This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft File: YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft (raw, json) Hash identifier: 59xAYIJvToSTI6HOeb+mz+NhnnVU/D1i+V+SwoOQ+xY= Subject key identifier: 0C:31:19:1A:AE:6C:A9:98:8B:29:AC:22:55:FC:68:5B:28:30:4D:AF Authority key identifier: 62:10:CB:40:A2:9F:A5:F3:13:E0:B3:2D:1D:FB:11:A3:1A:34:1F:93 Certificate issuer: /CN=6210cb40a29fa5f313e0b32d1dfb11a31a341f93 Certificate serial: 019AF23F5C2912F5FD787CCB30D3AEE2FE6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhDLQKKfpfMT4LMtHfsRoxo0H5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft Manifest number: 6C Signing time: Sat 06 Dec 2025 06:00:29 +0000 Manifest this update: Sat 06 Dec 2025 06:00:29 +0000 Manifest next update: Sun 07 Dec 2025 06:00:29 +0000 Files and hashes: 1: YhDLQKKfpfMT4LMtHfsRoxo0H5M.crl (hash: GY824G0F6P+w7jVP37kVAQoXYsC+AcvgJHCELdYH1Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft rsync://rpki.ripe.net/repository/DEFAULT/YhDLQKKfpfMT4LMtHfsRoxo0H5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5c:29:12:f5:fd:78:7c:cb:30:d3:ae:e2:fe:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6210cb40a29fa5f313e0b32d1dfb11a31a341f93 Validity Not Before: Dec 6 06:00:29 2025 GMT Not After : Dec 7 06:00:29 2025 GMT Subject: CN=0c31191aae6ca9988b29ac2255fc685b28304daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:95:8f:d8:27:17:28:ac:f7:3c:28:83:3a: fd:9c:44:66:0b:9c:2e:37:1e:81:63:cc:5f:3b:27: c9:c6:e5:4d:59:77:f7:cd:81:36:92:d7:4c:41:45: dd:23:55:af:de:40:76:04:69:28:62:eb:0d:a2:e7: 69:c8:45:63:75:74:fb:3b:50:fd:e5:86:74:c4:0d: a5:89:9a:3c:3a:70:46:c9:8f:10:b5:5a:2b:4c:7c: 25:4a:46:da:dc:ed:b6:61:bc:2a:66:ab:a8:a1:ac: e7:35:fa:b9:61:4e:b9:07:32:ce:07:47:4f:a7:5d: 9f:6e:4a:0f:34:00:0e:0e:a2:0a:7a:29:92:df:41: 74:85:14:e3:1c:8f:ff:60:fb:a0:3c:99:0a:ba:f2: d9:a4:4c:22:02:56:9f:c4:7b:ed:55:52:92:7e:23: c8:41:f4:f0:3a:80:f8:3f:ac:6d:c6:cc:cc:f0:4f: 0b:be:2a:c8:dd:59:32:f7:14:e4:86:93:f2:98:a0: ed:05:f1:73:ce:69:16:1a:c8:60:3a:04:35:10:7f: f7:2e:64:ee:fb:6e:69:ea:68:d4:38:c3:2d:5c:f2: 99:55:72:41:c5:65:a1:b7:4f:08:2a:1a:a6:f7:07: 3a:ad:e8:8d:e1:62:c9:28:27:c4:11:f3:da:50:e5: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:19:1A:AE:6C:A9:98:8B:29:AC:22:55:FC:68:5B:28:30:4D:AF X509v3 Authority Key Identifier: keyid:62:10:CB:40:A2:9F:A5:F3:13:E0:B3:2D:1D:FB:11:A3:1A:34:1F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhDLQKKfpfMT4LMtHfsRoxo0H5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6fb85d-17d5-403f-a01b-2faf223c135e/1/YhDLQKKfpfMT4LMtHfsRoxo0H5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:45:a5:80:02:59:fc:70:27:9a:f0:d8:3d:f5:1e:98:b4:ac: