This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft File: YZmtJxLZe7wR4V39skAnE66ADL0.mft (raw, json) Hash identifier: 9G1Essx5S6MUld+qrUeYjRSVvEt9ceA+zSeos1iUddc= Subject key identifier: 2D:6C:55:D6:50:60:E2:15:0B:0F:5E:03:4C:78:4F:D7:63:93:08:0A Authority key identifier: 61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD Certificate issuer: /CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd Certificate serial: 019AF19B0DC6A96C0CF31490F4EAE15B1242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft Manifest number: E6 Signing time: Sat 06 Dec 2025 03:01:01 +0000 Manifest this update: Sat 06 Dec 2025 03:01:01 +0000 Manifest next update: Sun 07 Dec 2025 03:01:01 +0000 Files and hashes: 1: YZmtJxLZe7wR4V39skAnE66ADL0.crl (hash: SuxgUWOATushsfTUy+pJDLESnm4wQ8/V9azG6yvZhUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0d:c6:a9:6c:0c:f3:14:90:f4:ea:e1:5b:12:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6199ad2712d97bbc11e15dfdb2402713ae800cbd Validity Not Before: Dec 6 03:01:01 2025 GMT Not After : Dec 7 03:01:01 2025 GMT Subject: CN=2d6c55d65060e2150b0f5e034c784fd76393080a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:07:20:10:68:08:73:7b:c0:33:92:ca:0c: ad:ca:d0:6b:f6:e3:b5:2c:42:d6:da:98:02:ec:8b: ab:3d:32:48:ec:6e:2b:bb:5b:5b:b0:ae:94:c0:70: 9d:54:8f:97:ec:46:f2:81:f1:a6:c6:0d:76:53:9c: 5e:36:d9:4e:79:46:6d:49:cf:7a:38:f7:a7:26:b0: be:2d:30:b7:61:27:44:02:ad:9d:16:5b:25:2b:53: 47:07:77:24:94:ec:ea:06:28:e8:e8:47:46:d3:16: 32:25:cf:36:92:83:a3:ea:50:c4:56:0f:47:ec:0a: 8a:38:07:b1:7e:f6:56:eb:50:df:65:f5:eb:91:d9: 25:22:6b:48:09:0b:f5:49:ca:bf:5b:53:cd:ec:04: af:c8:47:7b:93:8f:a2:e0:a1:9b:9e:e7:ef:ad:1a: 61:07:d8:8f:c9:b9:21:4f:a1:b7:fc:96:da:e6:f0: b8:52:82:d4:e4:a3:75:e6:b6:c3:18:a6:7f:e0:e0: d1:1e:e2:b6:d9:de:e2:a9:a2:a9:81:c9:8c:34:c1: 34:6b:94:9f:3f:51:5e:12:98:1f:37:d3:c1:4f:0c: f3:70:55:83:ab:fe:2a:4c:3b:1b:ce:26:6c:cd:35: 1a:25:75:a1:47:ef:a2:17:83:2a:92:46:a0:95:9a: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:55:D6:50:60:E2:15:0B:0F:5E:03:4C:78:4F:D7:63:93:08:0A X509v3 Authority Key Identifier: keyid:61:99:AD:27:12:D9:7B:BC:11:E1:5D:FD:B2:40:27:13:AE:80:0C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZmtJxLZe7wR4V39skAnE66ADL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6c181e-e1e3-418c-9681-36b00791751a/1/YZmtJxLZe7wR4V39skAnE66ADL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:32:22:62:49:4c:8a:f3:56:29:40:7f:3e:16:f5:e4:b7:25: 