This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft File: YtHWd-U82GA27g-wYpBs1C-8G-E.mft (raw, json) Hash identifier: qq1EoT0/jyYDFp0e5hrFwnN+kcKcMgvIrSnjErgw3u0= Subject key identifier: 5C:DA:32:A5:62:44:0A:DD:8C:41:97:3D:75:43:4D:E5:9E:28:1B:1F Authority key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 Certificate issuer: /CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Certificate serial: 019B5AF6724643DB7C6EF7B2C9003CF8DCDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft Manifest number: 56 Signing time: Fri 26 Dec 2025 14:00:58 +0000 Manifest this update: Fri 26 Dec 2025 14:00:58 +0000 Manifest next update: Sat 27 Dec 2025 14:00:58 +0000 Files and hashes: 1: YtHWd-U82GA27g-wYpBs1C-8G-E.crl (hash: NGQFKAY9sSOIA+9COiTK3uHiwN4AfJgNyEkFoQtk7XE=) 2: vGAiVBVNdJYslblkvqm01Ww4NSA.roa (hash: +AJCCz11UPuNvZqhCS6Ls1F8jMG1vWB6IEnro+dLoOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:72:46:43:db:7c:6e:f7:b2:c9:00:3c:f8:dc:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1 Validity Not Before: Dec 26 14:00:58 2025 GMT Not After : Dec 27 14:00:58 2025 GMT Subject: CN=5cda32a562440add8c41973d75434de59e281b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:46:d6:00:97:d3:f2:21:f1:bf:21:75:37: ef:1d:70:80:5d:aa:6e:03:69:d1:ee:14:f6:94:0d: 81:73:b3:c6:11:e4:65:b9:79:b5:70:60:90:70:8e: 4f:6f:a3:74:bb:91:48:c5:74:c6:ac:47:7a:e1:f8: 04:a1:8b:81:6f:20:69:46:88:84:4d:19:8e:e2:a3: 9c:02:ec:32:57:bd:5d:02:65:a2:b0:cb:55:65:96: ef:7c:98:29:2e:bd:65:0b:e0:29:ef:9a:e8:cf:93: 9c:f9:75:98:a5:c0:61:a4:ad:43:88:c8:57:31:bd: 64:55:17:fe:31:a1:64:f9:8d:2d:7a:3c:dc:ed:05: 24:81:a3:58:c4:d7:fe:a5:e9:ba:8a:47:57:54:65: 5f:86:86:4f:12:f4:9c:5a:a5:94:67:72:ad:7d:d5: 52:aa:73:75:55:81:7f:91:b0:9f:f9:04:69:5b:ba: c1:4e:5a:c8:1e:b7:49:ba:87:26:5e:98:fb:ca:5e: ca:24:a5:54:7e:ef:e8:7b:95:bf:81:5b:8b:6c:b8: 97:d6:16:8f:7e:8c:c7:5f:48:9e:d9:a6:c1:0a:1b: b3:fd:cb:1c:35:73:7f:f0:7f:3b:ac:02:e8:de:56: 6b:82:38:15:38:1a:4c:ed:85:c4:0b:1b:dd:09:b4: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DA:32:A5:62:44:0A:DD:8C:41:97:3D:75:43:4D:E5:9E:28:1B:1F X509v3 Authority Key Identifier: keyid:62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3a:04:a8:87:ae:55:0d:c3:f1:9e:71:5c:e8:68:23:b8:fc: 7e:fd:4a:35:76:fa:79:c2:63:a5:ba:89:75:a5:84:cd:33:12: e5:24:e2:10:fa:5c:18:4a:05:6b:da:1e:5b:da:6d:23:f7:7a: 8b:7e:ab:e7:5a:f4:92:9a:2f:1b:d1:b4:14:f9:bb:71:ec:24: cf:08:a0:16:f7:5f:47:d9:fc:95:35:a1:91:e8:5a:dc:c2:6c: 13:bd:13:09:25:1e:5c:07:cb:f9:cb:4d:ff:8b:de:6b:a6:52: 6a:ac:95:d2:34:0e:c2:74:c9:95:18:52:28:1f:c4:23:26:69: 7b:90:52:33:c8:fa:c3:65:86:68:3c:17:55:57:03:cc:0e:48: 72:a7:18:99:87:bf:17:56:43:67:80:de:cb:df:16:15:4b:c6: 30:fd:e8:79:51:4c:6f:71:0e:3c:64:31:70:bf:70:ec:d4:ac: 2c:05:ac:c4:f9:50:7f:51:4e:8d:8b:2a:68:06:83:1a:24:8c: 7e:f2:a5:45:0b:21:fb:24:36:0e:46:f0:90:2c:52:26:bc:14: 04:8c:56:54:8a:82:61:19:e8:5c:13:7b:03:8b:86:33:05:43: 61:ae:e9:e2:d5:3f:dc:6d:f2:e5:68:63:5f:76:06:1d:6f:77: 50:78:3e:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nJGQ9t8bveyyQA8+NzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDFkNjc3ZTUzY2Q4NjAzNmVlMGZiMDYyOTA2Y2Q0MmZi YzFiZTEwHhcNMjUxMjI2MTQwMDU4WhcNMjUxMjI3MTQwMDU4WjAzMTEwLwYDVQQD Eyg1Y2RhMzJhNTYyNDQwYWRkOGM0MTk3M2Q3NTQzNGRlNTllMjgxYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaNG1gCX0/Ih8b8hdTfvHXCAXapu A2nR7hT2lA2Bc7PGEeRluXm1cGCQcI5Pb6N0u5FIxXTGrEd64fgEoYuBbyBpRoiE TRmO4qOcAuwyV71dAmWisMtVZZbvfJgpLr1lC+Ap75roz5Oc+XWYpcBhpK1DiMhX Mb1kVRf+MaFk+Y0tejzc7QUkgaNYxNf+pem6ikdXVGVfhoZPEvScWqWUZ3KtfdVS qnN1VYF/kbCf+QRpW7rBTlrIHrdJuocmXpj7yl7KJKVUfu/oe5W/gVuLbLiX1haP fozHX0ie2abBChuz/cscNXN/8H87rALo3lZrgjgVOBpM7YXECxvdCbSKQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzaMqViRArdjEGXPXVDTeWeKBsfMB8GA1UdIwQY MBaAFGLR1nflPNhgNu4PsGKQbNQvvBvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83NjRmZjItZDdlOC00MDYxLWJmZTYt M2NlZjk5NDBhNjk5LzEvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83NjRmZjItZDdlOC00MDYxLWJmZTYtM2NlZjk5NDBhNjk5 LzEvWXRIV2QtVTgyR0EyN2ctd1lwQnMxQy04Ry1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzoEqIeu VQ3D8Z5xXOhoI7j8fv1KNXb6ecJjpbqJdaWEzTMS5STiEPpcGEoFa9oeW9ptI/d6 i36r51r0kpovG9G0FPm7cewkzwigFvdfR9n8lTWhkeha3MJsE70TCSUeXAfL+ctN /4vea6ZSaqyV0jQOwnTJlRhSKB/EIyZpe5BSM8j6w2WGaDwXVVcDzA5IcqcYmYe/ F1ZDZ4Dey98WFUvGMP3oeVFMb3EOPGQxcL9w7NSsLAWsxPlQf1FOjYsqaAaDGiSM fvKlRQsh+yQ2DkbwkCxSJrwUBIxWVIqCYRnoXBN7A4uGMwVDYa7p4tU/3G3y5Whj X3YGHW93UHg+rw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client