This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft File: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft (raw, json) Hash identifier: dMoGX5mL3t75HDDPYmFKLUT2CHkGbewj85obesXoKWs= Subject key identifier: 72:D3:E2:9F:3B:26:AC:AC:83:B0:5F:13:DB:80:AF:9B:0B:7F:22:69 Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba Certificate serial: 019AF16434C5C55C75364B3AFC6043110AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft Manifest number: 12E6 Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: 1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl (hash: vC1qmHPW4WHs0pRN7dwCF3ad+vY8Qy8OjwDcIQCVkLY=) 2: uY3zUef0aSQ_1cVEf2POkOTu658.roa (hash: 5Ji2ueMdcBCO2VElJdA2ZSQYLd05uzaWuTi54eXzep8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:34:c5:c5:5c:75:36:4b:3a:fc:60:43:11:0a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=72d3e29f3b26acac83b05f13db80af9b0b7f2269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:c1:35:63:30:57:d7:6b:16:94:46:10:40: c4:1b:18:b3:a5:3f:a9:05:d3:61:6c:4d:c2:cc:6d: 43:fd:8a:82:2a:68:4c:57:f4:ee:a6:36:3d:40:94: a4:f4:6a:46:a8:5f:04:cc:1b:a2:c7:d6:b9:9f:0b: b9:d9:30:5f:c0:44:bf:a7:65:07:38:64:e7:00:d5: 5e:88:6f:54:41:54:fb:0c:c0:1d:11:d1:68:5c:55: 67:48:f9:12:83:9d:0e:7d:c5:be:2d:b1:de:c4:df: 59:c3:07:59:1b:37:6b:16:ab:9a:28:fe:59:0d:22: 0f:b7:eb:d0:81:f7:80:a7:c1:7e:ce:f4:46:a9:c7: 92:86:0e:8a:b7:e1:31:7b:9a:84:3a:d1:77:5f:2a: 5e:b2:6f:71:5a:57:09:a9:14:65:88:97:5b:e4:de: 1d:0d:af:c2:0d:05:86:4b:c9:3b:71:63:1f:a4:73: 5f:da:0b:b8:77:fc:0e:ef:6f:b8:94:bc:c8:9b:04: 4f:1a:05:f0:88:b1:46:28:db:07:1d:be:06:4c:4b: 18:c0:5f:6f:27:c4:49:e1:b9:30:77:61:b7:81:2f: 40:eb:15:9e:63:1e:2e:04:41:74:68:ef:ec:68:ba: 47:c4:ca:92:ef:a8:a3:07:e0:44:5d:71:35:28:fa: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:E2:9F:3B:26:AC:AC:83:B0:5F:13:DB:80:AF:9B:0B:7F:22:69 X509v3 Authority Key Identifier: keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:67:9f:eb:e3:3f:a9:33:09:8c:af:dc:c0:1f:0b:0e:4d:1a: 0d:38:69:cd:06:5f:c2:eb:bb:1b:0b:14:94:fe:c3:d6:e0:4a: 6b:0e:5b:bc:8d:5e:aa:7a:a4:ac:da:7a:53:18:9f:9e:f4:67: 1e:9d:46:db:52:cc:9a:44:d3:d6:ae:36:73:b3:ca:22:a1:7c: 2d:66:76:f9:d4:78:f1:18:73:d3:0b:56:d4:c6:65:e5:be:d3: 09:c0:2e:7b:33:4d:8d:8b:dc:42:5d:86:4d:12:8e:dc:3f:1c: af:25:e9:16:cb:55:9c:cc:9c:ae:3d:9a:60:5d:5f:41:4d:76: be:50:a4:fc:33:ce:6e:5b:37:23:cb:3b:9f:64:5a:c7:44:28: da:4c:64:fb:7e:11:30:52:73:8e:72:40:20:13:73:40:38:3a: 7a:8e:4a:61:ff:15:b1:0a:25:3a:b2:a2:a8:55:3b:6e:e1:ab: 0e:a4:21:f1:74:15:9c:77:63:92:7c:4e:1e:48:74:46:6c:09: 14:8a:e5:25:ce:cd:cb:16:84:01:0a:04:d4:da:6a:1c:86:cf: 7e:9f:34:4e:12:d3:a4:7f:2d:76:a4:bf:16:c0:9d:2e:eb:fb: d7:45:6e:1e:04:38:25:cb:f9:c0:84:76:ec:0f:7b:c0:85:d4: a3:ae:9f:db -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZDTFxVx1Nks6/GBDEQrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ODRiY2U0NGZhMzI4MDFkN2YxMGNlOTgzOWIwNjA4NGRk ZmYyYmEwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD Eyg3MmQzZTI5ZjNiMjZhY2FjODNiMDVmMTNkYjgwYWY5YjBiN2YyMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr7BNWMwV9drFpRGEEDEGxizpT+p BdNhbE3CzG1D/YqCKmhMV/TupjY9QJSk9GpGqF8EzBuix9a5nwu52TBfwES/p2UH OGTnANVeiG9UQVT7DMAdEdFoXFVnSPkSg50OfcW+LbHexN9ZwwdZGzdrFquaKP5Z DSIPt+vQgfeAp8F+zvRGqceShg6Kt+Exe5qEOtF3Xypesm9xWlcJqRRliJdb5N4d Da/CDQWGS8k7cWMfpHNf2gu4d/wO72+4lLzImwRPGgXwiLFGKNsHHb4GTEsYwF9v J8RJ4bkwd2G3gS9A6xWeYx4uBEF0aO/saLpHxMqS76ijB+BEXXE1KPrgUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHLT4p87Jqysg7BfE9uAr5sLfyJpMB8GA1UdIwQY MBaAFPmEvORPoygB1/EM6YObBghN3/K6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ZUzg1RS1qS0FIWDhRenBnNXNHQ0UzZjhyby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYWVjZjJlLTI5YTQtNGEyMC04ZGU1 LWRiMThjMTA0MWE5NS8xLzEtWVM4NUUtaktBSFg4UXpwZzVzR0NFM2Y4cm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U0L2FlY2YyZS0yOWE0LTRhMjAtOGRlNS1kYjE4YzEwNDFh OTUvMS8xLVlTODVFLWpLQUhYOFF6cGc1c0dDRTNmOHJvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmef 6+M/qTMJjK/cwB8LDk0aDThpzQZfwuu7GwsUlP7D1uBKaw5bvI1eqnqkrNp6Uxif nvRnHp1G21LMmkTT1q42c7PKIqF8LWZ2+dR48Rhz0wtW1MZl5b7TCcAuezNNjYvc Ql2GTRKO3D8cryXpFstVnMycrj2aYF1fQU12vlCk/DPObls3I8s7n2Rax0Qo2kxk +34RMFJzjnJAIBNzQDg6eo5KYf8VsQolOrKiqFU7buGrDqQh8XQVnHdjknxOHkh0 RmwJFIrlJc7NyxaEAQoE1NpqHIbPfp80ThLTpH8tdqS/FsCdLuv710VuHgQ4Jcv5 wIR27A97wIXUo66f2w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:30 2025 by rpki-client