This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json) Hash identifier: SVZq9Mt62ClJVvXNU5DWZapWKwjJT4RlxQqfumVfyfg= Subject key identifier: 1C:00:55:B6:F5:C4:B4:58:E1:D5:5A:17:24:4F:67:E7:D7:1E:60:5A Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d Certificate serial: 019AF20936B90F5258F7D67319B1FFC4504E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft Manifest number: 0846 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: +MF9rG1Di/yIShy6UP2LNaYSO2cg7kxpYQ3B6yrHDVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:36:b9:0f:52:58:f7:d6:73:19:b1:ff:c4:50:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=1c0055b6f5c4b458e1d55a17244f67e7d71e605a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:15:ff:8e:50:d4:41:69:92:af:16:36:46: b7:c3:a8:df:f3:3c:79:85:30:ea:f7:16:6f:c8:f7: 63:c9:bc:68:32:86:71:4c:c4:37:68:29:ab:94:53: 3d:bd:f5:37:52:03:d1:e1:10:d4:54:c5:fd:1b:7a: 08:dd:a8:ff:03:94:f8:65:01:9d:d9:9a:fb:93:b9: 13:37:af:d0:09:05:d1:e8:bd:2e:64:69:4f:54:82: c6:c9:43:15:21:bd:97:f8:39:d9:1f:26:c5:e7:28: 9c:ad:ad:11:1f:60:0d:c0:2a:56:bc:83:94:ec:5c: 99:06:36:72:8e:4e:eb:7c:c2:b6:bf:e0:50:fd:d2: 2f:82:52:bc:70:5c:d6:43:88:22:a7:81:d1:3d:16: c1:31:20:16:e8:33:38:7f:96:eb:92:c7:43:ab:d1: 0b:b5:bf:ed:8d:4e:aa:e9:be:e5:67:3d:96:e3:f6: 98:0f:76:59:33:d2:4c:08:cb:10:9f:60:07:68:96: cf:b3:9a:f1:57:11:37:e8:45:6f:5c:08:f6:4c:69: 22:30:58:0b:de:72:5c:fa:15:67:9a:cd:b8:7d:59: ce:75:74:e6:cc:bf:49:a2:fa:be:9e:f9:7c:81:88: 01:7b:f0:fd:9a:66:33:25:ff:48:85:31:a0:7a:bf: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:00:55:B6:F5:C4:B4:58:E1:D5:5A:17:24:4F:67:E7:D7:1E:60:5A X509v3 Authority Key Identifier: keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:59:1d:f9:fb:9a:ef:bf:f9:99:3d:a8:2c:d6:77:da:ca:2f: 98:ef:71:87:b2:22:3f:a5:35:7a:a4:b0:d3:33:61:da:ca:52: c2:95:a0:4b:a1:89:d9:a6:5d:ec:91:72:92:19:c0:fa:98:86: d1:79:d3:43:75:e3:88:12:4c:cb:e9:57:f1:01:96:d0:7a:e8: b0:76:6e:06:af:b1:06:fe:1e:dc:85:75:0e:dd:94:36:c9:7c: ff:0f:b0:98:50:73:cf:68:e7:0b:37:8e:2d:bc:44:35:6e:70: 74:46:c1:21:3c:73:86:cc:23:05:aa:8f:4d:f4:10:48:fa:d3: 70:dc:7a:dc:56:aa:6f:98:8c:f0:9e:17:0e:ea:10:9a:99:b7: 06:a6:51:93:ce:5b:48:b6:3b:55:67:ac:e8:b1:ac:4b:dc:c0: f9:ec:ea:42:af:c8:65:c5:87:66:f9:69:19:91:d1:24:c6:5f: 8e:48:ca:f1:70:6d:33:74:c3:1e:9e:d1:f6:6d:86:9d:00:ef: d4:67:eb:05:cb:ad:c3:da:9e:ff:30:cf:14:bc:59:19:32:c5: 7e:a5:a0:2d:a3:f5:85:ff:0f:17:eb:20:79:d7:b3:b4:ed:d2: d1:4c:c1:d8:38:4f:fb:aa:89:cd:cb:8c:b5:6a:1b:4e:77:03: 67:fe:6e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTa5D1JY99ZzGbH/xFBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw MjcxM2QwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EygxYzAwNTViNmY1YzRiNDU4ZTFkNTVhMTcyNDRmNjdlN2Q3MWU2MDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArikV/45Q1EFpkq8WNka3w6jf8zx5 hTDq9xZvyPdjybxoMoZxTMQ3aCmrlFM9vfU3UgPR4RDUVMX9G3oI3aj/A5T4ZQGd 2Zr7k7kTN6/QCQXR6L0uZGlPVILGyUMVIb2X+DnZHybF5yicra0RH2ANwCpWvIOU 7FyZBjZyjk7rfMK2v+BQ/dIvglK8cFzWQ4gip4HRPRbBMSAW6DM4f5brksdDq9EL tb/tjU6q6b7lZz2W4/aYD3ZZM9JMCMsQn2AHaJbPs5rxVxE36EVvXAj2TGkiMFgL 3nJc+hVnms24fVnOdXTmzL9Jovq+nvl8gYgBe/D9mmYzJf9IhTGger+PmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwAVbb1xLRY4dVaFyRPZ+fXHmBaMB8GA1UdIwQY MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4 LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2lkd+fua 77/5mT2oLNZ32sovmO9xh7IiP6U1eqSw0zNh2spSwpWgS6GJ2aZd7JFykhnA+piG 0XnTQ3XjiBJMy+lX8QGW0HrosHZuBq+xBv4e3IV1Dt2UNsl8/w+wmFBzz2jnCzeO LbxENW5wdEbBITxzhswjBaqPTfQQSPrTcNx63Faqb5iM8J4XDuoQmpm3BqZRk85b SLY7VWes6LGsS9zA+ezqQq/IZcWHZvlpGZHRJMZfjkjK8XBtM3TDHp7R9m2GnQDv 1GfrBcutw9qe/zDPFLxZGTLFfqWgLaP1hf8PF+sgedeztO3S0UzB2DhP+6qJzcuM tWobTncDZ/5urA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:24 2025 by rpki-client