This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft File: YUyVhYifmODHf5ts2ANhqgK91o4.mft (raw, json) Hash identifier: SGta092iG5ZpWwoOE6/m8ywPIYb3jqHuMAg5RhHbGQU= Subject key identifier: 54:EA:93:45:5E:7F:8D:6D:7D:D9:CE:73:86:4C:31:71:7D:E7:F4:6A Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Certificate serial: 019B46CA70F1735C61CC51FB1D432529BEF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft Manifest number: 1794 Signing time: Mon 22 Dec 2025 16:00:30 +0000 Manifest this update: Mon 22 Dec 2025 16:00:30 +0000 Manifest next update: Tue 23 Dec 2025 16:00:30 +0000 Files and hashes: 1: 1hMpXEk-3MWaN_1A5D8V9EPMUFk.roa (hash: CWNT05GFaywUZSs5xqqgNA+kl89pNKE3DHnIiDI2iJE=) 2: YUyVhYifmODHf5ts2ANhqgK91o4.crl (hash: Onh39zWQ7QiiIBHGhlOpPGufyaejjV5yEzBYdC1l8fY=) 3: bcjpN0aNygbCKNdyNd9ChWjBpco.roa (hash: ytkWRcO7/lHF5yygZpsyJR3V6A07JM0wAYNub17fGn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:70:f1:73:5c:61:cc:51:fb:1d:43:25:29:be:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e Validity Not Before: Dec 22 16:00:30 2025 GMT Not After : Dec 23 16:00:30 2025 GMT Subject: CN=54ea93455e7f8d6d7dd9ce73864c31717de7f46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:7c:6c:fb:c4:14:e2:5a:e8:29:36:fa:74: 82:f2:e5:6c:03:6e:64:1a:38:48:5b:db:9f:5f:40: e4:07:27:73:fc:95:bd:6e:5d:08:73:16:b2:ee:b4: ab:a6:5b:cd:2d:f2:24:12:36:d4:d9:4d:72:e1:c5: 3d:2c:0f:f7:b9:a3:e2:26:46:0e:09:04:83:11:ab: 2a:4c:8a:d6:63:cd:02:43:ef:b2:c7:b5:e8:4b:2d: fb:9f:1d:c7:1c:37:08:20:c7:dd:80:c0:c8:3b:54: 9e:d0:74:c4:75:15:af:ae:bd:4a:4b:e7:85:32:9f: 3a:32:06:89:69:70:bd:b0:be:de:e6:a6:e7:36:9c: 3c:ca:fe:92:9b:d2:c1:ee:8c:e0:f7:ae:de:c8:71: 7c:e5:0e:5a:5e:31:fe:f8:d1:e0:99:e1:d1:c0:c6: cc:83:d7:35:4f:ed:05:25:6c:0c:9d:00:d1:b5:3e: 3a:8b:34:78:30:8d:72:e0:c0:a0:00:4e:ca:07:0a: 3a:b2:43:f0:2e:bc:ee:83:04:96:45:6e:14:30:87: e6:b7:1d:a0:f2:f5:43:59:b9:3a:e7:8e:58:68:d4: 35:c4:02:2e:8f:33:8f:d1:19:82:f2:7e:8d:cc:48: 96:b3:f6:d1:f3:38:14:91:d1:da:8b:3a:4a:02:14: f7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EA:93:45:5E:7F:8D:6D:7D:D9:CE:73:86:4C:31:71:7D:E7:F4:6A X509v3 Authority Key Identifier: keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e6:9d:4a:fd:01:c7:2b:c3:37:ee:24:54:76:15:50:0a:de: 