This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json) Hash identifier: 1R2rdTytMgxJlSj6C+MFFhXQOg8KoEZzeh8HhP91wqk= Subject key identifier: B5:38:50:97:D0:E2:C9:BC:9C:1A:BD:8F:B7:02:71:CF:76:E4:6D:77 Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9 Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9 Certificate serial: 019B2D41D5775EAF48AB68C2B4025B3F52AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft Manifest number: 0581 Signing time: Wed 17 Dec 2025 17:00:47 +0000 Manifest this update: Wed 17 Dec 2025 17:00:47 +0000 Manifest next update: Thu 18 Dec 2025 17:00:47 +0000 Files and hashes: 1: 1MXWay8i8Jgpl2Ec45766ozfEQI.roa (hash: iWtw4F9PH8kF6GGDUuqXl1iDAmwZFyA4kEph6c61hFg=) 2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: jBvUeb4vMSmzggIeZ7z9/9Rrprf7lVQijctPXMCdKMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:d5:77:5e:af:48:ab:68:c2:b4:02:5b:3f:52:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9 Validity Not Before: Dec 17 17:00:47 2025 GMT Not After : Dec 18 17:00:47 2025 GMT Subject: CN=b5385097d0e2c9bc9c1abd8fb70271cf76e46d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:a8:aa:0d:1c:3c:b9:8c:1f:ac:58:9f:94: 4b:cd:98:eb:9b:69:a6:24:e9:ed:7c:d9:eb:49:0a: 20:1f:a5:4a:5e:e9:96:a3:73:54:e7:52:db:ca:54: b7:2d:92:60:f3:8c:98:26:84:7e:74:3e:97:62:fe: 22:27:ce:98:0d:10:4c:d4:1e:ce:66:6c:52:cf:02: 41:9b:08:cf:7e:03:6a:b3:57:5b:60:05:ec:74:26: f0:fe:58:9a:bb:1c:89:4e:7f:17:6b:d9:c1:f1:8b: 23:6c:b5:f6:64:b5:59:61:3b:6d:1a:79:53:53:06: 7f:54:b6:7c:9f:ea:b7:e0:ed:d7:67:11:b8:e0:05: b6:1e:50:cc:33:b2:b5:c3:96:9f:11:86:14:c0:f0: 6e:5f:2b:79:d2:84:74:3e:2f:d6:a9:6e:bc:d9:bf: 91:e5:e1:70:f0:d3:66:87:a9:64:f3:72:4c:e3:f3: 28:db:b3:68:38:94:e4:6a:ab:e2:02:43:32:0b:d1: 16:1d:4d:da:93:3d:39:5f:4a:b9:04:a2:a2:90:e3: 9e:96:4a:09:26:5a:95:a5:35:27:29:9d:91:b6:01: 2e:ec:2d:60:87:e3:01:0b:8f:ea:a3:76:32:89:fc: 0c:2c:c4:66:b5:56:e0:01:36:f9:43:f5:ad:0d:8f: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:38:50:97:D0:E2:C9:BC:9C:1A:BD:8F:B7:02:71:CF:76:E4:6D:77 X509v3 Authority Key Identifier: keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:34:1e:aa:e5:05:f4:3b:1b:43:8d:b4:1b:e1:48:7d:47:46: 19:6e:45:02:d3:85:a6:fa:0e:76:f3:2d:08:d9:a7:f6:38:91: a8:c2:57:fa:da:b1:01:9c:85:90:bc:4e:e4:2e:06:bc:f9:c4: d1:11:f4:7d:c9:11:33:40:31:5f:c2:54:e1:c9:3b:b3:fc:8c: 8e:93:14:03:eb:27:3a:c5:34:d8:a5:f1:b1:58:d2:a2:02:4b: 62:eb:7c:57:0b:18:dc:75:8e:9d:86:40:68:ea:77:0d:2a:9c: 79:3d:48:8f:b3:a1:9a:74:f0:85:35:fd:88:ec:e3:00:4b:3d: 45:fd:b3:d8:ec:dc:e6:77:2c:73:fb:d2:f8:f7:38:89:6f:34: c5:8d:62:d2:35:56:8d:84:df:a4:ea:26:66:dd:ae:33:90:2e: 34:20:f7:1c:4d:0e:79:31:49:fc:e7:82:69:5b:eb:e2:a5:0b: 75:fe:8f:2a:bf:cb:c2:77:17:d9:f0:99:fd:72:44:18:41:10: 05:0a:60:2f:1b:6f:92:c7:0f:fa:9d:39:dc:e1:7b:02:6c:84: 44:81:22:65:01:f0:1b:58:82:f4:d0:65:60:c3:18:e7:f9:70: 97:eb:02:6f:f0:77:53:87:9b:a5:d7:80:bd:6f:e0:5f:cb:d4: c0:3b:eb:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQdV3Xq9Iq2jCtAJbP1KuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjk2ODhlMTc2Y2YzODY0MzZkN2JiODhkM2E0MDViNDZk MGUyYjkwHhcNMjUxMjE3MTcwMDQ3WhcNMjUxMjE4MTcwMDQ3WjAzMTEwLwYDVQQD EyhiNTM4NTA5N2QwZTJjOWJjOWMxYWJkOGZiNzAyNzFjZjc2ZTQ2ZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTWoqg0cPLmMH6xYn5RLzZjrm2mm JOntfNnrSQogH6VKXumWo3NU51LbylS3LZJg84yYJoR+dD6XYv4iJ86YDRBM1B7O ZmxSzwJBmwjPfgNqs1dbYAXsdCbw/liauxyJTn8Xa9nB8YsjbLX2ZLVZYTttGnlT UwZ/VLZ8n+q34O3XZxG44AW2HlDMM7K1w5afEYYUwPBuXyt50oR0Pi/WqW682b+R 5eFw8NNmh6lk83JM4/Mo27NoOJTkaqviAkMyC9EWHU3akz05X0q5BKKikOOelkoJ JlqVpTUnKZ2RtgEu7C1gh+MBC4/qo3YyifwMLMRmtVbgATb5Q/WtDY8ZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU4UJfQ4sm8nBq9j7cCcc925G13MB8GA1UdIwQY MBaAFMr5aI4XbPOGQ217uI06QFtG0OK5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEt YWIwYzFjNDQyZjVkLzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iNGFhZjYtMTBmNC00MTcxLWFjNWEtYWIwYzFjNDQyZjVk LzEveXZsb2poZHM4NFpEYlh1NGpUcEFXMGJRNHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzQequUF 9DsbQ420G+FIfUdGGW5FAtOFpvoOdvMtCNmn9jiRqMJX+tqxAZyFkLxO5C4GvPnE 0RH0fckRM0AxX8JU4ck7s/yMjpMUA+snOsU02KXxsVjSogJLYut8VwsY3HWOnYZA aOp3DSqceT1Ij7OhmnTwhTX9iOzjAEs9Rf2z2Ozc5ncsc/vS+Pc4iW80xY1i0jVW jYTfpOomZt2uM5AuNCD3HE0OeTFJ/OeCaVvr4qULdf6PKr/LwncX2fCZ/XJEGEEQ BQpgLxtvkscP+p053OF7AmyERIEiZQHwG1iC9NBlYMMY5/lwl+sCb/B3U4ebpdeA vW/gX8vUwDvrnw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:51 2025 by rpki-client