This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json) Hash identifier: Af6M+T0MSrdTnhLD36C9Cm+688a98yEJAzckAIZs/ik= Subject key identifier: 4D:9D:B0:8A:B4:00:34:A3:32:F0:8F:E5:CC:32:A0:41:86:C5:16:77 Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19 Certificate serial: 019B0E24F91F511B13A9945BF8CBB9FCB2D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft Manifest number: 0E56 Signing time: Thu 11 Dec 2025 16:01:02 +0000 Manifest this update: Thu 11 Dec 2025 16:01:02 +0000 Manifest next update: Fri 12 Dec 2025 16:01:02 +0000 Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=) 2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: Mj9fzDc7mR9fkNt0b4cI76KQGHqtq8G4+vbTT5dObLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:f9:1f:51:1b:13:a9:94:5b:f8:cb:b9:fc:b2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Validity Not Before: Dec 11 16:01:02 2025 GMT Not After : Dec 12 16:01:02 2025 GMT Subject: CN=4d9db08ab40034a332f08fe5cc32a04186c51677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:a3:8d:90:14:e3:5e:4e:5f:37:a6:81:56: ce:98:ca:b9:cf:0a:68:e4:81:80:44:b4:bd:a4:1a: 92:53:be:b9:c2:bc:5c:32:e6:83:7d:a3:76:8a:5d: e5:d5:2f:99:72:4a:1a:59:09:f4:64:2f:16:db:e4: 57:28:29:d9:5a:f5:67:7d:10:5a:10:e9:52:9a:55: c6:7a:f4:55:d1:c4:5b:62:8f:51:d3:a9:a8:23:25: bb:73:b8:eb:6b:1a:5e:5c:6a:ed:19:62:52:1f:5d: a0:04:f1:7f:a8:2a:78:86:14:05:ed:48:55:6e:f3: d2:88:2d:79:54:d9:c3:c4:d0:b2:11:63:14:be:82: e9:5d:1d:46:52:36:76:cc:84:b3:d7:23:f7:3d:fb: 3e:90:88:16:a3:6c:29:65:98:5f:ee:f5:c3:e0:72: ab:f6:41:22:43:37:00:3c:33:e7:9c:0b:6c:11:95: 46:3a:e4:b9:30:b3:ba:cb:67:3d:01:33:d9:d2:68: 63:3e:c4:d1:29:a3:e4:1a:0c:d2:35:ca:75:ee:da: e4:70:5b:92:93:97:e9:0e:09:d5:8f:24:8e:6e:ee: e1:61:3b:d9:1b:41:91:6c:a5:40:62:ee:4a:f6:1a: 5f:5d:77:c3:e0:93:0e:1c:01:43:72:da:ad:35:0e: 53:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:B0:8A:B4:00:34:A3:32:F0:8F:E5:CC:32:A0:41:86:C5:16:77 X509v3 Authority Key Identifier: keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:29:a1:c7:bb:4f:8b:98:f5:65:c6:32:a5:8d:33:29:d1:3a: 9e:e0:e9:da:9a:86:f4:d6:85:60:8a:59:98:9c:28:4d:67:2d: f9:3c:3b:88:30:78:eb:72:bd:75:43:54:ae:17:30:a7:5f:53: 6d:3c:8a:db:a7:1c:5a:08:8e:f9:1c:3a:a2:0c:69:54:82:95: 93:21:72:72:28:0e:52:cb:60:e8:ea:ef:6f:6b:e6:e5:2e:d0: a8:a7:ad:e7:82:f3:a0:d1:65:b6:46:11:ab:e9:de:b6:e4:69: 27:08:92:45:c9:86:aa:ee:30:7c:11:ea:fa:72:30:83:54:f6: 74:9b:3c:48:95:a6:7c:c0:70:c4:bd:d3:d8:73:ad:86:6f:c5: a7:89:c1:04:c4:1e:4c:a6:0f:04:30:9e:e9:75:6f:86:ee:0b: e6:aa:e7:9d:a5:f0:8e:d5:8d:9e:df:a4:f9:03:59:d9:a5:6d: 2c:e3:21:49:de:80:ba:e9:13:b6:fc:f0:1c:54:2d:56:7e:63: 6e:61:a6:d9:b2:1c:ef:2c:e3:6c:3f:c7:8f:9e:17:3d:2f:1c: 5f:01:d2:c6:89:22:78:11:3f:f4:5f:38:40:24:dc:7b:0d:08: 91:9d:3b:f8:3b:08:a2:a3:bc:9d:44:32:f1:6e:1d:2f:75:eb: bd:a3:74:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJPkfURsTqZRb+Mu5/LLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0 YTJmMTkwHhcNMjUxMjExMTYwMTAyWhcNMjUxMjEyMTYwMTAyWjAzMTEwLwYDVQQD Eyg0ZDlkYjA4YWI0MDAzNGEzMzJmMDhmZTVjYzMyYTA0MTg2YzUxNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHujjZAU415OXzemgVbOmMq5zwpo 5IGARLS9pBqSU765wrxcMuaDfaN2il3l1S+ZckoaWQn0ZC8W2+RXKCnZWvVnfRBa EOlSmlXGevRV0cRbYo9R06moIyW7c7jraxpeXGrtGWJSH12gBPF/qCp4hhQF7UhV bvPSiC15VNnDxNCyEWMUvoLpXR1GUjZ2zISz1yP3Pfs+kIgWo2wpZZhf7vXD4HKr 9kEiQzcAPDPnnAtsEZVGOuS5MLO6y2c9ATPZ0mhjPsTRKaPkGgzSNcp17trkcFuS k5fpDgnVjySObu7hYTvZG0GRbKVAYu5K9hpfXXfD4JMOHAFDctqtNQ5TRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2dsIq0ADSjMvCP5cwyoEGGxRZ3MB8GA1UdIwQY MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAymhx7tP i5j1ZcYypY0zKdE6nuDp2pqG9NaFYIpZmJwoTWct+Tw7iDB463K9dUNUrhcwp19T bTyK26ccWgiO+Rw6ogxpVIKVkyFycigOUstg6Orvb2vm5S7QqKet54LzoNFltkYR q+netuRpJwiSRcmGqu4wfBHq+nIwg1T2dJs8SJWmfMBwxL3T2HOthm/Fp4nBBMQe TKYPBDCe6XVvhu4L5qrnnaXwjtWNnt+k+QNZ2aVtLOMhSd6AuukTtvzwHFQtVn5j bmGm2bIc7yzjbD/Hj54XPS8cXwHSxokieBE/9F84QCTcew0IkZ07+DsIoqO8nUQy 8W4dL3XrvaN0Bw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:08 2025 by rpki-client