This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft File: YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft (raw, json) Hash identifier: MHHJau8s13Fnor2fK203bPxXGI9m8g/PtW/m+2Om2GM= Subject key identifier: B4:96:CD:8F:2C:3F:E0:BA:78:FC:B4:7A:02:97:E7:77:DB:8A:3D:4B Authority key identifier: 60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36 Certificate issuer: /CN=6034561c039ac6450bec8fd595c148cc770aa036 Certificate serial: 019B0DB6FC2454BA1DC1D15A701A86DD7BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft Manifest number: 044E Signing time: Thu 11 Dec 2025 14:00:54 +0000 Manifest this update: Thu 11 Dec 2025 14:00:54 +0000 Manifest next update: Fri 12 Dec 2025 14:00:54 +0000 Files and hashes: 1: 7xDyuzwf2JBogicNs1WCGieFUKo.roa (hash: KauAldM8NLiLBGjbpKvhWpk4brd0+mLiraKkETNshfA=) 2: YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl (hash: bjHaNmq+TAEZ4x2nA/Lg9zQYSthvJHMjNsR8YqF36IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:fc:24:54:ba:1d:c1:d1:5a:70:1a:86:dd:7b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6034561c039ac6450bec8fd595c148cc770aa036 Validity Not Before: Dec 11 14:00:54 2025 GMT Not After : Dec 12 14:00:54 2025 GMT Subject: CN=b496cd8f2c3fe0ba78fcb47a0297e777db8a3d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:14:0c:99:6d:9e:c7:58:cd:20:b1:88:42: ea:3a:da:91:f8:40:db:16:04:33:ae:5a:58:73:6e: fb:8b:c5:f2:66:64:2e:f5:12:a0:cd:17:11:84:24: 8b:f5:0e:cd:04:c6:e3:be:0b:55:4b:e1:1d:41:ee: 6f:b4:79:18:5a:93:ca:c4:3e:e2:69:ec:c2:34:94: 1b:49:67:2a:ce:bb:f2:84:66:27:32:b0:df:05:76: 4e:76:2a:c3:cc:e8:60:7f:9f:7a:6c:8a:10:fa:66: e2:f6:b1:1c:d9:12:14:14:0d:92:88:54:ae:f5:d8: ee:62:7f:72:68:0b:55:7f:08:86:bd:d7:a5:c2:27: 6e:ec:4e:0c:de:ba:a5:27:b3:14:a9:8b:ea:a7:57: 95:65:8d:d2:7a:fb:24:a1:87:7a:ca:0f:51:d6:2d: aa:77:e1:a0:df:0d:17:81:2b:ea:84:56:02:04:47: 8e:82:4b:6d:17:d0:46:a2:60:a0:99:3d:9e:ab:b4: c2:97:14:10:c5:b5:d2:87:2f:16:b9:f8:81:cd:f1: 17:b1:08:d0:b3:a3:56:a1:14:89:72:5e:bd:c2:a5: 22:24:5f:41:22:5d:0e:f2:fc:07:87:b5:6b:e0:a4: e7:9c:03:a6:89:2d:67:1e:ac:24:bb:d0:d3:a9:f6: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:CD:8F:2C:3F:E0:BA:78:FC:B4:7A:02:97:E7:77:DB:8A:3D:4B X509v3 Authority Key Identifier: keyid:60:34:56:1C:03:9A:C6:45:0B:EC:8F:D5:95:C1:48:CC:77:0A:A0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDRWHAOaxkUL7I_VlcFIzHcKoDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0a206f-1acd-495d-a8b7-6494e20e2b05/1/YDRWHAOaxkUL7I_VlcFIzHcKoDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1b:05:8d:2d:f2:26:2d:3d:a6:f7:a7:c3:7b:62:19:72:fa: 