78:7a:a5:ca:af:6a:1b:d1:05:af:f4:3a:1a:69:81:04:e3:15: 6d:83:dc:83:0d:a8:87:a4:91:b6:4c:e6:9e:02:20:f5:79:a9: 75:b6:c9:49:2f:e9:2b:76:4f:d6:18:c3:2e:bb:fd:6b:2a:62: 2f:55:b9:2c:09:6e:b7:af:29:6e:e1:3f:54:68:6c:cb:e3:53: 03:76:4b:9d:9f:78:ed:84:67:41:10:7b:83:84:85:9c:11:c6: 5d:43:91:2e:de:8b:03:cf:81:b3:85:90:2e:8f:a5:68:8a:5a: 40:d5:6a:4f:87:82:a5:c9:b7:89:78:56:c6:78:c9:c8:c3:19: 9b:b7:3f:0c:2b:3c:ee:fc:a4:42:a5:86:54:41:e5:ed:e7:79: 0f:3d:d6:8e:2e:6f:a3:a6:34:4d:f2:88:0d:66:f9:cd:4d:a5: 4f:4c:ff:4b:57:c2:e8:70:32:5b:d1:ca:8b:8c:8c:f0:62:a1: 26:7c:92:5e:ca:8d:37:77:39:e0:de:22:d1:6f:a3:b0:7f:8b: fb:f3:ea:8e:ff:c8:32:53:42:91:8f:95:56:d9:33:c4:41:6b: ab:51:5f:60:98:0d:13:82:22:29:85:41:1a:d9:87:13:fd:fd: 7a:73:da:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGynDxc1xhzFH7HUMlKb7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGM5NTg1ODg5Zjk4ZTBjNzdmOWI2Y2Q4MDM2MWFhMDJi ZGQ2OGUwHhcNMjUxMjIyMTYwMDMwWhcNMjUxMjIzMTYwMDMwWjAzMTEwLwYDVQQD Eyg1NGVhOTM0NTVlN2Y4ZDZkN2RkOWNlNzM4NjRjMzE3MTdkZTdmNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPV8bPvEFOJa6Ck2+nSC8uVsA25k GjhIW9ufX0DkBydz/JW9bl0Icxay7rSrplvNLfIkEjbU2U1y4cU9LA/3uaPiJkYO CQSDEasqTIrWY80CQ++yx7XoSy37nx3HHDcIIMfdgMDIO1Se0HTEdRWvrr1KS+eF Mp86MgaJaXC9sL7e5qbnNpw8yv6Sm9LB7ozg967eyHF85Q5aXjH++NHgmeHRwMbM g9c1T+0FJWwMnQDRtT46izR4MI1y4MCgAE7KBwo6skPwLrzugwSWRW4UMIfmtx2g 8vVDWbk6545YaNQ1xAIujzOP0RmC8n6NzEiWs/bR8zgUkdHaizpKAhT3mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTqk0Vef41tfdnOc4ZMMXF95/RqMB8GA1UdIwQY MBaAFGFMlYWIn5jgx3+bbNgDYaoCvdaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjIt MGI0NTc1YjY5YzU3LzEvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iYjZmMzgtMjM2OS00NDZmLTg4ZjItMGI0NTc1YjY5YzU3 LzEvWVV5VmhZaWZtT0RIZjV0czJBTmhxZ0s5MW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleadSv0B xyvDN+4kVHYVUAreeHqlyq9qG9EFr/Q6GmmBBOMVbYPcgw2oh6SRtkzmngIg9Xmp dbbJSS/pK3ZP1hjDLrv9aypiL1W5LAlut68pbuE/VGhsy+NTA3ZLnZ947YRnQRB7 g4SFnBHGXUORLt6LA8+Bs4WQLo+laIpaQNVqT4eCpcm3iXhWxnjJyMMZm7c/DCs8 7vykQqWGVEHl7ed5Dz3Wji5vo6Y0TfKIDWb5zU2lT0z/S1fC6HAyW9HKi4yM8GKh JnySXsqNN3c54N4i0W+jsH+L+/Pqjv/IMlNCkY+VVtkzxEFrq1FfYJgNE4IiKYVB GtmHE/39enPa3w== -----END CERTIFICATE-----Generated at Mon Dec 22 23:49:47 2025 by rpki-client