This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json) Hash identifier: 58Izby/W2QWipOX9pLXe79g0UycrshdMeP531kQCgrE= Subject key identifier: 59:B1:50:97:4E:B7:5F:8F:65:61:CD:A3:35:CA:0B:BC:BF:23:F7:4D Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Certificate serial: 019B239A2B29EADAA6EC9A62507B6C7C3366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft Manifest number: 0E0B Signing time: Mon 15 Dec 2025 20:01:04 +0000 Manifest this update: Mon 15 Dec 2025 20:01:04 +0000 Manifest next update: Tue 16 Dec 2025 20:01:04 +0000 Files and hashes: 1: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (hash: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=) 2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: rUtmARXgcq+C0OqPL32WkZSmrxTf+8UahtyoDllywxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:2b:29:ea:da:a6:ec:9a:62:50:7b:6c:7c:33:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9 Validity Not Before: Dec 15 20:01:04 2025 GMT Not After : Dec 16 20:01:04 2025 GMT Subject: CN=59b150974eb75f8f6561cda335ca0bbcbf23f74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:a9:46:3e:d4:a1:7f:aa:ab:79:71:5b:ed: bc:4f:b0:4f:6a:36:6b:93:de:95:44:b5:14:b5:9a: b2:ab:71:63:f7:35:4e:94:6f:e8:f7:0a:72:d0:55: 00:bf:e7:af:3a:00:87:af:76:2b:a6:b2:a5:9f:e1: 6a:42:d6:1e:d1:be:e5:15:48:51:45:e5:a2:95:9f: 17:b2:74:9d:30:a7:15:a1:98:c1:ef:6d:37:6c:13: 2a:ab:26:03:2c:8d:93:d1:10:ba:6f:0d:30:55:01: f0:d1:eb:5b:1e:63:bc:4c:6a:6f:a5:8f:71:b6:b4: 10:2c:c2:5b:07:6c:9c:ef:83:6f:bf:b0:4a:92:74: 37:a3:99:f9:c8:3a:29:8b:03:04:77:67:8b:44:fb: 62:d8:ad:6c:f6:3f:dc:91:bd:27:a0:47:b7:e8:ef: 8c:d8:20:be:aa:83:7e:c3:20:d4:d2:7e:2f:fb:1e: 85:b2:85:f0:6a:7b:76:bf:c3:23:5a:c3:9a:49:ba: 6e:f4:74:1e:b3:4e:e5:bf:87:0e:f2:57:f1:9c:6a: 7c:90:fc:b3:d5:9f:2f:f9:d0:d8:e7:a2:90:86:a6: bc:fc:b8:02:bc:92:be:cc:14:22:5f:fb:db:ab:c0: 23:f7:b1:71:a3:45:38:2b:20:3c:1b:c0:d1:00:34: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:50:97:4E:B7:5F:8F:65:61:CD:A3:35:CA:0B:BC:BF:23:F7:4D X509v3 Authority Key Identifier: keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:54:90:45:ef:bb:6b:a2:45:46:02:ac:ba:c4:4f:2c:1d:61: fa:36:db:79:38:76:5a:bb:bb:61:f8:10:3b:c0:3f:12:63:52: e2:ca:bc:43:f5:7c:c1:81:38:9e:b1:20:33:c8:6e:4e:a8:ab: ab:7f:11:f9:df:99:94:b9:4d:c4:b1:40:3a:d2:0b:e7:56:17: e4:72:cc:b7:56:6d:fd:1c:ae:33:0f:6c:f3:90:30:a0:07:d5: 0f:0a:6b:18:2f:bc:cc:b6:42:f1:66:06:e0:d1:6e:bf:23:5f: 82:4d:b3:5f:50:3b:c9:66:58:59:a7:f1:ee:ff:96:87:0f:44: d5:93:88:f8:87:32:5a:04:83:b6:e5:ad:47:1c:a3:8c:14:a0: ae:76:ab:83:14:b4:2f:fd:45:de:fa:93:3c:ec:49:14:39:db: 1e:fc:9e:61:e3:3b:f8:ef:72:c9:43:f3:2b:04:38:8e:e8:a5: 12:b4:17:3d:3a:27:4b:29:d0:96:d0:e3:90:59:46:0f:05:05: 1c:70:34:c1:90:1f:c3:76:4d:bf:52:b7:ea:f6:42:4e:53:5d: ce:d4:bc:aa:e7:1a:07:d7:15:1e:4c:42:ed:6e:fc:ef:80:32: 2b:f3:b9:c6:f8:93:d1:62:9f:e0:3f:06:5b:64:40:19:26:a2: 26:ee:8c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmisp6tqm7JpiUHtsfDNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODliMzQ5Yzg0ZmM3YjM0MTJhNTJkNjVmZjI2MGQyY2My ODlhYjkwHhcNMjUxMjE1MjAwMTA0WhcNMjUxMjE2MjAwMTA0WjAzMTEwLwYDVQQD Eyg1OWIxNTA5NzRlYjc1ZjhmNjU2MWNkYTMzNWNhMGJiY2JmMjNmNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gepRj7UoX+qq3lxW+28T7BPajZr k96VRLUUtZqyq3Fj9zVOlG/o9wpy0FUAv+evOgCHr3YrprKln+FqQtYe0b7lFUhR ReWilZ8XsnSdMKcVoZjB7203bBMqqyYDLI2T0RC6bw0wVQHw0etbHmO8TGpvpY9x trQQLMJbB2yc74Nvv7BKknQ3o5n5yDopiwMEd2eLRPti2K1s9j/ckb0noEe36O+M 2CC+qoN+wyDU0n4v+x6FsoXwant2v8MjWsOaSbpu9HQes07lv4cO8lfxnGp8kPyz 1Z8v+dDY56KQhqa8/LgCvJK+zBQiX/vbq8Aj97Fxo0U4KyA8G8DRADTNfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmxUJdOt1+PZWHNozXKC7y/I/dNMB8GA1UdIwQY MBaAFP2Js0nIT8ezQSpS1l/yYNLMKJq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUt ZTgxNzYxMDJjNWZmLzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9lZTcxNGEtMjFhYy00Mzg2LTgyZjUtZTgxNzYxMDJjNWZm LzEvX1ltelNjaFB4N05CS2xMV1hfSmcwc3dvbXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFSQRe+7 a6JFRgKsusRPLB1h+jbbeTh2Wru7YfgQO8A/EmNS4sq8Q/V8wYE4nrEgM8huTqir q38R+d+ZlLlNxLFAOtIL51YX5HLMt1Zt/RyuMw9s85AwoAfVDwprGC+8zLZC8WYG 4NFuvyNfgk2zX1A7yWZYWafx7v+Whw9E1ZOI+IcyWgSDtuWtRxyjjBSgrnargxS0 L/1F3vqTPOxJFDnbHvyeYeM7+O9yyUPzKwQ4juilErQXPTonSynQltDjkFlGDwUF HHA0wZAfw3ZNv1K36vZCTlNdztS8qucaB9cVHkxC7W7874AyK/O5xviT0WKf4D8G W2RAGSaiJu6M2g== -----END CERTIFICATE-----Generated at Mon Dec 15 23:12:22 2025 by rpki-client