This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft File: Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft (raw, json) Hash identifier: SpkCQP+74x2HYAkANmxGzcolCUNo2JWMytv/QhYQiqk= Subject key identifier: 28:87:81:DB:72:A5:86:32:1A:B3:A5:6D:C4:46:11:40:2B:71:6F:BE Authority key identifier: 63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0 Certificate issuer: /CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0 Certificate serial: 019AF1D1F528B27E26BEE65E3A5F45C84751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft Manifest number: 08EC Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl (hash: wehsarJXrHPvjeyO/8i0BkDHzH4xyI01uBdC5X9oz60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f5:28:b2:7e:26:be:e6:5e:3a:5f:45:c8:47:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63a8ca1666206d2cf12b507872ead0f5a793d0e0 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=288781db72a586321ab3a56dc44611402b716fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:ed:42:e6:d3:7d:2c:ee:71:52:1e:73:b7: 1c:3f:31:38:c8:88:84:8f:31:bb:bb:57:42:be:f1: 41:60:13:84:a9:36:cc:d6:da:4e:bd:81:65:f6:c5: d6:4e:13:cf:12:72:da:d1:4b:a3:dc:8b:46:48:90: 8e:cd:d6:1e:9f:8f:2d:b6:e5:ba:bf:c1:f0:12:1c: 91:68:87:75:e8:33:9e:d3:0b:6c:12:12:ca:1c:39: 0a:f2:b5:9e:f0:a6:9e:42:30:d5:73:7b:fc:fc:70: 40:18:cf:c3:fa:8d:bd:b4:02:38:9d:14:91:a7:42: fa:3c:51:1a:55:58:bf:32:b6:8a:a4:ae:b9:fc:79: ff:06:99:4c:9e:d3:11:32:92:1c:3a:db:7b:2f:eb: dc:0c:b8:27:d8:07:7b:de:87:88:f4:d5:8e:28:2d: 8f:b5:f9:4c:66:9d:50:9b:9d:33:fd:60:c5:cf:ce: b1:16:64:57:a8:16:a5:23:53:2c:1a:3f:81:67:8b: f8:92:f2:21:22:39:6f:90:40:8f:29:17:24:56:3e: c3:a6:a2:1f:28:23:b1:ed:cf:bc:7c:6a:00:00:18: 86:99:dc:d5:b5:7f:d3:32:34:b9:e9:49:f8:3e:8e: b6:66:a0:91:10:cb:ed:b5:12:69:6d:0d:8e:a1:fe: 86:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:87:81:DB:72:A5:86:32:1A:B3:A5:6D:C4:46:11:40:2B:71:6F:BE X509v3 Authority Key Identifier: keyid:63:A8:CA:16:66:20:6D:2C:F1:2B:50:78:72:EA:D0:F5:A7:93:D0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6jKFmYgbSzxK1B4curQ9aeT0OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0446b1-df2f-4261-a1ba-75ab21f3b3d0/1/Y6jKFmYgbSzxK1B4curQ9aeT0OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:60:d4:71:20:5e:34:92:d9:08:25:6e:04:ba:d3:1c:e0:95: 4e:7e:65:3f:ff:bb:d6:06:28:28:b8:12:0a:a6:78:9e:ef:76: 78:cb:36:a8:77:90:cd:4a:f3:9c:d9:ab:94:7d:dd:68:bb:5a: 33:84:26:e2:4c:ec:5f:2f:19:db:36:c5:da:85:a7:ea:af:67: 45:d6:21:27:c0:67:46:a1:eb:6a:78:c6:b5:f1:35:a8:97:17: b7:1c:7b:f8:93:bd:2a:1e:0f:c2:dd:8a:af:19:41:1e:f0:e5: 51:7e:6d:98:fb:60:01:61:2b:d8:d0:a5:75:95:a6:fa:94:55: 8f:bc:5d:0f:8a:85:28:71:44:6c:7e:fd:0b:4f:78:83:87:b6: cd:7f:17:8d:49:4f:12:56:37:e3:df:74:9c:63:b4:02:37:aa: 43:ed:6f:c0:13:f2:9e:46:39:ab:97:c6:46:84:db:19:2a:d6: 30:6a:b1:0e:0e:9f:36:b5:ec:76:57:ca:6b:7b:48:b3:44:5a: 44:27:b1:f8:42:48:30:44:81:e8:4c:23:09:5c:38:fa:28:5b: 49:4e:27:8c:87:5c:8c:e8:bd:88:82:c0:bf:6c:44:06:3f:84: 1b:36:d1:83:9c:a0:ed:c4:94:34:ff:65:a6:f1:60:02:61:5a: 7c:c0:d1:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fUosn4mvuZeOl9FyEdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYThjYTE2NjYyMDZkMmNmMTJiNTA3ODcyZWFkMGY1YTc5 M2QwZTAwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EygyODg3ODFkYjcyYTU4NjMyMWFiM2E1NmRjNDQ2MTE0MDJiNzE2ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5XtQubTfSzucVIec7ccPzE4yIiE jzG7u1dCvvFBYBOEqTbM1tpOvYFl9sXWThPPEnLa0Uuj3ItGSJCOzdYen48ttuW6 v8HwEhyRaId16DOe0wtsEhLKHDkK8rWe8KaeQjDVc3v8/HBAGM/D+o29tAI4nRSR p0L6PFEaVVi/MraKpK65/Hn/BplMntMRMpIcOtt7L+vcDLgn2Ad73oeI9NWOKC2P tflMZp1Qm50z/WDFz86xFmRXqBalI1MsGj+BZ4v4kvIhIjlvkECPKRckVj7DpqIf KCOx7c+8fGoAABiGmdzVtX/TMjS56Un4Po62ZqCREMvttRJpbQ2Oof6GZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiHgdtypYYyGrOlbcRGEUArcW++MB8GA1UdIwQY MBaAFGOoyhZmIG0s8StQeHLq0PWnk9DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8wNDQ2YjEtZGYyZi00MjYxLWExYmEt NzVhYjIxZjNiM2QwLzEvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8wNDQ2YjEtZGYyZi00MjYxLWExYmEtNzVhYjIxZjNiM2Qw LzEvWTZqS0ZtWWdiU3p4SzFCNGN1clE5YWVUME9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGDUcSBe NJLZCCVuBLrTHOCVTn5lP/+71gYoKLgSCqZ4nu92eMs2qHeQzUrznNmrlH3daLta M4Qm4kzsXy8Z2zbF2oWn6q9nRdYhJ8BnRqHranjGtfE1qJcXtxx7+JO9Kh4Pwt2K rxlBHvDlUX5tmPtgAWEr2NCldZWm+pRVj7xdD4qFKHFEbH79C094g4e2zX8XjUlP ElY34990nGO0AjeqQ+1vwBPynkY5q5fGRoTbGSrWMGqxDg6fNrXsdlfKa3tIs0Ra RCex+EJIMESB6EwjCVw4+ihbSU4njIdcjOi9iILAv2xEBj+EGzbRg5yg7cSUNP9l pvFgAmFafMDRLw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:09 2025 by rpki-client