This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json) Hash identifier: nK1TwF2GnhTJgMnHz4d4kRpGbijdXraaqXJkROwS/0c= Subject key identifier: 5A:ED:4C:B1:7A:3E:ED:41:DA:0D:A7:51:D0:19:27:B6:62:9B:AE:2A Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43 Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643 Certificate serial: 019AF6F93E3238FD703A3C3E1D0B1AC36741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft Manifest number: 0848 Signing time: Sun 07 Dec 2025 04:02:00 +0000 Manifest this update: Sun 07 Dec 2025 04:02:00 +0000 Manifest next update: Mon 08 Dec 2025 04:02:00 +0000 Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: PO6TQZ6/YRqXVHPARQpgZ6UUiTRUHt0U2q5hDSws3kU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:3e:32:38:fd:70:3a:3c:3e:1d:0b:1a:c3:67:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643 Validity Not Before: Dec 7 04:02:00 2025 GMT Not After : Dec 8 04:02:00 2025 GMT Subject: CN=5aed4cb17a3eed41da0da751d01927b6629bae2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:57:6e:94:b4:5f:25:e6:36:07:6f:69:78: 6b:ac:51:92:08:08:0b:4d:38:82:dd:24:99:05:bc: f1:ba:65:98:38:30:e5:5e:b8:26:78:61:66:ce:6d: 7e:6a:81:31:34:41:51:cf:5f:32:df:8a:94:e6:f3: d2:f5:e4:c2:36:cd:7f:51:88:db:c7:81:0b:1b:61: 82:48:b9:42:06:ad:df:3e:af:e1:a3:b8:26:1a:d7: 0d:8a:5b:0f:d8:ce:70:24:b5:f9:03:2d:14:e1:cc: e5:00:61:88:6f:ad:4c:d8:cf:e2:7d:40:49:85:22: 4d:99:70:42:07:cb:cc:9b:a3:0c:0a:67:59:a6:40: 0a:65:b9:27:a9:cb:b4:96:ed:55:f6:93:81:70:f5: e2:29:e1:2e:da:52:9e:c3:09:3d:22:86:39:9c:5a: 70:09:c3:0a:d9:02:72:13:f7:d4:74:f6:77:da:f7: 54:ba:65:f4:24:64:c3:f2:96:54:99:3c:37:3d:18: e9:ff:3f:19:58:9d:67:30:c3:81:91:94:28:a9:8b: 75:d2:c0:77:50:97:ec:2f:ff:65:59:d8:e5:85:0d: 88:50:ce:90:1a:24:2a:82:9c:0f:a8:23:0f:be:b0: d3:36:b0:4e:4a:41:76:52:af:f6:02:0c:eb:de:2d: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:4C:B1:7A:3E:ED:41:DA:0D:A7:51:D0:19:27:B6:62:9B:AE:2A X509v3 Authority Key Identifier: keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a9:13:ba:29:f7:b0:12:33:4c:50:79:14:17:af:1b:04:df: 21:b5:bd:34:4f:81:9b:a2:ba:da:c4:d6:fe:51:1c:fd:6b:dc: b4:b7:ed:0d:4d:a3:3d:f6:18:54:8d:0c:d9:20:e0:47:eb:e9: 1f:75:7b:26:f3:bf:b6:61:ee:67:5b:88:63:0e:1e:c1:59:9c: 02:ce:1a:96:83:1c:6d:b4:57:60:72:3d:96:60:0f:18:f0:b3: 61:27:74:8b:29:27:ba:88:cb:9a:2e:52:f8:2d:90:2e:3b:ea: 5b:68:83:97:e9:1a:17:1a:48:af:d5:7b:64:85:46:c1:a9:aa: 29:5f:28:60:7b:b1:72:3a:ec:e7:2b:b4:fe:ab:3c:73:e2:44: 6b:c8:4e:13:ed:20:53:8d:20:61:54:da:15:f3:e6:6f:90:23: 14:3d:32:72:34:18:55:29:10:9f:28:e3:ca:b5:5c:48:d9:2c: 87:b9:46:c9:a5:7e:96:06:5c:ac:47:41:1f:e8:b5:d5:27:2c: 5d:81:28:5b:cd:6f:8e:51:5e:c1:9c:ec:3c:a0:14:79:9d:e9: 1b:96:0b:83:25:0a:d6:5e:65:ee:94:47:4a:74:d3:45:cf:dd: b8:bb:d2:09:cc:86:73:50:5a:d8:38:d7:d6:a7:64:c1:21:62: ba:c0:08:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+T4yOP1wOjw+HQsaw2dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzBmYWQ4ODk3ZWEyNTgyZjk1MzA3NzllMGU2OGVhMDhj Y2U2NDMwHhcNMjUxMjA3MDQwMjAwWhcNMjUxMjA4MDQwMjAwWjAzMTEwLwYDVQQD Eyg1YWVkNGNiMTdhM2VlZDQxZGEwZGE3NTFkMDE5MjdiNjYyOWJhZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjVXbpS0XyXmNgdvaXhrrFGSCAgL TTiC3SSZBbzxumWYODDlXrgmeGFmzm1+aoExNEFRz18y34qU5vPS9eTCNs1/UYjb x4ELG2GCSLlCBq3fPq/ho7gmGtcNilsP2M5wJLX5Ay0U4czlAGGIb61M2M/ifUBJ hSJNmXBCB8vMm6MMCmdZpkAKZbknqcu0lu1V9pOBcPXiKeEu2lKewwk9IoY5nFpw CcMK2QJyE/fUdPZ32vdUumX0JGTD8pZUmTw3PRjp/z8ZWJ1nMMOBkZQoqYt10sB3 UJfsL/9lWdjlhQ2IUM6QGiQqgpwPqCMPvrDTNrBOSkF2Uq/2Agzr3i3/wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrtTLF6Pu1B2g2nUdAZJ7Zim64qMB8GA1UdIwQY MBaAFGLA+tiJfqJYL5Uwd54OaOoIzOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTIt Y2VlMWIxZDFlYzA2LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTItY2VlMWIxZDFlYzA2 LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6kTuin3 sBIzTFB5FBevGwTfIbW9NE+Bm6K62sTW/lEc/WvctLftDU2jPfYYVI0M2SDgR+vp H3V7JvO/tmHuZ1uIYw4ewVmcAs4aloMcbbRXYHI9lmAPGPCzYSd0iyknuojLmi5S +C2QLjvqW2iDl+kaFxpIr9V7ZIVGwamqKV8oYHuxcjrs5yu0/qs8c+JEa8hOE+0g U40gYVTaFfPmb5AjFD0ycjQYVSkQnyjjyrVcSNksh7lGyaV+lgZcrEdBH+i11Scs XYEoW81vjlFewZzsPKAUeZ3pG5YLgyUK1l5l7pRHSnTTRc/duLvSCcyGc1Ba2DjX 1qdkwSFiusAIfA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:08:59 2025 by rpki-client