This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json) Hash identifier: JibhiEgExacBMHmI2IUVK7DewcpyAaNPrew32O1FPd4= Subject key identifier: 6D:39:2E:87:A4:62:53:CA:8E:88:9D:BF:79:73:D2:EB:03:AD:A2:7D Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Certificate serial: 019AF209AFA36C62F591622E48E6FB65839E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 05:01:52 +0000 Manifest this update: Sat 06 Dec 2025 05:01:52 +0000 Manifest next update: Sun 07 Dec 2025 05:01:52 +0000 Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=) 2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: 2FlizpjIDReUDqa2WAC7dByNvxc6HmQvI/m9ZnrmVN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:af:a3:6c:62:f5:91:62:2e:48:e6:fb:65:83:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Validity Not Before: Dec 6 05:01:52 2025 GMT Not After : Dec 7 05:01:52 2025 GMT Subject: CN=6d392e87a46253ca8e889dbf7973d2eb03ada27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:fd:03:2b:64:00:f6:42:cc:5b:fb:26:a6: 9c:d8:9b:fc:f6:db:c8:e4:73:a7:3d:c4:31:40:e6: 10:d1:4d:79:32:94:44:85:a1:ba:ec:cb:d3:9f:9b: 78:eb:84:40:2c:48:18:b4:df:15:6e:d5:b9:20:b0: ec:07:4c:5e:bf:44:2c:18:8b:4c:d0:ac:7a:4f:e1: 8c:ef:4b:79:70:df:c3:97:59:4c:ab:e5:0f:c7:a7: 80:38:60:08:8d:bd:52:ba:ad:8d:e7:a4:fd:b6:23: 30:a4:4d:3c:96:c6:25:a4:bf:82:16:7a:55:7d:63: db:6d:4b:8a:3d:c1:e4:c8:18:30:c3:3b:2c:82:c8: 3b:7d:73:1c:9f:eb:d5:81:36:8f:9f:e1:94:3a:72: 2d:ac:b5:40:87:0c:50:7d:4d:74:79:04:2b:aa:4c: a5:97:41:04:0e:bb:aa:5e:11:d3:22:da:95:88:9a: bc:8a:4c:b3:51:33:f6:d1:c2:8c:21:24:f6:5f:34: 35:7d:7e:1c:22:51:02:b5:d2:c3:7c:7c:1d:65:47: 09:f5:1c:2d:03:11:db:ae:a7:d1:59:09:29:ce:0d: ca:8d:e8:18:5a:d1:7f:65:94:83:0e:e7:83:71:57: 1e:80:5c:66:ff:5e:cb:76:21:1d:48:a0:57:13:09: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:39:2E:87:A4:62:53:CA:8E:88:9D:BF:79:73:D2:EB:03:AD:A2:7D X509v3 Authority Key Identifier: keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:49:33:05:d0:57:8f:c3:f8:ef:8d:11:10:01:1d:5b:7c:fe: 19:2a:f8:23:ef:41:4b:27:18:b6:db:fe:cd:68:03:e3:b8:a4: 39:6e:45:94:4c:92:b7:12:7c:ab:4c:55:3c:76:18:ff:91:95: c6:50:89:af:de:09:eb:c0:f3:9b:61:b8:71:fe:1f:94:4f:f8: 05:76:44:41:ff:5c:f1:21:5a:f0:19:b4:d0:5d:f6:12:0a:a0: 0d:37:c6:c6:dd:83:74:d2:34:8d:e7:28:59:a7:d7:5c:25:c9: f7:bc:dc:db:91:6c:04:1a:06:87:90:be:d2:e6:94:b6:eb:74: b6:fe:8c:40:b1:98:db:7d:30:12:5f:8b:8d:29:a2:ef:31:46: 10:0b:11:b7:7d:3b:5e:ea:16:00:e5:46:b3:76:7b:32:b3:eb: 72:63:1a:d8:94:20:81:05:64:56:59:1d:46:ae:88:0d:40:e0: dc:2d:4c:fd:9c:87:79:11:46:b7:ba:02:eb:df:27:7c:3b:cf: e9:5d:0b:ce:db:bd:69:95:1d:84:54:1d:71:9f:6e:44:cd:7b: 1f:a4:1c:23:f7:f6:bc:71:aa:fe:63:27:60:94:e6:c8:13:f1: 48:ca:bd:2a:37:bb:c0:77:04:d3:98:13:2d:a1:33:42:61:ae: a6:a6:ca:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa+jbGL1kWIuSOb7ZYOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2 Yjc3NGMwHhcNMjUxMjA2MDUwMTUyWhcNMjUxMjA3MDUwMTUyWjAzMTEwLwYDVQQD Eyg2ZDM5MmU4N2E0NjI1M2NhOGU4ODlkYmY3OTczZDJlYjAzYWRhMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cz9AytkAPZCzFv7Jqac2Jv89tvI 5HOnPcQxQOYQ0U15MpREhaG67MvTn5t464RALEgYtN8VbtW5ILDsB0xev0QsGItM 0Kx6T+GM70t5cN/Dl1lMq+UPx6eAOGAIjb1Suq2N56T9tiMwpE08lsYlpL+CFnpV fWPbbUuKPcHkyBgwwzssgsg7fXMcn+vVgTaPn+GUOnItrLVAhwxQfU10eQQrqkyl l0EEDruqXhHTItqViJq8ikyzUTP20cKMIST2XzQ1fX4cIlECtdLDfHwdZUcJ9Rwt AxHbrqfRWQkpzg3KjegYWtF/ZZSDDueDcVcegFxm/17LdiEdSKBXEwkUhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG05LoekYlPKjoidv3lz0usDraJ9MB8GA1UdIwQY MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5 LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUkzBdBX j8P4740REAEdW3z+GSr4I+9BSycYttv+zWgD47ikOW5FlEyStxJ8q0xVPHYY/5GV xlCJr94J68Dzm2G4cf4flE/4BXZEQf9c8SFa8Bm00F32EgqgDTfGxt2DdNI0jeco WafXXCXJ97zc25FsBBoGh5C+0uaUtut0tv6MQLGY230wEl+LjSmi7zFGEAsRt307 XuoWAOVGs3Z7MrPrcmMa2JQggQVkVlkdRq6IDUDg3C1M/ZyHeRFGt7oC698nfDvP 6V0Lztu9aZUdhFQdcZ9uRM17H6QcI/f2vHGq/mMnYJTmyBPxSMq9Kje7wHcE05gT LaEzQmGupqbKGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:13 2025 by rpki-client