This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft File: YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json) Hash identifier: UtU8fDUzIkpyrwrPR2Dmqh1kdEfjNnh4ispcWI4anUI= Subject key identifier: 7C:0F:54:EF:E6:B0:76:BD:2D:58:F8:54:37:5B:01:A2:67:35:7E:46 Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD Certificate issuer: /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd Certificate serial: 019B33B28531AAE2642E2691224CCCCA9897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft Manifest number: 0CDE Signing time: Thu 18 Dec 2025 23:01:36 +0000 Manifest this update: Thu 18 Dec 2025 23:01:36 +0000 Manifest next update: Fri 19 Dec 2025 23:01:36 +0000 Files and hashes: 1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=) 2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: S0YubcT6ciAb/7UMtGfR29CoPpYLvrzlhsSu8E2DQOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:85:31:aa:e2:64:2e:26:91:22:4c:cc:ca:98:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd Validity Not Before: Dec 18 23:01:36 2025 GMT Not After : Dec 19 23:01:36 2025 GMT Subject: CN=7c0f54efe6b076bd2d58f854375b01a267357e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:02:6a:ad:37:99:1b:b6:af:53:e8:e5:89: a8:bc:f5:fd:cb:9c:c7:c8:07:0f:3a:25:bb:2d:ed: 52:33:a6:34:e7:81:4a:6f:c0:d2:86:25:c3:37:da: 20:b2:94:30:aa:a8:1f:12:b4:2b:78:f4:48:71:80: 7e:c5:8b:00:e0:90:6c:e0:e5:73:11:88:92:75:9a: 43:cf:c7:f8:bf:3b:0a:ab:fe:86:6e:48:c5:e8:77: 7a:a1:28:f4:a2:4a:0c:5c:14:5f:5a:fa:e9:b8:f3: 46:ea:89:31:9b:7d:2b:95:09:06:f4:04:28:7d:f6: 12:b3:07:be:a3:fb:20:9c:6b:74:aa:a7:0d:c9:f8: 61:55:ae:da:df:5c:eb:b0:80:33:22:cb:9f:3c:dd: f5:bc:5c:b0:20:12:5a:48:ce:f1:93:a2:fb:f1:b5: 08:1e:10:45:fa:09:d8:87:e7:bb:35:ae:67:89:5a: 5d:b7:1c:65:df:24:c3:5e:a8:a7:86:78:54:b6:0d: 4a:2e:60:c9:f9:a0:8c:4d:67:58:8c:ca:99:00:9d: 8f:b4:85:a6:50:56:41:29:37:39:e0:59:61:56:d6: b9:ee:57:31:5a:cb:27:7d:cd:bb:5a:32:37:0d:2b: ea:b5:b4:a1:68:ea:88:35:ab:7a:d5:a3:e4:78:a3: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0F:54:EF:E6:B0:76:BD:2D:58:F8:54:37:5B:01:A2:67:35:7E:46 X509v3 Authority Key Identifier: keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ff:4c:d8:6b:e7:a8:b0:12:5a:80:a2:f2:6e:06:ae:c7:4c: 77:85:b2:f1:10:2b:a7:f3:0d:dd:98:fa:35:88:31:7a:61:b8: be:ac:50:14:d3:aa:62:76:45:3b:df:37:bd:3b:78:30:24:e6: 0d:81:fd:85:3c:b4:81:6d:0e:96:11:54:e2:af:a5:b5:e9:08: 45:48:c3:25:a9:e1:6c:c1:05:c3:a8:5e:90:1e:1b:00:e4:dd: 2a:2d:24:9c:4e:fe:c4:f5:65:2c:f9:87:9a:79:ac:94:90:22: f4:09:3a:b4:ba:71:c4:94:af:51:3c:35:b6:ec:4d:bd:b1:bf: dc:02:5f:87:e1:b3:7b:d0:a6:5e:34:c0:fe:21:c8:cf:9a:1b: 14:d5:ea:6e:6e:ed:60:b1:c7:4a:9d:9d:f5:3a:86:8e:c4:00: 67:d8:28:0c:2c:d2:5a:f0:b6:14:93:a2:7f:7c:2a:8c:f0:de: 07:ca:dd:b2:52:0d:b4:85:88:48:67:5c:8d:f1:d8:71:ce:05: 54:10:18:65:92:13:e0:eb:24:15:f2:c8:15:3f:cd:db:18:12: 7f:a2:6e:f7:9e:8e:ca:84:dc:35:f7:7f:15:19:94:5a:fe:90: 83:d0:3a:76:9c:fb:ae:d8:4b:66:f8:47:10:07:96:11:42:f2: c2:80:b9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsoUxquJkLiaRIkzMypiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwODFmY2Y5ZWI3MGFiMGUxZmRjYWMwOWM3ZjliYjVlMDE0 YzlkYmQwHhcNMjUxMjE4MjMwMTM2WhcNMjUxMjE5MjMwMTM2WjAzMTEwLwYDVQQD Eyg3YzBmNTRlZmU2YjA3NmJkMmQ1OGY4NTQzNzViMDFhMjY3MzU3ZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUwCaq03mRu2r1Po5YmovPX9y5zH yAcPOiW7Le1SM6Y054FKb8DShiXDN9ogspQwqqgfErQrePRIcYB+xYsA4JBs4OVz EYiSdZpDz8f4vzsKq/6GbkjF6Hd6oSj0okoMXBRfWvrpuPNG6okxm30rlQkG9AQo ffYSswe+o/sgnGt0qqcNyfhhVa7a31zrsIAzIsufPN31vFywIBJaSM7xk6L78bUI HhBF+gnYh+e7Na5niVpdtxxl3yTDXqinhnhUtg1KLmDJ+aCMTWdYjMqZAJ2PtIWm UFZBKTc54FlhVta57lcxWssnfc27WjI3DSvqtbShaOqINat61aPkeKOT3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwPVO/msHa9LVj4VDdbAaJnNX5GMB8GA1UdIwQY MBaAFGCB/PnrcKsOH9ysCcf5u14BTJ29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9mZmQxZWQtNjliMS00OTMyLThmZDAt NzdmOWVkMTE5NWQ1LzEvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9mZmQxZWQtNjliMS00OTMyLThmZDAtNzdmOWVkMTE5NWQ1 LzEvWUlIOC1ldHdxdzRmM0t3SnhfbTdYZ0ZNbmIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiP9M2Gvn qLASWoCi8m4GrsdMd4Wy8RArp/MN3Zj6NYgxemG4vqxQFNOqYnZFO983vTt4MCTm DYH9hTy0gW0OlhFU4q+ltekIRUjDJanhbMEFw6hekB4bAOTdKi0knE7+xPVlLPmH mnmslJAi9Ak6tLpxxJSvUTw1tuxNvbG/3AJfh+Gze9CmXjTA/iHIz5obFNXqbm7t YLHHSp2d9TqGjsQAZ9goDCzSWvC2FJOif3wqjPDeB8rdslINtIWISGdcjfHYcc4F VBAYZZIT4OskFfLIFT/N2xgSf6Ju956OyoTcNfd/FRmUWv6Qg9A6dpz7rthLZvhH EAeWEULywoC50A== -----END CERTIFICATE-----Generated at Fri Dec 19 00:09:52 2025 by rpki-client