This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json) Hash identifier: mtjy+R4Wuj1NC4XNWDCkkHYxpVckFkUYx2clEvS1lZk= Subject key identifier: CD:14:05:7D:99:E6:E1:71:6A:68:FD:D2:92:D9:58:05:09:EC:F6:B5 Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Certificate serial: 019AF20927575ECDF03E195A2013DC0E8C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft Manifest number: 01B6 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: 9EGEGGCqzDnPpQ/GIoYbp+Yo9//uis/CvK28jJSI9oA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:57:5e:cd:f0:3e:19:5a:20:13:dc:0e:8c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=cd14057d99e6e1716a68fdd292d9580509ecf6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:38:f1:30:0a:96:e6:27:19:d0:68:28:b5: ef:31:89:44:da:c3:e4:39:73:92:41:50:ea:48:c0: 87:0d:64:ca:0c:ec:86:74:f7:1e:ec:99:ba:65:c4: 8c:51:9f:f1:36:76:e9:9c:01:8f:79:06:62:83:11: 47:49:54:bf:41:8b:1f:8d:b4:f9:53:28:28:1d:6c: e0:1e:f1:c3:70:bd:fd:31:21:f5:ef:3a:6c:16:70: f2:ed:f4:71:1f:b8:b4:11:1c:c8:7a:f9:1b:10:ed: b7:bf:f8:39:be:b2:bf:81:e6:14:50:54:66:2d:48: ce:3a:1c:63:62:95:d4:58:17:e0:9e:6c:1c:b5:ee: 29:89:5c:07:9f:83:21:28:2f:ae:5f:36:5c:14:ff: 39:63:d2:4b:17:e1:0b:55:b1:90:2d:56:69:90:bc: 65:af:81:16:45:0f:74:a9:a8:11:ea:ac:8e:16:a0: a8:f8:bf:69:c4:3c:5e:82:39:0f:8a:24:61:8a:e6: c3:30:33:0e:37:60:86:2e:fa:2a:02:a5:a6:f1:08: c9:ca:39:8b:29:c4:b5:a3:e0:15:a0:50:b7:8f:cb: 52:3a:6c:7f:de:cc:de:e4:bd:48:71:fb:eb:b1:90: 0b:49:1a:b5:ce:e4:ee:54:21:8f:99:48:f0:39:70: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:14:05:7D:99:E6:E1:71:6A:68:FD:D2:92:D9:58:05:09:EC:F6:B5 X509v3 Authority Key Identifier: keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ac:87:3d:61:c6:d3:dd:2f:44:d1:b9:b6:ff:3e:73:b2:52: 81:58:c2:b8:cf:d2:e2:ed:27:3f:99:40:bb:1c:b3:b2:fd:15: af:0b:07:6c:92:0c:f9:ed:4e:d6:40:b0:30:8c:1c:d4:56:28: be:cd:f7:16:ec:71:9a:1f:f0:8c:6a:bf:91:6d:a3:b3:01:81: 96:4b:3b:ae:92:63:51:dc:b4:0e:2e:b5:16:7d:71:98:d7:3b: c7:8f:82:1a:01:c4:18:7a:c0:2e:f6:e1:af:b6:3f:fe:31:11: ef:9b:04:de:57:8d:69:f3:38:bb:a0:84:b3:82:90:43:56:9c: b2:2f:d0:08:f6:2d:e6:a1:68:43:26:b1:80:a4:e2:22:4b:1c: 92:c5:89:13:fc:35:e1:3a:d6:f1:72:24:54:99:dc:32:4e:25: f2:5c:24:c3:2a:24:3c:1f:d3:9a:6d:e9:57:a4:7a:a1:3c:1e: 13:f1:90:22:0a:de:28:23:1b:e1:ac:cc:29:c0:c2:e6:fa:ca: 59:c7:63:8f:81:35:93:86:12:7a:fc:9e:50:2d:cd:6d:64:f3: 2d:aa:93:ca:0a:d9:63:6b:b6:45:bc:ec:bb:41:ed:8e:1f:4a: 2e:e1:77:fa:b6:36:10:3a:ff:bb:85:d7:c2:38:2b:08:24:7c: 0b:a3:f5:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSdXXs3wPhlaIBPcDoxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj YzcwYTkwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD EyhjZDE0MDU3ZDk5ZTZlMTcxNmE2OGZkZDI5MmQ5NTgwNTA5ZWNmNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryw48TAKluYnGdBoKLXvMYlE2sPk OXOSQVDqSMCHDWTKDOyGdPce7Jm6ZcSMUZ/xNnbpnAGPeQZigxFHSVS/QYsfjbT5 UygoHWzgHvHDcL39MSH17zpsFnDy7fRxH7i0ERzIevkbEO23v/g5vrK/geYUUFRm LUjOOhxjYpXUWBfgnmwcte4piVwHn4MhKC+uXzZcFP85Y9JLF+ELVbGQLVZpkLxl r4EWRQ90qagR6qyOFqCo+L9pxDxegjkPiiRhiubDMDMON2CGLvoqAqWm8QjJyjmL KcS1o+AVoFC3j8tSOmx/3sze5L1IcfvrsZALSRq1zuTuVCGPmUjwOXCajQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0UBX2Z5uFxamj90pLZWAUJ7Pa1MB8GA1UdIwQY MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt ODk3YTRjYzkyOTIyLzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKyHPWHG 090vRNG5tv8+c7JSgVjCuM/S4u0nP5lAuxyzsv0VrwsHbJIM+e1O1kCwMIwc1FYo vs33Fuxxmh/wjGq/kW2jswGBlks7rpJjUdy0Di61Fn1xmNc7x4+CGgHEGHrALvbh r7Y//jER75sE3leNafM4u6CEs4KQQ1acsi/QCPYt5qFoQyaxgKTiIkscksWJE/w1 4TrW8XIkVJncMk4l8lwkwyokPB/Tmm3pV6R6oTweE/GQIgreKCMb4azMKcDC5vrK Wcdjj4E1k4YSevyeUC3NbWTzLaqTygrZY2u2Rbzsu0Htjh9KLuF3+rY2EDr/u4XX wjgrCCR8C6P1nw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:56 2025 by rpki-client