This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json) Hash identifier: VxKXPsi/4AQ4knG/00a9MuHUvi/zxLQ6vDsjbfAXgw8= Subject key identifier: AB:C8:02:BB:DD:3D:CB:C9:FE:9E:E1:CE:B7:55:6D:1F:1B:6F:05:BC Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4 Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4 Certificate serial: 019B3EDA940646B44D84C91F9EADC4329FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 03:01:10 +0000 Manifest this update: Sun 21 Dec 2025 03:01:10 +0000 Manifest next update: Mon 22 Dec 2025 03:01:10 +0000 Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=) 2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: s3xUGcfSUJ3ZjFwjoO/ymWk2sgN+FI9yxaXOZCBBYP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:94:06:46:b4:4d:84:c9:1f:9e:ad:c4:32:9f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4 Validity Not Before: Dec 21 03:01:10 2025 GMT Not After : Dec 22 03:01:10 2025 GMT Subject: CN=abc802bbdd3dcbc9fe9ee1ceb7556d1f1b6f05bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:71:e1:85:1e:c9:3f:58:7b:29:9f:81:a0: ee:fe:74:e2:08:f3:5b:3c:e0:d0:f5:7d:1b:1f:2a: b4:26:35:f2:a4:3d:95:55:9e:b2:5c:ff:8d:d8:67: 92:93:28:84:6c:a8:77:c6:78:c4:f7:aa:b6:a1:05: 06:47:3b:e1:c9:37:9a:bd:5f:f4:f0:68:e5:43:e8: ff:b0:cd:5b:d9:c8:7f:4d:db:6b:ed:2e:f0:29:60: 13:b8:8a:70:cd:ce:56:38:8f:08:49:00:aa:2a:73: 28:a9:11:26:ed:a8:2e:79:86:c1:29:e4:8c:6f:40: d3:5d:34:53:ed:fb:98:c5:57:0a:44:ad:e8:c7:34: f4:ab:4f:75:2c:dc:93:42:07:88:88:0c:d4:14:1f: 29:b8:38:04:e5:16:39:19:d2:cc:fa:ff:6e:0c:91: 39:ae:21:15:7b:3d:38:f1:b8:27:ad:82:1b:40:0d: e5:5e:bb:3e:7b:dd:df:e9:26:62:dc:92:5d:85:6e: c7:fd:4b:23:52:45:59:c1:43:f7:66:31:ef:8e:aa: 82:65:e2:32:d9:b1:92:e8:8c:79:ed:3d:7b:03:82: b0:95:85:5b:04:b2:b6:eb:d2:72:a4:25:be:09:8d: ab:44:e9:ee:7f:b1:3a:4d:09:45:9a:b8:7b:35:d7: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:02:BB:DD:3D:CB:C9:FE:9E:E1:CE:B7:55:6D:1F:1B:6F:05:BC X509v3 Authority Key Identifier: keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:37:2f:0f:75:b2:44:0e:14:7b:05:84:69:9a:10:65:82:98: db:8a:63:2b:73:b3:31:7b:f8:31:fa:22:3c:84:ea:26:ea:83: 93:cd:4f:53:6b:b0:b1:2d:44:14:d1:a4:4b:3c:ce:8d:8e:ca: 10:45:69:d0:a1:2d:d1:b4:38:cd:49:71:72:56:8f:b7:d0:d7: be:f6:73:25:40:c1:41:04:de:b2:b0:9e:d6:54:99:8e:05:57: dc:69:f3:35:36:43:cf:f1:e1:81:da:f7:ec:50:9c:7d:1c:b6: 92:69:cf:ee:af:c2:0a:0e:2d:d1:d8:19:2f:7e:e0:7f:12:4a: 22:a6:78:c7:c7:8d:7b:d9:60:2a:09:a9:83:c2:8d:73:00:a9: 08:4a:82:44:78:56:2c:89:72:05:fb:82:c6:99:d7:f8:7f:9d: 5a:80:bd:b7:6b:15:cc:c6:1c:93:7c:6c:e3:9c:19:43:5c:7c: f0:7e:2a:4f:e0:8b:cc:51:06:d7:aa:13:9d:ec:ca:1f:29:7a: eb:77:85:87:a0:31:23:33:1c:b6:2e:66:98:00:7a:09:a2:56: ac:8a:70:a1:b5:d0:51:b6:09:77:96:76:82:6e:9e:46:56:3a: 77:4e:03:76:6d:d9:1f:ff:81:a8:e8:1a:c3:0f:81:22:d7:a2: e6:a0:9d:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pQGRrRNhMkfnq3EMp+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5 MzNiZjQwHhcNMjUxMjIxMDMwMTEwWhcNMjUxMjIyMDMwMTEwWjAzMTEwLwYDVQQD EyhhYmM4MDJiYmRkM2RjYmM5ZmU5ZWUxY2ViNzU1NmQxZjFiNmYwNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstdx4YUeyT9YeymfgaDu/nTiCPNb PODQ9X0bHyq0JjXypD2VVZ6yXP+N2GeSkyiEbKh3xnjE96q2oQUGRzvhyTeavV/0 8GjlQ+j/sM1b2ch/Tdtr7S7wKWATuIpwzc5WOI8ISQCqKnMoqREm7agueYbBKeSM b0DTXTRT7fuYxVcKRK3oxzT0q091LNyTQgeIiAzUFB8puDgE5RY5GdLM+v9uDJE5 riEVez048bgnrYIbQA3lXrs+e93f6SZi3JJdhW7H/UsjUkVZwUP3ZjHvjqqCZeIy 2bGS6Ix57T17A4KwlYVbBLK269JypCW+CY2rROnuf7E6TQlFmrh7NdcM/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvIArvdPcvJ/p7hzrdVbR8bbwW8MB8GA1UdIwQY MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjcvD3Wy RA4UewWEaZoQZYKY24pjK3OzMXv4MfoiPITqJuqDk81PU2uwsS1EFNGkSzzOjY7K EEVp0KEt0bQ4zUlxclaPt9DXvvZzJUDBQQTesrCe1lSZjgVX3GnzNTZDz/Hhgdr3 7FCcfRy2kmnP7q/CCg4t0dgZL37gfxJKIqZ4x8eNe9lgKgmpg8KNcwCpCEqCRHhW LIlyBfuCxpnX+H+dWoC9t2sVzMYck3xs45wZQ1x88H4qT+CLzFEG16oTnezKHyl6 63eFh6AxIzMcti5mmAB6CaJWrIpwobXQUbYJd5Z2gm6eRlY6d04Ddm3ZH/+BqOga ww+BItei5qCdZw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:05:06 2025 by rpki-client