This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft File: YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json) Hash identifier: 5FxVfb77iqjk0vFYKbMREP9USymNKcbHU/0cTt2Da3s= Subject key identifier: 2D:F8:37:49:A0:04:1E:F5:25:44:39:76:BF:E2:C8:22:71:24:E8:06 Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44 Certificate issuer: /CN=600d3d0e471426ef383e3911383a4983bf227644 Certificate serial: 019AF653F935FDE5D89A732F127A080E00C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft Manifest number: 0435 Signing time: Sun 07 Dec 2025 01:01:29 +0000 Manifest this update: Sun 07 Dec 2025 01:01:29 +0000 Manifest next update: Mon 08 Dec 2025 01:01:29 +0000 Files and hashes: 1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: B6ElCNvpNwrXwr02EePbGfFmqGoSjsiFIrQ8quBQbCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:f9:35:fd:e5:d8:9a:73:2f:12:7a:08:0e:00:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644 Validity Not Before: Dec 7 01:01:29 2025 GMT Not After : Dec 8 01:01:29 2025 GMT Subject: CN=2df83749a0041ef525443976bfe2c8227124e806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:5d:8e:81:1a:a4:9e:82:0f:63:89:75:1a: bd:54:08:f1:05:6a:d0:e9:d4:de:0e:75:5d:8f:d9: 64:59:eb:1c:a8:93:5f:f7:58:a3:3c:7b:00:39:8d: ad:49:07:35:73:d2:43:b3:56:9d:88:ea:a5:0f:61: 1b:c7:a7:89:01:b8:bb:57:02:1c:e5:66:51:e3:fe: 1f:1d:05:e9:77:79:ec:cc:ae:39:a0:44:0f:b3:8d: 6d:e3:be:07:18:88:3d:15:56:32:ff:75:9f:f1:66: 62:94:d5:3f:21:7c:24:da:f5:2e:d6:2c:16:85:7a: 0c:a0:3e:af:ef:ac:bd:cb:a3:a2:a7:4b:1b:d5:df: 29:17:ba:2d:41:8f:98:f4:20:78:bd:25:30:7b:65: 26:82:d9:90:c1:23:3e:59:03:65:b3:0d:7d:bf:25: 50:f3:ac:29:b7:8b:2e:f3:54:a3:30:c4:26:e9:cd: 87:2b:8f:b1:71:97:1f:19:20:b5:3d:d1:5f:c5:42: b8:85:58:34:e8:ca:ad:5b:1d:d7:47:2e:d4:de:9c: 4e:83:0f:3d:88:ab:b1:08:ab:fe:fd:b9:d1:cb:33: d8:63:78:18:00:d4:3c:72:11:cc:c4:b9:29:61:1c: ad:c6:b2:c4:02:0b:22:60:01:ea:20:f4:2e:b4:81: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F8:37:49:A0:04:1E:F5:25:44:39:76:BF:E2:C8:22:71:24:E8:06 X509v3 Authority Key Identifier: keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:22:ae:b5:7e:f0:1f:3d:ba:2a:cd:73:bc:77:de:26:f4:1f: c4:3a:0d:b9:e8:cd:04:c4:67:23:49:7c:05:ef:c4:ef:aa:68: 1e:95:bf:b7:c9:50:f3:be:52:82:f4:ea:e0:59:e6:84:30:b8: 03:74:e4:54:2b:6c:f4:3a:86:0e:e4:ba:d7:1b:32:16:f4:97: 56:8b:cb:22:d3:ab:f5:40:3a:36:39:47:36:c8:a8:e6:ee:63: 87:4a:c5:04:03:45:b3:04:35:2d:64:1d:b3:82:76:96:95:38: 87:b3:f1:4b:fa:ad:b2:8d:dd:7c:2a:63:0e:a1:8e:e8:00:47: 63:7d:0a:88:9f:6c:45:29:5e:3a:50:30:75:ec:2f:23:4c:21: bd:5b:6f:b3:00:55:3c:be:74:c4:34:bf:6b:8a:7d:47:e3:99: 28:3b:1e:ba:94:b0:75:8f:11:c6:b2:0b:4a:3c:cc:70:3f:e2: af:5f:93:85:e3:2e:98:a3:a4:ae:30:e1:a3:c7:4b:8d:90:e7: b3:b2:3a:c2:64:6b:76:c1:19:d0:33:da:e0:e6:a7:d0:1c:3e: 3e:41:56:bb:b7:33:63:5a:40:ed:6c:2b:a5:d2:d0:96:e8:6c: 2d:ad:b2:df:02:df:5a:2d:90:1a:4e:30:88:b1:a8:1e:67:a8: e2:f1:9b:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U/k1/eXYmnMvEnoIDgDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMGQzZDBlNDcxNDI2ZWYzODNlMzkxMTM4M2E0OTgzYmYy Mjc2NDQwHhcNMjUxMjA3MDEwMTI5WhcNMjUxMjA4MDEwMTI5WjAzMTEwLwYDVQQD EygyZGY4Mzc0OWEwMDQxZWY1MjU0NDM5NzZiZmUyYzgyMjcxMjRlODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24VdjoEapJ6CD2OJdRq9VAjxBWrQ 6dTeDnVdj9lkWescqJNf91ijPHsAOY2tSQc1c9JDs1adiOqlD2Ebx6eJAbi7VwIc 5WZR4/4fHQXpd3nszK45oEQPs41t474HGIg9FVYy/3Wf8WZilNU/IXwk2vUu1iwW hXoMoD6v76y9y6Oip0sb1d8pF7otQY+Y9CB4vSUwe2UmgtmQwSM+WQNlsw19vyVQ 86wpt4su81SjMMQm6c2HK4+xcZcfGSC1PdFfxUK4hVg06MqtWx3XRy7U3pxOgw89 iKuxCKv+/bnRyzPYY3gYANQ8chHMxLkpYRytxrLEAgsiYAHqIPQutIFjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC34N0mgBB71JUQ5dr/iyCJxJOgGMB8GA1UdIwQY MBaAFGANPQ5HFCbvOD45ETg6SYO/InZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4Yzct M2MyZmE4YWFmMDMxLzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4YzctM2MyZmE4YWFmMDMx LzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyKutX7w Hz26Ks1zvHfeJvQfxDoNuejNBMRnI0l8Be/E76poHpW/t8lQ875SgvTq4FnmhDC4 A3TkVCts9DqGDuS61xsyFvSXVovLItOr9UA6NjlHNsio5u5jh0rFBANFswQ1LWQd s4J2lpU4h7PxS/qtso3dfCpjDqGO6ABHY30KiJ9sRSleOlAwdewvI0whvVtvswBV PL50xDS/a4p9R+OZKDseupSwdY8RxrILSjzMcD/ir1+TheMumKOkrjDho8dLjZDn s7I6wmRrdsEZ0DPa4Oan0Bw+PkFWu7czY1pA7WwrpdLQluhsLa2y3wLfWi2QGk4w iLGoHmeo4vGbBA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:50:26 2025 by rpki-client