6c:c1:20:c0:73:c9:07:db:a1:32:d4:1c:4e:cc:8a:7f:7e:c6: 3c:b6:53:ef:11:3c:6d:c5:f3:11:82:06:26:33:ea:ad:50:91: e6:f8:6d:9c:a3:4a:82:99:93:14:f9:05:f4:64:94:28:b8:47: d1:9a:d0:6b:d1:d7:09:ff:a8:38:cd:5f:dc:16:9b:55:b4:ec: 58:92:45:0c:87:ed:2d:c9:2f:98:16:3f:2a:73:1b:74:24:e7: 67:2e:48:35:5c:21:83:67:37:36:39:be:8b:b3:19:74:44:a6: b5:9b:72:2e:50:f6:15:6c:6f:71:dc:42:f5:1a:65:0a:4e:56: 8c:6c:bc:9a:a3:03:13:8a:2e:b5:1a:4c:d8:8f:d4:00:c2:02: 9a:cc:84:e9:3c:ef:9d:c1:03:be:da:e8:19:71:4e:74:c7:23: 09:72:3f:7d:81:c3:1d:ad:4a:a5:23:f7:ca:c9:b2:94:aa:ce: e4:2e:04:41:04:2e:d6:74:c8:f0:09:ff:67:60:dc:12:e0:a3: 3c:4b:27:e0:77:2b:b2:05:1e:a3:e0:ff:1e:67:b4:83:01:20: fc:77:6d:14:f6:f6:40:19:b6:a5:35:57:d4:94:4a:f2:a3:06: 23:6c:80:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw3GqWwM8xSQ9OrhWxJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOTlhZDI3MTJkOTdiYmMxMWUxNWRmZGIyNDAyNzEzYWU4 MDBjYmQwHhcNMjUxMjA2MDMwMTAxWhcNMjUxMjA3MDMwMTAxWjAzMTEwLwYDVQQD EygyZDZjNTVkNjUwNjBlMjE1MGIwZjVlMDM0Yzc4NGZkNzYzOTMwODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9QHIBBoCHN7wDOSygytytBr9uO1 LELW2pgC7IurPTJI7G4ru1tbsK6UwHCdVI+X7EbygfGmxg12U5xeNtlOeUZtSc96 OPenJrC+LTC3YSdEAq2dFlslK1NHB3cklOzqBijo6EdG0xYyJc82koOj6lDEVg9H 7AqKOAexfvZW61DfZfXrkdklImtICQv1Scq/W1PN7ASvyEd7k4+i4KGbnufvrRph B9iPybkhT6G3/Jba5vC4UoLU5KN15rbDGKZ/4ODRHuK22d7iqaKpgcmMNME0a5Sf P1FeEpgfN9PBTwzzcFWDq/4qTDsbziZszTUaJXWhR++iF4MqkkaglZqSzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1sVdZQYOIVCw9eA0x4T9djkwgKMB8GA1UdIwQY MBaAFGGZrScS2Xu8EeFd/bJAJxOugAy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVptdEp4TFplN3dSNFYzOXNrQW5FNjZBREwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YzE4MWUtZTFlMy00MThjLTk2ODEt MzZiMDA3OTE3NTFhLzEvWVptdEp4TFplN3dSNFYzOXNrQW5FNjZBREwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82YzE4MWUtZTFlMy00MThjLTk2ODEtMzZiMDA3OTE3NTFh LzEvWVptdEp4TFplN3dSNFYzOXNrQW5FNjZBREwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODIiYklM ivNWKUB/Phb15LclbMEgwHPJB9uhMtQcTsyKf37GPLZT7xE8bcXzEYIGJjPqrVCR 5vhtnKNKgpmTFPkF9GSUKLhH0ZrQa9HXCf+oOM1f3BabVbTsWJJFDIftLckvmBY/ KnMbdCTnZy5INVwhg2c3Njm+i7MZdESmtZtyLlD2FWxvcdxC9RplCk5WjGy8mqMD E4outRpM2I/UAMICmsyE6TzvncEDvtroGXFOdMcjCXI/fYHDHa1KpSP3ysmylKrO 5C4EQQQu1nTI8An/Z2DcEuCjPEsn4HcrsgUeo+D/Hme0gwEg/HdtFPb2QBm2pTVX 1JRK8qMGI2yAmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:00 2025 by rpki-client