This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft File: Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json) Hash identifier: 4UlRZdqfghvQxGu3HD0Y4sVtNnJ31o68dirqUfq81RI= Subject key identifier: 43:9C:96:A4:56:06:A1:73:A1:5A:7D:36:F0:2E:76:8A:B1:14:7D:C8 Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5 Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5 Certificate serial: 019B19BBBD2916346F1E8251276B401FF4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft Manifest number: 0213 Signing time: Sat 13 Dec 2025 22:01:32 +0000 Manifest this update: Sat 13 Dec 2025 22:01:32 +0000 Manifest next update: Sun 14 Dec 2025 22:01:32 +0000 Files and hashes: 1: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (hash: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=) 2: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: 123R4AUZrAUfVmw7QPs5qqqSrgbDtdnDqxqivIuleqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:bd:29:16:34:6f:1e:82:51:27:6b:40:1f:f4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5 Validity Not Before: Dec 13 22:01:32 2025 GMT Not After : Dec 14 22:01:32 2025 GMT Subject: CN=439c96a45606a173a15a7d36f02e768ab1147dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:89:cd:88:f9:b8:76:2d:c5:23:8b:41:2c: 84:cb:62:f7:08:32:43:6f:15:f3:de:e7:86:76:37: 52:a3:35:41:e8:92:09:99:92:4a:d4:0b:95:42:9a: b9:99:db:70:bb:ab:a6:12:d3:ad:c6:c0:0d:17:1b: d6:b9:5d:f7:04:19:d2:db:e3:aa:cf:aa:d5:ad:61: 61:80:fa:9c:66:97:1c:7f:af:b5:e1:32:f9:4b:b5: 14:6e:af:92:79:e7:a2:97:9f:f0:d2:e3:8f:a3:f3: db:6b:5a:5e:d7:d6:0e:6c:40:7b:80:a7:f8:29:cc: 57:52:f5:15:86:f3:c8:63:c3:c2:a1:8f:b4:bf:be: 7a:4d:ea:87:1a:8d:51:ee:4f:48:4a:21:0a:08:87: 18:49:47:2d:b6:ad:81:82:18:71:9c:6f:92:44:d5: 85:7b:31:a4:e8:69:4f:01:14:1a:3d:99:53:e9:9d: fb:18:b7:e5:5a:65:5e:90:f8:0a:c4:38:df:5d:23: a4:c3:9a:dd:1d:5c:02:51:47:30:c3:6c:1a:62:3c: 70:24:dc:c0:6d:6e:2c:c5:ae:a8:8e:14:52:a6:2b: 9c:cc:f8:15:20:69:01:73:01:cf:8c:b9:70:3f:57: e4:5f:84:f0:70:f2:7c:0f:c4:a1:d5:d6:2b:fe:77: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9C:96:A4:56:06:A1:73:A1:5A:7D:36:F0:2E:76:8A:B1:14:7D:C8 X509v3 Authority Key Identifier: keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5c:0c:b8:63:bf:86:7b:ea:1e:d8:52:b5:89:d6:d2:18:59: c6:7a:ca:e1:03:02:17:de:af:0e:6c:a8:cb:5a:90:1e:35:ee: ef:7a:80:11:36:23:10:da:c6:da:68:c4:ec:ed:08:f6:ce:cc: dc:1a:ae:fc:cb:de:15:45:a0:7a:5d:3a:64:d5:6c:5a:5e:04: 0c:ba:f6:af:08:4e:0e:68:cb:59:a4:ac:7b:e2:59:3d:47:cb: 02:16:4e:a9:70:fc:87:87:73:b1:c4:d8:fc:5d:11:35:f7:cb: 58:aa:65:e9:33:36:5c:0f:81:f0:38:f8:40:2f:7a:61:96:62: f0:47:5c:c5:b2:2c:85:46:c2:f9:a4:7d:70:3b:2b:1a:75:b9: b6:db:cd:7f:a2:50:5b:a7:ee:c5:64:fe:6b:47:e5:7b:3f:7b: 6a:24:4b:54:4d:ce:a1:f6:42:9a:87:1d:f6:41:bf:88:30:1d: 4b:00:44:01:ef:7c:f0:9d:cb:a0:a9:2a:c8:4f:38:4a:03:38: 28:e5:b0:1f:a0:d7:fd:cc:bb:7f:8d:70:f4:ff:7c:6c:e0:a7: e4:d6:28:31:2c:67:97:93:d3:dc:aa:72:72:6d:4e:1e:d7:b1: 97:83:57:63:96:14:3a:c9:32:97:11:47:a4:82:eb:9e:b4:f7: 9e:b4:37:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu70pFjRvHoJRJ2tAH/SmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWU5Y2ZhMmQ2NWI0MTU0MmQzN2VlZmYxZDFjNmMzODdh YWExYjUwHhcNMjUxMjEzMjIwMTMyWhcNMjUxMjE0MjIwMTMyWjAzMTEwLwYDVQQD Eyg0MzljOTZhNDU2MDZhMTczYTE1YTdkMzZmMDJlNzY4YWIxMTQ3ZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppmJzYj5uHYtxSOLQSyEy2L3CDJD bxXz3ueGdjdSozVB6JIJmZJK1AuVQpq5mdtwu6umEtOtxsANFxvWuV33BBnS2+Oq z6rVrWFhgPqcZpccf6+14TL5S7UUbq+Seeeil5/w0uOPo/Pba1pe19YObEB7gKf4 KcxXUvUVhvPIY8PCoY+0v756TeqHGo1R7k9ISiEKCIcYSUcttq2BghhxnG+SRNWF ezGk6GlPARQaPZlT6Z37GLflWmVekPgKxDjfXSOkw5rdHVwCUUcww2waYjxwJNzA bW4sxa6ojhRSpiuczPgVIGkBcwHPjLlwP1fkX4TwcPJ8D8Sh1dYr/ndApwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOclqRWBqFzoVp9NvAudoqxFH3IMB8GA1UdIwQY MBaAFGGunPotZbQVQtN+7/HRxsOHqqG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEt ZTkyOGVmNjQwZGY4LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yNTU1NzYtMjQ4Yi00YjAxLWEwZWEtZTkyOGVmNjQwZGY4 LzEvWWE2Yy1pMWx0QlZDMDM3djhkSEd3NGVxb2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFwMuGO/ hnvqHthStYnW0hhZxnrK4QMCF96vDmyoy1qQHjXu73qAETYjENrG2mjE7O0I9s7M 3Bqu/MveFUWgel06ZNVsWl4EDLr2rwhODmjLWaSse+JZPUfLAhZOqXD8h4dzscTY /F0RNffLWKpl6TM2XA+B8Dj4QC96YZZi8EdcxbIshUbC+aR9cDsrGnW5ttvNf6JQ W6fuxWT+a0flez97aiRLVE3OofZCmocd9kG/iDAdSwBEAe988J3LoKkqyE84SgM4 KOWwH6DX/cy7f41w9P98bOCn5NYoMSxnl5PT3Kpycm1OHtexl4NXY5YUOskylxFH pILrnrT3nrQ3Uw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:06 2025 by rpki-client