This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft File: y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json) Hash identifier: FFT/Lyb4mgGynpAhEKzeX4dmya31LyMntV2IrUhiwG4= Subject key identifier: 9F:8C:CF:DB:0F:3D:A7:83:D2:B2:C2:CB:F3:5E:AC:6F:09:F4:13:0F Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62 Certificate issuer: /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62 Certificate serial: 019AF208ED9F51D3AF0FD58737F6C6621A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft Manifest number: 078B Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: jfcYUia6+biXnu9jrZpl4dewREUO+K/K9VqtEnRgMS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:9f:51:d3:af:0f:d5:87:37:f6:c6:62:1a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=9f8ccfdb0f3da783d2b2c2cbf35eac6f09f4130f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:0f:83:09:df:d2:77:2a:5f:42:9f:7b:36: dd:21:99:6e:05:d6:81:ec:de:2f:15:f3:ed:f6:5e: 35:54:fc:cd:be:87:66:71:19:3b:f9:ac:d7:fe:0c: d4:35:61:70:b7:dc:c9:14:65:35:0a:9a:cd:49:cd: 9d:f3:4b:60:7d:07:fb:8e:b2:15:9c:db:67:50:ed: e3:90:71:03:d0:fe:68:be:b4:3c:b6:e3:24:05:81: 6b:46:c6:30:51:c1:b9:93:d6:b3:e2:c1:ec:c2:18: e6:c2:24:97:1f:7e:dc:83:ef:c5:13:73:fc:6f:c6: 6f:8c:58:6d:bf:b0:3b:2f:d6:35:4f:da:ba:6f:86: eb:a1:68:a8:86:20:ce:72:fe:ca:65:91:25:8e:8e: af:82:2a:46:d6:37:cb:c9:cb:71:56:3c:40:38:7e: 11:aa:e4:15:fa:d7:65:d3:ba:6d:91:a0:bd:d1:8a: 09:41:45:4d:2c:88:ff:e2:0b:b6:1f:79:7d:00:0d: 05:17:a8:ca:a6:49:60:b9:97:11:b1:1a:38:b7:21: d3:cd:3b:b3:88:6b:98:2d:47:7e:5e:65:e3:26:f3: bd:48:a6:ea:9a:3b:2a:8a:31:7b:d2:95:eb:c4:f2: 48:da:7f:aa:44:ec:dc:97:2b:06:60:0e:15:e1:b1: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8C:CF:DB:0F:3D:A7:83:D2:B2:C2:CB:F3:5E:AC:6F:09:F4:13:0F X509v3 Authority Key Identifier: keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e5:94:ea:34:fb:6f:6f:a6:90:e0:b7:32:41:2a:e9:b8:6a: 96:78:c0:37:d7:ad:32:42:ec:6c:09:38:31:e5:c3:9f:57:34: ae:c6:a0:4c:d8:e0:a8:55:3e:bd:92:1d:ec:84:43:07:3a:76: 40:f0:2a:b2:43:d2:c6:25:cf:e1:88:62:54:23:0f:05:93:7b: 19:dd:d0:ce:87:16:77:d3:e6:8b:dd:97:fa:d1:df:19:08:6c: 89:db:62:47:ee:2b:2a:f6:11:8d:5e:7b:62:6a:62:4a:b0:9b: 8c:77:d6:7f:4d:7a:73:06:c4:7e:e4:61:a4:91:0a:86:12:65: ea:19:9c:1a:a7:f2:1a:fd:76:fd:d7:d2:4b:6b:a7:24:05:02: 54:af:cc:0e:6f:de:bb:11:6d:b8:15:fc:51:ee:dd:59:6f:8f: de:93:66:63:7f:2f:b9:ab:34:be:11:2f:d4:dd:c4:46:12:ed: 89:59:8c:50:6b:e7:8a:58:e9:04:99:f6:09:df:e3:04:fc:84: 95:c2:6d:cf:58:dd:d2:5c:e5:18:96:ab:67:49:6f:2c:06:42: 32:18:ce:50:bb:8c:6d:cc:a0:db:11:1a:29:94:d1:57:f6:82: b3:b2:fd:8e:94:a6:8d:a3:25:59:6c:e1:04:af:02:08:19:2b: 80:ec:b4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO2fUdOvD9WHN/bGYho5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmIwMjc5ZmNkMjNhOGU1ODNmMzQ1YWI5MDQ3MjhlNmQw ZTRjNjIwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg5ZjhjY2ZkYjBmM2RhNzgzZDJiMmMyY2JmMzVlYWM2ZjA5ZjQxMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOwPgwnf0ncqX0KfezbdIZluBdaB 7N4vFfPt9l41VPzNvodmcRk7+azX/gzUNWFwt9zJFGU1CprNSc2d80tgfQf7jrIV nNtnUO3jkHED0P5ovrQ8tuMkBYFrRsYwUcG5k9az4sHswhjmwiSXH37cg+/FE3P8 b8ZvjFhtv7A7L9Y1T9q6b4broWiohiDOcv7KZZEljo6vgipG1jfLyctxVjxAOH4R quQV+tdl07ptkaC90YoJQUVNLIj/4gu2H3l9AA0FF6jKpklguZcRsRo4tyHTzTuz iGuYLUd+XmXjJvO9SKbqmjsqijF70pXrxPJI2n+qROzclysGYA4V4bEMYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+Mz9sPPaeD0rLCy/NerG8J9BMPMB8GA1UdIwQY MBaAFMv7Ann80jqOWD80WrkEco5tDkxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgt ODBmODIwMjcxNGRhLzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgtODBmODIwMjcxNGRh LzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuWU6jT7 b2+mkOC3MkEq6bhqlnjAN9etMkLsbAk4MeXDn1c0rsagTNjgqFU+vZId7IRDBzp2 QPAqskPSxiXP4YhiVCMPBZN7Gd3QzocWd9Pmi92X+tHfGQhsidtiR+4rKvYRjV57 YmpiSrCbjHfWf016cwbEfuRhpJEKhhJl6hmcGqfyGv12/dfSS2unJAUCVK/MDm/e uxFtuBX8Ue7dWW+P3pNmY38vuas0vhEv1N3ERhLtiVmMUGvniljpBJn2Cd/jBPyE lcJtz1jd0lzlGJarZ0lvLAZCMhjOULuMbcyg2xEaKZTRV/aCs7L9jpSmjaMlWWzh BK8CCBkrgOy0AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:51 2025 by rpki-client