2f:2c:97:26:a3:f8:99:cc:0f:6a:39:d4:b4:c7:33:51:88:90: 00:28:49:28:06:2a:be:fc:31:3a:33:b3:3c:2c:c9:bd:75:84: cc:c0:72:98:eb:85:82:a8:b4:08:72:9e:a2:e0:52:b6:b8:3c: 51:5e:9c:ea:13:4e:9c:4d:49:ef:6b:90:c7:5c:84:68:47:ac: d9:5f:4d:e1:73:d9:cb:79:09:40:b4:7b:cd:e0:0b:a4:40:92: 86:0d:6b:95:ed:3f:fb:7c:33:e6:18:18:80:39:d7:01:4c:11: 28:f9:8e:f8:31:b0:ac:a4:45:81:37:7a:70:75:63:09:82:8d: 5c:b4:ce:de:29:42:f5:f9:ec:a5:8d:6b:0b:4b:03:39:f5:fe: ca:eb:e7:57:32:db:87:4b:1a:99:32:4e:b5:e7:f2:e8:af:23: 7c:b0:58:1c:c1:f7:77:df:c8:14:a8:19:00:bd:68:59:4b:af: 27:de:5c:41:2f:26:5c:84:a0:87:8d:1a:46:ad:6b:78:aa:cb: 2b:05:83:aa:04:d7:0c:33:0a:f1:f9:09:da:bd:a0:48:8b:99: 7e:39:c1:60:85:83:0a:91:1d:31:c9:7a:6e:c5:82:c8:eb:b2: 7b:29:bb:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtvwkVLodwdFacBqG3XvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzQ1NjFjMDM5YWM2NDUwYmVjOGZkNTk1YzE0OGNjNzcw YWEwMzYwHhcNMjUxMjExMTQwMDU0WhcNMjUxMjEyMTQwMDU0WjAzMTEwLwYDVQQD EyhiNDk2Y2Q4ZjJjM2ZlMGJhNzhmY2I0N2EwMjk3ZTc3N2RiOGEzZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM0UDJltnsdYzSCxiELqOtqR+EDb FgQzrlpYc277i8XyZmQu9RKgzRcRhCSL9Q7NBMbjvgtVS+EdQe5vtHkYWpPKxD7i aezCNJQbSWcqzrvyhGYnMrDfBXZOdirDzOhgf596bIoQ+mbi9rEc2RIUFA2SiFSu 9djuYn9yaAtVfwiGvdelwidu7E4M3rqlJ7MUqYvqp1eVZY3SevskoYd6yg9R1i2q d+Gg3w0XgSvqhFYCBEeOgkttF9BGomCgmT2eq7TClxQQxbXShy8WufiBzfEXsQjQ s6NWoRSJcl69wqUiJF9BIl0O8vwHh7Vr4KTnnAOmiS1nHqwku9DTqfY43QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSWzY8sP+C6ePy0egKX53fbij1LMB8GA1UdIwQY MBaAFGA0VhwDmsZFC+yP1ZXBSMx3CqA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURSV0hBT2F4a1VMN0lfVmxjRkl6SGNLb0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYTIwNmYtMWFjZC00OTVkLWE4Yjct NjQ5NGUyMGUyYjA1LzEvWURSV0hBT2F4a1VMN0lfVmxjRkl6SGNLb0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wYTIwNmYtMWFjZC00OTVkLWE4YjctNjQ5NGUyMGUyYjA1 LzEvWURSV0hBT2F4a1VMN0lfVmxjRkl6SGNLb0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxsFjS3y Ji09pvenw3tiGXL6LyyXJqP4mcwPajnUtMczUYiQAChJKAYqvvwxOjOzPCzJvXWE zMBymOuFgqi0CHKeouBStrg8UV6c6hNOnE1J72uQx1yEaEes2V9N4XPZy3kJQLR7 zeALpECShg1rle0/+3wz5hgYgDnXAUwRKPmO+DGwrKRFgTd6cHVjCYKNXLTO3ilC 9fnspY1rC0sDOfX+yuvnVzLbh0samTJOtefy6K8jfLBYHMH3d9/IFKgZAL1oWUuv J95cQS8mXISgh40aRq1reKrLKwWDqgTXDDMK8fkJ2r2gSIuZfjnBYIWDCpEdMcl6 bsWCyOuyeym7Ww== -----END CERTIFICATE-----Generated at Thu Dec 11 17:32:47 2025 by rpki-client