This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json) Hash identifier: B+fDl+48FhRN0HZzC4VpJIfFQlo6Svuo6EalOIGX8JA= Subject key identifier: 8E:EB:B9:AE:B7:61:C8:65:F0:0D:6B:BA:C5:BB:FB:6C:CD:A3:D4:25 Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Certificate serial: 019AF31B46B2D1DC6144F85AD5CE74BBD9B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft Manifest number: 124C Signing time: Sat 06 Dec 2025 10:00:42 +0000 Manifest this update: Sat 06 Dec 2025 10:00:42 +0000 Manifest next update: Sun 07 Dec 2025 10:00:42 +0000 Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: FkJqd3Lj1FoMeS/aNA2nJ7wAgRxHJjZQUz1o2QeIRXE=) 2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:46:b2:d1:dc:61:44:f8:5a:d5:ce:74:bb:d9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Validity Not Before: Dec 6 10:00:42 2025 GMT Not After : Dec 7 10:00:42 2025 GMT Subject: CN=8eebb9aeb761c865f00d6bbac5bbfb6ccda3d425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:88:9d:04:d0:a1:6d:d1:2c:cf:e6:81:63:0f: 2f:78:fc:08:78:c4:9e:c4:3b:c8:0e:22:92:53:a0: 02:0d:d4:4f:b2:b3:5b:1d:f3:90:74:27:bb:24:73: 67:9a:a1:4c:71:38:fe:d2:1d:8d:b8:4d:09:e7:a4: b6:06:82:2e:64:cd:7b:7d:11:5e:17:2e:7f:a7:c6: 88:b0:3b:d1:e8:cc:a1:88:80:5b:01:ee:36:7e:82: 07:11:4e:b7:d3:d2:ec:36:45:6b:91:eb:9d:ca:ac: 9d:d7:56:8b:3c:8f:db:75:12:46:52:13:14:f2:c8: b5:bd:60:92:0e:0c:54:cc:26:bf:ee:db:81:32:b5: 2e:f7:d1:31:71:78:5a:34:b9:cf:2c:90:a7:71:ae: b7:f2:66:55:92:07:39:4d:c2:9c:a4:93:0a:40:e4: 9b:f2:30:81:13:96:45:3e:09:ab:ac:7a:4d:98:a1: 92:df:cc:19:13:77:ad:e6:aa:e3:77:64:13:cf:2a: cd:a7:3e:de:18:8b:67:f9:db:48:8d:8d:29:70:4c: 2e:13:ab:7f:2f:cf:22:8d:13:75:36:eb:e6:29:d9: 36:8b:b0:41:53:03:fc:61:2a:d8:78:30:58:19:93: 3b:bf:68:a1:1c:d7:de:4f:df:0a:d3:f8:e3:b3:30: 96:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:B9:AE:B7:61:C8:65:F0:0D:6B:BA:C5:BB:FB:6C:CD:A3:D4:25 X509v3 Authority Key Identifier: keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:85:40:c2:91:f6:0b:17:49:e4:da:58:6c:65:17:34:74: e6:3b:57:8a:7a:9c:e7:8c:40:65:63:34:c5:dd:4d:ca:aa:d1: ed:dc:71:da:c7:44:fc:58:8f:10:93:89:0b:30:ea:ef:47:7c: de:ec:9c:a3:58:b1:7b:4d:d8:f2:fc:77:22:fd:59:81:96:b9: cb:80:dd:3c:28:d5:3a:45:b9:c0:48:72:d3:3f:6e:80:74:95: ac:7b:36:7e:c1:b4:56:6a:37:99:30:55:fa:42:39:80:7c:33: a4:78:dc:71:b4:cc:b3:f1:cd:a4:c6:dd:d7:2b:ed:8b:ef:8d: 66:34:34:7e:75:30:c5:b5:0a:27:82:cb:30:77:f8:98:d9:43: 21:71:fc:64:1c:e5:20:24:0f:60:c0:a1:d1:b9:20:4a:ed:0c: e2:77:c6:b9:6f:f1:40:08:23:da:c1:dd:77:e0:86:75:59:c4: 8a:61:38:93:3b:d9:66:ec:a8:ab:e1:bc:3e:0c:71:29:41:d8: 36:2a:37:c6:ef:36:a7:69:85:39:e4:1c:3f:ec:48:9e:a2:41: 95:9f:ae:94:b5:c8:c9:6b:8b:9b:8a:a0:94:2d:ad:a6:1b:13: bb:b9:c0:9e:a8:99:b0:86:59:02:4f:7a:d3:9c:94:10:2e:ad: 22:7e:18:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0ay0dxhRPha1c50u9m2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0 MjE2YTcwHhcNMjUxMjA2MTAwMDQyWhcNMjUxMjA3MTAwMDQyWjAzMTEwLwYDVQQD Eyg4ZWViYjlhZWI3NjFjODY1ZjAwZDZiYmFjNWJiZmI2Y2NkYTNkNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oidBNChbdEsz+aBYw8vePwIeMSe xDvIDiKSU6ACDdRPsrNbHfOQdCe7JHNnmqFMcTj+0h2NuE0J56S2BoIuZM17fRFe Fy5/p8aIsDvR6MyhiIBbAe42foIHEU6309LsNkVrkeudyqyd11aLPI/bdRJGUhMU 8si1vWCSDgxUzCa/7tuBMrUu99ExcXhaNLnPLJCnca638mZVkgc5TcKcpJMKQOSb 8jCBE5ZFPgmrrHpNmKGS38wZE3et5qrjd2QTzyrNpz7eGItn+dtIjY0pcEwuE6t/ L88ijRN1NuvmKdk2i7BBUwP8YSrYeDBYGZM7v2ihHNfeT98K0/jjszCWTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7rua63Ychl8A1rusW7+2zNo9QlMB8GA1UdIwQY MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJ2FQMKR 9gsXSeTaWGxlFzR05jtXinqc54xAZWM0xd1NyqrR7dxx2sdE/FiPEJOJCzDq70d8 3uyco1ixe03Y8vx3Iv1ZgZa5y4DdPCjVOkW5wEhy0z9ugHSVrHs2fsG0Vmo3mTBV +kI5gHwzpHjccbTMs/HNpMbd1yvti++NZjQ0fnUwxbUKJ4LLMHf4mNlDIXH8ZBzl ICQPYMCh0bkgSu0M4nfGuW/xQAgj2sHdd+CGdVnEimE4kzvZZuyoq+G8PgxxKUHY Nio3xu82p2mFOeQcP+xInqJBlZ+ulLXIyWuLm4qglC2tphsTu7nAnqiZsIZZAk96 05yUEC6tIn4YtA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:32:42 2025 by rpki-client