This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json) Hash identifier: pALCbncjOdIb2q5xi47xsgIHd1TephiJTTJzTBhILzM= Subject key identifier: 1A:CD:D9:B8:4F:A0:65:44:D4:BD:62:8D:0F:B3:95:8C:C7:63:DF:E2 Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1 Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1 Certificate serial: 019AF0F5E9EB9357A8E9CB384BF26FD7D161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft Manifest number: 0CA8 Signing time: Sat 06 Dec 2025 00:00:39 +0000 Manifest this update: Sat 06 Dec 2025 00:00:39 +0000 Manifest next update: Sun 07 Dec 2025 00:00:39 +0000 Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: PkS4/eSsyIjqCEL8Tlt/BDJIJiDKDhMW9lz9UJIAhJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e9:eb:93:57:a8:e9:cb:38:4b:f2:6f:d7:d1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1 Validity Not Before: Dec 6 00:00:39 2025 GMT Not After : Dec 7 00:00:39 2025 GMT Subject: CN=1acdd9b84fa06544d4bd628d0fb3958cc763dfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:46:15:3c:f4:10:38:5b:f1:58:77:08:1e: 26:a6:ea:13:6b:44:d3:d1:77:45:c4:48:5e:8e:80: 91:e2:4a:af:19:95:a7:10:cc:19:28:de:2d:3f:bb: bb:b0:5a:52:f3:f6:42:bf:f3:87:81:e7:de:ee:19: b1:8a:ce:36:9d:0e:f5:c2:9a:fe:ed:48:0b:b0:03: ab:07:18:3c:fc:59:ad:08:e2:40:67:fa:58:1f:b3: af:86:49:bd:7d:55:0d:67:ff:52:ba:49:02:c7:03: 51:8c:95:dd:4f:03:28:d7:32:eb:0c:77:84:7a:fc: d6:fc:69:33:bf:f2:02:10:0c:08:8d:67:9f:2a:4b: 05:fa:c4:b9:4c:eb:cd:b1:7a:25:5d:8e:c1:61:d4: ad:48:7b:32:51:55:06:cf:4a:57:2a:2d:e6:15:e9: 17:18:b2:62:aa:ed:fa:be:76:ba:b8:02:c6:cf:6e: 34:e8:8e:f7:2c:b8:51:39:86:41:b7:fb:c7:6d:1f: 93:18:5a:cd:bd:a9:27:9d:93:28:44:be:6d:c8:c4: 5c:eb:f0:e1:e9:36:bd:52:0e:a4:d6:e0:01:e2:c2: 90:70:79:f8:76:46:5d:c0:17:95:fd:ab:a7:aa:57: ad:18:2c:6c:47:3c:3e:88:bf:2e:86:6b:a8:32:53: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:D9:B8:4F:A0:65:44:D4:BD:62:8D:0F:B3:95:8C:C7:63:DF:E2 X509v3 Authority Key Identifier: keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:38:01:81:0d:4b:1f:9f:48:37:5f:46:99:ca:8a:a2:e3:52: bb:f3:ec:7d:21:e5:d2:cf:b3:26:38:f3:42:f7:6f:fc:2b:62: 7a:9a:91:c8:fd:4c:e8:77:2a:81:bb:4c:aa:0c:2e:d7:06:95: 08:03:05:40:0b:20:02:a5:56:90:b3:52:c4:6a:53:43:ff:35: ba:56:09:37:4c:17:88:e1:32:c5:c8:a6:9d:18:f1:ff:1f:47: d1:a8:0e:ca:d5:b6:6a:d6:85:3b:6e:36:e8:f4:ef:c0:8a:51: 2d:a6:cb:c1:c0:7d:b2:d6:a0:d9:03:2d:ce:a1:eb:ff:c8:07: c6:1d:cf:e1:1a:f0:4f:be:31:63:8a:60:5f:45:8d:fd:91:02: b1:a3:52:d6:78:52:07:54:ca:f5:d5:53:77:dd:a4:8d:12:62: b9:e3:67:3b:40:19:0d:94:83:b6:45:a0:c4:94:fa:40:f4:e9: ca:d5:84:0d:af:77:5f:06:34:26:16:59:f6:b7:34:65:5c:cd: 63:aa:67:79:15:21:31:1f:1a:f7:98:b6:7c:5b:7a:3c:06:27: 8e:47:d4:21:52:52:d3:4f:84:af:91:aa:f8:d7:b3:e3:9d:1d: b2:42:69:b2:b4:03:f5:19:bb:03:d4:fb:a7:bd:12:4a:ad:ee: 49:3c:8f:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9enrk1eo6cs4S/Jv19FhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGM5ZjE4YTE0N2ViMzU2MzBlMjM0NWM1NDAwZTE2OGE3 Yzg5YzEwHhcNMjUxMjA2MDAwMDM5WhcNMjUxMjA3MDAwMDM5WjAzMTEwLwYDVQQD EygxYWNkZDliODRmYTA2NTQ0ZDRiZDYyOGQwZmIzOTU4Y2M3NjNkZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdpGFTz0EDhb8Vh3CB4mpuoTa0TT 0XdFxEhejoCR4kqvGZWnEMwZKN4tP7u7sFpS8/ZCv/OHgefe7hmxis42nQ71wpr+ 7UgLsAOrBxg8/FmtCOJAZ/pYH7Ovhkm9fVUNZ/9SukkCxwNRjJXdTwMo1zLrDHeE evzW/Gkzv/ICEAwIjWefKksF+sS5TOvNsXolXY7BYdStSHsyUVUGz0pXKi3mFekX GLJiqu36vna6uALGz2406I73LLhROYZBt/vHbR+TGFrNvaknnZMoRL5tyMRc6/Dh 6Ta9Ug6k1uAB4sKQcHn4dkZdwBeV/aunqletGCxsRzw+iL8uhmuoMlNyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrN2bhPoGVE1L1ijQ+zlYzHY9/iMB8GA1UdIwQY MBaAFK5MnxihR+s1Yw4jRcVADhaKfInBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmt5ZkdLRkg2elZqRGlORnhVQU9Gb3A4aWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kOTZiODItNThkZC00ZGRhLWJmZDMt ZGEwNWIzN2M4ZTI0LzEvcmt5ZkdLRkg2elZqRGlORnhVQU9Gb3A4aWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kOTZiODItNThkZC00ZGRhLWJmZDMtZGEwNWIzN2M4ZTI0 LzEvcmt5ZkdLRkg2elZqRGlORnhVQU9Gb3A4aWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzgBgQ1L H59IN19GmcqKouNSu/PsfSHl0s+zJjjzQvdv/CtiepqRyP1M6HcqgbtMqgwu1waV CAMFQAsgAqVWkLNSxGpTQ/81ulYJN0wXiOEyxcimnRjx/x9H0agOytW2ataFO242 6PTvwIpRLabLwcB9stag2QMtzqHr/8gHxh3P4RrwT74xY4pgX0WN/ZECsaNS1nhS B1TK9dVTd92kjRJiueNnO0AZDZSDtkWgxJT6QPTpytWEDa93XwY0JhZZ9rc0ZVzN Y6pneRUhMR8a95i2fFt6PAYnjkfUIVJS00+Er5Gq+Nez450dskJpsrQD9Rm7A9T7 p70SSq3uSTyPLw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:20 2025 by rpki-client