This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft File: YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json) Hash identifier: WZLW/yUhXt7NbnqzrPIeLwIBz3MZWZr+bXVLFwJz5Uc= Subject key identifier: C5:D7:A6:48:BF:77:EF:67:B1:A2:84:ED:55:09:FA:C7:AE:A1:DF:C9 Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3 Certificate issuer: /CN=633333d71526f533b1c1cf0be9fc321b623396d3 Certificate serial: 019AF3C07037C15CC071A735A9ECCDE1C1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft Manifest number: 07F7 Signing time: Sat 06 Dec 2025 13:01:06 +0000 Manifest this update: Sat 06 Dec 2025 13:01:06 +0000 Manifest next update: Sun 07 Dec 2025 13:01:06 +0000 Files and hashes: 1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: y0mSvw7VkVtalY0c65rOM7xWGRFLwin1T2zxy7Jn2uI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:70:37:c1:5c:c0:71:a7:35:a9:ec:cd:e1:c1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3 Validity Not Before: Dec 6 13:01:06 2025 GMT Not After : Dec 7 13:01:06 2025 GMT Subject: CN=c5d7a648bf77ef67b1a284ed5509fac7aea1dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:c5:4d:c4:39:fb:de:9e:96:4e:89:d6:21: ad:c9:38:ce:69:5e:97:ee:9f:1b:15:ec:dc:c2:6a: 3a:6a:7c:3b:a6:3e:7b:13:92:6d:26:30:d0:7a:4c: 50:c9:2e:98:8c:6f:27:71:3a:d2:6b:3d:a5:08:42: 3d:4d:44:c8:67:1d:7a:f2:16:04:43:12:69:d9:25: c8:cd:a8:ae:2f:88:cd:d0:61:c6:16:c1:c7:db:a4: f1:94:2a:e5:0e:d7:1c:f8:13:23:9e:a2:bf:69:e4: 89:d2:5f:f9:ba:97:75:43:f7:2b:2b:68:66:1d:67: 15:70:06:a1:5e:ba:56:c3:00:76:4c:fa:24:7a:78: ec:df:5f:42:bd:5c:db:32:14:4e:ff:8c:37:1f:c9: a0:8a:59:f2:67:27:e5:3b:14:69:67:c3:04:82:4f: 15:dd:03:16:78:17:97:ac:21:79:b4:f8:83:30:ab: 4d:63:7c:8f:7b:c2:bd:79:36:ad:be:d2:58:d0:0b: 24:5c:5d:5f:67:52:4a:3b:f3:62:78:bd:18:58:3e: fd:b7:2b:a4:ed:b7:d4:a8:13:6a:f1:16:42:9c:9a: 27:88:84:35:3d:1b:55:bc:dd:56:7f:5a:b6:4a:6a: 24:98:dd:2b:f4:72:a4:e2:07:d0:cb:98:23:f9:61: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:A6:48:BF:77:EF:67:B1:A2:84:ED:55:09:FA:C7:AE:A1:DF:C9 X509v3 Authority Key Identifier: keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:73:2a:26:e1:97:03:84:50:14:84:74:36:7b:4b:bc:42:58: 1f:be:80:d0:4a:5a:81:5a:68:73:41:a0:5e:11:d1:fc:eb:64: 9e:01:78:b0:66:5c:54:ec:7d:b4:88:ba:29:8c:03:70:70:4b: a4:5f:8c:de:4a:c6:8e:0e:a2:03:24:6f:a6:56:29:20:df:a4: af:aa:75:06:d5:29:aa:85:53:5e:e5:c1:a5:b5:74:33:3c:f2: 9d:09:d0:a1:76:bb:e1:b8:20:54:82:83:4c:2e:96:b1:de:cf: 2e:47:10:2e:57:ad:1e:53:95:71:a9:21:14:49:36:79:9c:48: 5f:a0:5f:6c:f8:48:3a:38:7c:b6:59:27:2a:a3:96:a5:e1:e6: d3:41:37:0c:e8:48:7c:e3:29:66:18:2f:8e:f0:23:5f:ad:f3: d6:95:85:bb:0e:d7:76:cd:27:63:a1:3b:6f:ad:85:30:1e:6b: 5b:a3:16:30:aa:5a:d7:31:04:4e:15:ed:41:3d:bb:51:eb:8d: 3c:a6:da:c6:68:70:34:75:39:97:96:13:58:c9:c9:2c:53:36: 83:3e:a5:cd:59:5c:ab:0b:f7:8b:7e:b9:0a:c2:80:44:b2:d0: 46:43:93:20:a5:73:fd:23:59:a2:48:a1:09:3a:e0:e1:2d:0d: 2a:89:f5:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHA3wVzAcac1qezN4cHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzMzM2Q3MTUyNmY1MzNiMWMxY2YwYmU5ZmMzMjFiNjIz Mzk2ZDMwHhcNMjUxMjA2MTMwMTA2WhcNMjUxMjA3MTMwMTA2WjAzMTEwLwYDVQQD EyhjNWQ3YTY0OGJmNzdlZjY3YjFhMjg0ZWQ1NTA5ZmFjN2FlYTFkZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnTFTcQ5+96elk6J1iGtyTjOaV6X 7p8bFezcwmo6anw7pj57E5JtJjDQekxQyS6YjG8ncTrSaz2lCEI9TUTIZx168hYE QxJp2SXIzaiuL4jN0GHGFsHH26TxlCrlDtcc+BMjnqK/aeSJ0l/5upd1Q/crK2hm HWcVcAahXrpWwwB2TPokenjs319CvVzbMhRO/4w3H8mgilnyZyflOxRpZ8MEgk8V 3QMWeBeXrCF5tPiDMKtNY3yPe8K9eTatvtJY0AskXF1fZ1JKO/NieL0YWD79tyuk 7bfUqBNq8RZCnJoniIQ1PRtVvN1Wf1q2SmokmN0r9HKk4gfQy5gj+WGq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXXpki/d+9nsaKE7VUJ+seuod/JMB8GA1UdIwQY MBaAFGMzM9cVJvUzscHPC+n8MhtiM5bTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXpNejF4VW05VE94d2M4TDZmd3lHMkl6bHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNTA5NTAtMDAzOS00ZTc0LWJlNDEt OWNmYzQ4MzhkM2VjLzEvWXpNejF4VW05VE94d2M4TDZmd3lHMkl6bHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNTA5NTAtMDAzOS00ZTc0LWJlNDEtOWNmYzQ4MzhkM2Vj LzEvWXpNejF4VW05VE94d2M4TDZmd3lHMkl6bHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHMqJuGX A4RQFIR0NntLvEJYH76A0EpagVpoc0GgXhHR/OtkngF4sGZcVOx9tIi6KYwDcHBL pF+M3krGjg6iAyRvplYpIN+kr6p1BtUpqoVTXuXBpbV0MzzynQnQoXa74bggVIKD TC6Wsd7PLkcQLletHlOVcakhFEk2eZxIX6BfbPhIOjh8tlknKqOWpeHm00E3DOhI fOMpZhgvjvAjX63z1pWFuw7Xds0nY6E7b62FMB5rW6MWMKpa1zEEThXtQT27UeuN PKbaxmhwNHU5l5YTWMnJLFM2gz6lzVlcqwv3i365CsKARLLQRkOTIKVz/SNZokih CTrg4S0NKon1dw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:09 2025 by rpki-client