This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json) Hash identifier: TpQvqjLO69sDA3vSZlKAIH/zmfSeqCe/5D6ef6px2/w= Subject key identifier: 50:14:0F:F6:0E:C6:68:07:E4:10:C6:70:4B:C5:CD:E9:F3:2A:F5:7D Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef Certificate serial: 019AF1D19AD08878AF25C136014D2FC50C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: QXbzIgnWfx0awB86hz93AqnG/Y9kIa/n5Z99F18cjBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9a:d0:88:78:af:25:c1:36:01:4d:2f:c5:0c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=50140ff60ec66807e410c6704bc5cde9f32af57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:9c:ee:2e:82:af:55:b6:f2:9e:ce:eb:c6: b0:1c:f1:e4:05:41:cf:15:e7:70:cb:48:e0:f5:7e: 63:2f:00:19:76:91:55:35:fd:96:ac:a1:e6:5f:dd: 9d:50:56:d0:7d:1c:d8:b7:48:23:62:4b:40:b8:87: ef:7c:6a:f0:f8:63:60:2b:2c:cb:0f:bd:66:b7:e3: 05:97:c0:66:88:ba:94:0b:21:db:0a:f6:ea:96:70: 1c:d5:dd:cd:b7:d2:51:a4:f8:fd:26:92:d0:ef:95: d9:cc:d2:32:c0:fc:08:70:ea:bb:76:f5:f0:d9:f7: 19:03:bc:2c:a8:19:1a:0c:14:b6:b3:30:fc:24:3f: b3:7c:3b:94:97:84:24:9b:34:b9:bf:3a:11:76:41: b8:52:ae:41:4f:b5:a5:bd:81:42:61:62:22:4b:3c: fa:8d:bf:fd:b1:86:4c:54:16:a1:4a:8f:3a:e8:70: 75:0c:53:58:0f:fd:84:6b:15:f3:a0:81:fd:0b:df: 08:34:f9:a1:d6:94:9e:90:c2:4d:c1:62:63:1d:d0: 20:67:9d:b7:d0:b9:f2:d9:9d:dd:a7:b7:03:c1:57: 8a:93:e2:9b:de:33:d9:16:7a:80:b5:c0:ea:42:54: 08:77:9c:a0:f8:fa:8f:11:4f:b7:68:92:d0:1f:61: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:0F:F6:0E:C6:68:07:E4:10:C6:70:4B:C5:CD:E9:F3:2A:F5:7D X509v3 Authority Key Identifier: keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9c:47:01:ce:f8:8c:79:c3:74:3b:3b:60:72:fc:8a:06:4d: 62:01:53:60:a8:8c:fa:a2:d1:9d:72:48:a2:51:65:96:00:84: e0:c6:e2:68:9b:ba:39:4d:55:22:8b:1e:c7:23:88:80:1b:4d: f0:58:a2:61:8c:62:d0:0d:ca:2a:9c:63:70:ec:cc:36:27:b7: 7c:f2:e5:24:b0:99:cc:41:6e:a1:4b:0d:d6:64:a7:59:59:0d: 27:bc:45:55:39:92:97:75:f4:3e:79:21:2e:c1:f1:ff:9d:69: 8f:6f:0a:6e:a1:aa:b6:80:f2:4c:61:ab:e7:f8:0e:50:a1:55: d6:dd:bd:db:90:4d:c5:2b:25:8c:eb:24:3c:66:ca:ac:91:81: 07:2b:ba:78:6a:b3:5c:32:a5:19:d0:fe:24:80:27:81:b2:d2: 56:69:44:16:c3:8d:b4:22:76:8b:14:de:61:d3:4e:5c:29:3d: ce:18:1f:5a:f1:ad:89:93:34:13:1a:90:a0:eb:5c:93:50:57: a1:50:84:df:f0:c2:53:f8:66:5f:4f:26:6c:c6:4a:a2:27:aa: dc:f9:7d:47:a3:60:05:60:d5:cd:5f:01:54:91:46:c2:98:f7: 5c:7b:87:03:b9:f9:34:2b:f6:30:25:f3:52:67:9f:09:9f:f6: 79:6f:c8:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZrQiHivJcE2AU0vxQxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNmYwYWVjOWZjOTFmNGNjNjA0OWNmMmQ5NTQyZWJkODI1 MTVhZWYwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD Eyg1MDE0MGZmNjBlYzY2ODA3ZTQxMGM2NzA0YmM1Y2RlOWYzMmFmNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWqc7i6Cr1W28p7O68awHPHkBUHP Fedwy0jg9X5jLwAZdpFVNf2WrKHmX92dUFbQfRzYt0gjYktAuIfvfGrw+GNgKyzL D71mt+MFl8BmiLqUCyHbCvbqlnAc1d3Nt9JRpPj9JpLQ75XZzNIywPwIcOq7dvXw 2fcZA7wsqBkaDBS2szD8JD+zfDuUl4QkmzS5vzoRdkG4Uq5BT7WlvYFCYWIiSzz6 jb/9sYZMVBahSo866HB1DFNYD/2EaxXzoIH9C98INPmh1pSekMJNwWJjHdAgZ523 0Lny2Z3dp7cDwVeKk+Kb3jPZFnqAtcDqQlQId5yg+PqPEU+3aJLQH2FBkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAUD/YOxmgH5BDGcEvFzenzKvV9MB8GA1UdIwQY MBaAFGBvCuyfyR9MxgSc8tlULr2CUVrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAt ZDk5NDdhZjJmY2E3LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAtZDk5NDdhZjJmY2E3 LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5xHAc74 jHnDdDs7YHL8igZNYgFTYKiM+qLRnXJIolFllgCE4MbiaJu6OU1VIosexyOIgBtN 8FiiYYxi0A3KKpxjcOzMNie3fPLlJLCZzEFuoUsN1mSnWVkNJ7xFVTmSl3X0Pnkh LsHx/51pj28KbqGqtoDyTGGr5/gOUKFV1t2925BNxSsljOskPGbKrJGBByu6eGqz XDKlGdD+JIAngbLSVmlEFsONtCJ2ixTeYdNOXCk9zhgfWvGtiZM0ExqQoOtck1BX oVCE3/DCU/hmX08mbMZKoieq3Pl9R6NgBWDVzV8BVJFGwpj3XHuHA7n5NCv2MCXz UmefCZ/2eW/IXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:20 2025 by rpki-client