This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft File: yGEQ5MdkHRgOjxkgrGX7788G18c.mft (raw, json) Hash identifier: ENGQsx5gjpEU70+bzc0Bb3gqMbnp0Isp/Mk3tFDeZNI= Subject key identifier: BE:C2:3C:F1:3B:2D:7A:B4:F2:C5:FB:A2:04:43:C2:44:18:B9:04:46 Authority key identifier: C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7 Certificate issuer: /CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7 Certificate serial: 019AF0BFA37185FE9EF7B0B7F55EBC3262AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft Manifest number: 01F4 Signing time: Fri 05 Dec 2025 23:01:22 +0000 Manifest this update: Fri 05 Dec 2025 23:01:22 +0000 Manifest next update: Sat 06 Dec 2025 23:01:22 +0000 Files and hashes: 1: yGEQ5MdkHRgOjxkgrGX7788G18c.crl (hash: 9HWOBUICPKeWuVkepPn3gBLFXgo2tjPObJ1P6s5hToE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a3:71:85:fe:9e:f7:b0:b7:f5:5e:bc:32:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c86110e4c7641d180e8f1920ac65fbefcf06d7c7 Validity Not Before: Dec 5 23:01:22 2025 GMT Not After : Dec 6 23:01:22 2025 GMT Subject: CN=bec23cf13b2d7ab4f2c5fba20443c24418b90446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:43:72:dc:ea:70:8e:a5:c7:d4:2f:f1:db: 3d:aa:40:33:d2:7a:b4:d7:80:ad:c2:7c:c4:ff:71: 21:cc:a2:a1:20:25:05:21:9b:89:28:ec:6a:b0:1d: 9a:dc:c0:fe:c4:d9:a4:e1:43:dc:86:17:c6:93:0b: b3:82:99:b2:a4:67:ef:1d:e4:db:55:27:94:e5:fd: d4:4b:c1:77:62:2b:e9:15:fc:1d:3d:92:16:f4:62: 87:39:7c:5f:9b:83:f2:51:16:35:b4:fc:5f:d8:6b: 76:9d:4e:23:8c:fc:98:8e:4b:26:cd:a8:48:36:8b: 4e:06:66:06:49:9d:80:1e:45:72:80:be:b3:88:25: a5:84:d1:be:15:74:f3:05:f1:b8:fe:a0:63:aa:7c: e8:ae:7f:58:21:60:98:e9:c8:c4:8a:5e:f2:94:1e: aa:11:8a:09:d9:3b:35:ca:f3:7f:04:7e:1c:c2:c1: e6:cd:5d:c9:de:e8:7c:27:73:94:c2:e2:c2:7d:e9: 8b:39:62:7d:83:b2:8c:f1:1d:c8:52:f6:3e:a4:3b: 12:fc:ce:5c:7c:e4:46:3c:e0:ca:44:8b:1c:a7:58: e3:75:90:49:fe:86:b7:de:32:be:33:a3:16:92:88: 47:7c:20:da:19:99:71:1d:4b:88:80:ae:2b:8f:33: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C2:3C:F1:3B:2D:7A:B4:F2:C5:FB:A2:04:43:C2:44:18:B9:04:46 X509v3 Authority Key Identifier: keyid:C8:61:10:E4:C7:64:1D:18:0E:8F:19:20:AC:65:FB:EF:CF:06:D7:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGEQ5MdkHRgOjxkgrGX7788G18c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/208c25-edce-4131-b31b-66a52c7c8c00/1/yGEQ5MdkHRgOjxkgrGX7788G18c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:61:0a:ed:4f:c7:81:02:44:f5:48:52:5e:08:a8:17:ad:f9: a6:05:e3:b0:d9:79:be:8c:e6:02:42:ce:78:b2:36:e5:17:5f: 7e:21:57:bd:36:95:7f:02:51:ab:2f:98:f3:5a:4b:5f:dc:66: bf:e6:2f:97:1b:a0:85:2c:86:3d:46:29:30:d6:3a:2c:07:2c: 3c:34:b6:3f:13:28:58:7c:1a:9b:49:ab:09:6b:fc:44:70:55: 5a:98:fb:bd:16:1b:27:5c:4e:1a:4e:01:8e:88:ac:a2:db:e0: e9:72:3d:df:ce:f5:d6:db:41:15:98:37:2b:c8:80:01:34:22: 16:da:1d:a5:06:f0:11:7a:53:6d:35:05:c6:d5:9c:ef:85:32: 83:51:26:2e:48:87:84:bf:8e:6a:d4:29:11:c6:b6:c3:ed:ec: e7:86:36:b9:8e:1d:6a:37:9d:28:23:24:8e:5a:33:59:53:81: 6d:d1:55:0d:20:9b:90:fe:65:02:b0:e7:2b:f1:55:2d:fd:4e: a4:2d:ad:6a:e9:69:b2:b2:ca:54:35:cd:16:47:5a:b1:39:91: e4:bf:d9:38:0a:bf:c3:97:1e:ce:0b:6f:fa:c8:d9:53:c8:6e: 31:fc:80:9b:1b:0c:b6:24:df:c4:8c:a7:1e:c2:55:9d:9d:9a: a7:93:0c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6Nxhf6e97C39V68MmKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NjExMGU0Yzc2NDFkMTgwZThmMTkyMGFjNjVmYmVmY2Yw NmQ3YzcwHhcNMjUxMjA1MjMwMTIyWhcNMjUxMjA2MjMwMTIyWjAzMTEwLwYDVQQD EyhiZWMyM2NmMTNiMmQ3YWI0ZjJjNWZiYTIwNDQzYzI0NDE4YjkwNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMhDctzqcI6lx9Qv8ds9qkAz0nq0 14CtwnzE/3EhzKKhICUFIZuJKOxqsB2a3MD+xNmk4UPchhfGkwuzgpmypGfvHeTb VSeU5f3US8F3YivpFfwdPZIW9GKHOXxfm4PyURY1tPxf2Gt2nU4jjPyYjksmzahI NotOBmYGSZ2AHkVygL6ziCWlhNG+FXTzBfG4/qBjqnzorn9YIWCY6cjEil7ylB6q EYoJ2Ts1yvN/BH4cwsHmzV3J3uh8J3OUwuLCfemLOWJ9g7KM8R3IUvY+pDsS/M5c fORGPODKRIscp1jjdZBJ/oa33jK+M6MWkohHfCDaGZlxHUuIgK4rjzOimQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7CPPE7LXq08sX7ogRDwkQYuQRGMB8GA1UdIwQY MBaAFMhhEOTHZB0YDo8ZIKxl++/PBtfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yMDhjMjUtZWRjZS00MTMxLWIzMWIt NjZhNTJjN2M4YzAwLzEveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8yMDhjMjUtZWRjZS00MTMxLWIzMWItNjZhNTJjN2M4YzAw LzEveUdFUTVNZGtIUmdPanhrZ3JHWDc3ODhHMThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2EK7U/H gQJE9UhSXgioF635pgXjsNl5vozmAkLOeLI25RdffiFXvTaVfwJRqy+Y81pLX9xm v+YvlxughSyGPUYpMNY6LAcsPDS2PxMoWHwam0mrCWv8RHBVWpj7vRYbJ1xOGk4B joisotvg6XI938711ttBFZg3K8iAATQiFtodpQbwEXpTbTUFxtWc74Uyg1EmLkiH hL+OatQpEca2w+3s54Y2uY4dajedKCMkjlozWVOBbdFVDSCbkP5lArDnK/FVLf1O pC2taulpsrLKVDXNFkdasTmR5L/ZOAq/w5cezgtv+sjZU8huMfyAmxsMtiTfxIyn HsJVnZ2ap5MM3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:25 2025 by rpki-client