This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft File: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft (raw, json) Hash identifier: jzKiS8D9BSVQLZkzStuRTLND/6JHK8EDeY87ijmkYjA= Subject key identifier: EE:21:76:B4:2E:B2:89:E3:27:48:5C:1D:4C:92:5D:D3:CF:91:5C:8D Authority key identifier: 62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A Certificate issuer: /CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a Certificate serial: 019B2552AD696E7339CF7841458B5E9FFF98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft Manifest number: 0ABF Signing time: Tue 16 Dec 2025 04:02:13 +0000 Manifest this update: Tue 16 Dec 2025 04:02:13 +0000 Manifest next update: Wed 17 Dec 2025 04:02:13 +0000 Files and hashes: 1: MpAhSV5_JYGm73KDLYsRhjMMngA.roa (hash: I/TPMBAXObvOasW2mYRrnWqkuLDeYNgwfZaEC70a/SQ=) 2: Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl (hash: PVRQ2qUUlLoUbrBOxTToWlcIvm/5dKB6BgoeUgQfDcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:ad:69:6e:73:39:cf:78:41:45:8b:5e:9f:ff:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62ef977550fa7c813dee5c1b90e9511b9c68dd0a Validity Not Before: Dec 16 04:02:13 2025 GMT Not After : Dec 17 04:02:13 2025 GMT Subject: CN=ee2176b42eb289e327485c1d4c925dd3cf915c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:2d:1c:24:80:63:2b:54:05:15:1d:2f:86: 01:b4:82:ec:93:db:6b:2e:cc:1a:ed:0c:94:31:6f: f1:57:bb:aa:8d:a8:bc:d5:39:48:20:4d:cf:b1:d3: 6f:b1:9d:e9:00:e6:a1:9f:51:ef:8a:cc:b4:54:05: cf:a7:a6:22:88:7f:5a:8b:53:da:31:2e:a4:28:3d: 15:41:c9:4e:36:16:07:a0:be:bc:e4:e2:8e:ae:a8: 0b:2f:39:d9:db:50:72:2c:7c:33:b9:2f:97:47:98: 0f:7b:76:65:a3:3e:8a:40:98:95:e7:ac:08:16:b9: fd:e0:f6:db:46:25:df:0b:d0:b0:e0:54:e5:11:c7: b0:74:e0:39:1a:5b:f4:c7:71:d7:6a:38:40:a2:ce: 29:44:d4:0d:60:30:19:ef:9d:2e:ae:87:8a:2b:be: 4a:27:44:80:14:7a:15:2a:f8:60:95:7e:e7:85:6c: 9f:f7:ea:89:7c:af:e4:f7:b9:57:c4:19:f3:5d:31: a4:56:70:fc:0c:99:dd:39:09:ac:0d:db:4e:96:f7: 13:a8:f8:cf:7d:b6:d5:90:2f:57:11:e5:bd:1b:00: 20:75:af:60:27:31:3f:c7:39:a2:ad:0e:fb:fb:71: 00:67:b0:55:1e:ac:05:18:40:45:c6:b6:26:71:25: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:76:B4:2E:B2:89:E3:27:48:5C:1D:4C:92:5D:D3:CF:91:5C:8D X509v3 Authority Key Identifier: keyid:62:EF:97:75:50:FA:7C:81:3D:EE:5C:1B:90:E9:51:1B:9C:68:DD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8e38d7-e7d5-4dd8-a360-584a140b8b71/1/Yu-XdVD6fIE97lwbkOlRG5xo3Qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9b:20:cc:0d:16:f1:d0:8d:fe:e8:c7:a7:5c:23:f2:4e:43: 