This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json) Hash identifier: LdWH6oGbJtG77OXW2zHVsQZMNIfC/TYkDj6uRrVla3E= Subject key identifier: E4:DE:BF:99:A9:86:90:6E:A5:13:31:86:B5:3C:48:15:2B:66:2D:1B Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be Certificate serial: 019B593ECC3A945734BAAD14D3731E2083EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft Manifest number: 0B2A Signing time: Fri 26 Dec 2025 06:00:46 +0000 Manifest this update: Fri 26 Dec 2025 06:00:46 +0000 Manifest next update: Sat 27 Dec 2025 06:00:46 +0000 Files and hashes: 1: 9-Jf83x4olz8Hfew1s_UNi3V90k.roa (hash: IKeSXJFCHy882FUnOTCs1ATh13Yeq7epWPgTRQh0CZE=) 2: ECPnWkDMI2_nTmbCZhDYVWDmDx4.roa (hash: Lpl7m/eZhYRN7DnJNG4Sw0QJsO8hvbMn/hQYBg/ViaI=) 3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: cAc1iRKTm6Y/Fb5AQ+qIDcTul3vNmNaBpnke9Gs+43Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:cc:3a:94:57:34:ba:ad:14:d3:73:1e:20:83:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be Validity Not Before: Dec 26 06:00:46 2025 GMT Not After : Dec 27 06:00:46 2025 GMT Subject: CN=e4debf99a986906ea5133186b53c48152b662d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:6a:64:98:95:91:69:a3:ad:34:d2:6f:50: 94:2c:34:a3:b5:d1:ef:26:56:14:82:c6:f8:a8:9b: f7:b9:1e:10:95:30:c6:fe:7d:45:00:06:e9:37:f0: 3b:1b:f3:f5:bf:b7:b9:fe:d9:b8:8e:03:52:0f:1e: db:06:97:d1:07:9f:1d:85:27:84:a0:7e:a1:ac:60: 06:f3:b3:af:d6:54:2c:0e:fd:3a:e1:a5:a7:f4:ed: 76:90:7e:75:29:6b:98:e2:53:c1:7d:ca:15:10:d7: 8b:9c:c7:ac:b7:d1:f4:8d:7c:5e:00:13:f9:b0:14: d4:53:81:03:88:13:72:d7:dd:4f:e7:19:ec:39:44: 6b:6c:64:b7:42:c9:1c:06:92:30:56:b4:96:15:d4: 23:1a:fb:36:12:57:36:b6:3b:de:d9:48:38:17:69: 1b:10:10:69:f0:f6:96:22:45:f8:39:bc:d5:f8:68: a0:29:3a:23:dc:ae:d1:0f:37:e6:bc:78:03:f3:e4: 64:55:a7:de:b0:35:55:b4:90:c2:ad:59:e4:15:b5: b4:fe:4f:d4:f0:cd:48:81:8e:3b:b9:77:c4:f9:ca: 59:40:98:04:c8:76:f0:a7:ba:95:46:38:51:d8:b2: d5:27:0f:63:1c:c4:01:16:e3:d2:f9:d0:b5:ef:1c: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DE:BF:99:A9:86:90:6E:A5:13:31:86:B5:3C:48:15:2B:66:2D:1B X509v3 Authority Key Identifier: keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:dc:9a:9f:6b:49:1d:99:a0:c1:8c:4c:0f:e7:d3:c7:94:4a: 06:9e:9a:22:00:49:0c:80:7a:66:2d:ad:71:0d:cf:fd:e0:58: 9e:17:df:6b:fa:94:19:50:91:d8:8b:5a:c4:a5:28:9f:97:c9: af:5e:d4:f4:14:4b:17:47:48:70:83:6e:be:13:8e:18:25:53: 9c:2b:c4:1a:af:d8:42:22:23:b2:47:ba:6a:d0:05:48:24:a5: 41:ed:c6:72:41:71:85:a7:f3:cd:a7:b6:73:87:19:2d:aa:e9: c9:cc:ff:b7:9e:7b:d6:fc:56:29:d6:e9:62:a5:e5:ff:4c:e3: c2:88:02:44:97:eb:37:1f:e3:ce:68:50:ea:25:9a:9c:0a:02: 68:f8:d6:50:48:cd:dc:e2:7d:7e:f8:db:74:64:40:e8:57:0f: 16:f2:f9:fe:20:86:0a:70:4a:08:dc:d2:ee:b7:93:f7:a9:ec: d0:01:0d:70:75:96:b9:31:3f:d2:dd:15:80:69:53:f8:a8:8c: 16:b9:b5:a6:43:48:00:31:dd:c1:90:c9:46:82:eb:fd:6b:8b: 30:77:35:3b:ec:42:9a:09:5b:16:0f:92:a0:ad:11:4c:54:59: bb:61:0a:cd:ba:dd:8e:a9:5c:4d:58:09:b6:18:d2:09:bc:58: 8e:7d:dd:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsw6lFc0uq0U03MeIIPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc0MTNlZDc0YTM3MTYxZThiYjNmNjE1NjI1NDFkZDI4 OTA1YmUwHhcNMjUxMjI2MDYwMDQ2WhcNMjUxMjI3MDYwMDQ2WjAzMTEwLwYDVQQD EyhlNGRlYmY5OWE5ODY5MDZlYTUxMzMxODZiNTNjNDgxNTJiNjYyZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD5qZJiVkWmjrTTSb1CULDSjtdHv JlYUgsb4qJv3uR4QlTDG/n1FAAbpN/A7G/P1v7e5/tm4jgNSDx7bBpfRB58dhSeE oH6hrGAG87Ov1lQsDv064aWn9O12kH51KWuY4lPBfcoVENeLnMest9H0jXxeABP5 sBTUU4EDiBNy191P5xnsOURrbGS3QskcBpIwVrSWFdQjGvs2Elc2tjve2Ug4F2kb EBBp8PaWIkX4ObzV+GigKToj3K7RDzfmvHgD8+RkVafesDVVtJDCrVnkFbW0/k/U 8M1IgY47uXfE+cpZQJgEyHbwp7qVRjhR2LLVJw9jHMQBFuPS+dC17xyC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTev5mphpBupRMxhrU8SBUrZi0bMB8GA1UdIwQY MBaAFMmXQT7XSjcWHouz9hViVB3SiQW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgt ZTQ5ZDQ2MWMzMTU0LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNDE2M2UtZGEwYS00MjA2LTkzNzgtZTQ5ZDQ2MWMzMTU0 LzEveVpkQlB0ZEtOeFllaTdQMkZXSlVIZEtKQmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9yan2tJ HZmgwYxMD+fTx5RKBp6aIgBJDIB6Zi2tcQ3P/eBYnhffa/qUGVCR2ItaxKUon5fJ r17U9BRLF0dIcINuvhOOGCVTnCvEGq/YQiIjske6atAFSCSlQe3GckFxhafzzae2 c4cZLarpycz/t5571vxWKdbpYqXl/0zjwogCRJfrNx/jzmhQ6iWanAoCaPjWUEjN 3OJ9fvjbdGRA6FcPFvL5/iCGCnBKCNzS7reT96ns0AENcHWWuTE/0t0VgGlT+KiM Frm1pkNIADHdwZDJRoLr/WuLMHc1O+xCmglbFg+SoK0RTFRZu2EKzbrdjqlcTVgJ thjSCbxYjn3dQg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:27 2025 by rpki-client