This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json) Hash identifier: OEDQBh8D9JPr2lKLKEoh1c5Bo5YDzdkQe7X5wMQBIzU= Subject key identifier: 23:0C:10:CB:48:CD:BB:14:29:0E:AE:4E:01:02:9A:2F:C0:C0:9F:5C Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77 Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577 Certificate serial: 019AF12CC9E4D7ECE85BA87A0594088CD5EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft Manifest number: 0B99 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: FvLSm+rpxB3L3GdUyU4zCAT9rnoMa5sqTT7Zg8R19dA=) 2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c9:e4:d7:ec:e8:5b:a8:7a:05:94:08:8c:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=230c10cb48cdbb14290eae4e01029a2fc0c09f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:c2:15:be:cf:70:ca:32:5e:7d:bb:6a:d0: e4:02:6a:24:fb:dc:99:c7:e7:96:a6:fa:a9:50:cd: 03:1e:9e:91:32:e4:3b:66:2b:30:26:0c:cc:9a:aa: c6:47:dd:05:93:4b:f3:3d:cb:a2:97:3b:c9:00:86: bb:49:28:18:b5:3c:ab:0e:11:a7:56:a1:72:07:b8: 56:03:7b:ff:2c:93:16:de:c2:c5:67:cc:f3:68:18: 06:62:2c:8f:ca:73:36:a9:50:f4:c6:f1:49:e2:eb: b9:42:f8:b2:41:69:5d:c2:3f:98:4c:ab:c1:be:03: 3d:56:db:da:68:20:ab:3b:54:f3:00:f0:54:40:88: 28:cd:87:0c:f1:78:0a:98:41:cb:96:19:f0:24:31: 5b:e2:23:2d:30:46:b4:65:af:b9:8a:19:36:b3:a4: cd:02:08:68:29:2c:c7:91:50:2d:c6:68:b8:c5:71: b7:70:3a:b4:87:a4:c6:6c:a2:15:50:42:b9:32:57: 56:21:88:21:b2:0f:42:91:aa:ce:dd:35:e7:65:14: e6:ea:d2:e1:41:a8:7c:42:e3:c2:92:4e:4c:29:61: 86:25:73:ec:10:ab:ae:58:2c:d5:c8:5b:63:96:7f: 89:70:a5:95:93:5c:97:f5:23:3c:61:7c:d3:f8:3d: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0C:10:CB:48:CD:BB:14:29:0E:AE:4E:01:02:9A:2F:C0:C0:9F:5C X509v3 Authority Key Identifier: keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:bb:88:2a:77:38:8a:76:aa:2b:92:9f:ea:5c:5a:fa:74: 00:67:ee:2f:df:ce:05:5c:e3:77:47:3d:c8:8b:7b:99:b6:79: 04:80:f1:af:c2:c9:58:84:e9:9a:04:39:10:3e:87:ed:55:62: 97:f7:a1:0d:20:d5:7d:1b:81:0f:eb:45:c1:fc:b0:34:df:fd: 9c:d4:01:39:b9:9f:4b:8a:00:78:e1:3c:c4:54:a0:ee:8c:c3: 84:eb:58:ac:de:e2:77:1f:00:36:ed:b0:d1:a1:9a:00:33:06: f3:9a:76:cb:29:9b:33:32:de:87:dc:e6:50:8b:8d:14:a9:71: 44:c2:76:8a:a2:b1:7e:ca:bb:02:f8:09:71:c0:87:d4:4c:fb: 59:1a:8c:2c:b7:8f:5e:6b:51:9d:33:62:cf:1d:f7:c1:65:1e: aa:6e:76:79:60:04:94:56:06:12:ab:04:fb:10:45:8b:fb:34: 39:2c:d1:b9:20:6f:a9:96:98:bc:90:bd:06:61:24:5d:ce:e8: 00:1b:f1:3c:1e:11:41:46:ba:e0:73:38:75:90:e8:42:8e:43: 8c:63:80:9e:f8:5c:bb:d8:97:33:a0:57:f8:b6:e1:4f:74:00: 8c:81:0f:b6:bd:09:71:90:e9:f8:86:cd:00:dd:19:06:32:38: 16:b4:30:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMnk1+zoW6h6BZQIjNXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkODE4ZDkzZTY4NTcxZjk1YzQ1ZWJjMjgxNTk4YzdjOThm MzI1NzcwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EygyMzBjMTBjYjQ4Y2RiYjE0MjkwZWFlNGUwMTAyOWEyZmMwYzA5ZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2jCFb7PcMoyXn27atDkAmok+9yZ x+eWpvqpUM0DHp6RMuQ7ZiswJgzMmqrGR90Fk0vzPcuilzvJAIa7SSgYtTyrDhGn VqFyB7hWA3v/LJMW3sLFZ8zzaBgGYiyPynM2qVD0xvFJ4uu5QviyQWldwj+YTKvB vgM9VtvaaCCrO1TzAPBUQIgozYcM8XgKmEHLlhnwJDFb4iMtMEa0Za+5ihk2s6TN AghoKSzHkVAtxmi4xXG3cDq0h6TGbKIVUEK5MldWIYghsg9CkarO3TXnZRTm6tLh Qah8QuPCkk5MKWGGJXPsEKuuWCzVyFtjln+JcKWVk1yX9SM8YXzT+D2gFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMMEMtIzbsUKQ6uTgECmi/AwJ9cMB8GA1UdIwQY MBaAFP2BjZPmhXH5XEXrwoFZjHyY8yV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMt ZjY5OGIwNWJhOTcxLzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMtZjY5OGIwNWJhOTcx LzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT+7iCp3 OIp2qiuSn+pcWvp0AGfuL9/OBVzjd0c9yIt7mbZ5BIDxr8LJWITpmgQ5ED6H7VVi l/ehDSDVfRuBD+tFwfywNN/9nNQBObmfS4oAeOE8xFSg7ozDhOtYrN7idx8ANu2w 0aGaADMG85p2yymbMzLeh9zmUIuNFKlxRMJ2iqKxfsq7AvgJccCH1Ez7WRqMLLeP XmtRnTNizx33wWUeqm52eWAElFYGEqsE+xBFi/s0OSzRuSBvqZaYvJC9BmEkXc7o ABvxPB4RQUa64HM4dZDoQo5DjGOAnvhcu9iXM6BX+LbhT3QAjIEPtr0JcZDp+IbN AN0ZBjI4FrQwYg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:02 2025 by rpki-client