This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json) Hash identifier: j9lZ/hcPTu59sqwkwtGdrbQ1i4/oSsd1bcOy88++qWY= Subject key identifier: 8D:53:2F:10:CF:1C:51:9B:E6:C2:51:FB:2D:49:D5:8C:F6:2F:B5:2B Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd Certificate serial: 019B2D0C2F7D708773E521965813929A1847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 16:02:11 +0000 Manifest this update: Wed 17 Dec 2025 16:02:11 +0000 Manifest next update: Thu 18 Dec 2025 16:02:11 +0000 Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: TY2zhOzbkv39SqxYHyE1IZw4xa5/4EYV4UuY7IjTZp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:2f:7d:70:87:73:e5:21:96:58:13:92:9a:18:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd Validity Not Before: Dec 17 16:02:11 2025 GMT Not After : Dec 18 16:02:11 2025 GMT Subject: CN=8d532f10cf1c519be6c251fb2d49d58cf62fb52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:da:77:4b:85:fd:b6:18:9e:60:8c:af:5b: 17:14:01:89:ed:89:9c:8b:f3:cf:ea:7b:60:ba:8f: d2:83:8a:6c:7d:dc:82:6d:1f:ea:a1:7a:a0:22:f2: 2b:eb:48:51:45:65:f1:76:b4:35:7d:cb:d5:78:dd: 2f:47:41:7f:b7:3e:76:52:ca:61:05:02:12:8e:c1: bd:30:fd:3c:b1:8c:70:aa:4a:49:3a:ce:46:ba:57: b8:06:ca:35:49:02:8a:24:ff:57:c2:51:02:29:a3: fb:14:08:32:d1:c6:59:cb:12:b0:17:28:91:1e:35: ce:7f:c1:c2:95:1c:b0:24:d9:f8:d7:81:85:92:8b: 7d:e6:29:1e:3f:15:d9:38:78:ad:4c:49:74:b2:77: 5d:f8:f6:90:b3:13:e8:e4:5e:72:27:ba:06:2a:b3: b1:bd:1c:42:ba:28:14:2f:c1:61:d6:f2:95:80:7d: e0:3a:e5:e3:ba:95:cc:4e:d0:2c:63:7c:96:48:15: 1f:2e:d3:77:4a:02:68:fe:e5:a6:6e:e3:f5:d0:be: 5d:1b:7f:8a:d0:35:72:d4:96:6a:cc:7e:bc:a7:53: dd:4b:0c:9f:77:2b:bd:fd:a3:e6:b7:fc:9b:e2:3a: 59:36:35:27:e5:a0:87:f6:03:2c:c1:3d:9e:b9:9e: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:2F:10:CF:1C:51:9B:E6:C2:51:FB:2D:49:D5:8C:F6:2F:B5:2B X509v3 Authority Key Identifier: keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c7:0f:5b:d6:93:32:7b:d2:bf:29:96:e6:d0:9b:3b:d7:e9: 4e:8b:2f:a8:4a:bf:ea:2a:3a:b6:ee:ae:f5:c7:04:dd:b6:90: 9d:0f:bd:53:fc:12:ff:f5:37:81:d2:b6:e4:b6:97:31:bd:0d: 40:44:75:77:ae:d4:c3:ea:15:6b:78:21:92:01:f4:67:4e:c5: c7:12:ca:a2:c7:5b:b7:9e:62:fb:71:99:f0:6f:74:2e:c8:d9: f9:81:a1:86:c7:18:21:dc:e6:dc:57:aa:28:51:59:53:22:a7: e9:43:ab:0b:5f:08:c3:00:45:a6:b6:45:a8:10:67:fe:28:aa: 54:f9:dc:e3:d0:17:8c:8a:ba:25:f5:61:c9:06:5e:d0:5d:a9: ff:2b:e3:20:a0:87:a0:63:ac:fc:2d:e0:7d:15:fb:5c:ba:0e: cc:ef:88:64:5d:ec:c3:29:cb:f9:93:8b:f0:15:80:5f:0b:e0: d0:f0:92:51:88:87:2c:6d:75:37:b8:87:3a:ac:17:d7:e1:e9: a9:dd:d2:9f:0a:50:7c:8a:8c:39:ec:0e:6b:eb:85:2a:35:c2: fe:84:8e:e9:21:ab:76:5e:20:ac:75:9a:b8:bb:b4:79:b7:91: ac:36:a1:ce:88:4d:88:e2:5e:f8:19:60:46:cd:98:33:fe:83: 2e:66:da:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDC99cIdz5SGWWBOSmhhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNWRkYjc3Yzc5MjZmNTc3YjAwYWJjZDNkNTJmNDJjOTIw Mjc5Y2QwHhcNMjUxMjE3MTYwMjExWhcNMjUxMjE4MTYwMjExWjAzMTEwLwYDVQQD Eyg4ZDUzMmYxMGNmMWM1MTliZTZjMjUxZmIyZDQ5ZDU4Y2Y2MmZiNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY7ad0uF/bYYnmCMr1sXFAGJ7Ymc i/PP6ntguo/Sg4psfdyCbR/qoXqgIvIr60hRRWXxdrQ1fcvVeN0vR0F/tz52Usph BQISjsG9MP08sYxwqkpJOs5Gule4Bso1SQKKJP9XwlECKaP7FAgy0cZZyxKwFyiR HjXOf8HClRywJNn414GFkot95ikePxXZOHitTEl0sndd+PaQsxPo5F5yJ7oGKrOx vRxCuigUL8Fh1vKVgH3gOuXjupXMTtAsY3yWSBUfLtN3SgJo/uWmbuP10L5dG3+K 0DVy1JZqzH68p1PdSwyfdyu9/aPmt/yb4jpZNjUn5aCH9gMswT2euZ6JQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1TLxDPHFGb5sJR+y1J1Yz2L7UrMB8GA1UdIwQY MBaAFGFd23fHkm9XewCrzT1S9CySAnnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYt YjBkYzJlMjIxMWViLzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYtYjBkYzJlMjIxMWVi LzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJscPW9aT MnvSvymW5tCbO9fpTosvqEq/6io6tu6u9ccE3baQnQ+9U/wS//U3gdK25LaXMb0N QER1d67Uw+oVa3ghkgH0Z07FxxLKosdbt55i+3GZ8G90LsjZ+YGhhscYIdzm3Feq KFFZUyKn6UOrC18IwwBFprZFqBBn/iiqVPnc49AXjIq6JfVhyQZe0F2p/yvjIKCH oGOs/C3gfRX7XLoOzO+IZF3swynL+ZOL8BWAXwvg0PCSUYiHLG11N7iHOqwX1+Hp qd3SnwpQfIqMOewOa+uFKjXC/oSO6SGrdl4grHWauLu0ebeRrDahzohNiOJe+Blg Rs2YM/6DLmbaBg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:57:11 2025 by rpki-client