This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft File: yuBptmPuJf0TVZEB2sHVAyuf1m4.mft (raw, json) Hash identifier: cG8mKccdVvuNVOD5js8XhL6rLgASHwDYQvXDXO9vbIM= Subject key identifier: BA:AA:57:8B:19:97:DA:B2:03:75:57:25:2A:DF:A2:68:47:CD:A1:98 Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E Certificate issuer: /CN=cae069b663ee25fd13559101dac1d5032b9fd66e Certificate serial: 019B2F6783C55C7791925011944C076593D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft Manifest number: 10D0 Signing time: Thu 18 Dec 2025 03:01:11 +0000 Manifest this update: Thu 18 Dec 2025 03:01:11 +0000 Manifest next update: Fri 19 Dec 2025 03:01:11 +0000 Files and hashes: 1: J-eKojxMi6UoXnAnWpcgCgfxWzI.roa (hash: 3mfOivDPBdA5JQvXcz+RrhjkTiZkiP3KgPuzQa9ZrxM=) 2: yuBptmPuJf0TVZEB2sHVAyuf1m4.crl (hash: fx/i3n5bvKyAtw7nObPkfcxMOGR7ATNospBSTm+/aLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:83:c5:5c:77:91:92:50:11:94:4c:07:65:93:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e Validity Not Before: Dec 18 03:01:11 2025 GMT Not After : Dec 19 03:01:11 2025 GMT Subject: CN=baaa578b1997dab2037557252adfa26847cda198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:a7:4d:63:1b:7d:c5:29:7c:7b:1e:a5:61: 44:96:ea:25:72:e8:e7:e2:71:42:33:81:a0:af:e8: 8b:d3:fd:50:e0:fc:d7:d9:21:0b:9a:48:0d:a9:47: 46:4e:0e:fc:43:d7:bf:1e:53:83:24:c0:45:70:61: f6:b9:1a:65:e2:02:aa:f4:d7:a8:ee:2e:b6:37:7e: 11:b3:73:94:cd:9a:43:e1:5d:95:87:a1:14:d3:65: 00:03:13:11:25:73:f0:c5:20:5f:19:3e:13:70:55: 18:56:38:3e:e3:e4:0d:85:80:86:18:16:e8:70:f0: e2:e7:a9:7f:b2:fb:35:b2:ed:d8:4b:40:10:49:4a: 77:55:a4:ed:63:7a:87:90:1a:2c:da:97:2c:01:26: f2:49:5c:ac:74:c6:22:3e:26:04:56:41:af:fc:fd: 7d:1e:6b:c3:20:9b:f5:19:50:35:8f:b9:d9:1f:b9: ea:9d:6a:a5:31:c1:1d:2b:fe:3a:91:fb:82:9e:61: aa:bc:6b:b5:5e:7f:23:76:50:00:a6:0f:65:ee:5c: a7:af:74:6d:43:4f:05:0a:4b:5b:86:4a:47:a3:50: 6a:2e:73:4a:aa:4b:ca:49:3a:5b:9a:54:1f:51:45: 52:6b:41:1f:72:89:f3:f3:9b:56:75:c8:4f:3e:c1: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:57:8B:19:97:DA:B2:03:75:57:25:2A:DF:A2:68:47:CD:A1:98 X509v3 Authority Key Identifier: keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:97:53:17:13:aa:05:64:13:8f:24:fe:63:ce:ab:bf:cc:8d: 2e:18:0f:03:c4:a6:36:df:85:16:2a:65:a7:e6:07:1e:66:26: e7:3f:76:4d:b0:dd:24:a7:94:b2:b5:a8:1a:02:76:31:2a:d9: c6:5f:c8:f1:4e:a2:57:e9:15:98:7f:57:4a:cb:3d:70:74:c3: 0b:8f:7f:72:9e:0d:9e:10:78:1a:6d:c7:e7:cc:33:77:e3:01: b4:75:6c:c8:0e:5c:b8:ec:7b:8c:7c:51:39:94:47:21:c9:ec: e6:fa:1a:bf:f5:ba:ec:a4:5d:01:13:c0:10:01:87:0a:11:73: 05:c5:11:f6:8e:72:83:bc:ad:d1:33:f8:f0:41:bd:a7:fe:80: 19:48:24:ef:4b:45:c3:1a:14:3a:e0:7e:46:df:78:71:c7:52: 29:bf:1a:7a:b9:de:78:06:1d:90:c1:cc:58:ae:ac:3d:6d:ec: 78:52:f8:4c:d3:10:ab:98:b0:98:9b:f3:1a:47:b4:84:99:0b: 81:33:4c:16:30:a2:44:07:c8:4e:29:82:19:81:75:1c:80:55: 69:28:18:f6:eb:80:58:e3:2e:a2:65:a6:08:17:62:a9:17:9a: 7c:57:11:f6:a8:9c:61:ec:72:20:c1:67:f4:3d:e4:36:7a:f1: 48:cd:75:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ4PFXHeRklARlEwHZZPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZTA2OWI2NjNlZTI1ZmQxMzU1OTEwMWRhYzFkNTAzMmI5 ZmQ2NmUwHhcNMjUxMjE4MDMwMTExWhcNMjUxMjE5MDMwMTExWjAzMTEwLwYDVQQD EyhiYWFhNTc4YjE5OTdkYWIyMDM3NTU3MjUyYWRmYTI2ODQ3Y2RhMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleqnTWMbfcUpfHsepWFEluolcujn 4nFCM4Ggr+iL0/1Q4PzX2SELmkgNqUdGTg78Q9e/HlODJMBFcGH2uRpl4gKq9Neo 7i62N34Rs3OUzZpD4V2Vh6EU02UAAxMRJXPwxSBfGT4TcFUYVjg+4+QNhYCGGBbo cPDi56l/svs1su3YS0AQSUp3VaTtY3qHkBos2pcsASbySVysdMYiPiYEVkGv/P19 HmvDIJv1GVA1j7nZH7nqnWqlMcEdK/46kfuCnmGqvGu1Xn8jdlAApg9l7lynr3Rt Q08FCktbhkpHo1BqLnNKqkvKSTpbmlQfUUVSa0Efconz85tWdchPPsFKmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqqV4sZl9qyA3VXJSrfomhHzaGYMB8GA1UdIwQY MBaAFMrgabZj7iX9E1WRAdrB1QMrn9ZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2Mt ZWNjZWVlZTExMGE0LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lNWY1ZjgtMWNhMS00MjM0LTlhM2MtZWNjZWVlZTExMGE0 LzEveXVCcHRtUHVKZjBUVlpFQjJzSFZBeXVmMW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5dTFxOq BWQTjyT+Y86rv8yNLhgPA8SmNt+FFiplp+YHHmYm5z92TbDdJKeUsrWoGgJ2MSrZ xl/I8U6iV+kVmH9XSss9cHTDC49/cp4NnhB4Gm3H58wzd+MBtHVsyA5cuOx7jHxR OZRHIcns5voav/W67KRdARPAEAGHChFzBcUR9o5yg7yt0TP48EG9p/6AGUgk70tF wxoUOuB+Rt94ccdSKb8aerneeAYdkMHMWK6sPW3seFL4TNMQq5iwmJvzGke0hJkL gTNMFjCiRAfITimCGYF1HIBVaSgY9uuAWOMuomWmCBdiqReafFcR9qicYexyIMFn 9D3kNnrxSM11MQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:20:22 2025 by rpki-client