This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft File: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json) Hash identifier: NjJlSX8gRbCh1sjtBpbbu1wq4lYwMaZRZyWmAUGgEJ4= Subject key identifier: 99:25:83:CA:C6:E5:39:21:D0:C7:90:5A:E5:76:66:CA:FB:76:05:99 Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Certificate serial: 019B330D5DE263FEC29741DB2A9903AB90A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft Manifest number: 1789 Signing time: Thu 18 Dec 2025 20:01:12 +0000 Manifest this update: Thu 18 Dec 2025 20:01:12 +0000 Manifest next update: Fri 19 Dec 2025 20:01:12 +0000 Files and hashes: 1: 12cWFr32i6PF2CeFM1PO-xgXt6A.roa (hash: kaGn4iTJ9yXgrBEjfOG5dUlsL+x0SJaJYPyNDbIcR54=) 2: PnEzUVbrYhXZNNLfCN-Xtl0-Pzk.roa (hash: lXzPnJfE3bH0euvEvGwi8aTfi10gIwh0zvOckFmaQMI=) 3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: 6MMtux0qOIY5l5JxSD8o4OLOu/bvpstRPrARW1Xuhjc=) 4: faW_PPYk_4UD9_3RNfk7L7R4hKg.roa (hash: NsYb0FRDPoAtzYBgzGg3wYZizhwYw15oPV3lBi8uVeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:5d:e2:63:fe:c2:97:41:db:2a:99:03:ab:90:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0 Validity Not Before: Dec 18 20:01:12 2025 GMT Not After : Dec 19 20:01:12 2025 GMT Subject: CN=992583cac6e53921d0c7905ae57666cafb760599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:c8:35:b3:24:9a:7f:56:d7:cc:31:61:11: 25:31:a2:1a:be:ee:60:a1:7f:e1:75:a9:25:9e:00: 26:0e:7d:ac:43:11:fc:1e:42:f1:9f:e4:57:7f:f1: fd:89:e8:2c:5f:72:19:e8:ce:21:c7:c8:e8:07:0c: 9e:15:86:6d:7a:e4:81:23:f6:62:60:17:4c:9c:97: 28:48:81:a6:01:9d:c1:09:71:fa:be:fd:98:9c:09: 1a:35:65:df:2c:3a:da:b4:50:45:87:a6:04:c2:58: 57:17:ca:76:2b:04:4b:62:34:ef:06:67:7e:9c:37: 28:6c:70:29:4d:82:2b:51:8d:61:a3:20:bc:67:6f: 7f:12:ea:00:3b:18:4c:6a:d1:6a:3d:06:31:7e:b3: 3d:f2:a3:83:49:33:0c:37:bc:9f:08:26:4f:00:47: 23:1c:7b:d3:b9:66:cf:49:de:f4:f5:1e:43:19:b8: 1c:bb:e2:11:3f:0e:3c:0b:4f:34:68:b1:5a:cc:7c: 9e:6e:c3:d0:a3:74:b4:48:03:69:f0:2f:81:55:8e: 1b:b0:bf:c7:61:0b:50:5b:07:37:35:b5:7a:ac:1a: 4d:fa:98:97:8d:c4:0e:d9:55:1e:06:9a:d5:a6:03: c2:bc:58:1d:78:87:81:05:53:a2:57:a6:1a:56:82: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:25:83:CA:C6:E5:39:21:D0:C7:90:5A:E5:76:66:CA:FB:76:05:99 X509v3 Authority Key Identifier: keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4a:1e:fc:4f:4e:e9:7a:d9:14:7c:b6:b1:a4:9c:7e:fa:f5: a9:ec:62:49:a4:cd:5e:5d:21:6a:9c:4a:4d:fc:d0:4f:f5:47: 2a:75:08:4d:d0:41:93:f4:db:41:f1:7c:76:4d:5e:0b:82:fb: ab:3f:4a:7c:46:ef:c3:86:ff:48:be:7e:cc:7f:b8:1d:49:77: 11:d0:d9:ae:3e:d8:2e:28:94:9a:62:89:3c:47:3d:3d:e2:55: e8:40:b1:de:2a:e3:e4:f5:c5:02:b1:84:57:6d:26:ea:59:67: 87:2f:15:1c:eb:12:cd:6d:72:7f:19:7b:8e:ec:f7:21:30:4a: 84:f5:10:d0:41:1e:75:f5:29:36:91:a4:a7:ce:8b:f6:c6:3f: 47:d4:6b:a5:a8:15:25:4a:b6:92:05:93:bc:fd:32:7d:33:57: 80:76:bb:f8:26:b9:f5:e4:d3:20:5d:ff:e6:50:8d:73:29:9a: 02:a1:48:46:c9:1a:d8:81:85:fa:47:7a:03:5a:2a:af:23:0a: 94:ec:6e:51:42:d0:cd:de:1e:71:79:37:4d:cb:6b:e9:95:be: 2c:ed:80:2f:60:72:b8:95:4c:d2:63:55:55:95:9d:37:46:52: 8d:38:8e:4d:6a:8d:30:22:07:73:62:ec:1a:8f:2c:20:6d:66: 67:53:11:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDV3iY/7Cl0HbKpkDq5CpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxN2NkOGQ0OGI1ZDE1NjY3YmYxMzEzOTZkNGE2YzU5ZDdk MTY3YzAwHhcNMjUxMjE4MjAwMTEyWhcNMjUxMjE5MjAwMTEyWjAzMTEwLwYDVQQD Eyg5OTI1ODNjYWM2ZTUzOTIxZDBjNzkwNWFlNTc2NjZjYWZiNzYwNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbINbMkmn9W18wxYRElMaIavu5g oX/hdaklngAmDn2sQxH8HkLxn+RXf/H9iegsX3IZ6M4hx8joBwyeFYZteuSBI/Zi YBdMnJcoSIGmAZ3BCXH6vv2YnAkaNWXfLDratFBFh6YEwlhXF8p2KwRLYjTvBmd+ nDcobHApTYIrUY1hoyC8Z29/EuoAOxhMatFqPQYxfrM98qODSTMMN7yfCCZPAEcj HHvTuWbPSd709R5DGbgcu+IRPw48C080aLFazHyebsPQo3S0SANp8C+BVY4bsL/H YQtQWwc3NbV6rBpN+piXjcQO2VUeBprVpgPCvFgdeIeBBVOiV6YaVoKApQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJklg8rG5Tkh0MeQWuV2Zsr7dgWZMB8GA1UdIwQY MBaAFGF82NSLXRVme/ExOW1KbFnX0WfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEt YmY2ZTk3ZGRkMDc5LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEtYmY2ZTk3ZGRkMDc5 LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0oe/E9O 6XrZFHy2saScfvr1qexiSaTNXl0hapxKTfzQT/VHKnUITdBBk/TbQfF8dk1eC4L7 qz9KfEbvw4b/SL5+zH+4HUl3EdDZrj7YLiiUmmKJPEc9PeJV6ECx3irj5PXFArGE V20m6llnhy8VHOsSzW1yfxl7juz3ITBKhPUQ0EEedfUpNpGkp86L9sY/R9RrpagV JUq2kgWTvP0yfTNXgHa7+Ca59eTTIF3/5lCNcymaAqFIRska2IGF+kd6A1oqryMK lOxuUULQzd4ecXk3Tctr6ZW+LO2AL2ByuJVM0mNVVZWdN0ZSjTiOTWqNMCIHc2Ls Go8sIG1mZ1MRKA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:34 2025 by rpki-client