This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json) Hash identifier: jrHqE3h2Sft9j6ZBV4RZ53zskzKt1msXcCKgO0TWuaA= Subject key identifier: 8F:7B:58:53:F2:C6:53:E8:B1:D9:DA:85:0E:C5:77:4B:99:B4:71:A7 Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60 Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660 Certificate serial: 019AF3C095D840ACDEC97A15553CEC91FDD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 13:01:16 +0000 Manifest this update: Sat 06 Dec 2025 13:01:16 +0000 Manifest next update: Sun 07 Dec 2025 13:01:16 +0000 Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: U27fyECSRoGxsO3yN/131Yjd6x4OlzCu+QpqzvJCwyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:95:d8:40:ac:de:c9:7a:15:55:3c:ec:91:fd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660 Validity Not Before: Dec 6 13:01:16 2025 GMT Not After : Dec 7 13:01:16 2025 GMT Subject: CN=8f7b5853f2c653e8b1d9da850ec5774b99b471a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9f:21:8e:3c:0e:ea:99:50:85:39:22:49:2a: 55:04:1d:84:04:b8:30:ab:e8:b1:78:26:47:05:50: bf:43:fb:ef:6e:63:47:7f:c7:ed:de:92:60:05:ef: 33:b2:c8:83:8a:19:3d:f4:33:78:20:a1:6c:b2:03: 71:34:4d:a9:d8:44:c9:fb:80:c6:6a:a6:c3:eb:be: 3c:96:b9:0c:d9:c8:b3:82:e6:57:95:9d:d1:d4:00: 1c:6d:8f:5b:a5:7d:91:50:59:b7:d7:05:ed:6a:4a: ce:30:f7:37:50:0e:22:e4:89:f0:4c:71:59:50:0f: 78:e0:14:14:f8:23:ee:7c:a0:7f:ab:c5:b3:36:c1: 46:b7:82:ce:dd:89:b4:69:9b:0e:95:3b:f0:30:12: 82:aa:5b:fc:5b:40:75:3e:29:1f:d9:37:4e:a2:e7: 2e:62:b1:a1:8e:d5:4c:1a:6d:9f:2f:46:71:49:29: e5:f9:37:b8:48:18:7c:c5:ee:9f:00:e1:d6:3b:11: 53:22:bd:7d:17:85:fb:ca:6a:fe:8a:f0:66:a9:b6: db:26:82:47:f7:00:53:ee:70:5a:8b:70:35:4e:64: 1e:2d:28:3f:27:c5:32:0b:75:ca:ab:0e:88:53:7f: 0b:8a:fa:bd:47:d3:d5:70:f3:24:5e:06:cf:4e:6f: fc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:58:53:F2:C6:53:E8:B1:D9:DA:85:0E:C5:77:4B:99:B4:71:A7 X509v3 Authority Key Identifier: keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:02:2b:da:18:0d:df:4a:7b:af:56:87:7e:7a:35:11:45:0b: 79:09:df:44:fd:7a:3c:cf:8e:6d:4a:f7:89:12:eb:cd:97:24: b9:8a:bf:cd:f0:1f:d7:ef:7b:66:e3:e3:9b:0a:c1:bd:5c:f3: 57:b9:8e:5b:01:87:8a:22:97:59:7b:ce:9b:d6:e1:73:ac:3b: cc:be:37:bd:e7:3b:be:37:37:24:1c:e4:4c:8f:09:2b:a5:b3: c3:af:72:2c:23:3b:ee:a8:23:43:61:50:ea:3d:3d:ac:2e:ac: 2c:2d:b1:d2:86:cf:b1:b8:29:8f:fa:d4:a1:a1:f0:11:d7:54: e1:e0:87:43:b0:4a:ed:a5:59:04:c0:57:5b:ff:12:d6:c2:99: 44:5c:a4:32:ad:84:db:44:17:31:be:1f:d7:c6:fd:e0:6f:7f: f8:22:8e:5b:a7:b1:0c:73:b3:5c:11:41:f2:a1:65:b0:ae:95: b9:4c:a8:e3:56:16:a2:c6:3c:4a:f5:3b:2b:8a:8d:16:01:55: 60:ca:f8:c1:70:87:99:46:2c:0f:57:ee:a9:e8:15:e5:8d:f2: ce:0d:5c:e1:b5:b0:4a:0b:e8:46:ec:c7:19:2b:85:ba:b0:02: cc:6f:23:ca:59:64:a1:2a:fa:5d:be:52:84:21:2a:48:5d:e9: 2b:58:ba:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJXYQKzeyXoVVTzskf3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMWUwYWFlOTNlYjA1ZmY1ZDQyZGQ3MDE2ZjVkZWEzODFm Yjg2NjAwHhcNMjUxMjA2MTMwMTE2WhcNMjUxMjA3MTMwMTE2WjAzMTEwLwYDVQQD Eyg4ZjdiNTg1M2YyYzY1M2U4YjFkOWRhODUwZWM1Nzc0Yjk5YjQ3MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ8hjjwO6plQhTkiSSpVBB2EBLgw q+ixeCZHBVC/Q/vvbmNHf8ft3pJgBe8zssiDihk99DN4IKFssgNxNE2p2ETJ+4DG aqbD6748lrkM2cizguZXlZ3R1AAcbY9bpX2RUFm31wXtakrOMPc3UA4i5InwTHFZ UA944BQU+CPufKB/q8WzNsFGt4LO3Ym0aZsOlTvwMBKCqlv8W0B1Pikf2TdOoucu YrGhjtVMGm2fL0ZxSSnl+Te4SBh8xe6fAOHWOxFTIr19F4X7ymr+ivBmqbbbJoJH 9wBT7nBai3A1TmQeLSg/J8UyC3XKqw6IU38Livq9R9PVcPMkXgbPTm/8gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI97WFPyxlPosdnahQ7Fd0uZtHGnMB8GA1UdIwQY MBaAFGAeCq6T6wX/XULdcBb13qOB+4ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQt ZjlmNjAxYzA2ODZlLzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8xZmM4NTMtNjUyNi00MDkxLTk1ZjQtZjlmNjAxYzA2ODZl LzEvWUI0S3JwUHJCZjlkUXQxd0Z2WGVvNEg3aG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQIr2hgN 30p7r1aHfno1EUULeQnfRP16PM+ObUr3iRLrzZckuYq/zfAf1+97ZuPjmwrBvVzz V7mOWwGHiiKXWXvOm9bhc6w7zL43vec7vjc3JBzkTI8JK6Wzw69yLCM77qgjQ2FQ 6j09rC6sLC2x0obPsbgpj/rUoaHwEddU4eCHQ7BK7aVZBMBXW/8S1sKZRFykMq2E 20QXMb4f18b94G9/+CKOW6exDHOzXBFB8qFlsK6VuUyo41YWosY8SvU7K4qNFgFV YMr4wXCHmUYsD1fuqegV5Y3yzg1c4bWwSgvoRuzHGSuFurACzG8jyllkoSr6Xb5S hCEqSF3pK1i6rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:47 2025 by rpki-client