This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft File: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft (raw, json) Hash identifier: Jz9sVtu/7hf21wO8yjytB11CP5gB7pxYNzK1kU32Gn0= Subject key identifier: D5:9F:88:E5:F6:B1:BF:E7:3E:C3:0F:A8:E7:55:D1:0C:F7:88:0C:AB Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c Certificate serial: 019B4AA79E273D34FF817C7CC4DE15DC214F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft Manifest number: 17A0 Signing time: Tue 23 Dec 2025 10:00:57 +0000 Manifest this update: Tue 23 Dec 2025 10:00:57 +0000 Manifest next update: Wed 24 Dec 2025 10:00:57 +0000 Files and hashes: 1: I5z_1hVliNBBM0FrqHpN1qPTca8.roa (hash: n/sNB3WBcM+raTHs73p1MwMj7v/dmk/wcLeQX9QTiHw=) 2: K5NEdUPfsWNlU5OaxDmaJB9uhW8.roa (hash: 7HBZ5dKfBKtNZaeKC9JLdhcxQK1sl2MmzTeySkJRRaA=) 3: ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl (hash: iUbNHFTAHnQbnkngeQGKufWQvfAYfTwsmomU43I8+Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:9e:27:3d:34:ff:81:7c:7c:c4:de:15:dc:21:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c Validity Not Before: Dec 23 10:00:57 2025 GMT Not After : Dec 24 10:00:57 2025 GMT Subject: CN=d59f88e5f6b1bfe73ec30fa8e755d10cf7880cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8a:f0:d1:d0:e5:8b:13:28:cf:a2:dd:d0:64: 4e:ec:dc:41:3b:31:36:ed:01:c7:b1:89:0f:30:92: e9:2e:ea:24:af:c3:c8:8f:e6:e4:42:e6:30:9e:9a: 3a:a2:97:60:df:e7:13:00:14:4c:79:23:b7:88:b6: c2:3a:ea:82:b7:72:34:5d:63:df:f9:d2:7c:22:4a: f0:31:28:20:c5:6a:c5:23:b5:e7:10:b7:7b:ad:46: ae:a0:bf:6b:8c:23:44:f2:f8:98:c3:ad:60:9f:2c: 4b:a8:1c:ca:1b:35:ab:96:b6:f9:68:d8:35:44:a3: 43:2e:69:8d:a5:9b:f6:4d:ec:14:7f:cd:44:40:15: df:af:ce:08:b0:18:a7:90:04:c9:af:84:aa:51:e6: ea:fd:10:f0:e3:18:c7:e7:93:e3:d9:03:f1:b1:79: 76:cb:33:44:7f:92:60:d5:ff:1e:9c:53:99:27:f8: 7e:06:74:93:f2:0f:b0:2d:03:21:e0:0c:29:c0:b8: 16:0e:63:56:c1:63:1e:cf:04:20:0d:f9:a7:c6:69: 87:9d:c2:f5:82:28:93:9e:c5:f2:8e:94:0e:80:c9: b6:f8:7d:87:1b:f1:98:33:64:bb:45:29:77:0a:de: da:ed:cf:2f:4c:87:69:8b:62:b0:91:88:23:29:56: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9F:88:E5:F6:B1:BF:E7:3E:C3:0F:A8:E7:55:D1:0C:F7:88:0C:AB X509v3 Authority Key Identifier: keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3b:f3:38:ba:97:65:95:c7:05:0f:37:fb:73:a3:c0:42:16: 54:58:7b:6a:28:01:fe:8b:84:79:22:39:90:83:74:a3:a4:81: b7:c6:d5:80:a4:db:98:9c:93:fd:d6:4b:26:04:f5:cb:43:e5: 47:e7:c3:c2:1c:4a:d1:fb:0d:fd:cc:7e:de:2c:5a:d4:91:69: 4b:14:4a:75:fc:9a:0e:85:12:b4:04:26:4a:69:89:8f:a0:2e: f5:bb:8b:51:f5:19:78:3f:8c:1b:d8:8a:b6:5e:fc:2f:25:35: 5c:f6:bf:4c:a0:27:be:8f:c3:86:8a:d9:ae:b1:51:d3:a2:8b: d9:db:45:d3:81:46:b2:e8:39:86:36:a1:df:70:c8:d6:e3:53: be:58:67:f1:d1:a1:21:a3:b7:7e:90:3e:2b:8a:4c:b1:79:cb: a1:9a:d9:d4:b5:43:b0:f4:c5:89:43:02:c4:1d:0f:f8:d6:0c: 75:34:7d:25:ab:7a:29:4b:36:ba:0c:24:79:8d:87:67:c1:f1: 3b:21:8c:eb:ce:f5:74:b3:d1:65:9b:ea:64:c4:99:2a:d7:1e: 6d:3c:d9:fb:4f:91:ed:c8:8f:34:32:70:9f:ac:36:66:25:8c: 0d:f2:f4:ab:4b:34:a5:c2:1e:3c:d7:6e:de:d7:7b:b5:61:4f: 55:62:5d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp54nPTT/gXx8xN4V3CFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz Yzg4NWMwHhcNMjUxMjIzMTAwMDU3WhcNMjUxMjI0MTAwMDU3WjAzMTEwLwYDVQQD EyhkNTlmODhlNWY2YjFiZmU3M2VjMzBmYThlNzU1ZDEwY2Y3ODgwY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYrw0dDlixMoz6Ld0GRO7NxBOzE2 7QHHsYkPMJLpLuokr8PIj+bkQuYwnpo6opdg3+cTABRMeSO3iLbCOuqCt3I0XWPf +dJ8IkrwMSggxWrFI7XnELd7rUauoL9rjCNE8viYw61gnyxLqBzKGzWrlrb5aNg1 RKNDLmmNpZv2TewUf81EQBXfr84IsBinkATJr4SqUebq/RDw4xjH55Pj2QPxsXl2 yzNEf5Jg1f8enFOZJ/h+BnST8g+wLQMh4AwpwLgWDmNWwWMezwQgDfmnxmmHncL1 giiTnsXyjpQOgMm2+H2HG/GYM2S7RSl3Ct7a7c8vTIdpi2KwkYgjKVZvNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWfiOX2sb/nPsMPqOdV0Qz3iAyrMB8GA1UdIwQY MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt ZDcxMmQ0NzM4MDQ2LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2 LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzvzOLqX ZZXHBQ83+3OjwEIWVFh7aigB/ouEeSI5kIN0o6SBt8bVgKTbmJyT/dZLJgT1y0Pl R+fDwhxK0fsN/cx+3ixa1JFpSxRKdfyaDoUStAQmSmmJj6Au9buLUfUZeD+MG9iK tl78LyU1XPa/TKAnvo/DhorZrrFR06KL2dtF04FGsug5hjah33DI1uNTvlhn8dGh IaO3fpA+K4pMsXnLoZrZ1LVDsPTFiUMCxB0P+NYMdTR9Jat6KUs2ugwkeY2HZ8Hx OyGM6871dLPRZZvqZMSZKtcebTzZ+0+R7ciPNDJwn6w2ZiWMDfL0q0s0pcIePNdu 3td7tWFPVWJdwQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:59:16 2025 by rpki-client