This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft File: ylIg5T5PgcoljM_qGHKAKA9fYho.mft (raw, json) Hash identifier: wCYuC/+wu5CQNhQGbI71B45WA8VX7Rsa8Yfif3bgquA= Subject key identifier: 3C:EC:A9:83:5C:63:BC:32:7A:9E:4F:1D:27:FF:42:E1:83:79:3C:25 Authority key identifier: CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A Certificate issuer: /CN=ca5220e53e4f81ca258ccfea187280280f5f621a Certificate serial: 019B243EEE81BCC5247CE080BE281CB2C835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 23:01:02 +0000 Manifest this update: Mon 15 Dec 2025 23:01:02 +0000 Manifest next update: Tue 16 Dec 2025 23:01:02 +0000 Files and hashes: 1: HnblzgjRhv7ohFCku2dgX5Jr7vw.roa (hash: o9K0gGCxUA0R4sGgN9lj9M6IzHoNtSXBjdq46DJlaa4=) 2: dem0uBwT7g7YZDZIQsS-aXVQdOI.roa (hash: XISttqO419C7SgkgSmOfFJd6GmXYZpUuMQWw/YZudzA=) 3: ylIg5T5PgcoljM_qGHKAKA9fYho.crl (hash: uDK+JM9UZHmCMUozJ32Nv8o6J1NTTu2PLGCutyd5/bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:ee:81:bc:c5:24:7c:e0:80:be:28:1c:b2:c8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5220e53e4f81ca258ccfea187280280f5f621a Validity Not Before: Dec 15 23:01:02 2025 GMT Not After : Dec 16 23:01:02 2025 GMT Subject: CN=3ceca9835c63bc327a9e4f1d27ff42e183793c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:d3:14:7a:47:d2:61:40:8d:03:5c:c9:47: 85:bd:d6:f3:43:eb:3a:fe:07:ab:51:2c:b1:ee:b4: 75:20:b6:c5:da:dc:11:67:bb:34:66:34:ab:6c:ea: e0:c5:3e:c1:b0:61:bc:bf:78:e3:d5:0c:d0:cc:40: 39:04:d1:46:70:8c:4f:c5:b5:10:f1:95:62:22:2b: 81:c5:88:0e:12:b6:d6:8d:03:1f:81:db:37:3e:09: 0b:94:2b:ba:2e:7a:78:c1:4b:f6:41:f2:a2:e8:6d: 0b:ee:25:55:03:d9:97:54:0e:27:b4:8e:75:10:40: 4d:1a:73:9c:aa:10:b4:05:a3:4f:bc:e4:f6:53:c6: e8:17:39:4d:0d:51:bb:eb:e2:c7:5b:ee:3d:89:c3: 93:02:21:94:3a:a7:f6:d1:c2:59:dd:e1:40:20:9d: e8:51:a7:e0:b8:3f:08:d9:85:ca:e5:55:7b:ec:bb: 1d:d8:35:81:ae:13:fb:21:aa:33:a8:19:19:b5:e6: dc:06:4b:ef:29:5b:9d:67:c0:d8:a9:ce:5f:17:25: c2:40:98:b1:2f:0e:66:25:2c:ca:ea:d7:7f:9b:3f: a0:2e:2f:07:9d:5b:d0:6a:38:01:15:1e:67:0e:4f: c0:32:ad:f7:87:b6:b9:54:95:55:6d:be:be:54:d0: 94:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EC:A9:83:5C:63:BC:32:7A:9E:4F:1D:27:FF:42:E1:83:79:3C:25 X509v3 Authority Key Identifier: keyid:CA:52:20:E5:3E:4F:81:CA:25:8C:CF:EA:18:72:80:28:0F:5F:62:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylIg5T5PgcoljM_qGHKAKA9fYho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/424947-1c6a-48e9-b289-f23c5a531823/1/ylIg5T5PgcoljM_qGHKAKA9fYho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:a2:3e:62:33:42:51:ac:df:99:12:d2:ac:88:7b:ac:68: d4:41:c9:a5:27:75:21:96:7b:dc:0f:a9:e6:e8:5c:6f:60:45: 92:d2:82:69:70:84:09:79:79:d1:71:ec:ff:1e:c4:bd:ef:68: a5:3a:98:96:8a:37:65:d6:3d:a9:1c:d6:86:2c:ed:9f:a6:3f: 13:3a:66:07:f4:7b:e2:fe:83:02:9a:d9:da:c2:f7:ba:a8:cf: f8:8e:aa:56:85:bf:34:b6:12:14:3d:df:64:51:f1:f1:34:5e: 64:98:56:da:04:4b:0b:52:43:a0:b1:e1:73:87:17:98:35:0d: 73:fd:2c:5f:05:98:d6:9d:0c:36:93:f0:b2:2d:0e:b9:c3:03: 4a:80:44:ea:53:da:98:6e:0c:81:85:17:06:80:9d:ca:68:40: 95:e5:1d:1b:55:33:ea:8a:e2:6d:5f:9a:20:0b:c2:11:d2:07: 56:dc:70:6b:45:82:89:44:cb:26:90:2b:2c:ba:49:4b:ee:98: 1b:41:78:be:9c:1e:a8:7c:58:a0:92:f4:90:16:c0:25:e8:57: 4f:1a:c6:e4:53:1a:c0:16:b9:86:17:73:ba:2e:73:23:57:03: 38:cd:a1:fd:b6:ca:94:3e:60:98:ab:76:a7:72:57:99:2d:d0: 93:b8:03:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPu6BvMUkfOCAvigcssg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNTIyMGU1M2U0ZjgxY2EyNThjY2ZlYTE4NzI4MDI4MGY1 ZjYyMWEwHhcNMjUxMjE1MjMwMTAyWhcNMjUxMjE2MjMwMTAyWjAzMTEwLwYDVQQD EygzY2VjYTk4MzVjNjNiYzMyN2E5ZTRmMWQyN2ZmNDJlMTgzNzkzYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRTTFHpH0mFAjQNcyUeFvdbzQ+s6 /gerUSyx7rR1ILbF2twRZ7s0ZjSrbOrgxT7BsGG8v3jj1QzQzEA5BNFGcIxPxbUQ 8ZViIiuBxYgOErbWjQMfgds3PgkLlCu6Lnp4wUv2QfKi6G0L7iVVA9mXVA4ntI51 EEBNGnOcqhC0BaNPvOT2U8boFzlNDVG76+LHW+49icOTAiGUOqf20cJZ3eFAIJ3o UafguD8I2YXK5VV77Lsd2DWBrhP7IaozqBkZtebcBkvvKVudZ8DYqc5fFyXCQJix Lw5mJSzK6td/mz+gLi8HnVvQajgBFR5nDk/AMq33h7a5VJVVbb6+VNCUUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzsqYNcY7wyep5PHSf/QuGDeTwlMB8GA1UdIwQY MBaAFMpSIOU+T4HKJYzP6hhygCgPX2IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODkt ZjIzYzVhNTMxODIzLzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80MjQ5NDctMWM2YS00OGU5LWIyODktZjIzYzVhNTMxODIz LzEveWxJZzVUNVBnY29sak1fcUdIS0FLQTlmWWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO6iPmIz QlGs35kS0qyIe6xo1EHJpSd1IZZ73A+p5uhcb2BFktKCaXCECXl50XHs/x7Eve9o pTqYloo3ZdY9qRzWhiztn6Y/EzpmB/R74v6DAprZ2sL3uqjP+I6qVoW/NLYSFD3f ZFHx8TReZJhW2gRLC1JDoLHhc4cXmDUNc/0sXwWY1p0MNpPwsi0OucMDSoBE6lPa mG4MgYUXBoCdymhAleUdG1Uz6oribV+aIAvCEdIHVtxwa0WCiUTLJpArLLpJS+6Y G0F4vpweqHxYoJL0kBbAJehXTxrG5FMawBa5hhdzui5zI1cDOM2h/bbKlD5gmKt2 p3JXmS3Qk7gDaw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:49:59 2025 by rpki-client