ff:fe:7e:ec:72:c7:cd:88:ec:2a:de:34:da:26:ea:76:0b:b5: 51:71:c5:dd:90:d0:cf:41:7b:d8:f4:88:92:19:6a:1c:7f:9a: e9:22:0c:86:a4:ce:ac:ba:f7:b5:2d:55:c3:69:5d:e3:d9:22: df:71:79:84:2e:33:ca:0e:8c:5c:e0:a1:2e:8d:43:5a:a6:6b: 5f:94:90:dc:79:48:f2:87:ee:6a:a1:83:92:f8:c6:1c:d5:6f: 9f:2b:e2:6e:80:5b:68:86:15:7c:81:99:85:7d:8a:ab:1f:5b: b6:ac:7d:e2:84:62:12:24:8e:ff:6a:80:be:21:a9:cd:a2:f8: 3d:8d:56:cc:79:30:a0:52:0e:fd:03:32:bf:b4:8a:59:80:9e: 17:9a:44:ec:51:54:75:7f:d4:2f:b6:8f:aa:e2:ec:0b:08:7f: f0:85:32:39:2e:77:94:d7:b4:4e:2e:d3:0e:8c:b7:3b:9b:26: a6:19:94:9c:3c:d2:13:56:9c:cd:f6:53:ce:6a:29:e9:c2:3c: 3a:b5:df:f7:ea:b3:bd:ca:c0:63:e7:89:8c:e8:b7:79:97:29: 91:4c:c8:d1:bc:df:77:23:80:2c:9a:6e:51:48:e8:3e:e3:6e: ea:de:f8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP1wpEvX9eHzLMNOu4v5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTBjYjQwYTI5ZmE1ZjMxM2UwYjMyZDFkZmIxMWEzMWEz NDFmOTMwHhcNMjUxMjA2MDYwMDI5WhcNMjUxMjA3MDYwMDI5WjAzMTEwLwYDVQQD EygwYzMxMTkxYWFlNmNhOTk4OGIyOWFjMjI1NWZjNjg1YjI4MzA0ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgeVj9gnFyis9zwogzr9nERmC5wu Nx6BY8xfOyfJxuVNWXf3zYE2ktdMQUXdI1Wv3kB2BGkoYusNoudpyEVjdXT7O1D9 5YZ0xA2liZo8OnBGyY8QtVorTHwlSkba3O22YbwqZquooaznNfq5YU65BzLOB0dP p12fbkoPNAAODqIKeimS30F0hRTjHI//YPugPJkKuvLZpEwiAlafxHvtVVKSfiPI QfTwOoD4P6xtxszM8E8LvirI3Vky9xTkhpPymKDtBfFzzmkWGshgOgQ1EH/3LmTu +25p6mjUOMMtXPKZVXJBxWWht08IKhqm9wc6reiN4WLJKCfEEfPaUOUtuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwxGRqubKmYiymsIlX8aFsoME2vMB8GA1UdIwQY MBaAFGIQy0Cin6XzE+CzLR37EaMaNB+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhETFFLS2ZwZk1UNExNdEhmc1JveG8wSDVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82ZmI4NWQtMTdkNS00MDNmLWEwMWIt MmZhZjIyM2MxMzVlLzEvWWhETFFLS2ZwZk1UNExNdEhmc1JveG8wSDVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82ZmI4NWQtMTdkNS00MDNmLWEwMWItMmZhZjIyM2MxMzVl LzEvWWhETFFLS2ZwZk1UNExNdEhmc1JveG8wSDVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0WlgAJZ /HAnmvDYPfUemLSs//5+7HLHzYjsKt402ibqdgu1UXHF3ZDQz0F72PSIkhlqHH+a 6SIMhqTOrLr3tS1Vw2ld49ki33F5hC4zyg6MXOChLo1DWqZrX5SQ3HlI8ofuaqGD kvjGHNVvnyviboBbaIYVfIGZhX2Kqx9btqx94oRiEiSO/2qAviGpzaL4PY1WzHkw oFIO/QMyv7SKWYCeF5pE7FFUdX/UL7aPquLsCwh/8IUyOS53lNe0Ti7TDoy3O5sm phmUnDzSE1aczfZTzmop6cI8OrXf9+qzvcrAY+eJjOi3eZcpkUzI0bzfdyOALJpu UUjoPuNu6t74SA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:52 2025 by rpki-client