This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft File: YE1FsSrOCsIjA-08d5S4MGpqtbA.mft (raw, json) Hash identifier: I3EN+tCNo21lLiDApEYuBnb6DtJEagzWI/qMs7MrHGs= Subject key identifier: E3:77:85:5D:CA:AC:26:DA:4C:62:BC:9B:96:A5:71:3B:11:F1:CB:B7 Authority key identifier: 60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0 Certificate issuer: /CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0 Certificate serial: 019AF12E75C119F5068D818CF65DA6F4F1D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: YE1FsSrOCsIjA-08d5S4MGpqtbA.crl (hash: gjXDFzEHRhdje4lItt5scMu1P5QK8/MX2fn70wLgpL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:75:c1:19:f5:06:8d:81:8c:f6:5d:a6:f4:f1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604d45b12ace0ac22303ed3c7794b8306a6ab5b0 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=e377855dcaac26da4c62bc9b96a5713b11f1cbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:10:c6:ae:d5:2b:95:41:d3:c7:36:66:b3:0f: 78:df:be:c1:bb:22:21:19:7b:40:4d:a7:ef:ad:a6: e8:42:d8:d1:4d:c6:d3:af:31:72:06:95:46:3a:3d: 63:39:67:7e:7f:b4:93:29:77:f8:91:40:fa:4b:9b: 9e:f7:15:c6:79:5d:82:70:54:43:4e:c7:d2:96:0b: 78:4c:7c:ef:54:ed:0b:ec:7b:73:94:ba:73:1a:01: 6e:10:23:58:01:14:9f:0b:38:83:97:93:8c:3d:47: 0b:8a:8b:5e:83:ba:1c:cf:be:1b:9e:4b:be:d7:9a: 05:88:10:5a:2d:30:a9:45:d3:d6:ea:c0:0f:87:39: 24:1b:a7:2f:8e:05:0e:81:24:2b:b9:02:bb:f4:7c: 72:03:f9:c0:60:02:68:0d:f6:2f:e6:d1:d0:cf:a0: 20:0d:27:75:51:5b:f3:30:0d:c1:14:e7:87:87:19: 20:c6:2d:2c:9e:9a:3a:2f:3c:29:90:40:5d:24:3b: ca:87:b5:1b:3f:c7:c8:b0:6e:00:94:23:7b:3e:57: 8a:12:8c:38:05:03:eb:11:e0:dc:07:99:bd:87:a6: 44:96:dd:0e:7c:e3:c7:48:70:ea:78:33:f9:9e:3e: 6b:47:4c:89:d5:2b:cf:41:c3:57:37:ac:46:07:ce: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:77:85:5D:CA:AC:26:DA:4C:62:BC:9B:96:A5:71:3B:11:F1:CB:B7 X509v3 Authority Key Identifier: keyid:60:4D:45:B1:2A:CE:0A:C2:23:03:ED:3C:77:94:B8:30:6A:6A:B5:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE1FsSrOCsIjA-08d5S4MGpqtbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca6855-18f6-4bc0-8fab-3757f9308acc/1/YE1FsSrOCsIjA-08d5S4MGpqtbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d9:3e:b3:20:28:0a:a3:23:6b:4d:48:10:93:64:fd:03:9f: 26:79:bb:d5:60:60:fa:b6:bf:cd:fb:d7:a2:ed:c5:2f:a6:39: 9d:25:9d:d5:fc:64:d8:7b:dd:a4:bb:40:33:74:ea:8d:42:48: e9:99:a7:19:89:56:95:8b:5b:e7:4f:8c:10:27:76:74:cb:ec: 40:79:35:02:e8:c7:27:d1:b5:01:4a:ad:6d:f4:37:e9:c6:d4: 37:61:53:c7:09:dc:e2:63:94:02:a7:89:b2:93:92:81:e7:8d: 7c:fc:96:03:8d:fe:a8:5a:62:2c:08:97:6d:48:ef:db:cf:6c: 9d:68:cc:3d:e2:49:d0:6f:1c:e3:0a:22:bb:aa:95:85:67:2a: cd:2f:99:0b:22:d9:98:5c:75:fd:8d:58:e4:f9:34:7b:94:07: 73:db:9c:53:ad:0d:ca:3a:38:b2:6a:0b:6f:60:80:dd:34:72: 2b:24:68:47:fe:f4:60:90:b7:50:2f:5c:e8:f8:59:81:e8:c8: 13:37:39:8d:62:d5:d8:87:93:3c:73:35:29:6a:7a:7f:b1:5d: 46:02:70:e7:60:da:21:63:28:d1:70:56:e4:ac:87:fb:e4:67: e3:e6:84:b8:63:48:ef:52:6d:c2:c4:ff:7e:e3:da:94:05:cb: ce:ca:0f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnXBGfUGjYGM9l2m9PHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNGQ0NWIxMmFjZTBhYzIyMzAzZWQzYzc3OTRiODMwNmE2 YWI1YjAwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhlMzc3ODU1ZGNhYWMyNmRhNGM2MmJjOWI5NmE1NzEzYjExZjFjYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBDGrtUrlUHTxzZmsw94377BuyIh GXtATafvraboQtjRTcbTrzFyBpVGOj1jOWd+f7STKXf4kUD6S5ue9xXGeV2CcFRD TsfSlgt4THzvVO0L7HtzlLpzGgFuECNYARSfCziDl5OMPUcLioteg7ocz74bnku+ 15oFiBBaLTCpRdPW6sAPhzkkG6cvjgUOgSQruQK79HxyA/nAYAJoDfYv5tHQz6Ag DSd1UVvzMA3BFOeHhxkgxi0snpo6LzwpkEBdJDvKh7UbP8fIsG4AlCN7PleKEow4 BQPrEeDcB5m9h6ZElt0OfOPHSHDqeDP5nj5rR0yJ1SvPQcNXN6xGB84lMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON3hV3KrCbaTGK8m5alcTsR8cu3MB8GA1UdIwQY MBaAFGBNRbEqzgrCIwPtPHeUuDBqarWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUUxRnNTck9Dc0lqQS0wOGQ1UzRNR3BxdGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYTY4NTUtMThmNi00YmMwLThmYWIt Mzc1N2Y5MzA4YWNjLzEvWUUxRnNTck9Dc0lqQS0wOGQ1UzRNR3BxdGJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jYTY4NTUtMThmNi00YmMwLThmYWItMzc1N2Y5MzA4YWNj LzEvWUUxRnNTck9Dc0lqQS0wOGQ1UzRNR3BxdGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9k+syAo CqMja01IEJNk/QOfJnm71WBg+ra/zfvXou3FL6Y5nSWd1fxk2HvdpLtAM3TqjUJI 6ZmnGYlWlYtb50+MECd2dMvsQHk1AujHJ9G1AUqtbfQ36cbUN2FTxwnc4mOUAqeJ spOSgeeNfPyWA43+qFpiLAiXbUjv289snWjMPeJJ0G8c4woiu6qVhWcqzS+ZCyLZ mFx1/Y1Y5Pk0e5QHc9ucU60Nyjo4smoLb2CA3TRyKyRoR/70YJC3UC9c6PhZgejI Ezc5jWLV2IeTPHM1KWp6f7FdRgJw52DaIWMo0XBW5KyH++Rn4+aEuGNI71JtwsT/ fuPalAXLzsoP6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:32 2025 by rpki-client