This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json) Hash identifier: 02nF/31IwR9304FtXGNCDkQ0Z8xqPYyaNWSxtTunkSM= Subject key identifier: AC:7A:08:54:50:33:C7:A9:D7:CF:3B:4D:61:87:8E:AB:A4:50:4E:27 Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c Certificate serial: 019B59ACA52699FA995433B07F2EEFC8DC85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 08:00:45 +0000 Manifest this update: Fri 26 Dec 2025 08:00:45 +0000 Manifest next update: Sat 27 Dec 2025 08:00:45 +0000 Files and hashes: 1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=) 2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: XudAnZ+4DyA23xVYklWvp8Oqclnmlx8SdGPuN/whExM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a5:26:99:fa:99:54:33:b0:7f:2e:ef:c8:dc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c Validity Not Before: Dec 26 08:00:45 2025 GMT Not After : Dec 27 08:00:45 2025 GMT Subject: CN=ac7a08545033c7a9d7cf3b4d61878eaba4504e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:ee:fb:3e:ad:57:4b:c8:ee:95:c4:5f:6a: 46:9e:af:ab:c5:c3:e1:21:8e:01:3c:15:33:19:d5: 85:42:b7:70:96:bc:70:a8:56:e1:9d:05:5e:cd:e1: 36:5f:eb:3e:be:64:78:5f:8b:9c:6f:06:e2:5b:37: b9:1c:ba:16:6e:4c:9d:24:53:43:5a:3e:b0:ef:b6: ae:52:f5:d3:32:99:15:32:ce:5d:71:a5:c3:82:14: 75:60:a3:1c:65:7d:a6:5f:91:66:82:8f:5c:7d:dc: fc:30:e6:f8:f6:3c:d3:54:45:dc:93:8c:70:cb:b2: 56:91:06:ec:46:f5:54:92:25:ea:06:d3:0c:07:ab: b1:ac:8e:90:0d:55:9e:a2:4d:df:3c:65:15:69:6a: b7:23:37:7e:a1:35:96:3d:6f:cb:35:ca:58:75:0b: 94:4c:9c:ae:bf:c7:25:7c:aa:62:d4:e9:a4:83:da: b4:bd:df:3a:39:f6:45:73:fa:c0:ca:67:95:b4:89: 5c:b4:59:5d:f3:19:53:5a:e7:b4:00:df:ca:21:d4: 23:ee:0f:f4:15:02:8b:e9:65:e0:3c:4c:e3:ed:7b: 27:09:25:92:f9:6e:94:bf:4d:48:fb:cc:07:b4:e4: 0d:5b:5f:9f:93:76:73:a5:91:ec:c8:f3:d7:ad:7b: 5f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7A:08:54:50:33:C7:A9:D7:CF:3B:4D:61:87:8E:AB:A4:50:4E:27 X509v3 Authority Key Identifier: keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:af:a1:6e:93:ca:6b:ac:00:88:4d:5f:0f:2e:47:64:5a:0d: e7:68:b8:b8:b5:3e:55:a8:3b:20:ef:bd:23:ba:5d:eb:ac:13: 41:a6:5d:58:0d:77:bf:f9:32:0c:71:23:3e:01:82:4f:0b:57: 6e:67:2c:43:d2:f1:fe:a3:2b:a5:a8:ca:06:7a:90:ee:44:9c: cf:16:8a:6b:16:72:16:d4:5f:b4:53:ae:25:10:84:12:c3:49: a9:76:21:7a:e4:57:ee:13:62:09:5e:6d:53:f5:8b:7a:00:6f: 64:07:5c:d5:60:2c:83:a3:a4:79:35:ba:93:a8:59:21:46:1f: 62:f6:e0:f6:6d:93:68:1b:84:76:a9:a6:a9:27:27:39:d5:d4: 0b:be:db:63:b4:d6:8d:36:f4:ee:1d:48:d6:3b:42:ab:72:82: 3d:bd:51:64:43:03:a6:64:4c:66:ec:64:50:93:90:fc:4e:85: 6d:cd:6d:f1:fa:47:c8:54:41:63:3f:86:e1:ff:05:6d:e6:ed: 94:c9:0d:20:a7:10:81:52:9b:e6:cc:dc:6f:bc:14:9f:25:a5: 80:42:f6:8e:4d:57:22:c0:7c:37:63:d9:37:19:13:0d:50:47: 68:fe:7f:87:bf:a4:15:48:cc:4b:c7:50:a9:05:74:a1:27:76: 56:65:15:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKUmmfqZVDOwfy7vyNyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOWM5ODBlYWExNjE0MWI1YzQ4MTVjNjM4OWNhMjViM2Yy ZWQ3N2MwHhcNMjUxMjI2MDgwMDQ1WhcNMjUxMjI3MDgwMDQ1WjAzMTEwLwYDVQQD EyhhYzdhMDg1NDUwMzNjN2E5ZDdjZjNiNGQ2MTg3OGVhYmE0NTA0ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ru+z6tV0vI7pXEX2pGnq+rxcPh IY4BPBUzGdWFQrdwlrxwqFbhnQVezeE2X+s+vmR4X4ucbwbiWze5HLoWbkydJFND Wj6w77auUvXTMpkVMs5dcaXDghR1YKMcZX2mX5Fmgo9cfdz8MOb49jzTVEXck4xw y7JWkQbsRvVUkiXqBtMMB6uxrI6QDVWeok3fPGUVaWq3Izd+oTWWPW/LNcpYdQuU TJyuv8clfKpi1Omkg9q0vd86OfZFc/rAymeVtIlctFld8xlTWue0AN/KIdQj7g/0 FQKL6WXgPEzj7XsnCSWS+W6Uv01I+8wHtOQNW1+fk3ZzpZHsyPPXrXtf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx6CFRQM8ep1887TWGHjqukUE4nMB8GA1UdIwQY MBaAFMqcmA6qFhQbXEgVxjicols/Ltd8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYt YmU1ZTA1MGIwMGYwLzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81Yzk4MWMtNjU3Yy00NWJlLWJmZjYtYmU1ZTA1MGIwMGYw LzEveXB5WURxb1dGQnRjU0JYR09KeWlXejh1MTN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK+hbpPK a6wAiE1fDy5HZFoN52i4uLU+Vag7IO+9I7pd66wTQaZdWA13v/kyDHEjPgGCTwtX bmcsQ9Lx/qMrpajKBnqQ7kSczxaKaxZyFtRftFOuJRCEEsNJqXYheuRX7hNiCV5t U/WLegBvZAdc1WAsg6OkeTW6k6hZIUYfYvbg9m2TaBuEdqmmqScnOdXUC77bY7TW jTb07h1I1jtCq3KCPb1RZEMDpmRMZuxkUJOQ/E6Fbc1t8fpHyFRBYz+G4f8Fbebt lMkNIKcQgVKb5szcb7wUnyWlgEL2jk1XIsB8N2PZNxkTDVBHaP5/h7+kFUjMS8dQ qQV0oSd2VmUVqQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:24 2025 by rpki-client