This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json) Hash identifier: mT4irL1ePEs3ZexiyZLAidDL7xDzcuOxproFmZx45LA= Subject key identifier: 84:97:7F:77:7C:36:C4:EE:0A:74:83:F0:F8:72:97:59:BB:B3:6D:97 Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762 Certificate serial: 019B37C55C157C74E31E52FE74FC7F9F0FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft Manifest number: 1249 Signing time: Fri 19 Dec 2025 18:00:39 +0000 Manifest this update: Fri 19 Dec 2025 18:00:39 +0000 Manifest next update: Sat 20 Dec 2025 18:00:39 +0000 Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: TldBaWSrTs5KfkUpIDrx1+I20panO3vMKDqf3poyYks=) 2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:5c:15:7c:74:e3:1e:52:fe:74:fc:7f:9f:0f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762 Validity Not Before: Dec 19 18:00:39 2025 GMT Not After : Dec 20 18:00:39 2025 GMT Subject: CN=84977f777c36c4ee0a7483f0f8729759bbb36d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:37:6b:37:7a:ee:9b:f9:98:c9:b7:76:09: f6:9a:2e:59:a1:55:ea:d1:e8:6d:d2:53:aa:c7:bc: ef:30:11:58:ad:b1:3d:12:71:43:2e:80:ac:eb:c4: 57:ec:4c:1f:10:53:c9:d9:d6:b3:9b:f6:82:72:f7: 82:98:3a:17:90:b7:b5:74:8d:89:00:55:a9:1d:bf: aa:a9:ad:a1:bb:d6:1b:c1:88:83:fb:be:db:6a:d7: d2:dd:04:46:9b:85:59:0f:18:49:78:36:f6:de:77: 7a:b5:bc:2d:e9:4f:32:61:02:5c:ab:97:6e:bb:77: 49:9a:df:cc:18:db:60:a8:43:52:11:7e:9c:66:b0: 5a:66:0e:b7:40:62:c7:03:40:e2:7c:5e:f1:e9:65: 81:af:63:5a:b5:18:ae:b3:68:11:7a:05:96:41:ef: b4:14:88:2d:fe:ec:5b:cd:57:86:06:94:b9:0f:c3: b3:8f:80:35:54:f3:10:cf:b4:ee:6f:38:e6:2b:2e: 15:f3:c6:e6:49:e0:b7:2e:cd:ca:b8:d5:ae:80:26: be:62:7d:cd:5f:7d:a1:bb:6f:ba:74:94:af:7b:62: 93:9d:41:86:1d:b1:a0:30:f9:98:3a:e1:e1:ff:1c: 7b:55:ee:44:14:31:d6:38:ad:b6:0c:16:62:a4:7c: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:7F:77:7C:36:C4:EE:0A:74:83:F0:F8:72:97:59:BB:B3:6D:97 X509v3 Authority Key Identifier: keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ab:a5:3b:f1:e3:d3:74:5d:4d:1f:a1:2b:ce:f7:f3:fe:ea: 2b:51:51:31:c6:a7:23:5f:dc:53:24:6a:c5:75:90:d0:ca:a4: 25:44:b1:7e:55:99:6a:fa:87:74:c9:5c:f7:60:f9:88:43:7a: f4:b9:eb:6f:cd:a1:b5:26:d7:f4:f7:a3:48:47:cf:69:b7:3a: 5d:f2:f9:87:42:68:6e:4a:93:a6:31:a1:9b:aa:4e:ff:9f:8f: b7:81:3d:2d:81:7b:08:18:6b:e4:09:1d:44:b7:d8:a7:b8:6e: 71:0e:95:66:b5:17:26:e8:a8:74:c0:dd:b4:d7:8e:ad:7e:cf: ab:81:ae:97:f4:50:69:42:85:01:2b:ce:1e:c5:10:11:b5:9b: de:cf:bb:6b:1d:1f:0d:c5:f7:46:11:d1:7c:8a:a3:ec:55:c5: dc:cf:a5:7e:90:b2:16:d5:34:01:be:55:5f:e8:b6:72:dc:94: da:00:53:57:68:bc:23:03:43:c6:2d:53:05:35:28:b4:db:2b: 7d:bf:27:91:5f:9a:ad:25:a0:ff:6e:65:ee:84:1d:52:3a:5e: 87:39:91:16:89:2a:57:80:95:da:28:0f:ba:20:5c:8e:c6:da: 2c:de:f7:1d:37:66:2c:bf:ea:66:ff:f9:f6:28:f3:6a:74:5f: 69:b2:6c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xVwVfHTjHlL+dPx/nw/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3 MjA3NjIwHhcNMjUxMjE5MTgwMDM5WhcNMjUxMjIwMTgwMDM5WjAzMTEwLwYDVQQD Eyg4NDk3N2Y3NzdjMzZjNGVlMGE3NDgzZjBmODcyOTc1OWJiYjM2ZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypY3azd67pv5mMm3dgn2mi5ZoVXq 0eht0lOqx7zvMBFYrbE9EnFDLoCs68RX7EwfEFPJ2dazm/aCcveCmDoXkLe1dI2J AFWpHb+qqa2hu9YbwYiD+77batfS3QRGm4VZDxhJeDb23nd6tbwt6U8yYQJcq5du u3dJmt/MGNtgqENSEX6cZrBaZg63QGLHA0DifF7x6WWBr2NatRius2gRegWWQe+0 FIgt/uxbzVeGBpS5D8Ozj4A1VPMQz7TubzjmKy4V88bmSeC3Ls3KuNWugCa+Yn3N X32hu2+6dJSve2KTnUGGHbGgMPmYOuHh/xx7Ve5EFDHWOK22DBZipHxp1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISXf3d8NsTuCnSD8Phyl1m7s22XMB8GA1UdIwQY MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqulO/Hj 03RdTR+hK8738/7qK1FRMcanI1/cUyRqxXWQ0MqkJUSxflWZavqHdMlc92D5iEN6 9Lnrb82htSbX9PejSEfPabc6XfL5h0JobkqTpjGhm6pO/5+Pt4E9LYF7CBhr5Akd RLfYp7hucQ6VZrUXJuiodMDdtNeOrX7Pq4Gul/RQaUKFASvOHsUQEbWb3s+7ax0f DcX3RhHRfIqj7FXF3M+lfpCyFtU0Ab5VX+i2ctyU2gBTV2i8IwNDxi1TBTUotNsr fb8nkV+arSWg/25l7oQdUjpehzmRFokqV4CV2igPuiBcjsbaLN73HTdmLL/qZv/5 9ijzanRfabJs/w== -----END CERTIFICATE-----Generated at Fri Dec 19 21:10:13 2025 by rpki-client