This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json) Hash identifier: +S+UroolyWHFrNL61g23U7dNNHlVx1R8hj3vyCDDnXM= Subject key identifier: 6E:23:1F:28:81:7B:CB:DA:B9:97:AD:D5:62:41:1E:80:61:52:7A:A5 Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Certificate serial: 019AF1D20F0545642733BF7C36385DACDF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: Rnui94A1EZcVpFEwY6hJBa+hjuSVXA1QiG44nV5zZUM=) 2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0f:05:45:64:27:33:bf:7c:36:38:5d:ac:df:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=6e231f28817bcbdab997add562411e8061527aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f0:79:7d:a7:65:08:51:26:e0:60:66:e0:de: 0d:8f:73:27:e4:84:75:77:eb:a4:bb:38:36:24:4f: 75:8b:7b:6d:92:d1:c8:86:0f:eb:64:6f:13:85:be: ac:dc:b9:19:c6:f2:28:c8:07:91:c2:29:e6:6e:3c: bc:b7:0c:83:16:9b:6c:4b:1f:bb:ee:00:32:24:87: 6a:47:96:f3:70:2e:a4:f1:6f:31:6d:e4:c0:f5:bd: d5:9e:9f:0f:0c:40:4a:b6:80:f0:1f:22:c8:3f:39: cf:41:20:94:6c:2f:6c:63:82:6a:40:bd:45:e8:99: c1:c3:cb:08:2f:1b:04:76:ae:2e:b9:e8:2f:e6:02: db:5f:24:af:e6:b8:3d:57:18:23:27:3f:80:8b:03: 1e:2d:2f:c0:6b:4f:e8:ec:9f:7b:57:c0:d6:53:13: d2:30:ee:5a:3f:21:93:d7:43:a4:1f:26:f9:db:6e: a9:84:aa:6d:82:92:9e:02:92:00:3b:5f:d9:6b:fa: 59:4f:57:49:57:0c:2a:68:cb:d1:2f:94:73:4b:d6: 1d:2c:24:e6:f1:6c:81:87:c1:fc:52:4b:63:52:16: 3d:4b:d0:35:a5:02:09:4d:e9:5e:ae:7c:b4:b8:12: e4:0e:24:28:3c:af:b3:66:82:6b:b0:12:66:74:e4: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:23:1F:28:81:7B:CB:DA:B9:97:AD:D5:62:41:1E:80:61:52:7A:A5 X509v3 Authority Key Identifier: keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0f:4a:1d:4c:13:1c:d5:e0:02:31:47:5e:33:d5:0f:2d:a2: 77:94:65:26:49:f9:69:57:39:89:5c:46:cc:f2:fd:07:6e:2e: 08:da:3f:db:68:2d:56:2b:07:97:53:70:05:54:a8:7c:e2:89: 2b:f1:89:2a:9c:8a:75:79:13:d9:08:7f:9d:d0:7a:d8:cd:2a: b1:a7:0b:db:e8:ef:7c:9e:40:dc:a0:6e:45:2a:e0:df:a2:73: bc:f2:72:6d:2b:36:a2:e6:93:d4:2f:8a:ab:2e:2c:ae:71:c7: ff:15:5f:35:4a:03:b3:57:66:8d:74:20:a4:05:69:ec:c9:ad: 67:09:d2:8c:12:ba:48:ee:b8:de:75:3f:66:02:e8:4c:88:08: 0a:e0:d5:e1:4b:ef:1c:4f:aa:dd:4a:3e:ab:f1:b5:5a:cb:a5: d7:cb:cc:5e:ce:e7:fe:e6:85:29:59:4a:bd:ed:cb:96:38:2d: 46:a3:6d:07:6e:6f:c8:ed:f9:8b:70:b1:ac:7c:85:e2:14:cb: 30:2f:8c:b2:74:15:10:86:f4:b2:d1:16:e8:52:14:26:26:85: e4:59:19:27:49:57:e2:ba:d8:13:2c:0d:25:b5:1a:1c:38:a0: 5d:3a:7b:c2:71:da:1b:f9:6c:21:f1:65:c2:b4:7c:c3:05:6c: 98:e7:7a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g8FRWQnM798NjhdrN8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1 NjhjYjUwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD Eyg2ZTIzMWYyODgxN2JjYmRhYjk5N2FkZDU2MjQxMWU4MDYxNTI3YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfB5fadlCFEm4GBm4N4Nj3Mn5IR1 d+ukuzg2JE91i3ttktHIhg/rZG8Thb6s3LkZxvIoyAeRwinmbjy8twyDFptsSx+7 7gAyJIdqR5bzcC6k8W8xbeTA9b3Vnp8PDEBKtoDwHyLIPznPQSCUbC9sY4JqQL1F 6JnBw8sILxsEdq4uuegv5gLbXySv5rg9VxgjJz+AiwMeLS/Aa0/o7J97V8DWUxPS MO5aPyGT10OkHyb5226phKptgpKeApIAO1/Za/pZT1dJVwwqaMvRL5RzS9YdLCTm 8WyBh8H8UktjUhY9S9A1pQIJTelerny0uBLkDiQoPK+zZoJrsBJmdOT21wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4jHyiBe8vauZet1WJBHoBhUnqlMB8GA1UdIwQY MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw9KHUwT HNXgAjFHXjPVDy2id5RlJkn5aVc5iVxGzPL9B24uCNo/22gtVisHl1NwBVSofOKJ K/GJKpyKdXkT2Qh/ndB62M0qsacL2+jvfJ5A3KBuRSrg36JzvPJybSs2ouaT1C+K qy4srnHH/xVfNUoDs1dmjXQgpAVp7MmtZwnSjBK6SO643nU/ZgLoTIgICuDV4Uvv HE+q3Uo+q/G1Wsul18vMXs7n/uaFKVlKve3LljgtRqNtB25vyO35i3CxrHyF4hTL MC+MsnQVEIb0stEW6FIUJiaF5FkZJ0lX4rrYEywNJbUaHDigXTp7wnHaG/lsIfFl wrR8wwVsmOd6Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:56 2025 by rpki-client