This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft File: yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json) Hash identifier: dn+DDLWbjn0EsbU2QmS4/3/U1qOEnbf2MONaQBK8zNE= Subject key identifier: 8F:32:D5:03:B9:35:8C:DA:5D:12:7E:33:5D:68:AA:81:98:08:86:57 Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71 Certificate issuer: /CN=c9187af710f6285e13553071328b9d994852c471 Certificate serial: 019AF12DD153042A72C33618494D4D5A0D6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: NFm0KhrEaIhql79uF+ow2sttc5gLMpuoyAq30aGCgSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d1:53:04:2a:72:c3:36:18:49:4d:4d:5a:0d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9187af710f6285e13553071328b9d994852c471 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=8f32d503b9358cda5d127e335d68aa8198088657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:4f:b5:2a:35:4b:83:a2:21:53:d8:0c:74: f8:d3:a8:9c:b4:8e:c4:53:9b:03:ff:03:04:aa:8f: 0c:5d:0b:b8:78:38:69:44:37:0d:60:ec:74:3d:c0: e9:f5:79:fd:71:f8:13:1f:34:94:c8:82:27:94:47: 31:68:3f:a3:e4:f8:ec:e1:83:66:4f:d4:38:b9:2a: 96:1c:08:f1:ed:7f:65:e2:66:a8:dc:32:6c:43:4e: 28:35:2e:d5:a2:b7:0b:4d:d9:c2:60:be:85:86:fb: 9c:39:1a:fa:42:6e:01:3d:71:09:22:91:85:ae:fd: 1e:72:83:53:d5:22:bd:8d:68:c8:9a:84:9d:9d:89: 8e:80:e4:bc:f5:16:47:13:6b:d0:1f:5b:65:99:e4: eb:7b:7d:6e:2b:bb:a4:c1:27:9c:33:19:d9:9e:47: 79:12:04:a3:24:50:ef:d2:87:5e:f9:b8:4a:ce:9c: 95:9e:cb:9b:cf:09:63:83:76:29:06:9b:03:cf:5b: 9f:39:08:b2:ad:4a:50:e8:26:35:f8:a5:d9:f5:6d: 6e:3d:f2:a0:7e:67:ac:a4:1f:95:45:28:fe:83:4e: 14:44:3c:ad:d1:66:fe:a6:58:a4:91:36:ac:9b:f7: 2b:19:0c:a5:44:4b:ee:1c:c7:23:95:ba:5e:90:57: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:D5:03:B9:35:8C:DA:5D:12:7E:33:5D:68:AA:81:98:08:86:57 X509v3 Authority Key Identifier: keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0f:e1:e7:17:0e:a0:ec:3a:83:71:0f:88:23:f2:6d:6e:e5: d1:b8:7d:04:85:e9:10:90:8d:78:47:92:f9:0a:6b:df:4a:bc: 0c:81:d3:ab:bf:a5:8f:c7:5c:dd:c8:a7:c1:c4:0c:a5:97:75: ed:ac:8e:82:33:72:c3:b5:0c:dc:ee:4d:ae:93:a9:9a:c9:a3: 97:c0:37:43:4e:0d:17:be:fb:41:7e:3f:00:fc:d1:0b:89:56: 19:09:5b:ec:9c:59:c5:ad:78:30:29:fa:e0:c7:48:27:98:4a: 3c:f8:4a:f3:9c:8f:49:00:d3:9f:08:94:35:c4:66:3e:9e:85: 2d:2e:67:08:9e:af:46:c6:1d:82:d1:2b:48:65:56:21:3c:7c: f9:6e:b1:99:38:33:1e:6d:08:c3:12:3a:da:97:34:a2:6c:49: 9f:e3:0f:ab:ec:36:78:3a:4b:b7:82:b8:14:2d:2c:fa:85:56: 5f:23:07:9e:49:fd:e7:b1:11:84:c7:13:83:aa:ab:28:9c:17: 4d:48:9d:29:d3:4a:5c:24:a2:e5:d0:37:16:dd:6a:df:c8:0a: 1d:88:cf:e6:ed:d9:16:27:59:21:05:7e:14:1d:3f:3b:05:f3: fb:a4:38:7d:c8:97:50:e0:e7:b0:18:85:0b:d3:df:94:bb:55: cf:18:7b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdFTBCpywzYYSU1NWg1tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTg3YWY3MTBmNjI4NWUxMzU1MzA3MTMyOGI5ZDk5NDg1 MmM0NzEwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD Eyg4ZjMyZDUwM2I5MzU4Y2RhNWQxMjdlMzM1ZDY4YWE4MTk4MDg4NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERPtSo1S4OiIVPYDHT406ictI7E U5sD/wMEqo8MXQu4eDhpRDcNYOx0PcDp9Xn9cfgTHzSUyIInlEcxaD+j5Pjs4YNm T9Q4uSqWHAjx7X9l4mao3DJsQ04oNS7VorcLTdnCYL6FhvucORr6Qm4BPXEJIpGF rv0ecoNT1SK9jWjImoSdnYmOgOS89RZHE2vQH1tlmeTre31uK7ukwSecMxnZnkd5 EgSjJFDv0ode+bhKzpyVnsubzwljg3YpBpsDz1ufOQiyrUpQ6CY1+KXZ9W1uPfKg fmespB+VRSj+g04URDyt0Wb+plikkTasm/crGQylREvuHMcjlbpekFcYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8y1QO5NYzaXRJ+M11oqoGYCIZXMB8GA1UdIwQY MBaAFMkYevcQ9iheE1UwcTKLnZlIUsRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zMzBmNmItMmVhNS00OGEwLTg0MTUt NDY0ZTU5YzhmNDg1LzEveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zMzBmNmItMmVhNS00OGEwLTg0MTUtNDY0ZTU5YzhmNDg1 LzEveVJoNjl4RDJLRjRUVlRCeE1vdWRtVWhTeEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFw/h5xcO oOw6g3EPiCPybW7l0bh9BIXpEJCNeEeS+Qpr30q8DIHTq7+lj8dc3cinwcQMpZd1 7ayOgjNyw7UM3O5NrpOpmsmjl8A3Q04NF777QX4/APzRC4lWGQlb7JxZxa14MCn6 4MdIJ5hKPPhK85yPSQDTnwiUNcRmPp6FLS5nCJ6vRsYdgtErSGVWITx8+W6xmTgz Hm0IwxI62pc0omxJn+MPq+w2eDpLt4K4FC0s+oVWXyMHnkn957ERhMcTg6qrKJwX TUidKdNKXCSi5dA3Ft1q38gKHYjP5u3ZFidZIQV+FB0/OwXz+6Q4fciXUODnsBiF C9PflLtVzxh7Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:45 2025 by rpki-client