This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json) Hash identifier: aoF3Q/QUujoKO6geleag4QkvryBnq8aCRsrzf2iQhec= Subject key identifier: 4D:7C:5D:4C:15:70:CA:8D:75:57:F9:D4:1F:A5:6A:2A:8E:E9:9F:6D Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Certificate serial: 019AF19AB65C301000C544766DC136A3D6AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: A7rB6GvieHic3egdiMZfNGfq2m0.roa (hash: HS3mNdYCRI3MKIsdLKnGS/MBr6fXeWlgGEcIpC1Xugc=) 2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: SS49eIEnMBHz4mmWf0yzis/pM0cMrhED8Sw/Rh5Oobg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b6:5c:30:10:00:c5:44:76:6d:c1:36:a3:d6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=4d7c5d4c1570ca8d7557f9d41fa56a2a8ee99f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:61:27:f2:92:fc:78:84:c0:86:59:64:a0: 00:a2:27:3c:16:b2:d7:87:3b:e4:1f:17:99:b4:e2: 4b:31:9c:55:e3:75:2c:11:35:20:21:cc:e1:fe:bc: a8:b5:da:4a:a5:13:ca:45:2a:6f:21:05:81:0a:44: bf:ef:20:dd:15:d6:43:a8:8b:68:ae:41:9e:5e:84: 7b:d2:a9:d4:ca:13:0c:c9:cd:21:d9:6d:9d:51:4c: f0:d8:18:b0:43:f9:8d:59:cd:39:fe:cc:1e:0b:83: 25:3e:ea:bb:22:6c:70:52:19:aa:44:0f:fe:0c:b6: d1:90:94:48:f8:20:a1:88:40:bf:ee:63:e6:bb:45: ca:95:10:8e:2b:c8:6b:d7:42:47:93:e2:f3:b2:4d: b9:7c:74:b1:45:0e:ee:0a:9c:95:7f:2f:cc:9f:7d: 46:d6:d5:94:ca:3b:56:a8:7c:1a:e5:0a:ea:63:f6: 2d:c5:b8:13:1e:b5:dc:4b:d2:57:bc:90:da:ec:f0: ca:5e:53:2a:7b:de:40:b3:5c:0a:e9:df:41:0f:3b: b3:a0:04:b1:47:47:b9:90:e5:fb:60:c1:96:46:f7: 2f:82:c8:8c:35:11:c4:c0:9a:56:45:25:2d:69:3d: 07:ac:9c:bd:6f:3a:bd:da:2b:ad:a8:f2:3f:85:a6: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7C:5D:4C:15:70:CA:8D:75:57:F9:D4:1F:A5:6A:2A:8E:E9:9F:6D X509v3 Authority Key Identifier: keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7c:03:5f:11:55:60:7a:ab:e1:91:b8:69:db:39:42:48:bb: 60:d3:bc:a7:2d:9a:1a:f4:40:05:51:e9:2e:89:47:1a:89:11: 61:fa:2b:b9:e9:f7:74:82:93:c6:55:03:d9:9f:74:2f:70:1f: 14:67:27:95:fe:5f:d3:8b:56:51:dd:cf:36:6c:89:5a:83:e2: 3c:44:18:3f:6c:60:bf:59:9e:ff:ee:27:ea:ff:30:a5:8f:65: d4:f8:ed:8c:bf:c7:db:63:ed:5d:b0:f5:9f:51:1f:22:b0:b5: e6:2c:7f:fa:12:90:92:42:e8:af:e3:fb:69:73:94:14:04:50: df:37:7c:f4:c9:5b:20:ca:98:25:0e:52:23:d9:78:fd:4c:31: 32:6d:8c:89:78:ee:22:5a:8a:61:7e:f8:c4:fb:b1:96:1f:66: 2a:d5:54:5c:c0:93:31:45:6d:f1:a6:e1:9c:8f:9f:09:0e:63: e2:37:23:ea:cf:da:43:cb:32:9b:09:c0:d1:23:2f:e4:13:b8: d5:19:bd:1a:67:d2:89:a5:7e:fc:04:72:0b:0b:39:35:77:86: 74:6b:d1:90:ae:19:a5:87:d2:b5:c4:bf:fd:6b:89:f5:b2:b4: bd:c1:40:65:22:9a:29:d2:d7:06:84:1b:9b:75:28:87:34:b9: e0:bd:5c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrZcMBAAxUR2bcE2o9avMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGZiYTA5MTkwYjc2ODQ5ZmZmM2QyNmQ1ODA3OTBlNTRm YWMyZTMwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD Eyg0ZDdjNWQ0YzE1NzBjYThkNzU1N2Y5ZDQxZmE1NmEyYThlZTk5ZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRhJ/KS/HiEwIZZZKAAoic8FrLX hzvkHxeZtOJLMZxV43UsETUgIczh/ryotdpKpRPKRSpvIQWBCkS/7yDdFdZDqIto rkGeXoR70qnUyhMMyc0h2W2dUUzw2BiwQ/mNWc05/sweC4MlPuq7ImxwUhmqRA/+ DLbRkJRI+CChiEC/7mPmu0XKlRCOK8hr10JHk+Lzsk25fHSxRQ7uCpyVfy/Mn31G 1tWUyjtWqHwa5QrqY/YtxbgTHrXcS9JXvJDa7PDKXlMqe95As1wK6d9BDzuzoASx R0e5kOX7YMGWRvcvgsiMNRHEwJpWRSUtaT0HrJy9bzq92iutqPI/haZTuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE18XUwVcMqNdVf51B+laiqO6Z9tMB8GA1UdIwQY MBaAFMtPugkZC3aEn/89JtWAeQ5U+sLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1Yjct Zjg1Y2M1NzQ3ZmJmLzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9kYWRiNGItMTRmMy00MmZhLTk1YjctZjg1Y2M1NzQ3ZmJm LzEveTAtNkNSa0xkb1NmX3owbTFZQjVEbFQ2d3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHwDXxFV YHqr4ZG4ads5Qki7YNO8py2aGvRABVHpLolHGokRYforuen3dIKTxlUD2Z90L3Af FGcnlf5f04tWUd3PNmyJWoPiPEQYP2xgv1me/+4n6v8wpY9l1PjtjL/H22PtXbD1 n1EfIrC15ix/+hKQkkLor+P7aXOUFARQ3zd89MlbIMqYJQ5SI9l4/UwxMm2MiXju IlqKYX74xPuxlh9mKtVUXMCTMUVt8abhnI+fCQ5j4jcj6s/aQ8symwnA0SMv5BO4 1Rm9GmfSiaV+/ARyCws5NXeGdGvRkK4ZpYfStcS//WuJ9bK0vcFAZSKaKdLXBoQb m3UohzS54L1c6A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:54 2025 by rpki-client