This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json) Hash identifier: YKZ/0O7gqbuEk5EpdziD1zpq6TE1JQcWxfyELgVKOYs= Subject key identifier: 71:6F:54:21:B4:CA:88:86:E8:D5:92:63:19:D6:EB:D7:3D:FC:9D:E8 Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66 Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966 Certificate serial: 019AF12DE1C9030428A2F8CE0E7B9ADA57BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: NPZQaIoymZS3Q8G0f/sERrnP4gqRB3Hb9vZdpWHL47E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e1:c9:03:04:28:a2:f8:ce:0e:7b:9a:da:57:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=716f5421b4ca8886e8d5926319d6ebd73dfc9de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:d3:15:0b:70:fd:f1:9d:ea:7d:ab:bd:5f: 87:b3:ce:b4:4a:91:09:f7:e6:fe:41:0c:98:da:f2: ae:be:b7:b7:18:05:18:74:53:2b:62:88:2c:e0:3b: 38:9e:48:d7:8f:91:89:f8:49:a7:e3:3b:9a:3c:77: 70:18:9e:cd:71:9a:db:c3:87:9b:15:b7:07:81:9b: 65:73:5d:4d:c1:88:9f:7e:71:4a:f3:b1:3b:7e:60: fb:15:e3:c9:28:10:3f:97:b7:6e:c7:ba:52:2a:cc: 6d:db:ee:24:4a:fc:91:39:16:7a:48:5e:c9:64:5c: 90:9f:05:ea:03:4d:7e:94:35:7e:b7:3d:c2:99:d8: 0f:e9:ad:e0:85:a0:80:6e:91:97:cb:4b:99:1b:f0: 48:c9:24:c3:99:fe:86:17:cd:3e:3d:79:03:c7:f6: 09:35:78:b8:7c:eb:c1:5d:64:7f:3f:c4:a8:24:0d: ef:72:2d:d1:d6:0c:5a:65:72:b0:69:53:e6:6e:98: 8d:cf:67:06:4a:70:82:30:42:8c:ca:64:33:bf:8a: 63:ad:34:1b:92:ec:1c:1a:ec:90:68:92:09:da:b0: 25:c8:3c:28:d1:b1:27:f1:46:a0:43:35:1c:43:43: 58:73:68:90:24:94:23:8f:e4:cd:12:c7:2c:00:f5: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6F:54:21:B4:CA:88:86:E8:D5:92:63:19:D6:EB:D7:3D:FC:9D:E8 X509v3 Authority Key Identifier: keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:16:ef:09:d8:85:35:6d:5b:61:5f:00:74:88:78:37:c0:e8: e7:1b:b5:3a:d7:1e:ba:f3:6d:12:4a:8a:05:0b:f0:1c:78:31: 84:f0:ad:e4:10:8e:be:eb:68:2f:8c:87:a3:1f:3d:d3:0c:a4: 62:8a:38:f2:90:a9:d3:72:46:4e:5b:7a:40:a8:cb:e6:ee:ae: da:c2:d0:a5:d2:68:eb:29:30:20:14:3a:26:e4:a5:c9:ea:2f: 3a:98:88:60:26:ca:3b:d2:4b:eb:2e:30:07:b2:7b:86:d7:92: f9:eb:2f:54:cf:1d:e3:b0:7a:00:89:76:11:5d:66:88:f6:d1: e5:24:ef:dc:bb:5c:54:23:e7:68:89:ec:05:df:3c:5a:36:10: b2:be:52:87:b9:a0:ea:d7:07:f2:fb:8d:8d:ca:54:96:07:de: f5:a9:76:72:e8:37:29:7f:3d:aa:2c:46:71:c5:1e:49:55:f7: a4:99:bf:21:f1:e9:7d:55:15:e8:75:30:a0:6b:99:5b:62:9c: f6:7b:37:91:c6:70:0f:3b:d1:3a:59:62:d5:e3:88:04:a8:fb: f9:77:06:ad:fe:56:20:9b:a4:66:c9:b1:1f:91:f3:f5:9b:b0: a6:0f:92:be:82:cb:af:1d:e4:bc:1e:3f:87:53:b8:4e:e4:aa: fd:30:67:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeHJAwQoovjODnua2le+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMjYxZGVlNmQ1NGRkNTM2ZWY3MDBmMmQ5ZDgxOTdjODYw OTM5NjYwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD Eyg3MTZmNTQyMWI0Y2E4ODg2ZThkNTkyNjMxOWQ2ZWJkNzNkZmM5ZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldrTFQtw/fGd6n2rvV+Hs860SpEJ 9+b+QQyY2vKuvre3GAUYdFMrYogs4Ds4nkjXj5GJ+Emn4zuaPHdwGJ7NcZrbw4eb FbcHgZtlc11NwYiffnFK87E7fmD7FePJKBA/l7dux7pSKsxt2+4kSvyRORZ6SF7J ZFyQnwXqA01+lDV+tz3CmdgP6a3ghaCAbpGXy0uZG/BIySTDmf6GF80+PXkDx/YJ NXi4fOvBXWR/P8SoJA3vci3R1gxaZXKwaVPmbpiNz2cGSnCCMEKMymQzv4pjrTQb kuwcGuyQaJIJ2rAlyDwo0bEn8UagQzUcQ0NYc2iQJJQjj+TNEscsAPV1pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFvVCG0yoiG6NWSYxnW69c9/J3oMB8GA1UdIwQY MBaAFNImHe5tVN1TbvcA8tnYGXyGCTlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgt NmYwZjQ2ZjRkNGI0LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgtNmYwZjQ2ZjRkNGI0 LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxbvCdiF NW1bYV8AdIh4N8Do5xu1OtceuvNtEkqKBQvwHHgxhPCt5BCOvutoL4yHox890wyk Yoo48pCp03JGTlt6QKjL5u6u2sLQpdJo6ykwIBQ6JuSlyeovOpiIYCbKO9JL6y4w B7J7hteS+esvVM8d47B6AIl2EV1miPbR5STv3LtcVCPnaInsBd88WjYQsr5Sh7mg 6tcH8vuNjcpUlgfe9al2cug3KX89qixGccUeSVX3pJm/IfHpfVUV6HUwoGuZW2Kc 9ns3kcZwDzvROlli1eOIBKj7+XcGrf5WIJukZsmxH5Hz9Zuwpg+SvoLLrx3kvB4/ h1O4TuSq/TBnKw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:05 2025 by rpki-client