This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft File: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json) Hash identifier: H8QOL+pPK9tN08ftweqrW1LsTLf0I3osI+xvkN4AuE0= Subject key identifier: E7:95:63:97:AD:4A:64:5C:90:37:01:8E:C6:CF:AF:BA:8E:86:64:70 Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E Certificate issuer: /CN=602dc2478a4bdde4c440bb58802410d2340a490e Certificate serial: 019B48B8E5E2A71FF9226CC712A9E662EACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft Manifest number: 051E Signing time: Tue 23 Dec 2025 01:00:35 +0000 Manifest this update: Tue 23 Dec 2025 01:00:35 +0000 Manifest next update: Wed 24 Dec 2025 01:00:35 +0000 Files and hashes: 1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: jK8RqDmH5vVqFsS4C6dWr/ifIxOAAiRxSPQLp+H5v0c=) 2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:e5:e2:a7:1f:f9:22:6c:c7:12:a9:e6:62:ea:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e Validity Not Before: Dec 23 01:00:35 2025 GMT Not After : Dec 24 01:00:35 2025 GMT Subject: CN=e7956397ad4a645c9037018ec6cfafba8e866470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:91:82:be:2b:3a:4b:45:f7:7b:3b:70:8e: 81:fd:4d:bb:fb:a0:0c:b0:1b:ec:23:b4:71:c3:84: a5:ce:77:c6:4b:68:37:64:c5:17:31:a3:79:f3:1b: 75:0f:17:7b:5c:e8:29:de:1a:eb:6e:9a:04:42:39: d6:0c:7e:69:6f:9d:e9:c7:eb:4a:fa:2b:b1:4e:b5: 59:fb:8d:24:26:43:74:7e:57:35:0a:a4:84:d4:c6: 8b:2e:3a:42:cd:be:bb:46:15:20:e7:9d:9f:0b:13: 0e:af:53:a5:07:0f:65:ea:8d:4a:4a:cc:38:26:27: 77:ee:8e:60:7f:2f:3a:71:d8:cd:40:51:5d:97:fc: 81:27:84:84:ba:cf:df:50:a1:17:9a:e0:6c:bd:54: a8:ab:63:cc:87:78:b5:72:8f:6d:c8:7d:00:f3:24: 9a:54:a0:fe:15:2c:5e:c2:c5:1f:1c:73:d1:d4:8b: a6:0d:c5:f9:9b:7a:3c:9a:48:bd:5d:7a:d1:58:17: 47:f3:b7:63:12:ca:1d:24:1b:3b:5a:ae:04:9f:88: 44:04:c2:a6:6c:ed:bc:e2:9a:e0:30:77:80:70:3b: d3:c1:bc:cc:6c:db:c1:88:34:96:54:9d:3f:1a:d8: 07:a8:21:ba:15:61:94:6f:4a:a5:0f:a3:6c:52:9e: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:95:63:97:AD:4A:64:5C:90:37:01:8E:C6:CF:AF:BA:8E:86:64:70 X509v3 Authority Key Identifier: keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:63:3a:04:45:08:e7:ac:05:3a:99:e3:3e:8f:c1:7b:1f:dd: bc:05:c4:47:19:ab:0d:40:41:1d:3f:bc:02:5f:74:e3:02:fe: 7c:5e:da:23:d1:d5:27:c6:fb:c5:8f:b0:c5:b1:d3:aa:74:b0: ed:a9:19:7d:19:10:d8:ec:38:56:2a:b4:5f:b2:80:f3:3b:38: b7:8b:a5:d3:1e:25:36:05:7a:a3:27:35:30:1d:c3:ba:1c:d2: d8:27:62:d7:b3:bd:3a:55:7c:7e:15:fd:57:9f:b4:10:d6:0f: 29:4e:39:01:f5:17:e3:6d:01:36:60:51:61:87:7a:30:c5:03: 9c:ba:26:69:86:29:66:4a:b2:27:75:06:53:7d:00:68:b2:dc: 99:8f:87:65:c4:1b:1d:3d:f5:5a:48:76:cc:9e:0e:be:14:ee: 82:25:88:eb:f1:f5:b6:26:ad:a1:fd:cd:2d:fc:32:16:6b:d1: c0:1d:a2:07:40:dc:b5:45:68:c4:04:cf:64:d8:46:ee:4e:e9: 9a:99:3e:f8:86:65:0d:c6:ca:4c:40:96:b6:d6:22:17:c3:80: dd:d6:8c:27:f5:fe:4b:a9:2e:b5:25:ac:49:3b:95:5c:79:82: ef:06:58:7b:28:1f:05:99:0a:72:ff:97:6a:0c:5b:92:ac:03: 79:c9:4c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuOXipx/5ImzHEqnmYurMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMmRjMjQ3OGE0YmRkZTRjNDQwYmI1ODgwMjQxMGQyMzQw YTQ5MGUwHhcNMjUxMjIzMDEwMDM1WhcNMjUxMjI0MDEwMDM1WjAzMTEwLwYDVQQD EyhlNzk1NjM5N2FkNGE2NDVjOTAzNzAxOGVjNmNmYWZiYThlODY2NDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA066Rgr4rOktF93s7cI6B/U27+6AM sBvsI7Rxw4SlznfGS2g3ZMUXMaN58xt1Dxd7XOgp3hrrbpoEQjnWDH5pb53px+tK +iuxTrVZ+40kJkN0flc1CqSE1MaLLjpCzb67RhUg552fCxMOr1OlBw9l6o1KSsw4 Jid37o5gfy86cdjNQFFdl/yBJ4SEus/fUKEXmuBsvVSoq2PMh3i1co9tyH0A8ySa VKD+FSxewsUfHHPR1IumDcX5m3o8mki9XXrRWBdH87djEsodJBs7Wq4En4hEBMKm bO284prgMHeAcDvTwbzMbNvBiDSWVJ0/GtgHqCG6FWGUb0qlD6NsUp4FIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeVY5etSmRckDcBjsbPr7qOhmRwMB8GA1UdIwQY MBaAFGAtwkeKS93kxEC7WIAkENI0CkkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMt NWY3MTNkZmZmMTE0LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iODEzOTAtMTAyMy00NTBkLThhZDMtNWY3MTNkZmZmMTE0 LzEvWUMzQ1I0cEwzZVRFUUx0WWdDUVEwalFLU1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWM6BEUI 56wFOpnjPo/Bex/dvAXERxmrDUBBHT+8Al904wL+fF7aI9HVJ8b7xY+wxbHTqnSw 7akZfRkQ2Ow4Viq0X7KA8zs4t4ul0x4lNgV6oyc1MB3DuhzS2Cdi17O9OlV8fhX9 V5+0ENYPKU45AfUX420BNmBRYYd6MMUDnLomaYYpZkqyJ3UGU30AaLLcmY+HZcQb HT31Wkh2zJ4OvhTugiWI6/H1tiatof3NLfwyFmvRwB2iB0DctUVoxATPZNhG7k7p mpk++IZlDcbKTECWttYiF8OA3daMJ/X+S6kutSWsSTuVXHmC7wZYeygfBZkKcv+X agxbkqwDeclMCQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:55:05 2025 by rpki-client