This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft File: yZdYjBhO3XIdCQotqVwm4aKMBRE.mft (raw, json) Hash identifier: ca+mmpOYumYCNFnnUkzWCGiLbVukj04wl78+VU6YqG4= Subject key identifier: D6:0E:7B:19:27:3E:F2:7E:0F:86:46:E3:44:26:03:9E:FA:B6:EC:74 Authority key identifier: C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 Certificate issuer: /CN=c997588c184edd721d090a2da95c26e1a28c0511 Certificate serial: 019AF42E1626A381547DAFBEB03E1DEF8C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft Manifest number: 0272 Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: yZdYjBhO3XIdCQotqVwm4aKMBRE.crl (hash: /rt9rAUnob8nq0w+cUFi0D7HFUvEbUX4b7Ho+uf2/qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:16:26:a3:81:54:7d:af:be:b0:3e:1d:ef:8c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c997588c184edd721d090a2da95c26e1a28c0511 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=d60e7b19273ef27e0f8646e34426039efab6ec74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:be:c6:42:aa:56:1b:12:95:e5:62:f9:c4: 62:bf:a6:bb:9b:24:43:2b:a5:22:8c:47:a2:74:24: 1f:ec:03:66:c1:06:f0:a5:3d:c0:f6:00:74:06:42: 7c:8a:a7:95:39:ef:2d:8e:a9:1e:14:a7:45:ff:2e: ba:37:66:a2:69:d5:f3:43:e2:25:82:f2:5a:66:bb: ff:04:90:70:4f:e2:a6:2d:f9:c9:83:b4:5d:3b:6b: f7:e8:98:80:cd:7a:5b:46:97:82:af:a5:62:7a:de: fd:d7:56:66:31:3a:d3:46:34:49:da:1c:01:73:26: 1f:b0:6e:53:df:c9:4f:44:aa:85:40:72:62:3d:ac: d1:04:be:17:e2:3e:22:89:8b:08:ab:58:cd:41:b4: 47:3d:3b:b1:b4:4f:8d:83:55:87:f3:d4:fb:e7:c8: c0:aa:da:92:98:40:2d:2e:86:e6:c0:01:c6:c8:7e: 85:24:93:bf:9b:b6:3d:4b:75:65:33:cb:aa:85:90: 8a:10:e9:57:b1:15:07:b8:df:38:31:b8:20:d2:21: ba:cb:d0:36:c1:83:df:a1:74:a5:a6:2f:a1:de:9f: ff:b8:65:3c:99:76:bf:15:ec:ff:c0:92:a3:4f:83: c3:ed:d9:29:a5:28:95:5d:f2:47:b5:2e:b8:d4:d3: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:7B:19:27:3E:F2:7E:0F:86:46:E3:44:26:03:9E:FA:B6:EC:74 X509v3 Authority Key Identifier: keyid:C9:97:58:8C:18:4E:DD:72:1D:09:0A:2D:A9:5C:26:E1:A2:8C:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdYjBhO3XIdCQotqVwm4aKMBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/61cc78-0d40-404a-9d1d-a0e940d2991f/1/yZdYjBhO3XIdCQotqVwm4aKMBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ac:83:da:1d:69:f5:02:da:52:79:91:46:0c:55:4e:fc:4d: a7:3f:98:fd:e3:aa:72:7b:71:d3:3b:26:cb:4a:3b:49:55:4d: aa:23:e7:1d:93:75:47:78:e3:17:94:1d:10:04:54:bb:69:a5: c4:ef:ef:4d:61:91:a6:fb:2a:f4:7a:38:80:51:8b:de:b5:a7: 52:c6:95:89:a3:3b:d9:6c:fe:eb:00:ee:be:82:e9:30:6d:24: 8a:fd:ed:41:92:a2:12:73:a1:f1:4a:9c:a4:a1:17:98:56:95: f9:c7:41:73:a4:06:7d:47:bf:89:3a:e2:50:51:64:e4:45:c0: da:ca:b6:8f:62:5f:0e:47:dd:cc:84:52:60:e6:48:7c:fd:db: fc:28:cd:a8:93:bb:e3:15:cb:b5:a8:99:c6:b9:c6:93:3c:6d: 58:30:74:01:81:55:85:ab:c0:2b:46:31:1c:bc:e3:0f:d6:74: 22:3f:e4:24:78:d9:f5:ed:d9:69:ec:23:fb:96:65:e9:14:f3: ee:7a:0b:fa:a4:97:dc:0a:74:df:67:ff:bf:3e:b3:c6:13:8c: 1c:4a:19:23:ac:f8:98:58:a9:f1:d8:68:f2:92:76:1e:db:e2: 25:20:59:40:5f:65:2c:e0:6f:25:70:d5:16:41:e5:57:83:b5: de:4b:4a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhYmo4FUfa++sD4d74yYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OTc1ODhjMTg0ZWRkNzIxZDA5MGEyZGE5NWMyNmUxYTI4 YzA1MTEwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD EyhkNjBlN2IxOTI3M2VmMjdlMGY4NjQ2ZTM0NDI2MDM5ZWZhYjZlYzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAu+xkKqVhsSleVi+cRiv6a7myRD K6UijEeidCQf7ANmwQbwpT3A9gB0BkJ8iqeVOe8tjqkeFKdF/y66N2aiadXzQ+Il gvJaZrv/BJBwT+KmLfnJg7RdO2v36JiAzXpbRpeCr6Viet7911ZmMTrTRjRJ2hwB cyYfsG5T38lPRKqFQHJiPazRBL4X4j4iiYsIq1jNQbRHPTuxtE+Ng1WH89T758jA qtqSmEAtLobmwAHGyH6FJJO/m7Y9S3VlM8uqhZCKEOlXsRUHuN84Mbgg0iG6y9A2 wYPfoXSlpi+h3p//uGU8mXa/Fez/wJKjT4PD7dkppSiVXfJHtS641NN2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYOexknPvJ+D4ZG40QmA576tux0MB8GA1UdIwQY MBaAFMmXWIwYTt1yHQkKLalcJuGijAURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQt YTBlOTQwZDI5OTFmLzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82MWNjNzgtMGQ0MC00MDRhLTlkMWQtYTBlOTQwZDI5OTFm LzEveVpkWWpCaE8zWElkQ1FvdHFWd200YUtNQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKyD2h1p 9QLaUnmRRgxVTvxNpz+Y/eOqcntx0zsmy0o7SVVNqiPnHZN1R3jjF5QdEARUu2ml xO/vTWGRpvsq9Ho4gFGL3rWnUsaViaM72Wz+6wDuvoLpMG0kiv3tQZKiEnOh8Uqc pKEXmFaV+cdBc6QGfUe/iTriUFFk5EXA2sq2j2JfDkfdzIRSYOZIfP3b/CjNqJO7 4xXLtaiZxrnGkzxtWDB0AYFVhavAK0YxHLzjD9Z0Ij/kJHjZ9e3Zaewj+5Zl6RTz 7noL+qSX3Ap032f/vz6zxhOMHEoZI6z4mFip8dho8pJ2HtviJSBZQF9lLOBvJXDV FkHlV4O13ktKOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:24 2025 by rpki-client