This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft File: Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json) Hash identifier: NmgXSicFmW22VcxtE87s8jZrZ0D7xsr+LKI+F6SiRpw= Subject key identifier: E9:50:71:D8:9C:7C:BF:56:00:CB:4C:A1:8B:27:54:93:0E:D2:9D:4F Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31 Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531 Certificate serial: 019AF19BA7AFE36C4BB8B20B05F798874CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft Manifest number: 12C9 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: Vliz1Z5XBIO6MKHIQO0SNYRXNOdNJl+XG9EcVeBWfFg=) 2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a7:af:e3:6c:4b:b8:b2:0b:05:f7:98:87:4c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62cbfa24a488327b730775e329d51a1921612531 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=e95071d89c7cbf5600cb4ca18b2754930ed29d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:6f:bc:7d:c1:6c:0c:22:7e:65:f3:09:5c: 35:c6:1d:95:89:18:be:cd:1c:63:74:49:28:dc:6e: 7d:af:c0:30:6b:03:8c:3e:5b:df:ca:90:55:a5:4f: e1:fb:69:a1:3b:6d:85:e3:b6:00:ab:15:4d:4b:56: d1:c1:c8:2c:f8:c1:81:ed:2d:05:c9:6a:10:cd:e7: 84:52:b9:89:19:8d:fe:bc:7b:ba:ce:fc:68:e6:1c: 2b:83:6d:7a:ff:04:12:17:cb:ee:00:bb:14:25:1c: bb:36:f7:53:c8:74:39:27:7b:1a:2c:34:4e:d4:ce: a9:4a:ce:5b:d7:e1:9d:4d:61:0d:83:dc:e9:93:de: 3d:00:5b:cd:c6:a4:c5:07:e9:66:3c:96:dc:13:0b: fb:56:f0:8d:73:85:be:24:f4:21:27:0a:4d:ca:8b: 75:29:cc:6c:d9:d6:ef:d8:11:ba:6a:a6:da:8b:3c: ce:9f:e0:0c:6f:e9:9a:c5:6a:28:eb:07:d2:6e:54: b7:78:64:ab:32:ba:9a:9f:54:69:ca:1e:9a:01:f5: b1:68:1a:c1:2b:d6:6a:94:b3:70:8b:e4:73:24:0a: 92:c3:4b:5c:fa:2b:76:9a:db:8f:cb:bc:35:89:f7: 0e:17:24:71:c5:ff:51:43:a5:63:fa:38:f3:8f:17: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:50:71:D8:9C:7C:BF:56:00:CB:4C:A1:8B:27:54:93:0E:D2:9D:4F X509v3 Authority Key Identifier: keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:20:42:cb:07:26:4a:37:7a:6d:71:e0:fa:20:b2:c4:78:a7: 1d:c7:32:7f:1d:f0:88:57:e2:6f:cd:01:92:a1:45:82:80:75: fd:20:f4:f8:1c:fb:ff:76:72:f1:a4:06:7e:27:64:14:56:64: df:c6:ff:07:7e:a3:fb:68:7f:9a:56:31:93:24:57:ea:e8:0a: 8a:49:1d:40:53:26:0b:e6:87:be:2f:a6:a8:8a:9b:2e:2b:18: a8:73:a4:c6:a4:b3:f8:79:81:76:08:9e:08:4a:e8:25:2b:b8: af:a4:09:c1:1f:d6:a2:b3:15:1e:47:a3:07:24:8a:04:c8:f4: 24:fd:43:1e:fb:cd:9b:f3:f0:46:32:02:02:0d:ca:7d:0b:8a: 00:a7:bc:5b:66:ca:1f:3f:a7:7b:0b:0a:13:17:dc:0c:b6:3b: 52:53:74:49:2a:49:b1:d4:8a:47:7d:17:32:ae:ad:95:cf:03: 23:9f:71:a3:ea:65:93:e3:c9:b4:c4:e1:c3:60:cb:06:f9:39: 1a:7b:bc:b9:5c:b4:59:19:d7:14:43:e6:94:43:fd:77:85:f6: 7f:80:e2:da:cc:d1:01:6f:9a:d7:48:67:1c:e1:4c:6c:6c:5e: a1:d5:9a:b4:87:4b:43:f1:2b:32:c9:10:3e:90:7c:15:62:7c: 2a:e4:ba:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6ev42xLuLILBfeYh0zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyY2JmYTI0YTQ4ODMyN2I3MzA3NzVlMzI5ZDUxYTE5MjE2 MTI1MzEwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EyhlOTUwNzFkODljN2NiZjU2MDBjYjRjYTE4YjI3NTQ5MzBlZDI5ZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8tvvH3BbAwifmXzCVw1xh2ViRi+ zRxjdEko3G59r8AwawOMPlvfypBVpU/h+2mhO22F47YAqxVNS1bRwcgs+MGB7S0F yWoQzeeEUrmJGY3+vHu6zvxo5hwrg216/wQSF8vuALsUJRy7NvdTyHQ5J3saLDRO 1M6pSs5b1+GdTWENg9zpk949AFvNxqTFB+lmPJbcEwv7VvCNc4W+JPQhJwpNyot1 Kcxs2dbv2BG6aqbaizzOn+AMb+maxWoo6wfSblS3eGSrMrqan1Rpyh6aAfWxaBrB K9ZqlLNwi+RzJAqSw0tc+it2mtuPy7w1ifcOFyRxxf9RQ6Vj+jjzjxfsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlQcdicfL9WAMtMoYsnVJMO0p1PMB8GA1UdIwQY MBaAFGLL+iSkiDJ7cwd14ynVGhkhYSUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2Qt NTcwZDE3ZjlmMmE1LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2QtNTcwZDE3ZjlmMmE1 LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSBCywcm Sjd6bXHg+iCyxHinHccyfx3wiFfib80BkqFFgoB1/SD0+Bz7/3Zy8aQGfidkFFZk 38b/B36j+2h/mlYxkyRX6ugKikkdQFMmC+aHvi+mqIqbLisYqHOkxqSz+HmBdgie CEroJSu4r6QJwR/WorMVHkejBySKBMj0JP1DHvvNm/PwRjICAg3KfQuKAKe8W2bK Hz+newsKExfcDLY7UlN0SSpJsdSKR30XMq6tlc8DI59xo+plk+PJtMThw2DLBvk5 Gnu8uVy0WRnXFEPmlEP9d4X2f4Di2szRAW+a10hnHOFMbGxeodWatIdLQ/ErMskQ PpB8FWJ8KuS6Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:15 2025 by rpki-client