This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json) Hash identifier: sKDEzthPKJxBYm9aWZyKap8msZgWU/1qasKFPfv2EoM= Subject key identifier: 0B:E7:00:AC:B8:3F:AF:21:E1:63:2E:BD:BD:F6:91:8C:E8:26:F7:FE Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac Certificate serial: 019B1CBC903A7A178C0FAC1B5282C6ABF3B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft Manifest number: 07F3 Signing time: Sun 14 Dec 2025 12:01:18 +0000 Manifest this update: Sun 14 Dec 2025 12:01:18 +0000 Manifest next update: Mon 15 Dec 2025 12:01:18 +0000 Files and hashes: 1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=) 2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: rMpLg5P/R/BKNpKD/UJbq/eO4ceSt5x+LjT2QAkkFCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:90:3a:7a:17:8c:0f:ac:1b:52:82:c6:ab:f3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac Validity Not Before: Dec 14 12:01:18 2025 GMT Not After : Dec 15 12:01:18 2025 GMT Subject: CN=0be700acb83faf21e1632ebdbdf6918ce826f7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:1f:58:bb:fb:93:77:ae:3f:dc:0a:9b:c5: 85:b4:b5:a1:37:a0:46:ca:c9:f4:22:eb:71:23:68: db:12:d0:f2:6c:2c:df:19:c2:d5:e0:a9:94:76:18: 7c:7c:ce:9d:f2:f4:2b:c6:7b:7b:55:17:d6:00:93: 47:40:11:fb:ac:e8:7f:49:51:bb:d3:b3:06:99:35: c9:96:e6:a4:38:d9:eb:2e:eb:7a:f9:63:a8:38:85: cf:de:cc:fe:a6:c3:e7:42:9a:83:de:be:c6:35:14: 48:d1:6c:ff:9b:d3:d9:2a:de:46:09:38:01:9f:42: c2:93:99:9c:0d:41:3c:ca:d3:47:d0:5c:70:15:9f: 39:4e:70:82:de:58:35:ed:72:81:aa:fc:57:09:b8: ff:3a:6e:2c:9b:98:c6:d8:2a:e8:11:16:13:d8:6d: f9:03:0b:89:ce:53:0c:02:20:7d:28:ba:c6:ba:9e: a3:5a:fa:d3:9b:b9:91:10:4b:7b:74:52:0e:1e:fd: 0f:a1:40:b2:5a:26:8b:fc:bf:42:fb:b9:77:d9:d4: 43:f7:1f:8f:32:02:3d:70:01:bb:c9:d1:f8:32:4b: 4f:71:cc:25:b9:65:04:fe:3b:1b:dd:02:17:96:0f: ee:4c:a2:be:4c:5b:a4:91:f9:61:78:3e:a7:6b:e1: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E7:00:AC:B8:3F:AF:21:E1:63:2E:BD:BD:F6:91:8C:E8:26:F7:FE X509v3 Authority Key Identifier: keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:d8:b2:f1:65:ee:0e:8f:26:7b:b4:7a:74:ff:68:b1:18: 45:63:2a:91:98:5f:1c:d9:19:ce:cc:f3:27:25:ee:46:6f:f1: 05:4f:77:f8:fe:1e:be:42:0a:46:b4:bc:26:0b:37:8e:33:42: f2:b1:6d:e0:2b:70:85:6f:40:8d:76:d4:33:58:f8:cd:ef:4a: 3d:c7:94:14:20:93:45:31:e3:c8:e3:f4:94:a7:d3:39:45:9c: d4:a7:4f:be:cc:d7:38:03:09:ac:9a:de:2d:ad:c8:d9:18:d0: 51:1d:2b:98:7c:f0:9e:27:3f:f6:18:6e:60:6e:de:33:e7:37: 00:0f:52:2d:56:82:8c:1e:10:6e:1e:27:f2:01:1b:ea:c0:45: bf:f5:ba:85:68:5f:10:4d:cd:c1:3d:3e:93:ee:b1:b5:1f:2d: 9d:50:dc:64:9d:9b:d7:a1:cd:cf:c4:13:a2:ca:a0:c7:06:9a: f2:74:29:4f:55:c9:3e:ae:ab:10:aa:ea:96:60:7a:2c:b0:2d: 97:b8:fa:73:8b:00:be:99:4e:0d:a0:a2:9a:96:cb:fc:7e:90: 99:2b:ee:bf:8a:2f:59:f0:27:10:a2:35:0f:82:cc:f0:a3:3b: 02:d8:75:d9:22:92:04:82:bc:98:62:a9:18:12:8b:db:7b:40: 1f:78:6d:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvJA6eheMD6wbUoLGq/O3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NzY1NTY5MDIxZThkYjQ3OWNiZDY0YTVhMGIyYmFmYmUy YThlYWMwHhcNMjUxMjE0MTIwMTE4WhcNMjUxMjE1MTIwMTE4WjAzMTEwLwYDVQQD EygwYmU3MDBhY2I4M2ZhZjIxZTE2MzJlYmRiZGY2OTE4Y2U4MjZmN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb8fWLv7k3euP9wKm8WFtLWhN6BG ysn0IutxI2jbEtDybCzfGcLV4KmUdhh8fM6d8vQrxnt7VRfWAJNHQBH7rOh/SVG7 07MGmTXJluakONnrLut6+WOoOIXP3sz+psPnQpqD3r7GNRRI0Wz/m9PZKt5GCTgB n0LCk5mcDUE8ytNH0FxwFZ85TnCC3lg17XKBqvxXCbj/Om4sm5jG2CroERYT2G35 AwuJzlMMAiB9KLrGup6jWvrTm7mREEt7dFIOHv0PoUCyWiaL/L9C+7l32dRD9x+P MgI9cAG7ydH4MktPccwluWUE/jsb3QIXlg/uTKK+TFukkflheD6na+HNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvnAKy4P68h4WMuvb32kYzoJvf+MB8GA1UdIwQY MBaAFMl2VWkCHo20ecvWSloLK6++Ko6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDct ZjQ4NGRhOGU2N2MzLzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni84NjIzMjAtYzkzOC00NzUxLWFkMDctZjQ4NGRhOGU2N2Mz LzEveVhaVmFRSWVqYlI1eTlaS1dnc3JyNzRxanF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOTYsvFl 7g6PJnu0enT/aLEYRWMqkZhfHNkZzszzJyXuRm/xBU93+P4evkIKRrS8Jgs3jjNC 8rFt4CtwhW9AjXbUM1j4ze9KPceUFCCTRTHjyOP0lKfTOUWc1KdPvszXOAMJrJre La3I2RjQUR0rmHzwnic/9hhuYG7eM+c3AA9SLVaCjB4Qbh4n8gEb6sBFv/W6hWhf EE3NwT0+k+6xtR8tnVDcZJ2b16HNz8QTosqgxwaa8nQpT1XJPq6rEKrqlmB6LLAt l7j6c4sAvplODaCimpbL/H6QmSvuv4ovWfAnEKI1D4LM8KM7Ath12SKSBIK8mGKp GBKL23tAH3htfQ== -----END CERTIFICATE-----Generated at Sun Dec 14 14:37:41 2025 by rpki-client