This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft File: YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json) Hash identifier: cqI1npGhxYBOO3qbM0V0qvIVw1RdZBvIZwLmgFs9XCg= Subject key identifier: 5B:4C:8A:7C:33:78:5D:51:1C:0C:1B:6E:E1:F5:B4:0B:25:E6:B8:D3 Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24 Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224 Certificate serial: 019B1CBC8B05F3AF3831828D7527F11226E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft Manifest number: 133A Signing time: Sun 14 Dec 2025 12:01:16 +0000 Manifest this update: Sun 14 Dec 2025 12:01:16 +0000 Manifest next update: Mon 15 Dec 2025 12:01:16 +0000 Files and hashes: 1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: srXc7vnFUJnS3Yy/m5hNon8bDzHUvjy1F9BjSR6V3JE=) 2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:8b:05:f3:af:38:31:82:8d:75:27:f1:12:26:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224 Validity Not Before: Dec 14 12:01:16 2025 GMT Not After : Dec 15 12:01:16 2025 GMT Subject: CN=5b4c8a7c33785d511c0c1b6ee1f5b40b25e6b8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:23:52:ba:92:dd:cc:fe:47:92:c2:7c:4f: cd:33:e4:32:ad:6d:4d:3e:0b:33:80:8a:d3:71:e1: 91:42:e1:e2:1a:e2:e9:47:b4:35:df:d5:d0:dc:43: fc:00:6a:d6:15:27:3f:f4:79:e0:fb:a7:fd:ec:7a: 86:e8:84:36:fc:a6:47:7c:38:94:9b:52:8b:8a:f9: 36:6c:44:ab:36:b1:1e:00:10:a1:cb:23:f0:6e:18: b5:4b:94:be:c7:28:92:28:8b:a5:7a:55:3e:c6:97: 46:f1:3b:e9:3a:fb:7a:c3:61:3c:e1:22:78:ff:12: 5d:df:12:60:39:1c:dd:37:fb:01:f5:f0:98:a2:70: d8:b7:86:ba:b7:a6:f8:b1:95:ec:62:48:cb:e7:7d: e7:83:5d:9a:af:c6:cb:61:f3:a8:6c:24:62:a5:de: 64:0b:19:44:61:77:86:ed:e0:fc:11:1a:99:36:3e: 42:b9:64:b9:5b:92:31:5d:10:d9:2d:f4:c4:ac:86: 98:fd:a1:6c:79:f0:bf:af:3c:ce:d6:b1:01:e0:31: 0e:c6:b1:0b:44:c8:b0:7d:8d:c1:da:86:39:e8:57: 18:d2:88:d4:c6:22:c7:dc:66:f5:fb:e8:b6:0f:35: e1:be:d6:17:47:ac:7f:94:e2:74:c3:16:ab:37:34: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:8A:7C:33:78:5D:51:1C:0C:1B:6E:E1:F5:B4:0B:25:E6:B8:D3 X509v3 Authority Key Identifier: keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:d6:e6:8b:84:07:8c:8b:78:67:81:9d:d7:d9:c1:59:c9: 1d:df:8e:d0:1e:86:07:04:bc:1f:e2:04:59:a2:d1:ee:d9:2e: 5b:1a:6d:e2:8f:5e:58:af:c0:48:f5:c5:40:1f:bd:fe:75:36: 2c:a1:8e:44:10:90:15:51:a1:b7:92:21:fd:0f:21:13:12:02: fa:24:6c:04:ea:5d:a0:ae:9f:e8:d5:a3:c7:03:0b:35:2d:eb: e5:30:bb:21:bf:d8:b0:11:4e:dd:ec:84:83:80:35:d4:37:52: fd:4a:0d:79:98:13:bb:4f:27:e5:ae:ee:c5:24:3b:e0:da:2a: 90:bf:26:b9:f6:92:e9:e7:ee:54:7a:1f:e1:2b:49:09:1c:cd: db:a4:11:e1:f3:21:22:5e:63:4d:98:42:af:a6:1d:07:3a:33: 70:d4:ca:cc:5a:b6:1e:97:c3:fb:1c:0e:3e:fb:8b:d9:fc:02: d5:ef:9f:d6:f4:8d:1c:87:6b:eb:3d:4b:50:7d:be:82:2c:71: e3:a8:e0:3a:5b:17:54:e9:9e:90:78:e8:f1:b1:40:ff:9c:c2: 9c:a7:ba:d9:20:5e:89:13:fc:a7:b6:30:1b:11:22:fa:b7:f3: e4:12:ab:cd:86:16:11:f9:9d:f9:00:dd:39:b9:36:3f:b5:e5: fb:80:47:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvIsF8684MYKNdSfxEibpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh MTkyMjQwHhcNMjUxMjE0MTIwMTE2WhcNMjUxMjE1MTIwMTE2WjAzMTEwLwYDVQQD Eyg1YjRjOGE3YzMzNzg1ZDUxMWMwYzFiNmVlMWY1YjQwYjI1ZTZiOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdQjUrqS3cz+R5LCfE/NM+QyrW1N PgszgIrTceGRQuHiGuLpR7Q139XQ3EP8AGrWFSc/9Hng+6f97HqG6IQ2/KZHfDiU m1KLivk2bESrNrEeABChyyPwbhi1S5S+xyiSKIulelU+xpdG8TvpOvt6w2E84SJ4 /xJd3xJgORzdN/sB9fCYonDYt4a6t6b4sZXsYkjL533ng12ar8bLYfOobCRipd5k CxlEYXeG7eD8ERqZNj5CuWS5W5IxXRDZLfTErIaY/aFsefC/rzzO1rEB4DEOxrEL RMiwfY3B2oY56FcY0ojUxiLH3Gb1++i2DzXhvtYXR6x/lOJ0wxarNzTqvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtMinwzeF1RHAwbbuH1tAsl5rjTMB8GA1UdIwQY MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt YWUwNWFlMTI5MWYyLzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHfW5ouE B4yLeGeBndfZwVnJHd+O0B6GBwS8H+IEWaLR7tkuWxpt4o9eWK/ASPXFQB+9/nU2 LKGORBCQFVGht5Ih/Q8hExIC+iRsBOpdoK6f6NWjxwMLNS3r5TC7Ib/YsBFO3eyE g4A11DdS/UoNeZgTu08n5a7uxSQ74NoqkL8mufaS6efuVHof4StJCRzN26QR4fMh Il5jTZhCr6YdBzozcNTKzFq2HpfD+xwOPvuL2fwC1e+f1vSNHIdr6z1LUH2+gixx 46jgOlsXVOmekHjo8bFA/5zCnKe62SBeiRP8p7YwGxEi+rfz5BKrzYYWEfmd+QDd Obk2P7Xl+4BHUQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:48 2025 by rpki-client