This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json) Hash identifier: s9idzm9rVAy380szfaU42XvBrObR5BNM5eGBtHiNFEc= Subject key identifier: 62:F2:51:6E:EA:DF:86:52:55:2B:91:A0:80:85:B9:3F:ED:B4:BC:C1 Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f Certificate serial: 019AF16404FB68A1716811AEFB5F8F1FC925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft Manifest number: C1 Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: R3nIJXfkLuuHtzC01LNQ4csbV9c.roa (hash: 2UAzqJkEQaJ/zes9bFjleD0zd5Rzn35uxEBaqQdnoYo=) 2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: QPykOWP+QOgliJjP4v6Fpm7vDabmczwRZo4XmiCyEXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:04:fb:68:a1:71:68:11:ae:fb:5f:8f:1f:c9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=62f2516eeadf8652552b91a08085b93fedb4bcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:07:f8:55:0d:8d:72:d5:e9:f8:9e:1b:1d: e1:eb:97:f2:be:e0:5a:38:d3:52:ed:da:67:d0:87: c4:8e:4f:63:bb:8b:59:47:90:ae:f6:07:b0:fe:e2: 10:2f:f9:43:d6:a3:15:dc:84:34:17:6a:e0:8e:43: b3:aa:c6:5e:12:d0:e5:d4:a4:93:5f:fb:95:83:73: 69:16:71:23:5d:e2:75:ed:e7:d6:a4:f6:72:34:91: a8:54:39:55:ee:ee:fb:cd:d7:b0:17:9d:a9:60:72: 7c:66:57:91:e6:87:76:1c:44:7a:f0:5f:0d:92:e4: bb:a8:48:7e:69:b3:a8:05:43:bc:97:10:d3:e2:de: 5d:45:a8:99:82:b9:e7:14:bc:9f:f1:81:71:a1:71: 7e:63:77:e3:9a:79:e2:76:54:2a:15:cb:18:1d:74: fc:75:20:e7:55:0d:d4:e8:c8:dc:fa:eb:60:c6:74: f8:d2:94:ba:44:b3:78:c7:40:f1:db:42:98:41:67: 2c:c9:60:e0:94:3f:8c:6c:46:67:45:c5:92:aa:ca: 94:16:55:49:35:87:a1:fd:15:1f:c9:65:e8:de:f3: 0e:40:6c:74:ce:08:18:fd:4b:85:af:4c:2b:71:f9: 3f:92:d4:f7:8d:8e:9f:e9:f2:2f:c7:c0:17:bc:d7: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F2:51:6E:EA:DF:86:52:55:2B:91:A0:80:85:B9:3F:ED:B4:BC:C1 X509v3 Authority Key Identifier: keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:37:83:60:61:f4:7d:2f:00:fc:74:d2:f2:c3:24:24:67:2c: c2:c3:c6:2c:62:e9:f1:df:4f:12:45:63:85:7c:4a:cd:ad:5b: a1:89:ca:83:ce:cd:98:bb:9d:cc:04:77:61:76:6e:0f:f5:33: a1:e6:8d:fd:7d:f7:22:03:a6:13:49:ba:fd:ce:0b:57:c6:cc: 51:2e:5c:dd:79:82:69:e2:ca:df:cd:58:f4:9c:71:2a:ce:29: d9:eb:99:35:a6:3b:2b:f2:0e:6c:76:a5:2e:95:fd:c8:bd:ac: 36:42:63:af:21:64:9b:58:34:7f:70:32:88:f5:3f:84:2b:8a: 43:aa:f4:7a:40:58:bc:96:1d:01:19:ba:e4:7e:a4:ec:1b:7d: 82:c1:f4:b1:b2:dd:7c:ef:a8:a2:f0:81:42:da:88:ae:83:de: dc:f5:8c:25:b1:0b:ef:95:04:40:1c:63:7a:7a:45:7b:1d:a3: 45:90:a6:d0:06:68:ef:eb:fe:89:ca:16:92:c1:01:59:d4:74: 98:5b:4b:bb:46:4c:20:b8:16:43:6f:d6:91:8e:a9:a7:34:5f: 21:59:bf:4c:f9:64:54:3c:ed:91:5c:34:ba:41:fd:8a:b0:5e: 6c:b5:95:3c:b3:24:19:0b:ba:26:ba:7a:6b:c6:98:aa:bb:7e: a4:34:c7:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAT7aKFxaBGu+1+PH8klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzBiMTRjZTc0ZjYwYThlYTRhYmI2ZWFhNjBlZTQ0NzBm NDNhN2YwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD Eyg2MmYyNTE2ZWVhZGY4NjUyNTUyYjkxYTA4MDg1YjkzZmVkYjRiY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRcH+FUNjXLV6fieGx3h65fyvuBa ONNS7dpn0IfEjk9ju4tZR5Cu9gew/uIQL/lD1qMV3IQ0F2rgjkOzqsZeEtDl1KST X/uVg3NpFnEjXeJ17efWpPZyNJGoVDlV7u77zdewF52pYHJ8ZleR5od2HER68F8N kuS7qEh+abOoBUO8lxDT4t5dRaiZgrnnFLyf8YFxoXF+Y3fjmnnidlQqFcsYHXT8 dSDnVQ3U6Mjc+utgxnT40pS6RLN4x0Dx20KYQWcsyWDglD+MbEZnRcWSqsqUFlVJ NYeh/RUfyWXo3vMOQGx0zggY/UuFr0wrcfk/ktT3jY6f6fIvx8AXvNccMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLyUW7q34ZSVSuRoICFuT/ttLzBMB8GA1UdIwQY MBaAFGMwsUznT2Co6kq7bqpg7kRw9Dp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMt ZjEwYWQ4MmM4NTU3LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmZjYWYtYzJkMC00MWZhLTllMzMtZjEwYWQ4MmM4NTU3 LzEvWXpDeFRPZFBZS2pxU3J0dXFtRHVSSEQwT244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTeDYGH0 fS8A/HTS8sMkJGcswsPGLGLp8d9PEkVjhXxKza1boYnKg87NmLudzAR3YXZuD/Uz oeaN/X33IgOmE0m6/c4LV8bMUS5c3XmCaeLK381Y9JxxKs4p2euZNaY7K/IObHal LpX9yL2sNkJjryFkm1g0f3AyiPU/hCuKQ6r0ekBYvJYdARm65H6k7Bt9gsH0sbLd fO+oovCBQtqIroPe3PWMJbEL75UEQBxjenpFex2jRZCm0AZo7+v+icoWksEBWdR0 mFtLu0ZMILgWQ2/WkY6ppzRfIVm/TPlkVDztkVw0ukH9irBebLWVPLMkGQu6Jrp6 a8aYqrt+pDTHrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:05 2025 by rpki-client