This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json) Hash identifier: 0NDBQLyzW348GPvDXc7fV2yTdN2ubuh5Yt44NnR0sao= Subject key identifier: 8E:3A:B5:00:40:03:03:37:70:A1:41:FA:53:E1:16:0A:65:CC:4A:6F Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df Certificate serial: 019AF19B816090D4DF4E9C66C74C0071743C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: UzFbmLIQY84+axVn/SY6a8OQxjb/sHu6Hczx5/z80Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:81:60:90:d4:df:4e:9c:66:c7:4c:00:71:74:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=8e3ab5004003033770a141fa53e1160a65cc4a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:ef:9e:03:09:9d:38:8c:3a:f5:aa:4b:6f: 61:20:87:b4:48:8d:90:38:0d:4f:eb:aa:8a:69:70: ac:62:f3:32:87:89:d7:66:3d:3c:85:4b:f4:af:4f: 9b:79:f9:2c:29:ee:e0:66:a5:18:9d:a5:ab:11:74: ce:7c:55:6b:8a:29:b2:31:c0:f9:35:d2:dc:b0:24: 9c:85:23:d5:cf:10:21:a9:36:76:76:29:f2:1a:eb: fd:41:78:42:5d:e9:2c:88:d2:c4:f0:6e:40:2e:70: 0b:69:06:02:eb:e8:8b:35:87:37:9c:6e:6e:36:9b: aa:df:53:5e:38:17:6b:19:0c:12:54:c0:1d:c3:c2: fd:cb:72:14:88:88:21:85:fd:a0:22:34:6d:dc:b5: e3:90:fd:fd:d7:9c:15:4e:63:11:f9:07:76:b6:60: c5:d1:7e:b3:12:a5:94:1e:15:85:88:d7:15:52:85: 49:d9:ad:2f:53:bf:0d:c0:87:92:3c:e3:4a:68:41: 68:e1:82:d6:05:5a:5b:e9:4f:a1:c9:59:74:fb:26: 38:00:64:2a:06:62:29:b8:82:36:ff:a8:4c:1a:9a: 71:9b:f1:ab:02:7b:3a:32:13:a7:2c:bc:7a:65:50: a0:17:b6:9e:bb:33:63:5b:aa:fa:5b:0c:2c:34:25: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3A:B5:00:40:03:03:37:70:A1:41:FA:53:E1:16:0A:65:CC:4A:6F X509v3 Authority Key Identifier: keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9f:80:54:6e:8a:ae:8e:cb:29:c7:b5:1e:2b:6a:b0:78:14: 8c:48:6d:16:5c:a5:27:04:2e:1b:d0:85:58:de:91:10:9d:b5: a6:08:ac:c2:3e:18:c4:ce:c2:1a:2d:1c:63:01:39:a3:81:c8: 90:44:54:47:1c:94:e4:fc:c8:15:db:74:c1:09:b2:98:da:8a: 95:4e:8b:38:1c:01:55:ca:10:b7:30:bc:57:ba:aa:54:a8:57: 07:9a:20:d2:cd:a4:bc:be:85:22:78:78:54:41:d6:55:21:61: 29:17:87:09:3b:20:4e:db:48:ad:07:07:e8:67:1e:90:25:61: 90:ed:bd:ec:ac:98:44:45:de:6d:b7:8c:71:94:3f:23:b9:0d: 66:01:e8:d3:d1:02:bb:e6:d7:37:a2:7f:9b:d3:36:29:93:24: 77:4d:86:62:d9:ba:02:da:44:2f:a3:ce:fb:01:ec:56:fb:28: e2:50:88:6b:a8:aa:7d:00:96:79:e8:0e:5a:63:32:91:33:c4: 51:97:b5:11:f5:ff:13:bd:d3:ee:6a:c0:ff:c4:e9:d1:a9:48: be:65:96:11:83:55:5a:f9:03:31:53:e7:0c:da:fb:d6:e8:30: c5:b2:14:1f:f9:55:1a:a6:6a:20:b3:ac:e9:76:3f:17:df:99: 19:80:2a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4FgkNTfTpxmx0wAcXQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ODkwNjU1NGQ4YzhiNDI4ZWRlOGNiMzUwMjY4NjBkM2Q3 NzcxZGYwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD Eyg4ZTNhYjUwMDQwMDMwMzM3NzBhMTQxZmE1M2UxMTYwYTY1Y2M0YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE7vngMJnTiMOvWqS29hIIe0SI2Q OA1P66qKaXCsYvMyh4nXZj08hUv0r0+befksKe7gZqUYnaWrEXTOfFVriimyMcD5 NdLcsCSchSPVzxAhqTZ2dinyGuv9QXhCXeksiNLE8G5ALnALaQYC6+iLNYc3nG5u Npuq31NeOBdrGQwSVMAdw8L9y3IUiIghhf2gIjRt3LXjkP3915wVTmMR+Qd2tmDF 0X6zEqWUHhWFiNcVUoVJ2a0vU78NwIeSPONKaEFo4YLWBVpb6U+hyVl0+yY4AGQq BmIpuII2/6hMGppxm/GrAns6MhOnLLx6ZVCgF7aeuzNjW6r6WwwsNCV2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI46tQBAAwM3cKFB+lPhFgplzEpvMB8GA1UdIwQY MBaAFCWJBlVNjItCjt6Ms1Amhg09d3HfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YjU3YWItNmNhMi00YWE4LTgzODct YWZkZDUzODI3ZTkzLzEvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85YjU3YWItNmNhMi00YWE4LTgzODctYWZkZDUzODI3ZTkz LzEvSllrR1ZVMk1pMEtPM295elVDYUdEVDEzY2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp+AVG6K ro7LKce1HitqsHgUjEhtFlylJwQuG9CFWN6REJ21pgiswj4YxM7CGi0cYwE5o4HI kERURxyU5PzIFdt0wQmymNqKlU6LOBwBVcoQtzC8V7qqVKhXB5og0s2kvL6FInh4 VEHWVSFhKReHCTsgTttIrQcH6GcekCVhkO297KyYREXebbeMcZQ/I7kNZgHo09EC u+bXN6J/m9M2KZMkd02GYtm6AtpEL6PO+wHsVvso4lCIa6iqfQCWeegOWmMykTPE UZe1EfX/E73T7mrA/8Tp0alIvmWWEYNVWvkDMVPnDNr71ugwxbIUH/lVGqZqILOs 6XY/F9+ZGYAqkw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:14 2025 by rpki-client