This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json) Hash identifier: ANpKcLyvIy/de2EagD3lETFxYe7/2R9hXOBTIwudM8c= Subject key identifier: EE:A4:07:D1:D7:82:1D:6D:11:E2:6B:65:E1:0F:C0:BD:DD:6F:59:78 Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c Certificate serial: 019AF31D370B057358B23A0D6D862E449B37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft Manifest number: 0AB8 Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: /Z6AoI31D3qiRgAe2PSiOEXhcZPVDlhR8pLKNvMB3UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:37:0b:05:73:58:b2:3a:0d:6d:86:2e:44:9b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=eea407d1d7821d6d11e26b65e10fc0bddd6f5978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:6e:56:c5:3a:da:b6:98:5a:44:c8:06:de: ae:d1:3a:c3:9e:72:de:8a:e7:4f:c8:de:7f:0d:fe: 94:5d:8b:0d:ba:53:bf:bf:64:0c:54:2d:49:a0:a0: ee:20:ba:2c:c8:d7:6b:ce:16:07:e2:81:3f:27:a5: 29:c7:6d:92:2e:94:dc:79:1a:9a:0c:ae:c0:e4:da: 77:b6:15:a6:4c:5b:8e:63:28:a6:e3:1a:65:93:ca: 0b:8d:a3:80:89:b2:25:7d:48:31:fe:19:02:2f:9e: b9:1c:de:09:0d:d2:42:08:8a:cb:bc:db:d0:0a:74: 4a:c3:a2:71:21:40:cf:08:c0:df:46:c6:5d:19:0d: d2:34:ee:c9:44:2e:20:8e:07:86:72:43:f2:77:bd: 5b:c8:de:65:85:3b:2d:40:f9:c5:a2:4a:75:4f:ea: 11:b4:fa:62:9c:59:1a:02:ee:ef:db:e7:a8:ae:92: 75:f5:8f:e1:29:32:dc:ad:ec:7f:76:b3:cf:30:2b: 5c:1e:61:59:44:f1:ab:d4:66:0a:6c:d4:e5:27:a9: 11:ab:e3:19:e7:d0:55:f8:72:7f:7a:8d:42:48:28: 6a:15:53:02:f1:ee:5c:31:7c:c3:00:86:12:38:4b: 7e:1b:d2:4a:73:5d:89:e7:10:a5:8c:dd:f6:3c:02: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:07:D1:D7:82:1D:6D:11:E2:6B:65:E1:0F:C0:BD:DD:6F:59:78 X509v3 Authority Key Identifier: keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:2b:3c:f6:3f:70:f5:86:1b:07:9f:9a:49:0c:19:34:a3: c5:e4:5e:1c:62:b0:b2:81:8b:f9:e7:39:e6:4a:0b:62:1c:e2: 79:56:24:6c:01:e0:68:45:09:ea:a7:af:0f:73:d8:fb:eb:db: 4a:ed:64:f0:30:03:d0:bd:c7:c0:5b:85:b8:fa:c9:9e:dc:24: 04:5b:4f:d8:bb:3d:6f:fb:06:15:e9:5e:ce:27:f3:1a:d9:f2: 93:0d:06:f8:6c:74:1d:d7:74:fe:61:09:59:52:b9:da:fd:e0: 22:13:82:7e:9e:b7:9c:8c:49:8f:be:6a:1a:7c:06:bb:f6:d1: 48:d0:f7:52:65:5e:9b:9f:09:10:a0:db:95:f7:47:ba:91:cb: f3:e5:4e:9f:e1:b9:55:89:65:25:58:c2:16:ea:49:dd:e8:07: 5d:d7:39:be:b5:b6:80:c5:65:b6:4d:fd:05:a9:68:9d:da:52: b2:2e:7e:32:33:b7:b4:b0:c4:44:de:e2:f8:84:ed:d1:f2:12: be:45:9a:d9:83:21:e5:d9:6b:56:d2:98:0c:80:03:bd:c1:0e: 7c:dc:65:43:01:3b:0f:ae:68:3f:99:32:e4:42:02:e8:fd:22: a8:b7:8e:5d:18:1b:a0:1f:0a:21:c9:5f:66:3f:ed:07:79:ae: ed:c2:e6:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTcLBXNYsjoNbYYuRJs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTdlZDlhOTVlMGIyMjM3NjkwYzc0YmZlNzhjZmVkZTJj NDRlN2MwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD EyhlZWE0MDdkMWQ3ODIxZDZkMTFlMjZiNjVlMTBmYzBiZGRkNmY1OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaBuVsU62raYWkTIBt6u0TrDnnLe iudPyN5/Df6UXYsNulO/v2QMVC1JoKDuILosyNdrzhYH4oE/J6Upx22SLpTceRqa DK7A5Np3thWmTFuOYyim4xplk8oLjaOAibIlfUgx/hkCL565HN4JDdJCCIrLvNvQ CnRKw6JxIUDPCMDfRsZdGQ3SNO7JRC4gjgeGckPyd71byN5lhTstQPnFokp1T+oR tPpinFkaAu7v2+eorpJ19Y/hKTLcrex/drPPMCtcHmFZRPGr1GYKbNTlJ6kRq+MZ 59BV+HJ/eo1CSChqFVMC8e5cMXzDAIYSOEt+G9JKc12J5xCljN32PAJYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6kB9HXgh1tEeJrZeEPwL3db1l4MB8GA1UdIwQY MBaAFGPn7ZqV4LIjdpDHS/54z+3ixE58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDct MTliMmQ0MWJlYTc5LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDctMTliMmQ0MWJlYTc5 LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqkrPPY/ cPWGGwefmkkMGTSjxeReHGKwsoGL+ec55koLYhzieVYkbAHgaEUJ6qevD3PY++vb Su1k8DAD0L3HwFuFuPrJntwkBFtP2Ls9b/sGFelezifzGtnykw0G+Gx0Hdd0/mEJ WVK52v3gIhOCfp63nIxJj75qGnwGu/bRSND3UmVem58JEKDblfdHupHL8+VOn+G5 VYllJVjCFupJ3egHXdc5vrW2gMVltk39BalondpSsi5+MjO3tLDERN7i+ITt0fIS vkWa2YMh5dlrVtKYDIADvcEOfNxlQwE7D65oP5ky5EIC6P0iqLeOXRgboB8KIclf Zj/tB3mu7cLmwA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:20 2025 by rpki-client