59:2b:1e:4c:0e:79:4b:59:08:4e:03:fd:f1:4d:34:c4:d0:3d: dd:9e:fe:19:02:0a:67:22:7e:9b:21:5f:2a:b6:1d:19:1a:29: 95:50:61:f2:da:9e:cf:7e:df:f5:81:6d:d4:32:cd:1e:3a:2c: 12:08:8a:f4:db:d5:24:a2:9a:d3:80:06:56:18:aa:f1:45:34: c0:b9:d1:03:fa:2a:4d:cc:f8:ab:11:df:85:ef:37:90:9d:38: 4a:0f:62:d1:ad:1c:e8:ff:b6:fa:eb:42:a0:98:9a:44:8f:d5: ee:90:b1:85:62:19:ca:58:28:66:09:f6:ad:a0:41:29:60:1f: 7e:f9:d1:4b:2a:d0:87:6c:27:c1:a9:34:d3:ec:73:85:81:4a: a3:d9:23:57:47:ff:e2:4e:b7:9e:d9:11:9f:3b:85:1d:19:2b: 2d:09:89:14:da:65:25:47:ca:a4:03:6a:ed:49:a9:41:fe:4b: 91:5b:fd:83:fd:02:6a:37:95:22:93:3c:b8:21:f0:b0:25:2b: 7f:44:03:5c:c4:30:16:b1:0e:33:e8:b4:20:63:5f:b8:14:af: 76:1c:79:c5:54:40:74:f0:62:5e:a6:09:26:e3:4e:21:2b:cb: c7:2e:c6:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUq1pbnM5z3hBRYten/+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZWY5Nzc1NTBmYTdjODEzZGVlNWMxYjkwZTk1MTFiOWM2 OGRkMGEwHhcNMjUxMjE2MDQwMjEzWhcNMjUxMjE3MDQwMjEzWjAzMTEwLwYDVQQD EyhlZTIxNzZiNDJlYjI4OWUzMjc0ODVjMWQ0YzkyNWRkM2NmOTE1YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNQtHCSAYytUBRUdL4YBtILsk9tr Lswa7QyUMW/xV7uqjai81TlIIE3PsdNvsZ3pAOahn1Hvisy0VAXPp6YiiH9ai1Pa MS6kKD0VQclONhYHoL685OKOrqgLLznZ21ByLHwzuS+XR5gPe3Zloz6KQJiV56wI Frn94PbbRiXfC9Cw4FTlEcewdOA5Glv0x3HXajhAos4pRNQNYDAZ750uroeKK75K J0SAFHoVKvhglX7nhWyf9+qJfK/k97lXxBnzXTGkVnD8DJndOQmsDdtOlvcTqPjP fbbVkC9XEeW9GwAgda9gJzE/xzmirQ77+3EAZ7BVHqwFGEBFxrYmcSUOOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4hdrQusonjJ0hcHUySXdPPkVyNMB8GA1UdIwQY MBaAFGLvl3VQ+nyBPe5cG5DpURucaN0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAt NTg0YTE0MGI4YjcxLzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84ZTM4ZDctZTdkNS00ZGQ4LWEzNjAtNTg0YTE0MGI4Yjcx LzEvWXUtWGRWRDZmSUU5N2x3YmtPbFJHNXhvM1FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpsgzA0W 8dCN/ujHp1wj8k5DWSseTA55S1kITgP98U00xNA93Z7+GQIKZyJ+myFfKrYdGRop lVBh8tqez37f9YFt1DLNHjosEgiK9NvVJKKa04AGVhiq8UU0wLnRA/oqTcz4qxHf he83kJ04Sg9i0a0c6P+2+utCoJiaRI/V7pCxhWIZylgoZgn2raBBKWAffvnRSyrQ h2wnwak00+xzhYFKo9kjV0f/4k63ntkRnzuFHRkrLQmJFNplJUfKpANq7UmpQf5L kVv9g/0CajeVIpM8uCHwsCUrf0QDXMQwFrEOM+i0IGNfuBSvdhx5xVRAdPBiXqYJ JuNOISvLxy7Gwg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:17:12 2025 by rpki-client