This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json) Hash identifier: bjG2c7zyVjR7e4TDL4ppP49KcPgkcl34KUQCBiz9KoQ= Subject key identifier: 3A:05:86:4D:1B:AF:D2:96:42:C9:69:A8:5A:BD:E7:FA:A2:11:8E:C2 Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3 Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3 Certificate serial: 019AF31C3C1F4A0DD9157BC1141335FD07C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:44 +0000 Manifest this update: Sat 06 Dec 2025 10:01:44 +0000 Manifest next update: Sun 07 Dec 2025 10:01:44 +0000 Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: nW/nkSQFOgHilRIO/lKyRQurKSb+1KcL/OVrrUcA+S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3c:1f:4a:0d:d9:15:7b:c1:14:13:35:fd:07:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3 Validity Not Before: Dec 6 10:01:44 2025 GMT Not After : Dec 7 10:01:44 2025 GMT Subject: CN=3a05864d1bafd29642c969a85abde7faa2118ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:ce:9b:ac:47:db:47:cf:18:a3:c6:04:78: 89:b6:d5:4d:b3:65:c9:74:bc:bb:d0:a4:1b:87:40: 8e:da:28:d2:ee:f2:6e:db:31:d1:4b:75:86:c6:94: 25:b8:e2:ef:78:13:70:ba:44:ae:8f:44:86:70:86: 86:77:dd:c8:fb:f3:cb:cd:b0:09:be:f7:db:2e:b4: 69:41:34:5d:e6:4a:b5:10:a2:f0:7d:b6:d6:2d:f3: 8e:0d:66:15:5e:ee:f9:f1:65:43:9b:e9:a0:ff:a8: 5e:01:f4:36:00:8f:7a:6d:53:46:85:59:d3:36:da: 0e:e0:94:fe:f8:05:6b:ea:5f:5e:08:f7:83:6a:3a: 8d:90:e3:d0:d6:a4:e7:90:24:a5:0b:2c:59:f6:5e: 61:b7:c7:11:06:6c:67:d4:9e:4d:1a:81:15:32:ba: f7:0d:ee:fb:cd:2e:c1:3b:b0:29:94:05:4e:f2:d6: 86:e9:37:f4:1b:06:5b:dd:0b:8b:0c:22:a5:d7:da: a0:87:0c:4c:fc:84:b1:aa:cc:47:cb:6c:c3:25:d7: a7:96:b2:45:48:5d:d6:b1:f8:7c:ec:38:c2:10:4d: 04:f2:07:50:69:5b:91:71:df:f8:8f:62:81:e3:60: c4:8f:0b:a4:2a:ec:67:de:b3:01:a9:15:e9:9e:bb: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:86:4D:1B:AF:D2:96:42:C9:69:A8:5A:BD:E7:FA:A2:11:8E:C2 X509v3 Authority Key Identifier: keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5a:59:fe:e5:3d:f6:7c:96:be:4e:8a:53:e3:ae:ca:9f:81: a9:1e:b2:ff:ac:d9:88:7c:d7:bc:20:b0:19:43:cd:df:34:aa: 98:2f:ba:62:8f:2c:9b:4a:76:8a:e3:34:5c:24:cc:6f:1e:a1: d4:bf:f6:a6:54:23:3d:86:30:72:8c:ae:2f:e5:47:cc:e4:16: 5f:ad:2c:4a:c4:ee:fd:f3:c5:72:5d:6f:f8:5b:fa:1b:75:65: 08:14:80:4a:6b:3f:4c:6c:4b:99:bf:0e:2f:a2:50:fe:ed:be: e3:1d:47:88:10:22:8a:cb:f7:e8:71:7f:50:40:b2:8b:19:d2: 1a:d1:42:80:38:d0:cd:69:96:5f:d8:4d:82:77:5b:ce:06:e6: e2:83:04:a8:24:0e:3f:3b:93:3c:9c:07:60:6f:27:0f:e1:9b: 86:bc:bf:04:60:31:52:9c:1d:24:b9:d8:e8:e5:5b:ff:bf:e1: a1:50:d9:5b:4e:0b:69:dc:a9:a4:3d:28:91:08:db:7c:50:e1: 27:cf:c4:38:bc:e6:7c:50:6d:69:04:da:2a:22:f1:cb:ad:48: 0f:8d:bb:d6:80:fa:07:b0:63:32:11:a6:41:d7:2d:e0:7d:92: 46:a6:20:c5:d0:25:ac:16:d4:02:dd:6a:6a:c4:1c:8d:1b:cd: 88:8f:1f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDwfSg3ZFXvBFBM1/QfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZWQ0NDNmODVkMGVlYzY2MzY0Y2Q3NTM2ZjE4ODg4YWMx Zjk5ZTMwHhcNMjUxMjA2MTAwMTQ0WhcNMjUxMjA3MTAwMTQ0WjAzMTEwLwYDVQQD EygzYTA1ODY0ZDFiYWZkMjk2NDJjOTY5YTg1YWJkZTdmYWEyMTE4ZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIHOm6xH20fPGKPGBHiJttVNs2XJ dLy70KQbh0CO2ijS7vJu2zHRS3WGxpQluOLveBNwukSuj0SGcIaGd93I+/PLzbAJ vvfbLrRpQTRd5kq1EKLwfbbWLfOODWYVXu758WVDm+mg/6heAfQ2AI96bVNGhVnT NtoO4JT++AVr6l9eCPeDajqNkOPQ1qTnkCSlCyxZ9l5ht8cRBmxn1J5NGoEVMrr3 De77zS7BO7AplAVO8taG6Tf0GwZb3QuLDCKl19qghwxM/ISxqsxHy2zDJdenlrJF SF3Wsfh87DjCEE0E8gdQaVuRcd/4j2KB42DEjwukKuxn3rMBqRXpnrsWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoFhk0br9KWQslpqFq95/qiEY7CMB8GA1UdIwQY MBaAFMjtRD+F0O7GY2TNdTbxiIisH5njMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYt NmQwNDMxMGUzNDJiLzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYtNmQwNDMxMGUzNDJi LzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1pZ/uU9 9nyWvk6KU+Ouyp+BqR6y/6zZiHzXvCCwGUPN3zSqmC+6Yo8sm0p2iuM0XCTMbx6h 1L/2plQjPYYwcoyuL+VHzOQWX60sSsTu/fPFcl1v+Fv6G3VlCBSASms/TGxLmb8O L6JQ/u2+4x1HiBAiisv36HF/UECyixnSGtFCgDjQzWmWX9hNgndbzgbm4oMEqCQO PzuTPJwHYG8nD+Gbhry/BGAxUpwdJLnY6OVb/7/hoVDZW04LadyppD0okQjbfFDh J8/EOLzmfFBtaQTaKiLxy61ID4271oD6B7BjMhGmQdct4H2SRqYgxdAlrBbUAt1q asQcjRvNiI8faA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:27 2025 by rpki-client