This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json) Hash identifier: VCVLG715hVadJkNEC1kUGG3sXbo92eL/aQkQAcOP+rs= Subject key identifier: 0D:9C:53:8E:EB:22:AF:02:42:09:1A:77:61:71:3A:71:81:26:BE:AE Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d Certificate serial: 019B2B8AD9D217861EBB6ACFD48483B6CD61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft Manifest number: 0439 Signing time: Wed 17 Dec 2025 09:01:18 +0000 Manifest this update: Wed 17 Dec 2025 09:01:18 +0000 Manifest next update: Thu 18 Dec 2025 09:01:18 +0000 Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: wBzciVnsR1+CZq5C0XMvS7ITIj64KngjaBzPwilOy60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:d9:d2:17:86:1e:bb:6a:cf:d4:84:83:b6:cd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d Validity Not Before: Dec 17 09:01:18 2025 GMT Not After : Dec 18 09:01:18 2025 GMT Subject: CN=0d9c538eeb22af0242091a7761713a718126beae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:9d:10:2c:5b:c8:fe:73:a8:f5:1a:14:51: b2:01:4b:bd:de:15:79:60:d4:c8:a8:e2:9a:96:8c: 60:c2:04:b9:66:eb:8e:64:a0:a1:d9:75:f2:c1:60: 1f:70:c8:77:eb:36:13:5c:d6:33:a8:52:b6:83:a4: 1a:43:47:62:9f:7a:9e:6b:f1:17:ec:51:08:6b:9a: 61:b0:4a:7e:6d:a8:a3:b4:32:69:40:73:6b:35:73: e6:48:c7:33:b6:45:9e:a4:0c:89:ed:49:db:7b:91: 8a:78:f6:c9:f4:b8:9b:d4:3e:52:9d:92:19:e4:da: d0:44:69:24:2d:50:ec:00:81:24:f1:0a:05:40:83: 79:a7:a4:79:4b:f2:a2:61:5e:15:90:1c:c4:7d:79: d7:39:5d:99:2f:36:3c:aa:bd:9f:81:0f:fb:fe:51: ae:de:48:b2:7c:7a:41:2e:a5:20:9e:85:82:4d:6d: 7f:8c:55:24:b4:b0:0d:6b:c4:6a:a4:4c:cb:21:89: 7f:34:3f:e6:02:58:ba:73:f5:11:1d:c0:fa:5a:16: cd:31:ce:98:c1:3b:34:ab:5f:50:95:f0:19:cf:95: 54:31:c4:2b:51:64:f6:f8:9b:62:b3:7e:92:ad:18: 33:73:ed:2d:fe:29:9c:e1:1a:b3:96:17:2c:6c:d6: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9C:53:8E:EB:22:AF:02:42:09:1A:77:61:71:3A:71:81:26:BE:AE X509v3 Authority Key Identifier: keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:82:90:42:1d:bb:36:f4:c1:a8:75:09:7e:0d:3d:69:e4:62: de:2d:66:37:9d:17:36:7a:d1:d1:8d:3c:34:e0:02:7f:17:27: 56:cf:9f:ee:63:0b:f1:ad:b2:e4:69:dc:3b:7a:d4:3d:ac:dc: b9:32:46:2c:74:0a:63:33:b6:c9:1d:b0:07:03:30:f6:4e:b5: ba:f2:ca:77:3d:a2:a8:62:f7:60:b5:52:f4:2a:b1:52:13:f0: bc:8c:0c:4c:28:d0:ee:3d:90:78:78:f4:fd:4b:be:f3:a3:ba: b4:ee:18:e6:72:bf:3f:1c:20:86:5f:ef:92:98:1c:24:46:3b: d2:eb:8f:8e:53:ca:f1:2f:69:41:e2:88:ab:e8:45:fe:8b:03: 88:dc:03:b5:63:22:1c:0a:f8:74:c3:8a:07:16:32:09:24:4f: 0d:98:44:4f:14:3a:26:fd:91:5c:de:37:16:bf:a1:a9:b4:ab: ed:ed:25:69:74:e5:93:cf:06:bb:1b:4b:29:06:9f:46:b8:0e: 1a:71:e0:6d:1f:cf:1c:0f:92:63:d2:50:74:65:ae:cf:4b:bb: 44:16:46:19:fc:c8:14:d3:bd:66:4f:66:f1:c5:2e:35:59:6a: d4:45:7b:8e:9c:1a:ca:cb:52:59:2e:a1:1a:24:9c:ff:8e:9a: 2c:7d:df:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsritnSF4Yeu2rP1ISDts1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ODdhNjg4YTg5YTk4OTk0OTQxNmE4MTljYzRhODBkZWE0 NTRjOWQwHhcNMjUxMjE3MDkwMTE4WhcNMjUxMjE4MDkwMTE4WjAzMTEwLwYDVQQD EygwZDljNTM4ZWViMjJhZjAyNDIwOTFhNzc2MTcxM2E3MTgxMjZiZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPudECxbyP5zqPUaFFGyAUu93hV5 YNTIqOKaloxgwgS5ZuuOZKCh2XXywWAfcMh36zYTXNYzqFK2g6QaQ0din3qea/EX 7FEIa5phsEp+baijtDJpQHNrNXPmSMcztkWepAyJ7Unbe5GKePbJ9Lib1D5SnZIZ 5NrQRGkkLVDsAIEk8QoFQIN5p6R5S/KiYV4VkBzEfXnXOV2ZLzY8qr2fgQ/7/lGu 3kiyfHpBLqUgnoWCTW1/jFUktLANa8RqpEzLIYl/ND/mAli6c/URHcD6WhbNMc6Y wTs0q19QlfAZz5VUMcQrUWT2+Jtis36SrRgzc+0t/imc4RqzlhcsbNa4owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2cU47rIq8CQgkad2FxOnGBJr6uMB8GA1UdIwQY MBaAFEWHpoiompiZSUFqgZzEqA3qRUydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAt MmY3MjU5NTYxNDhmLzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAtMmY3MjU5NTYxNDhm LzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoKQQh27 NvTBqHUJfg09aeRi3i1mN50XNnrR0Y08NOACfxcnVs+f7mML8a2y5GncO3rUPazc uTJGLHQKYzO2yR2wBwMw9k61uvLKdz2iqGL3YLVS9CqxUhPwvIwMTCjQ7j2QeHj0 /Uu+86O6tO4Y5nK/Pxwghl/vkpgcJEY70uuPjlPK8S9pQeKIq+hF/osDiNwDtWMi HAr4dMOKBxYyCSRPDZhETxQ6Jv2RXN43Fr+hqbSr7e0laXTlk88GuxtLKQafRrgO GnHgbR/PHA+SY9JQdGWuz0u7RBZGGfzIFNO9Zk9m8cUuNVlq1EV7jpwaystSWS6h GiSc/46aLH3fyw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:53:33 2025 by rpki-client