This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json) Hash identifier: EyhR6obNEG8FmzvlRMY9qPlmGy4MtlcV+01ABvR2SMc= Subject key identifier: 2A:64:8D:48:22:E5:87:3F:DC:DD:44:96:2D:33:68:82:F5:51:53:46 Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f Certificate serial: 019AF3C039884007B28123CF3E2500C4AD5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft Manifest number: 0117 Signing time: Sat 06 Dec 2025 13:00:52 +0000 Manifest this update: Sat 06 Dec 2025 13:00:52 +0000 Manifest next update: Sun 07 Dec 2025 13:00:52 +0000 Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: yjtmsltMDg7T3BGR7+b3QK7fRzDtHGhrYTxIGi/SBjk=) 2: ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa (hash: dioBOx3h8ph3ofANtrh34SCoANsWuT4s9fkC5DmIrUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:39:88:40:07:b2:81:23:cf:3e:25:00:c4:ad:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f Validity Not Before: Dec 6 13:00:52 2025 GMT Not After : Dec 7 13:00:52 2025 GMT Subject: CN=2a648d4822e5873fdcdd44962d336882f5515346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:44:9d:6f:08:5d:49:08:06:3c:00:69:0e: 2c:c4:eb:36:19:ec:8c:c8:43:f8:38:30:f7:44:2a: bc:26:dd:92:bc:50:c9:92:e5:e1:f5:a9:67:84:ad: dd:73:20:fd:7d:26:4e:db:04:02:b6:f7:a4:3e:61: ce:94:98:ee:6c:26:da:fb:25:e2:9d:1b:98:74:a0: 12:a3:6f:d5:87:3e:a6:12:75:4a:47:eb:16:91:c7: f1:44:fc:b7:fd:f4:a9:20:73:ad:4b:79:6b:32:97: 1d:e7:68:b2:d7:81:54:8f:ea:b4:ca:39:e1:bf:d5: a0:bd:a8:05:d2:21:17:f2:dd:90:5d:c0:99:c2:a2: d6:cb:f0:8a:f4:16:b3:8a:6d:2a:a8:ee:bd:4c:c6: bf:db:b2:7e:ca:1b:2e:2b:ab:e2:b8:59:0b:8e:1b: 3c:74:db:7b:f8:7b:d8:27:48:b7:a4:0a:4b:ca:8b: c7:ad:db:c3:ca:91:83:f8:79:87:9a:b7:3f:1b:32: 2a:58:ae:52:5c:f8:a6:51:03:b5:b8:2e:f5:3b:26: a0:5d:b6:c2:72:cb:57:b5:69:62:da:4d:74:e4:b4: 3c:7e:bc:db:07:a3:0a:75:0d:ec:15:2e:f1:2c:99: e4:9c:19:8b:ea:1e:8f:ac:95:6b:27:f3:97:b4:72: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:64:8D:48:22:E5:87:3F:DC:DD:44:96:2D:33:68:82:F5:51:53:46 X509v3 Authority Key Identifier: keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a1:31:76:30:5f:5b:74:40:5e:e2:9e:09:67:a1:56:77:f3: ff:1b:0a:6e:4a:7f:d9:34:c1:33:ad:53:d6:cd:86:3d:b8:68: 64:25:12:51:a0:5a:8a:09:98:94:9e:ae:bb:e2:78:9a:7c:8c: 23:a8:da:10:b1:b2:df:77:20:c4:3e:a2:80:80:ac:e1:a4:8a: 78:4b:21:31:f6:2d:c9:bf:ec:5f:65:a2:49:5a:49:4e:ca:4c: a9:c2:df:ef:02:e9:32:37:cd:74:a7:99:31:ea:39:69:dc:ec: 21:5c:b8:f2:3e:02:58:22:f5:a6:59:5d:b4:84:c0:a2:87:ad: bc:21:11:28:75:f4:0b:2a:98:3e:24:47:3a:f2:e7:5f:63:66: c0:82:17:83:e3:32:51:66:3c:db:44:f1:67:48:96:d4:ab:83: ca:1c:36:dd:60:90:f7:36:ec:3d:08:34:8c:61:e2:61:03:3f: 06:23:c1:6b:fa:93:2d:24:9d:b9:45:99:a4:5b:bd:d4:90:eb: 6a:3f:e2:c3:11:85:90:2f:e9:66:8e:3f:57:c9:5d:5d:d9:ac: 88:c3:e3:f5:29:ed:9c:b7:f3:cb:39:73:07:08:17:b7:86:e0: fd:88:1c:dc:0f:52:14:9f:d5:6a:4c:13:65:f2:df:53:69:b5: 60:f1:cd:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDmIQAeygSPPPiUAxK1aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZjRkOWM1ZmEwYWUzNjRiNGQ4MWVkYmM0ZDE4MjAwZjAw ZmJjN2YwHhcNMjUxMjA2MTMwMDUyWhcNMjUxMjA3MTMwMDUyWjAzMTEwLwYDVQQD EygyYTY0OGQ0ODIyZTU4NzNmZGNkZDQ0OTYyZDMzNjg4MmY1NTE1MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNEnW8IXUkIBjwAaQ4sxOs2GeyM yEP4ODD3RCq8Jt2SvFDJkuXh9alnhK3dcyD9fSZO2wQCtvekPmHOlJjubCba+yXi nRuYdKASo2/Vhz6mEnVKR+sWkcfxRPy3/fSpIHOtS3lrMpcd52iy14FUj+q0yjnh v9WgvagF0iEX8t2QXcCZwqLWy/CK9Bazim0qqO69TMa/27J+yhsuK6viuFkLjhs8 dNt7+HvYJ0i3pApLyovHrdvDypGD+HmHmrc/GzIqWK5SXPimUQO1uC71OyagXbbC cstXtWli2k105LQ8frzbB6MKdQ3sFS7xLJnknBmL6h6PrJVrJ/OXtHKouwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpkjUgi5Yc/3N1Eli0zaIL1UVNGMB8GA1UdIwQY MBaAFGH02cX6CuNktNge28TRggDwD7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWIt N2VlNTMxMWEyYTNjLzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWItN2VlNTMxMWEyYTNj LzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6ExdjBf W3RAXuKeCWehVnfz/xsKbkp/2TTBM61T1s2GPbhoZCUSUaBaigmYlJ6uu+J4mnyM I6jaELGy33cgxD6igICs4aSKeEshMfYtyb/sX2WiSVpJTspMqcLf7wLpMjfNdKeZ Meo5adzsIVy48j4CWCL1plldtITAooetvCERKHX0CyqYPiRHOvLnX2NmwIIXg+My UWY820TxZ0iW1KuDyhw23WCQ9zbsPQg0jGHiYQM/BiPBa/qTLSSduUWZpFu91JDr aj/iwxGFkC/pZo4/V8ldXdmsiMPj9SntnLfzyzlzBwgXt4bg/Ygc3A9SFJ/VakwT ZfLfU2m1YPHNqA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:28 2025 by rpki-client