This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft File: YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft (raw, json) Hash identifier: ipJXEE1lv2tyFIUNLcwYFjMb2JI6zFmWNnbgogZinqk= Subject key identifier: 4E:79:50:A4:D6:47:C9:87:05:6A:A6:F5:36:0C:94:B5:CB:CD:78:FA Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Certificate serial: 019AF2765C5BA439EB18D9BA3FED7F948DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl (hash: E4eRzugpe7WohcFNNPOmdPJmC/46RPICnz8czZIMXIU=) 2: i1y7TAu4eZuINLnbMHWhraWkV7Q.roa (hash: 5W2nC+zCGbvk80Gay8OtFwwtbb47Ru26+BBu/lW2iZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5c:5b:a4:39:eb:18:d9:ba:3f:ed:7f:94:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=4e7950a4d647c987056aa6f5360c94b5cbcd78fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:0e:e4:d9:e1:52:89:51:ea:77:80:1e:65: 93:87:0e:9f:85:51:84:f8:7d:08:28:0e:d5:3a:2f: 8a:48:25:88:24:70:81:26:b7:d7:57:58:eb:80:a2: c2:e2:52:bb:11:11:99:c2:e8:c7:6c:26:dc:1f:c0: 72:22:ec:05:9a:fd:9c:6f:9c:cf:d5:69:50:2b:94: 46:5a:21:19:59:14:a3:9a:97:b7:4f:ee:f6:db:12: f3:4c:84:a2:ea:c2:c1:01:d8:bb:97:76:3b:05:b7: 30:cc:29:59:e5:3b:f9:f9:9e:9b:5f:2d:a4:f1:79: cb:f1:16:ab:1a:b5:4f:6d:20:77:4c:28:56:f4:81: f0:79:b6:ff:57:9b:52:ec:aa:2b:97:73:5a:1b:b8: 32:ca:cc:f4:87:8b:be:49:fd:3e:5d:6b:60:44:7c: 24:b4:6d:50:10:1c:18:7c:52:8f:c8:41:ec:e2:50: b9:48:7a:85:ea:aa:43:51:5b:e2:04:41:d0:44:55: 0d:99:e2:f5:10:f3:79:8a:f4:19:d4:c8:af:5a:10: c8:99:f1:39:9b:16:72:7a:6f:f4:b4:fc:26:66:e8: 0c:1e:c8:93:cf:3b:9e:98:06:73:80:dd:98:3a:62: 46:7d:51:38:d3:2b:a1:c9:d9:2e:47:30:2d:38:0f: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:79:50:A4:D6:47:C9:87:05:6A:A6:F5:36:0C:94:B5:CB:CD:78:FA X509v3 Authority Key Identifier: keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:03:f9:a8:9b:4c:a9:9c:2d:36:de:db:32:cb:10:46:25:81: 46:2f:3e:7f:e4:ee:d3:88:1b:b6:fe:dc:64:81:9a:4a:ef:ff: 1f:d4:9a:63:0a:67:61:24:0c:86:29:31:ac:91:ff:7c:bb:4e: 9f:aa:4a:4a:64:45:5c:2c:d2:2f:bd:9f:7d:3c:45:4e:cd:06: de:2f:a1:bb:3d:b4:0a:0b:a3:60:40:92:bb:61:af:9c:ae:f9: 9a:e6:b8:6d:db:b5:63:4a:2d:6a:f8:03:c7:e3:64:18:a7:a2: 87:3c:50:2e:82:d8:cd:5b:73:6f:f9:7a:29:e6:cc:6b:75:17: 15:93:07:71:4a:2c:81:d2:63:6b:ab:c6:55:e7:59:07:5f:2a: 1b:78:93:9f:66:ae:0e:85:f0:0c:a6:81:c4:3e:d1:86:33:d4: 6f:c7:f9:d0:15:10:fd:da:4d:82:bf:a2:f7:cc:71:2a:71:78: 2c:17:96:3e:85:6f:20:41:f5:6f:e4:1b:fe:5c:01:82:9c:15: 22:94:48:19:e4:71:f3:12:6e:4e:ad:37:8b:06:64:dd:db:9a: 40:1c:7b:7d:c8:44:11:22:8a:98:cd:5b:54:c4:df:9b:85:0a: 19:2f:dd:d6:1d:08:f0:5e:eb:f2:b6:f3:68:9c:e0:b0:4b:1c: 23:59:9f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlxbpDnrGNm6P+1/lI3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTVkZDBiYTExZmRhZjc0ZDUzYjk1NmZjMWM4NDZhN2Uy ZjYxZmUwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD Eyg0ZTc5NTBhNGQ2NDdjOTg3MDU2YWE2ZjUzNjBjOTRiNWNiY2Q3OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRAO5NnhUolR6neAHmWThw6fhVGE +H0IKA7VOi+KSCWIJHCBJrfXV1jrgKLC4lK7ERGZwujHbCbcH8ByIuwFmv2cb5zP 1WlQK5RGWiEZWRSjmpe3T+722xLzTISi6sLBAdi7l3Y7BbcwzClZ5Tv5+Z6bXy2k 8XnL8RarGrVPbSB3TChW9IHwebb/V5tS7Korl3NaG7gyysz0h4u+Sf0+XWtgRHwk tG1QEBwYfFKPyEHs4lC5SHqF6qpDUVviBEHQRFUNmeL1EPN5ivQZ1MivWhDImfE5 mxZyem/0tPwmZugMHsiTzzuemAZzgN2YOmJGfVE40yuhydkuRzAtOA9w2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE55UKTWR8mHBWqm9TYMlLXLzXj6MB8GA1UdIwQY MBaAFGMV3QuhH9r3TVO5VvwchGp+L2H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0Yjgt ODk4OWI0Y2FhMjA2LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0YjgtODk4OWI0Y2FhMjA2 LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2gP5qJtM qZwtNt7bMssQRiWBRi8+f+Tu04gbtv7cZIGaSu//H9SaYwpnYSQMhikxrJH/fLtO n6pKSmRFXCzSL72ffTxFTs0G3i+huz20CgujYECSu2GvnK75mua4bdu1Y0otavgD x+NkGKeihzxQLoLYzVtzb/l6KebMa3UXFZMHcUosgdJja6vGVedZB18qG3iTn2au DoXwDKaBxD7RhjPUb8f50BUQ/dpNgr+i98xxKnF4LBeWPoVvIEH1b+Qb/lwBgpwV IpRIGeRx8xJuTq03iwZk3duaQBx7fchEESKKmM1bVMTfm4UKGS/d1h0I8F7r8rbz aJzgsEscI1mfnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:02 2025 by rpki-client