This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft File: yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json) Hash identifier: zZ6vHwu12pcjhCzROKVEaVqFtXGb4hWaLh+e1T4tOGo= Subject key identifier: 72:EB:6A:3A:A2:24:ED:38:58:8A:A9:A1:D9:63:7D:62:D8:10:7F:37 Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7 Certificate issuer: /CN=c85d01b442946e1924313d564f31b7e42e2455e7 Certificate serial: 019B43C974C60422BA1AA144011152A36121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft Manifest number: 0C0D Signing time: Mon 22 Dec 2025 02:00:34 +0000 Manifest this update: Mon 22 Dec 2025 02:00:34 +0000 Manifest next update: Tue 23 Dec 2025 02:00:34 +0000 Files and hashes: 1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=) 2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: 6y39/N5QuSMcWFGRT1RsHiXDo7iIhQY1UStNBbUblxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:74:c6:04:22:ba:1a:a1:44:01:11:52:a3:61:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7 Validity Not Before: Dec 22 02:00:34 2025 GMT Not After : Dec 23 02:00:34 2025 GMT Subject: CN=72eb6a3aa224ed38588aa9a1d9637d62d8107f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f8:80:5d:c8:38:a2:77:a2:d8:49:d9:47:b1: 1a:16:da:2c:e4:a2:c0:e4:1d:37:96:dc:1d:b1:33: de:63:8f:bc:5a:a6:af:40:06:56:24:21:13:e8:4c: e8:1b:fa:aa:66:c9:ec:33:37:02:be:7d:c8:2b:d9: c7:c8:3e:95:41:14:d6:ff:1d:a7:8a:13:51:25:d1: 3b:ad:6e:4c:c3:46:56:6e:d1:c9:f6:1e:59:12:ee: 16:60:88:3f:37:ae:c4:e5:0c:fc:01:00:24:e3:58: a4:2e:b9:64:04:6e:8f:8e:10:71:16:9b:96:d0:61: 6e:23:db:7d:88:4b:71:2a:7f:8a:1b:cf:2f:3b:19: cd:2c:a4:b8:94:9d:1a:16:49:00:b5:f1:ad:b4:78: 81:56:9e:99:5b:a6:61:af:ef:95:ba:b2:46:72:69: 79:07:8c:5d:f9:6b:b1:7f:4a:73:b7:7a:bb:a2:f4: cf:f0:cb:e9:bb:ab:1b:9f:7e:18:97:e1:83:62:f8: e9:80:bb:93:65:a3:fd:2d:68:bf:ab:75:b3:a0:e4: 9b:bb:b9:e8:0c:82:57:ff:6e:3a:71:06:5c:4b:71: 11:2a:b7:43:cc:cf:01:98:5e:c2:30:f4:93:68:5b: 82:4c:a8:8f:5f:3b:cd:e4:0d:44:63:15:b5:be:3e: 05:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EB:6A:3A:A2:24:ED:38:58:8A:A9:A1:D9:63:7D:62:D8:10:7F:37 X509v3 Authority Key Identifier: keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:be:13:38:28:90:03:f3:3f:dc:88:46:64:81:d9:86:53:ce: b5:4e:2f:f8:67:2c:90:e4:85:da:81:95:72:94:a8:2f:60:3e: 4a:20:b5:6e:47:44:78:53:01:55:b1:c7:4f:aa:9d:34:1f:f2: 2c:30:c9:56:e3:1f:a2:3f:1e:92:fc:48:13:ee:c9:3c:03:a3: 0e:7d:a3:fd:a6:01:af:e9:52:26:13:f8:c6:61:22:af:39:49: 43:d2:b5:f9:f5:7d:40:c8:81:7e:db:1d:32:8d:02:06:b1:0c: 02:29:5a:16:a1:92:78:56:7d:6c:c6:12:3e:b4:e7:17:7f:84: 5b:77:78:35:01:47:b6:e5:d4:2a:07:bf:db:75:be:d5:2f:79: 66:64:82:46:dc:82:d8:b8:b2:2e:9f:d7:52:d3:3a:a3:f3:39: 4b:2d:9a:b9:a9:3f:ad:af:c7:a7:d4:bc:75:97:0b:3a:b6:c4: 2c:2a:23:6b:3e:f5:ae:a2:ff:6d:f0:46:5e:71:8f:ef:1b:62: ad:72:3c:01:05:dc:ec:2c:c6:86:72:ed:fb:a7:50:a0:73:8d: ae:3e:2a:e5:32:fc:b2:a9:fc:69:c8:1c:7b:db:98:2e:e4:e7: 22:c0:1e:44:47:55:54:88:9b:b0:31:aa:c1:4e:b4:c6:88:92: 30:c0:96:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyXTGBCK6GqFEARFSo2EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NWQwMWI0NDI5NDZlMTkyNDMxM2Q1NjRmMzFiN2U0MmUy NDU1ZTcwHhcNMjUxMjIyMDIwMDM0WhcNMjUxMjIzMDIwMDM0WjAzMTEwLwYDVQQD Eyg3MmViNmEzYWEyMjRlZDM4NTg4YWE5YTFkOTYzN2Q2MmQ4MTA3ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/iAXcg4onei2EnZR7EaFtos5KLA 5B03ltwdsTPeY4+8WqavQAZWJCET6EzoG/qqZsnsMzcCvn3IK9nHyD6VQRTW/x2n ihNRJdE7rW5Mw0ZWbtHJ9h5ZEu4WYIg/N67E5Qz8AQAk41ikLrlkBG6PjhBxFpuW 0GFuI9t9iEtxKn+KG88vOxnNLKS4lJ0aFkkAtfGttHiBVp6ZW6Zhr++VurJGcml5 B4xd+Wuxf0pzt3q7ovTP8Mvpu6sbn34Yl+GDYvjpgLuTZaP9LWi/q3WzoOSbu7no DIJX/246cQZcS3ERKrdDzM8BmF7CMPSTaFuCTKiPXzvN5A1EYxW1vj4FHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLrajqiJO04WIqpodljfWLYEH83MB8GA1UdIwQY MBaAFMhdAbRClG4ZJDE9Vk8xt+QuJFXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEt MTZiOTdiOWE4ODVlLzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NTA4NzMtZDA2My00MjBkLWEwNTEtMTZiOTdiOWE4ODVl LzEveUYwQnRFS1ViaGtrTVQxV1R6RzM1QzRrVmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHL4TOCiQ A/M/3IhGZIHZhlPOtU4v+GcskOSF2oGVcpSoL2A+SiC1bkdEeFMBVbHHT6qdNB/y LDDJVuMfoj8ekvxIE+7JPAOjDn2j/aYBr+lSJhP4xmEirzlJQ9K1+fV9QMiBftsd Mo0CBrEMAilaFqGSeFZ9bMYSPrTnF3+EW3d4NQFHtuXUKge/23W+1S95ZmSCRtyC 2LiyLp/XUtM6o/M5Sy2auak/ra/Hp9S8dZcLOrbELCojaz71rqL/bfBGXnGP7xti rXI8AQXc7CzGhnLt+6dQoHONrj4q5TL8sqn8acgce9uYLuTnIsAeREdVVIibsDGq wU60xoiSMMCWTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:12:40 2025 by rpki-client