This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft File: YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json) Hash identifier: Jcgr/l9l9rOL6a32WZTCRc9C9LlSX4JFsupGCjVWyw8= Subject key identifier: 6B:D2:1C:3C:7A:3D:D3:00:71:2A:28:DB:B1:B1:D5:F4:9D:8B:2F:E9 Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F Certificate issuer: /CN=6050099e335409db03ac1133d164f02a0d5dc66f Certificate serial: 019AF49BA674661F3BAB16EBCB9402EE8997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft Manifest number: 0C0C Signing time: Sat 06 Dec 2025 17:00:32 +0000 Manifest this update: Sat 06 Dec 2025 17:00:32 +0000 Manifest next update: Sun 07 Dec 2025 17:00:32 +0000 Files and hashes: 1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: aGk68oxT8aBTd9zRNCFSvd4H/tYFDECCTIEIk0UC9fA=) 2: _1S8ifFC66PXKfy6coz8hf3gqnE.roa (hash: OwgGsWr1GQctqMIeUtgkReMkIUwARG+Gbc9mT88WrC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a6:74:66:1f:3b:ab:16:eb:cb:94:02:ee:89:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f Validity Not Before: Dec 6 17:00:32 2025 GMT Not After : Dec 7 17:00:32 2025 GMT Subject: CN=6bd21c3c7a3dd300712a28dbb1b1d5f49d8b2fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:16:f8:d6:32:f3:43:59:ca:a5:15:fb:d2: f3:52:d5:e7:86:2d:8c:89:72:5a:84:ca:3a:26:17: 48:13:1d:9a:81:08:d1:59:19:db:84:a9:4c:8b:39: f9:d2:69:cc:48:f0:67:3e:ee:a3:d9:b0:81:49:e3: 4f:af:87:bc:64:47:e5:23:82:de:6d:fb:40:46:97: 17:e4:7b:01:d0:38:41:bf:cb:ba:81:6d:89:45:81: 4b:75:e9:c4:46:63:7d:2d:08:39:48:43:e9:25:b3: 4b:5c:26:f3:92:e0:97:37:ca:bb:43:72:e8:ba:12: e4:06:c6:78:a2:e8:c0:19:af:c0:b5:a1:d6:2c:e9: 2b:97:ad:6e:fb:9b:2b:08:e7:f6:9b:e6:e2:aa:61: 90:d3:10:94:d3:8d:74:12:ca:e5:e9:b0:3f:33:11: 36:2d:19:1c:60:ac:59:68:7a:b1:c9:ca:b4:7b:a5: d0:2c:04:a8:34:aa:41:d7:61:05:71:e6:e0:76:f3: a2:8a:b2:75:3b:30:5e:e8:8f:05:f7:0c:2f:7b:f8: 81:74:14:a2:e1:49:89:6d:b1:91:d7:1b:4c:5d:8a: 1a:e5:f8:39:3e:c6:f3:d9:84:63:04:e3:57:66:99: ed:78:ec:01:e8:79:c9:69:19:60:c9:22:60:2b:43: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D2:1C:3C:7A:3D:D3:00:71:2A:28:DB:B1:B1:D5:F4:9D:8B:2F:E9 X509v3 Authority Key Identifier: keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:97:8d:e2:c6:e1:22:db:76:6f:cd:01:d1:89:82:fb:a3:f1: 17:bc:c7:ac:40:f2:99:b3:9d:98:07:4a:4b:5c:55:c8:1e:ed: 6c:70:85:ee:de:c2:fb:6c:66:ca:e0:80:60:97:39:c8:80:93: 68:19:81:50:d9:ea:73:2e:bc:5d:36:d5:f4:e2:d3:ec:9e:69: 1e:07:fb:57:ba:b0:e8:dd:05:7a:98:e2:af:0c:34:70:d4:2d: 84:d0:2e:4f:a1:71:5a:15:1e:fa:fa:3b:b2:28:54:59:de:bd: 39:b9:6c:d8:e8:01:da:77:0d:66:20:47:dd:9e:7a:e6:3c:77: e0:26:dc:d4:fd:10:a2:ca:0b:35:f1:8d:99:80:c1:30:e0:cb: 17:10:89:7e:3e:58:e6:6a:5d:27:39:a8:ba:17:90:d7:3c:0c: aa:93:a5:0f:fa:f6:06:e9:bb:75:53:d5:83:09:a1:c9:1e:54: 33:75:bc:5f:53:28:e2:73:1d:49:dd:45:83:4a:fd:12:99:40: 9b:15:5c:1e:70:a9:dc:e8:df:46:2d:e9:29:74:44:29:8b:d2: 3f:a5:7c:b3:22:c6:71:47:3c:a2:7e:c6:d4:af:ae:00:21:52: c4:3d:6d:e0:66:85:c4:1f:ae:14:c7:67:16:61:7d:87:a6:5b: a8:ff:ac:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6Z0Zh87qxbry5QC7omXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTAwOTllMzM1NDA5ZGIwM2FjMTEzM2QxNjRmMDJhMGQ1 ZGM2NmYwHhcNMjUxMjA2MTcwMDMyWhcNMjUxMjA3MTcwMDMyWjAzMTEwLwYDVQQD Eyg2YmQyMWMzYzdhM2RkMzAwNzEyYTI4ZGJiMWIxZDVmNDlkOGIyZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+IW+NYy80NZyqUV+9LzUtXnhi2M iXJahMo6JhdIEx2agQjRWRnbhKlMizn50mnMSPBnPu6j2bCBSeNPr4e8ZEflI4Le bftARpcX5HsB0DhBv8u6gW2JRYFLdenERmN9LQg5SEPpJbNLXCbzkuCXN8q7Q3Lo uhLkBsZ4oujAGa/AtaHWLOkrl61u+5srCOf2m+biqmGQ0xCU0410Esrl6bA/MxE2 LRkcYKxZaHqxycq0e6XQLASoNKpB12EFcebgdvOiirJ1OzBe6I8F9wwve/iBdBSi 4UmJbbGR1xtMXYoa5fg5Psbz2YRjBONXZpnteOwB6HnJaRlgySJgK0OjSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvSHDx6PdMAcSoo27Gx1fSdiy/pMB8GA1UdIwQY MBaAFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUt NGM2NWJkMzNkNmY2LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUtNGM2NWJkMzNkNmY2 LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5eN4sbh Itt2b80B0YmC+6PxF7zHrEDymbOdmAdKS1xVyB7tbHCF7t7C+2xmyuCAYJc5yICT aBmBUNnqcy68XTbV9OLT7J5pHgf7V7qw6N0Fepjirww0cNQthNAuT6FxWhUe+vo7 sihUWd69Obls2OgB2ncNZiBH3Z565jx34Cbc1P0QosoLNfGNmYDBMODLFxCJfj5Y 5mpdJzmouheQ1zwMqpOlD/r2Bum7dVPVgwmhyR5UM3W8X1Mo4nMdSd1Fg0r9EplA mxVcHnCp3OjfRi3pKXREKYvSP6V8syLGcUc8on7G1K+uACFSxD1t4GaFxB+uFMdn FmF9h6ZbqP+sKQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:08 2025 by rpki-client