This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft File: YLuQsWeR3lqwN3oafrgwds_rINo.mft (raw, json) Hash identifier: SBwP2fIM3Tuwg83hBop4Bv5DGz20Vkw1LymW+JWCZsM= Subject key identifier: BD:76:32:1C:54:81:2F:AE:4B:53:9B:9F:1F:A2:3D:E1:C7:34:1F:8A Authority key identifier: 60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA Certificate issuer: /CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da Certificate serial: 019AF12EF6503CC2731D385E86CB27AE70D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft Manifest number: 010C Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: YLuQsWeR3lqwN3oafrgwds_rINo.crl (hash: wFIvKLxjCKyZc38kTzJ57dTY2QiSMfsRJloL5ufvAU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f6:50:3c:c2:73:1d:38:5e:86:cb:27:ae:70:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60bb90b16791de5ab0377a1a7eb83076cfeb20da Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=bd76321c54812fae4b539b9f1fa23de1c7341f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:08:0d:8e:ac:8f:e1:95:51:59:b8:bf:9e: 88:32:ee:a2:ca:8a:4d:c2:1f:e8:81:6d:44:a6:6f: 4f:7e:43:7b:0d:5b:d3:1e:2c:2d:7a:46:f3:ab:83: 99:52:f2:59:f2:13:dd:f9:f1:87:37:2f:cf:09:d0: 39:73:df:6c:9a:36:a1:34:ea:69:91:8b:1c:d0:66: 75:8f:23:83:ec:81:cd:69:cd:5c:00:83:17:2b:8a: 70:25:99:7d:4f:76:ca:3d:83:ca:ad:04:24:ae:7a: 47:89:b8:1c:56:da:ef:b3:03:26:4e:64:69:7d:60: 51:d3:e7:8e:db:62:b9:a1:2f:1c:ae:2e:a7:a3:42: d0:a4:a2:24:b1:fd:2c:c0:dd:af:36:a9:2f:4c:b1: f1:bf:6c:a5:5d:a1:14:59:79:47:89:e6:7e:65:66: 2f:b1:12:32:3c:c2:e1:ba:64:7f:d4:98:bb:72:47: d1:d1:2a:21:56:5e:fc:5e:d9:b9:bc:4e:51:c7:b6: 95:9f:5e:c6:f6:c3:7a:56:94:e3:7d:40:28:d0:0c: 97:02:c5:8e:74:c5:c4:8b:d2:c0:ee:4a:0e:1d:fd: d2:1e:65:4c:f3:a2:e7:26:a0:13:da:5a:a4:ad:a6: a9:38:f7:f4:4b:12:cc:2d:2a:10:f7:3a:4d:9e:15: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:76:32:1C:54:81:2F:AE:4B:53:9B:9F:1F:A2:3D:E1:C7:34:1F:8A X509v3 Authority Key Identifier: keyid:60:BB:90:B1:67:91:DE:5A:B0:37:7A:1A:7E:B8:30:76:CF:EB:20:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLuQsWeR3lqwN3oafrgwds_rINo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/22c31b-1140-4f2f-9ea9-3b1dd3d547e6/1/YLuQsWeR3lqwN3oafrgwds_rINo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ce:e5:88:72:30:83:d5:44:fb:2f:76:da:6b:6b:85:46:02: e6:18:34:49:66:6d:0a:fe:82:c6:d8:3b:41:f0:6a:76:93:69: 8e:ba:f3:97:a7:50:70:d5:58:54:8f:66:a4:11:00:76:9c:3d: c2:bd:47:02:16:38:4f:d7:22:be:7e:64:19:1a:3d:ad:f8:dc: 52:5c:7b:b9:e7:c2:c2:63:66:b9:14:59:86:d2:d7:3e:9e:1d: 1b:38:b0:d8:5d:13:48:f8:b1:31:47:72:b7:41:a1:19:bb:1e: 64:c9:a9:bd:b5:66:c7:16:75:87:65:52:2f:10:f9:78:71:f4: 35:af:22:b9:53:fc:2c:73:bf:4c:8d:97:53:f9:15:a8:4d:b4: 70:a3:31:8a:5f:b5:b2:1b:f0:20:65:6a:b0:80:58:3d:8e:c4: d8:72:e8:35:a9:6b:6a:3c:60:3f:49:4e:3b:a4:e0:47:cf:1b: 55:d9:bf:0d:2c:d5:21:0f:26:3a:97:6e:52:5d:42:30:45:d2: f7:f7:07:2b:46:5d:18:b0:5f:0f:6e:78:7b:ed:37:0a:bc:63: 50:66:6a:45:06:fe:b5:81:88:41:fd:a4:47:de:5e:09:84:53: b5:2f:c7:4d:a7:de:5d:ef:bb:9d:e4:7c:ee:1a:b5:c7:53:f1: 30:ab:c5:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvZQPMJzHThehssnrnDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYmI5MGIxNjc5MWRlNWFiMDM3N2ExYTdlYjgzMDc2Y2Zl YjIwZGEwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD EyhiZDc2MzIxYzU0ODEyZmFlNGI1MzliOWYxZmEyM2RlMWM3MzQxZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonkIDY6sj+GVUVm4v56IMu6iyopN wh/ogW1Epm9PfkN7DVvTHiwtekbzq4OZUvJZ8hPd+fGHNy/PCdA5c99smjahNOpp kYsc0GZ1jyOD7IHNac1cAIMXK4pwJZl9T3bKPYPKrQQkrnpHibgcVtrvswMmTmRp fWBR0+eO22K5oS8cri6no0LQpKIksf0swN2vNqkvTLHxv2ylXaEUWXlHieZ+ZWYv sRIyPMLhumR/1Ji7ckfR0SohVl78Xtm5vE5Rx7aVn17G9sN6VpTjfUAo0AyXAsWO dMXEi9LA7koOHf3SHmVM86LnJqAT2lqkraapOPf0SxLMLSoQ9zpNnhWmOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL12MhxUgS+uS1Obnx+iPeHHNB+KMB8GA1UdIwQY MBaAFGC7kLFnkd5asDd6Gn64MHbP6yDaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yMmMzMWItMTE0MC00ZjJmLTllYTkt M2IxZGQzZDU0N2U2LzEvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8yMmMzMWItMTE0MC00ZjJmLTllYTktM2IxZGQzZDU0N2U2 LzEvWUx1UXNXZVIzbHF3TjNvYWZyZ3dkc19ySU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac7liHIw g9VE+y922mtrhUYC5hg0SWZtCv6Cxtg7QfBqdpNpjrrzl6dQcNVYVI9mpBEAdpw9 wr1HAhY4T9civn5kGRo9rfjcUlx7uefCwmNmuRRZhtLXPp4dGziw2F0TSPixMUdy t0GhGbseZMmpvbVmxxZ1h2VSLxD5eHH0Na8iuVP8LHO/TI2XU/kVqE20cKMxil+1 shvwIGVqsIBYPY7E2HLoNalrajxgP0lOO6TgR88bVdm/DSzVIQ8mOpduUl1CMEXS 9/cHK0ZdGLBfD254e+03CrxjUGZqRQb+tYGIQf2kR95eCYRTtS/HTafeXe+7neR8 7hq1x1PxMKvFKA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:48 2025 by rpki-client