This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft File: YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json) Hash identifier: 7merT2uJknjr1EnY3lGtzxeblXjxzYYxR4NWuoyyCMw= Subject key identifier: 4D:67:85:93:A8:25:05:E9:58:13:D2:DD:58:70:CF:E6:12:E5:46:7F Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1 Certificate issuer: /CN=618855635e4794f5878e3b985fed8935ae06c5a1 Certificate serial: 019B262D0B59920126D811305CA08EED1AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 08:00:44 +0000 Manifest this update: Tue 16 Dec 2025 08:00:44 +0000 Manifest next update: Wed 17 Dec 2025 08:00:44 +0000 Files and hashes: 1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=) 2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: XWJB8UvPOjODy7Rcmc+Phi7AG0d9lFkJHoYdwhJTYUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:0b:59:92:01:26:d8:11:30:5c:a0:8e:ed:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1 Validity Not Before: Dec 16 08:00:44 2025 GMT Not After : Dec 17 08:00:44 2025 GMT Subject: CN=4d678593a82505e95813d2dd5870cfe612e5467f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:8a:d1:e2:bf:b8:30:76:8b:42:9e:22:bb: e3:41:bb:95:c3:6a:37:6a:1d:60:45:c7:82:7a:f0: b6:87:0c:26:f4:05:eb:a5:7d:ea:cc:4e:ff:f8:6c: f2:e2:ad:e8:25:58:72:45:c5:4e:05:11:d9:c0:55: b8:18:8f:30:6d:88:dc:5c:a5:3d:ee:7c:7f:09:e1: 27:0b:63:07:f1:0a:17:ff:92:86:fb:d5:f0:c5:6f: b5:83:d2:65:f3:97:22:34:b1:5d:24:be:0f:16:e2: a9:b7:b4:8f:5e:37:f9:60:57:23:62:5c:77:61:df: 4d:ac:38:76:49:bd:e2:bc:80:98:d7:de:2b:c9:7a: 5f:d5:25:e5:d5:48:df:61:0b:ce:e6:ca:b7:68:d7: 54:68:57:a8:61:18:a7:b9:dd:97:6a:be:3a:83:07: 38:5b:f4:8d:bf:47:a7:34:15:94:bb:6b:a0:fb:c7: 96:b9:c8:72:2a:64:01:b4:d2:19:44:8b:3f:50:72: 01:79:9a:57:bd:84:6c:b7:a4:38:e3:a0:0e:42:f0: 33:b6:ca:85:b6:db:4c:ec:05:d0:e2:63:c8:f8:c7: 0e:41:7f:6f:c6:d6:d9:a7:95:68:14:09:09:0f:9a: 8c:34:e1:2c:9e:24:3c:f6:95:ee:0c:1d:9a:6a:12: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:67:85:93:A8:25:05:E9:58:13:D2:DD:58:70:CF:E6:12:E5:46:7F X509v3 Authority Key Identifier: keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:48:a3:a2:35:93:24:06:06:3e:0c:e4:5d:67:d9:4f:e0:63: a8:2e:0a:6a:00:1d:2d:ec:ad:f7:9d:7d:6a:38:a1:08:63:de: 45:f4:bc:76:25:f0:14:d8:8a:fd:05:b4:67:b9:94:f5:e1:b2: 7b:70:d9:23:a2:a0:e4:50:71:6a:9c:1a:df:72:67:24:db:76: f9:94:a0:16:8e:5e:4b:eb:68:c2:81:82:4e:28:35:5e:75:f6: d8:5c:ee:95:6c:9b:a6:5f:0a:34:c3:e4:68:61:df:c9:a9:f4: 45:ad:96:8e:13:35:5f:29:16:a0:bb:2a:f9:e3:32:ff:78:16: fb:ac:f9:9f:f6:90:48:86:62:5a:aa:b6:66:44:59:ce:70:4d: 3e:0d:9a:99:df:19:d4:f3:56:72:aa:d0:21:41:cb:ea:90:7b: 6e:aa:60:59:78:28:97:66:b1:c3:bd:6e:53:38:0c:74:82:ca: 4e:47:75:ff:d0:29:f9:39:4c:6b:a4:80:77:e6:1d:8a:25:f3: a6:b2:81:7b:f2:18:f7:91:26:c9:e7:82:cf:78:c7:e2:1c:a3: 28:e4:ba:9e:9f:18:55:f5:99:f1:25:77:09:93:98:05:df:8a: e8:7d:67:d4:5f:e6:3b:0b:16:21:f0:2b:0a:03:4c:51:25:3a: b3:56:02:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLQtZkgEm2BEwXKCO7RqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw NmM1YTEwHhcNMjUxMjE2MDgwMDQ0WhcNMjUxMjE3MDgwMDQ0WjAzMTEwLwYDVQQD Eyg0ZDY3ODU5M2E4MjUwNWU5NTgxM2QyZGQ1ODcwY2ZlNjEyZTU0NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbSK0eK/uDB2i0KeIrvjQbuVw2o3 ah1gRceCevC2hwwm9AXrpX3qzE7/+Gzy4q3oJVhyRcVOBRHZwFW4GI8wbYjcXKU9 7nx/CeEnC2MH8QoX/5KG+9XwxW+1g9Jl85ciNLFdJL4PFuKpt7SPXjf5YFcjYlx3 Yd9NrDh2Sb3ivICY194ryXpf1SXl1UjfYQvO5sq3aNdUaFeoYRinud2Xar46gwc4 W/SNv0enNBWUu2ug+8eWuchyKmQBtNIZRIs/UHIBeZpXvYRst6Q446AOQvAztsqF tttM7AXQ4mPI+McOQX9vxtbZp5VoFAkJD5qMNOEsniQ89pXuDB2aahLD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1nhZOoJQXpWBPS3Vhwz+YS5UZ/MB8GA1UdIwQY MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUijojWT JAYGPgzkXWfZT+BjqC4KagAdLeyt9519ajihCGPeRfS8diXwFNiK/QW0Z7mU9eGy e3DZI6Kg5FBxapwa33JnJNt2+ZSgFo5eS+towoGCTig1XnX22FzulWybpl8KNMPk aGHfyan0Ra2WjhM1XykWoLsq+eMy/3gW+6z5n/aQSIZiWqq2ZkRZznBNPg2amd8Z 1PNWcqrQIUHL6pB7bqpgWXgol2axw71uUzgMdILKTkd1/9Ap+TlMa6SAd+YdiiXz prKBe/IY95EmyeeCz3jH4hyjKOS6np8YVfWZ8SV3CZOYBd+K6H1n1F/mOwsWIfAr CgNMUSU6s1YCXw== -----END CERTIFICATE-----Generated at Tue Dec 16 14:23:18 2025 by rpki-client