This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json) Hash identifier: N72xNkflAiiNFVeoGvNpy+JHicpRYAMkHny+MiFL7Es= Subject key identifier: 76:B7:18:0B:73:58:A8:53:DD:A9:66:8A:DA:B1:9D:22:6D:3E:E2:CE Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc Certificate serial: 019AF4651F39B98D1C2CB2E95BBA2EBCBE1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft Manifest number: 06D7 Signing time: Sat 06 Dec 2025 16:00:58 +0000 Manifest this update: Sat 06 Dec 2025 16:00:58 +0000 Manifest next update: Sun 07 Dec 2025 16:00:58 +0000 Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: ZA3LwS89GkTTjlCG8j068N2snWVvLus368HKJtrUjVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:1f:39:b9:8d:1c:2c:b2:e9:5b:ba:2e:bc:be:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc Validity Not Before: Dec 6 16:00:58 2025 GMT Not After : Dec 7 16:00:58 2025 GMT Subject: CN=76b7180b7358a853dda9668adab19d226d3ee2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:ba:fc:c6:f2:44:2c:f9:67:ad:94:5a:33: f3:28:25:46:da:9d:44:87:6f:8c:10:fb:41:69:ca: 57:61:24:6d:fe:15:2e:89:26:f3:72:38:80:ed:a1: 65:d2:cc:2e:a7:fa:cf:a7:85:51:3b:ee:54:aa:e5: b7:7c:48:45:3b:98:0c:61:08:db:92:e4:7d:0e:ba: ee:66:1e:91:d2:63:10:ef:7a:91:54:7d:71:fb:fc: 3c:45:89:cb:53:6c:f7:aa:d1:78:a2:c6:ea:70:71: 9d:d9:92:28:8f:68:c7:e6:e3:fd:7b:d0:4c:34:d6: 64:cc:43:89:39:2f:54:c2:1c:00:52:94:27:3a:2f: bf:e9:28:e4:2d:02:0f:13:f2:11:c2:13:73:2f:c0: 86:e6:59:aa:a3:ef:2f:51:64:39:08:7c:d1:91:d2: a9:7b:5b:00:cb:19:bd:21:ed:aa:6f:49:0d:a5:00: 40:db:69:a5:d3:7c:e3:38:fd:6a:e1:21:13:ae:b9: 1b:e3:31:50:3e:13:0a:7b:37:b7:07:34:5d:22:3a: 6a:3a:cb:94:31:ea:2e:2c:b4:7a:42:a1:30:fc:5b: 65:58:71:14:99:c3:25:51:b2:a7:4a:f8:fd:24:ce: 2e:42:eb:04:a0:7d:aa:c8:3c:9e:ab:b2:96:a9:4b: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B7:18:0B:73:58:A8:53:DD:A9:66:8A:DA:B1:9D:22:6D:3E:E2:CE X509v3 Authority Key Identifier: keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b9:4e:21:e9:2a:1e:4b:86:e5:4b:ce:d0:33:10:cb:6f:fc: 98:04:3d:3b:cf:3e:8d:44:e8:d7:7f:b0:ff:52:80:6d:0b:c4: 4e:16:92:3e:7f:db:0d:cc:de:08:9a:ef:0c:e6:a0:11:11:91: 39:df:df:f1:f5:4a:4f:cc:e1:70:d4:d9:bb:ff:11:71:61:a1: e5:0b:32:d3:f3:83:db:b2:50:51:d3:0d:4b:31:ad:d8:2e:ea: 3b:12:d9:04:ea:25:08:7a:aa:06:5e:e5:df:55:f4:d8:44:cc: 33:76:3d:d1:0c:fd:69:64:fa:7c:50:b1:30:26:b2:3a:dd:74: 6e:df:5a:7a:bb:14:da:3b:65:86:cc:16:22:7a:80:bc:8b:39: 1d:33:17:44:a6:42:75:6b:b8:f4:37:d6:3d:69:75:a0:63:fb: 38:6f:e1:42:ef:e9:6c:3d:f1:0a:a4:1d:10:e8:de:30:4f:f0: 9f:23:60:90:e9:f6:c8:92:65:89:05:70:63:e3:40:5f:16:f8: a1:19:1e:29:0d:06:bc:db:14:64:bc:c6:de:f9:db:3f:62:42: 1e:d9:dc:3b:6c:6e:11:d6:26:ef:09:47:2b:77:62:05:7f:aa: 12:7d:60:a0:4c:b1:38:7d:23:25:01:81:14:f8:12:cc:95:64: cb:2d:24:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZR85uY0cLLLpW7ouvL4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy MWMyYmMwHhcNMjUxMjA2MTYwMDU4WhcNMjUxMjA3MTYwMDU4WjAzMTEwLwYDVQQD Eyg3NmI3MTgwYjczNThhODUzZGRhOTY2OGFkYWIxOWQyMjZkM2VlMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MO6/MbyRCz5Z62UWjPzKCVG2p1E h2+MEPtBacpXYSRt/hUuiSbzcjiA7aFl0swup/rPp4VRO+5UquW3fEhFO5gMYQjb kuR9DrruZh6R0mMQ73qRVH1x+/w8RYnLU2z3qtF4osbqcHGd2ZIoj2jH5uP9e9BM NNZkzEOJOS9UwhwAUpQnOi+/6SjkLQIPE/IRwhNzL8CG5lmqo+8vUWQ5CHzRkdKp e1sAyxm9Ie2qb0kNpQBA22ml03zjOP1q4SETrrkb4zFQPhMKeze3BzRdIjpqOsuU MeouLLR6QqEw/FtlWHEUmcMlUbKnSvj9JM4uQusEoH2qyDyeq7KWqUtpgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa3GAtzWKhT3almitqxnSJtPuLOMB8GA1UdIwQY MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4 LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7lOIekq HkuG5UvO0DMQy2/8mAQ9O88+jUTo13+w/1KAbQvEThaSPn/bDczeCJrvDOagERGR Od/f8fVKT8zhcNTZu/8RcWGh5Qsy0/OD27JQUdMNSzGt2C7qOxLZBOolCHqqBl7l 31X02ETMM3Y90Qz9aWT6fFCxMCayOt10bt9aersU2jtlhswWInqAvIs5HTMXRKZC dWu49DfWPWl1oGP7OG/hQu/pbD3xCqQdEOjeME/wnyNgkOn2yJJliQVwY+NAXxb4 oRkeKQ0GvNsUZLzG3vnbP2JCHtncO2xuEdYm7wlHK3diBX+qEn1goEyxOH0jJQGB FPgSzJVkyy0kgA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:48 2025 by rpki-client