This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft File: Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json) Hash identifier: 6KILVDX86AjPiK78zkYvAqi5weloxLVCk5SwFq1KbHA= Subject key identifier: 8E:D2:E8:01:B0:7B:FF:3B:6E:C2:A6:B7:D6:42:A6:6F:02:13:65:55 Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5 Certificate issuer: /CN=638cc407ceff57b13b49455f30c20b761c7912b5 Certificate serial: 019AF276AA6864496BD725EF52AEF1962F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft Manifest number: 0223 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: is6C5L1pk+YC2+t2sSZHBjib3eljZOS4p11rIkqaCT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:aa:68:64:49:6b:d7:25:ef:52:ae:f1:96:2f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5 Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=8ed2e801b07bff3b6ec2a6b7d642a66f02136555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:75:f6:ca:c7:37:bb:6c:cd:48:3f:55:eb: 3f:f1:df:b1:0f:6a:c0:05:78:26:3f:2a:b2:1e:89: a8:31:0b:3a:57:65:77:59:96:83:34:b0:70:3d:b6: 08:b1:10:ef:08:2d:79:8a:73:3d:68:f4:b2:8e:af: a9:bf:f1:d1:94:f0:af:9e:0e:ee:2d:1f:78:1a:f2: a7:c7:68:59:ad:6e:4f:da:e6:75:95:6d:4e:a8:d2: e9:3a:aa:e7:72:ad:a0:34:31:8f:23:3b:d7:aa:db: 8c:d9:e1:55:2c:ca:c6:48:6f:7b:46:0a:82:be:5c: 31:59:53:20:18:72:24:dc:a0:ac:38:ff:c2:63:18: 0b:b3:9c:c9:70:f4:6e:46:37:c7:09:84:36:eb:30: 82:57:e5:ab:4a:fc:d7:90:e6:e6:8a:84:9a:97:63: b4:f2:0d:b4:47:0a:5e:24:c7:c9:56:89:0f:25:1c: 7f:be:32:4e:61:94:ac:df:a5:a4:04:e4:8e:3d:32: f7:50:88:7e:43:43:43:95:5a:15:e6:e5:15:f4:be: 84:03:63:f9:15:60:31:53:e5:ff:08:c0:60:51:69: 3f:a9:89:9a:78:aa:8c:fd:07:61:ee:5e:b5:37:41: 9b:c2:42:36:f2:ef:9e:92:f1:ff:98:b0:f1:dc:b1: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D2:E8:01:B0:7B:FF:3B:6E:C2:A6:B7:D6:42:A6:6F:02:13:65:55 X509v3 Authority Key Identifier: keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:ba:76:71:68:a5:60:6d:6c:40:9b:47:65:83:a1:41:0d: c1:a7:fc:73:c2:df:00:b2:2e:1a:a5:11:94:f7:82:f5:ff:ee: a5:30:a8:28:af:13:d0:d1:59:d8:44:dc:e7:f6:40:60:43:7f: 6c:0b:85:db:98:71:b0:09:5a:7a:c5:6d:8a:8f:77:3d:09:fb: 1b:37:46:67:34:e6:6b:c1:17:30:a0:a1:dc:b9:c6:cc:13:89: 8a:0d:f6:f1:d6:16:ed:b3:02:bf:9f:50:63:a1:00:8d:21:26: dc:f2:db:de:91:97:79:1d:54:72:86:d6:63:c5:46:79:6a:43: b3:68:cf:b8:85:7d:4b:29:90:c3:e7:bc:13:44:b7:2e:94:a7: bf:5b:27:b5:2d:1c:8a:ce:f7:91:ea:32:21:ac:fa:46:4a:7d: 64:67:56:5e:68:cd:31:ee:53:f4:2f:ee:f0:23:e7:23:f2:8c: e1:d2:8f:72:30:dd:4b:38:05:9f:99:b6:ed:bd:1d:3b:e7:77: 7d:6e:9a:a2:3f:ce:4e:9a:eb:da:ae:26:6f:d6:0f:05:2e:e1: f0:aa:d5:65:45:61:f6:ee:f2:17:dc:15:32:6b:9b:4f:07:29: 7b:14:6f:d0:fd:1a:fb:35:f8:56:88:50:2a:a9:a9:73:4a:38: fb:2c:03:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqpoZElr1yXvUq7xli+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGNjNDA3Y2VmZjU3YjEzYjQ5NDU1ZjMwYzIwYjc2MWM3 OTEyYjUwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD Eyg4ZWQyZTgwMWIwN2JmZjNiNmVjMmE2YjdkNjQyYTY2ZjAyMTM2NTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiJ19srHN7tszUg/Ves/8d+xD2rA BXgmPyqyHomoMQs6V2V3WZaDNLBwPbYIsRDvCC15inM9aPSyjq+pv/HRlPCvng7u LR94GvKnx2hZrW5P2uZ1lW1OqNLpOqrncq2gNDGPIzvXqtuM2eFVLMrGSG97RgqC vlwxWVMgGHIk3KCsOP/CYxgLs5zJcPRuRjfHCYQ26zCCV+WrSvzXkObmioSal2O0 8g20RwpeJMfJVokPJRx/vjJOYZSs36WkBOSOPTL3UIh+Q0NDlVoV5uUV9L6EA2P5 FWAxU+X/CMBgUWk/qYmaeKqM/Qdh7l61N0GbwkI28u+ekvH/mLDx3LHyOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7S6AGwe/87bsKmt9ZCpm8CE2VVMB8GA1UdIwQY MBaAFGOMxAfO/1exO0lFXzDCC3YceRK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNWUzZjYtMTU5OC00YjRjLWI2MDMt ZDhiYjc5MGMyZDA0LzEvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8wNWUzZjYtMTU5OC00YjRjLWI2MDMtZDhiYjc5MGMyZDA0 LzEvWTR6RUI4N19WN0U3U1VWZk1NSUxkaHg1RXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeO6dnFo pWBtbECbR2WDoUENwaf8c8LfALIuGqURlPeC9f/upTCoKK8T0NFZ2ETc5/ZAYEN/ bAuF25hxsAlaesVtio93PQn7GzdGZzTma8EXMKCh3LnGzBOJig328dYW7bMCv59Q Y6EAjSEm3PLb3pGXeR1UcobWY8VGeWpDs2jPuIV9SymQw+e8E0S3LpSnv1sntS0c is73keoyIaz6Rkp9ZGdWXmjNMe5T9C/u8CPnI/KM4dKPcjDdSzgFn5m27b0dO+d3 fW6aoj/OTprr2q4mb9YPBS7h8KrVZUVh9u7yF9wVMmubTwcpexRv0P0a+zX4VohQ Kqmpc0o4+ywDlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:01 2025 by rpki-client