This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft File: ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft (raw, json) Hash identifier: o7CPIXAqQg7Phtsmlu4H8SfEgaJbiiWAB1ipb8SiQPQ= Subject key identifier: 1D:95:EF:C9:81:6D:BC:C2:36:53:40:A9:0F:16:10:AA:5E:10:2A:9A Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2 Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2 Certificate serial: 019B593EED56C1D82AF752ED5953304140A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft Manifest number: 013B Signing time: Fri 26 Dec 2025 06:00:54 +0000 Manifest this update: Fri 26 Dec 2025 06:00:54 +0000 Manifest next update: Sat 27 Dec 2025 06:00:54 +0000 Files and hashes: 1: pPj0AN_LbIG5edwMDA59ThE3RKk.roa (hash: tv9SuA0cMfqr0L1nuGX2Myng2miGRH68D2F/qwMX0QU=) 2: ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl (hash: awF3d02BTu6Ht4w5aRnmQ4ShSCEDG4llfrvSHRcNr4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:ed:56:c1:d8:2a:f7:52:ed:59:53:30:41:40:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2 Validity Not Before: Dec 26 06:00:54 2025 GMT Not After : Dec 27 06:00:54 2025 GMT Subject: CN=1d95efc9816dbcc2365340a90f1610aa5e102a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:82:f7:00:28:f8:a2:4c:c4:be:13:d5:38: e7:4c:e3:cc:a7:6f:7b:fe:c3:af:2f:ae:71:dc:9d: 02:17:05:33:29:42:4d:21:cd:dd:5e:ae:09:8d:72: 82:e9:77:d2:77:fe:1e:61:da:74:e3:c2:1c:9a:c0: b9:10:32:1f:86:9f:3a:b3:40:2d:6d:c9:4f:09:d1: 0e:a6:14:2e:84:13:4f:c3:f0:9d:12:b3:a0:54:ce: 25:8d:29:09:f0:a8:2d:5a:a0:85:a6:40:7b:71:ea: 7a:b1:86:a5:f0:e4:b2:4e:00:82:83:f1:3c:90:8d: 76:9c:6f:55:20:58:de:c1:23:d1:53:30:55:9c:75: 3a:2a:f4:f1:3e:ff:22:56:75:ae:6e:4a:39:47:27: 7c:05:aa:d8:2f:a4:ae:ac:a7:f2:6a:09:94:59:90: fe:0d:61:2f:dd:c1:10:99:3c:07:81:61:b6:fe:5b: f3:76:8a:49:75:72:c0:91:7b:46:9b:dc:f0:f7:c7: f1:d6:c4:9c:ce:79:31:00:af:cc:ab:d2:d8:b4:3a: 76:dc:84:30:a2:fe:a8:db:9c:2c:7c:59:f5:56:96: fe:4c:b0:ff:16:35:14:08:1c:55:8d:6a:00:ff:44: c4:00:c7:83:f3:00:21:75:62:57:68:8d:94:10:81: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:95:EF:C9:81:6D:BC:C2:36:53:40:A9:0F:16:10:AA:5E:10:2A:9A X509v3 Authority Key Identifier: keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:f8:ce:1c:62:a2:10:a9:14:8c:d0:a1:b2:f0:7e:ec:47:16: 78:a8:31:f0:83:47:f6:e1:64:70:70:0f:ba:7d:8c:d6:05:ff: 1c:56:5c:b0:bc:32:0e:ba:6d:fa:7a:aa:6c:7f:ac:99:01:1e: 15:11:3b:11:d5:bc:d2:05:ab:7f:a6:48:45:b0:73:d0:a1:c2: 35:e9:18:bf:2c:6f:dc:a5:2a:95:b4:fd:80:2e:33:62:00:6e: f7:ae:46:fc:1e:2f:6c:b8:2a:77:e9:b1:61:65:96:62:2c:ef: df:ac:b0:8d:68:dc:13:37:b8:0d:0d:8d:b4:84:17:19:ff:6a: 71:e6:01:ef:be:22:49:13:22:16:95:38:5a:ec:cc:94:5b:1a: e2:61:22:a2:2d:8e:27:74:e5:72:3b:4e:86:e1:46:97:1a:bc: fe:9b:be:42:7c:0f:f0:43:95:9d:60:84:91:14:e6:ce:43:81: 7e:a3:87:5c:eb:ac:aa:3a:5e:6b:7a:ab:a0:2a:a2:d1:5e:09: 82:9a:5e:b4:1e:b3:a0:fa:9a:64:0b:e1:21:97:2e:c2:f3:65: fc:3d:e9:69:5d:e4:94:40:e2:8a:5f:e8:fe:7a:a5:ef:f2:93: 7b:b6:19:ca:e0:28:71:f1:03:1b:b5:b0:c2:a2:80:13:bb:9d: 8f:f5:2f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPu1Wwdgq91LtWVMwQUClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzY0YzNlYTQxZTUyZGJmYWI2NDRkNzcwZjM1OGVkMDQ0 MDAzZjIwHhcNMjUxMjI2MDYwMDU0WhcNMjUxMjI3MDYwMDU0WjAzMTEwLwYDVQQD EygxZDk1ZWZjOTgxNmRiY2MyMzY1MzQwYTkwZjE2MTBhYTVlMTAyYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvOC9wAo+KJMxL4T1TjnTOPMp297 /sOvL65x3J0CFwUzKUJNIc3dXq4JjXKC6XfSd/4eYdp048IcmsC5EDIfhp86s0At bclPCdEOphQuhBNPw/CdErOgVM4ljSkJ8KgtWqCFpkB7cep6sYal8OSyTgCCg/E8 kI12nG9VIFjewSPRUzBVnHU6KvTxPv8iVnWubko5Ryd8BarYL6SurKfyagmUWZD+ DWEv3cEQmTwHgWG2/lvzdopJdXLAkXtGm9zw98fx1sScznkxAK/Mq9LYtDp23IQw ov6o25wsfFn1Vpb+TLD/FjUUCBxVjWoA/0TEAMeD8wAhdWJXaI2UEIE9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2V78mBbbzCNlNAqQ8WEKpeECqaMB8GA1UdIwQY MBaAFMnGTD6kHlLb+rZE13DzWO0EQAPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kYzhmMjctZWVlZS00MDkwLThjMjYt OGNiYThjY2RmOTgxLzEveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kYzhmMjctZWVlZS00MDkwLThjMjYtOGNiYThjY2RmOTgx LzEveWNaTVBxUWVVdHY2dGtUWGNQTlk3UVJBQV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2/jOHGKi EKkUjNChsvB+7EcWeKgx8INH9uFkcHAPun2M1gX/HFZcsLwyDrpt+nqqbH+smQEe FRE7EdW80gWrf6ZIRbBz0KHCNekYvyxv3KUqlbT9gC4zYgBu965G/B4vbLgqd+mx YWWWYizv36ywjWjcEze4DQ2NtIQXGf9qceYB774iSRMiFpU4WuzMlFsa4mEioi2O J3TlcjtOhuFGlxq8/pu+QnwP8EOVnWCEkRTmzkOBfqOHXOusqjpea3qroCqi0V4J gppetB6zoPqaZAvhIZcuwvNl/D3paV3klEDiil/o/nql7/KTe7YZyuAocfEDG7Ww wqKAE7udj/UviA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:20 2025 by rpki-client