7: e6:73:bb:0f:2f:c2:6c:aa:5c:19:4f:05:27:75:95: de:36:18:36:d1:59:ae:b8:9f:19:1d:b4:94:d8:ca: 45:ab:bc:2a:09:d0:f4:42:df:7c:c9:55:e5:a4:12: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:01:EB:9A:7E:34:B9:FE:99:80:D6:2C:93:E7:91:36:6D:7C:C5:D2 X509v3 Authority Key Identifier: keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fe:60:bd:4b:40:54:b1:f9:fa:dc:76:bd:4e:30:38:cb:59: 0b:d0:58:ee:f0:83:d4:2f:c4:a8:b6:d2:90:dc:a6:ef:c4:d7: dc:e7:6c:0a:bf:44:a8:54:75:1d:60:e0:12:d8:46:4b:d2:03: 19:20:96:7b:58:c4:86:13:13:fe:12:76:90:8e:7c:29:ec:6a: 68:7a:b2:72:1a:54:ad:2f:89:94:fe:bf:44:95:e0:a5:08:9e: f3:e8:e9:44:06:fc:be:33:d4:d4:a6:22:69:f3:f6:33:eb:43: ca:23:00:20:6d:65:49:99:39:89:20:35:e0:c4:da:fa:42:79: 7e:aa:2f:d4:3f:a8:4e:65:d5:e6:09:cb:00:24:b4:be:08:c8: 78:a8:3b:79:9c:fa:4a:45:e6:7b:be:4b:22:6b:c0:22:5d:91: a8:b4:d1:14:2e:51:3e:1b:bf:91:2d:ed:9b:e8:20:48:6b:ce: ac:4a:6d:d3:43:3c:f3:29:cb:d2:e7:d8:d1:db:c4:4e:13:b2: eb:9c:88:99:ce:dc:23:65:e9:09:3a:a9:bf:bd:0d:5a:78:45: 10:49:41:f5:cb:a2:09:7c:8e:c1:19:de:23:d5:7d:64:2c:11: 66:05:0b:f2:78:56:44:92:25:0e:12:b4:2d:15:18:a4:6e:16: 7e:ea:3b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUaUMOPhZY0elkmueSenNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2 ZWY5YzEwHhcNMjUxMjI2MTEwMDU4WhcNMjUxMjI3MTEwMDU4WjAzMTEwLwYDVQQD Eyg4NTAxZWI5YTdlMzRiOWZlOTk4MGQ2MmM5M2U3OTEzNjZkN2NjNWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVPAa5oOxhOrqqo2OjOIQsFOcksb GlZN4pVxCpc4k7bPO+GZlxmWYMFjyGywBkfIhiCnZuggs1p5UT2F3OjBOZboCfS2 YdXU1pC3ogB1bkr0cH2rq2u5vobQfat9EoAR9wk1jR6JinM7FPq/4YlFbRePG0Zx JhW+ziBzjK6Q8VEfvzNNdfzjBO2+aqUokscP2kEeP9pj726KJpaZUzE+9G2YETgm BXVMUAtLycCQ3mO7eRCRmMscDsCj7uUrpQxJwR2FX28JcQKMAvGhzF1GSdfmc7sP L8JsqlwZTwUndZXeNhg20VmuuJ8ZHbSU2MpFq7wqCdD0Qt98yVXlpBL5bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUB65p+NLn+mYDWLJPnkTZtfMXSMB8GA1UdIwQY MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP5gvUtA VLH5+tx2vU4wOMtZC9BY7vCD1C/EqLbSkNym78TX3OdsCr9EqFR1HWDgEthGS9ID GSCWe1jEhhMT/hJ2kI58KexqaHqychpUrS+JlP6/RJXgpQie8+jpRAb8vjPU1KYi afP2M+tDyiMAIG1lSZk5iSA14MTa+kJ5fqov1D+oTmXV5gnLACS0vgjIeKg7eZz6 SkXme75LImvAIl2RqLTRFC5RPhu/kS3tm+ggSGvOrEpt00M88ynL0ufY0dvEThOy 65yImc7cI2XpCTqpv70NWnhFEElB9cuiCXyOwRneI9V9ZCwRZgUL8nhWRJIlDhK0 LRUYpG4Wfuo7fg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:38 2025 by rpki-client