This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json) Hash identifier: Lqk4lXdi55lOfKbnOWFwJNYPVmzwX4RQ9LWbu2a3QxM= Subject key identifier: DD:61:2F:49:A3:C1:3E:CB:53:84:9A:F4:4B:53:31:56:6D:58:0A:F8 Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5 Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5 Certificate serial: 019B34C43DA207835C3C16C09874F48037F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft Manifest number: 10ED Signing time: Fri 19 Dec 2025 04:00:34 +0000 Manifest this update: Fri 19 Dec 2025 04:00:34 +0000 Manifest next update: Sat 20 Dec 2025 04:00:34 +0000 Files and hashes: 1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=) 2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=) 3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=) 4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: b77yovmKbEQFIRoK26p9vMcmaOrfeCDNPx600a7tO8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:3d:a2:07:83:5c:3c:16:c0:98:74:f4:80:37:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5 Validity Not Before: Dec 19 04:00:34 2025 GMT Not After : Dec 20 04:00:34 2025 GMT Subject: CN=dd612f49a3c13ecb53849af44b5331566d580af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:25:6a:0e:a7:36:48:9d:dc:57:89:83:aa: 87:68:c7:b1:a4:17:2e:ad:4a:63:3a:fd:10:f4:04: cb:66:d8:cb:5b:1c:c0:65:c5:45:33:76:46:1c:cb: 7b:2b:d1:d5:61:a8:f6:f7:a5:f4:9c:dc:f5:75:3a: a8:26:5f:4c:fe:9b:51:b5:da:c0:da:ad:62:c0:2f: 16:69:20:f1:b5:8a:d4:cc:36:ae:c5:b6:cf:12:1d: cd:53:14:26:f5:cf:37:9b:be:76:57:a3:d5:1b:00: fd:c4:65:71:0f:01:86:0b:98:b6:47:25:0b:8d:90: 3a:9d:9a:90:9e:35:ab:26:46:ea:c9:96:9e:dc:e5: 55:28:41:03:e8:19:ad:9c:ab:47:46:4f:89:8c:5d: ba:ce:af:75:55:de:f4:50:4c:9d:ff:64:c3:fa:93: db:8c:94:50:97:1e:e9:72:62:74:e4:72:b9:9e:16: c0:d0:0b:d5:51:9f:b5:40:30:20:e5:34:d7:ec:f6: 72:8e:78:4f:a3:da:f7:41:17:4e:44:05:41:10:6c: 3c:fe:69:71:5a:12:30:02:bf:4e:30:6b:f6:52:22: 66:f7:e7:54:3c:26:5b:60:ac:05:4d:f9:34:38:25: d7:c1:72:fd:c7:67:51:cc:ce:13:19:f9:f1:76:6d: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:2F:49:A3:C1:3E:CB:53:84:9A:F4:4B:53:31:56:6D:58:0A:F8 X509v3 Authority Key Identifier: keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:18:3b:b1:ad:f3:0f:b1:89:57:a3:43:fb:63:d1:cc:4a:33: 7d:e6:f8:62:46:79:ea:ed:55:32:27:67:e8:62:16:0a:d8:ec: 2e:0a:4a:cd:ef:25:2f:f2:9a:6c:dc:bc:61:68:52:87:1a:8c: 0e:18:cd:1d:3f:5a:70:58:26:e9:07:60:0e:bb:db:7a:50:a3: 31:11:87:1f:17:dc:81:ef:2e:4b:c5:f4:c0:1f:de:af:0f:b2: b8:73:aa:3d:99:00:9d:4a:f4:87:69:94:f0:8f:cd:17:88:56: 94:8e:fe:41:db:11:53:8a:5f:74:98:2e:3e:7d:1d:59:8e:98: ce:23:95:52:37:68:af:2a:66:e6:3e:3f:0b:f2:c2:1e:ed:18: 23:88:aa:6e:1a:cc:4e:23:7f:aa:49:de:c0:66:51:55:b6:09: 78:dd:53:8b:51:d0:ef:93:6e:16:c7:cf:b0:c5:9a:75:a2:53: 28:bf:58:27:c2:24:53:dd:05:70:45:41:5c:32:ec:4d:01:c2: f7:30:a2:9a:8d:88:a2:8c:2b:c8:ad:fa:e7:4a:da:2c:30:2e: c4:1e:dd:c9:80:2e:8e:93:fd:02:95:a0:e7:0e:ce:ad:21:37: dd:39:9d:c4:bd:ae:18:33:e7:11:94:a6:19:de:b6:b0:1a:c0: 3d:ee:1b:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xD2iB4NcPBbAmHT0gDfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3 Nzc3YjUwHhcNMjUxMjE5MDQwMDM0WhcNMjUxMjIwMDQwMDM0WjAzMTEwLwYDVQQD EyhkZDYxMmY0OWEzYzEzZWNiNTM4NDlhZjQ0YjUzMzE1NjZkNTgwYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8olag6nNkid3FeJg6qHaMexpBcu rUpjOv0Q9ATLZtjLWxzAZcVFM3ZGHMt7K9HVYaj296X0nNz1dTqoJl9M/ptRtdrA 2q1iwC8WaSDxtYrUzDauxbbPEh3NUxQm9c83m752V6PVGwD9xGVxDwGGC5i2RyUL jZA6nZqQnjWrJkbqyZae3OVVKEED6BmtnKtHRk+JjF26zq91Vd70UEyd/2TD+pPb jJRQlx7pcmJ05HK5nhbA0AvVUZ+1QDAg5TTX7PZyjnhPo9r3QRdORAVBEGw8/mlx WhIwAr9OMGv2UiJm9+dUPCZbYKwFTfk0OCXXwXL9x2dRzM4TGfnxdm0qlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1hL0mjwT7LU4Sa9EtTMVZtWAr4MB8GA1UdIwQY MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3 LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBg7sa3z D7GJV6ND+2PRzEozfeb4YkZ56u1VMidn6GIWCtjsLgpKze8lL/KabNy8YWhShxqM DhjNHT9acFgm6QdgDrvbelCjMRGHHxfcge8uS8X0wB/erw+yuHOqPZkAnUr0h2mU 8I/NF4hWlI7+QdsRU4pfdJguPn0dWY6YziOVUjdorypm5j4/C/LCHu0YI4iqbhrM TiN/qknewGZRVbYJeN1Ti1HQ75NuFsfPsMWadaJTKL9YJ8IkU90FcEVBXDLsTQHC 9zCimo2IoowryK3650raLDAuxB7dyYAujpP9ApWg5w7OrSE33TmdxL2uGDPnEZSm Gd62sBrAPe4b8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:23:47 2025 by rpki-client