This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json) Hash identifier: lxyJFyLZOY3bA1pq97ZfqVwAZQ7mU8iplMXfeeuj5+w= Subject key identifier: 20:51:FB:07:13:60:87:24:77:83:EF:36:B8:B4:B2:19:AD:B0:CC:D4 Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5 Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5 Certificate serial: 019B10EF49009F1B11CA88D775875F3EB73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft Manifest number: 0C23 Signing time: Fri 12 Dec 2025 05:01:15 +0000 Manifest this update: Fri 12 Dec 2025 05:01:15 +0000 Manifest next update: Sat 13 Dec 2025 05:01:15 +0000 Files and hashes: 1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: wYeLFCRYhamdjADYjf9cunmtmZHzZO+uD8b9sZaCun0=) 2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:49:00:9f:1b:11:ca:88:d7:75:87:5f:3e:b7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5 Validity Not Before: Dec 12 05:01:15 2025 GMT Not After : Dec 13 05:01:15 2025 GMT Subject: CN=2051fb07136087247783ef36b8b4b219adb0ccd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:ee:41:6c:01:60:a4:30:b3:99:2f:88:0e: 12:f7:67:fb:15:38:17:4b:38:00:36:17:98:d8:df: 24:f3:33:a2:33:60:f8:96:fe:12:af:f5:eb:5a:a8: 81:11:e2:b2:a6:8e:13:37:6e:f7:31:51:16:c6:7e: 89:c6:8b:3b:ab:60:37:f4:21:74:bb:b9:be:48:ee: f5:d5:49:aa:4b:0c:de:15:81:1d:d1:dc:a3:a9:4f: a7:40:cb:c0:23:1e:92:55:af:dd:cd:42:30:d3:f7: 2d:68:74:42:e1:ef:05:56:de:c7:0e:db:60:d9:7b: 45:17:86:62:d8:43:80:d1:ce:0b:a1:89:c4:29:ab: d7:5e:b2:8a:a1:c1:88:8a:6a:8d:da:af:ed:d3:f3: 58:a9:95:70:82:09:6d:0f:5c:d3:7f:fa:84:a5:8b: a3:40:18:21:35:41:6f:24:1e:6d:05:68:65:ad:ba: f8:43:25:84:f7:c8:1a:9d:0d:1f:8a:dd:45:3f:c4: 72:59:30:40:6f:af:78:36:ac:a3:1c:b7:03:27:13: 1d:66:14:9a:d7:01:19:d6:68:98:c6:da:dd:a3:08: c3:d2:60:66:84:82:34:18:d3:b4:d8:f1:97:ff:b2: f8:e3:08:a2:94:ff:7c:8f:46:54:97:9f:b6:95:21: 36:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:51:FB:07:13:60:87:24:77:83:EF:36:B8:B4:B2:19:AD:B0:CC:D4 X509v3 Authority Key Identifier: keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f2:3c:3c:48:45:50:0e:a3:21:5c:b2:5a:9e:eb:16:99:48: 88:ec:bb:ef:71:62:13:fe:db:2d:c1:96:ec:0d:f8:9c:0c:db: 4f:cf:97:88:89:eb:82:5a:75:08:ad:9b:bc:dc:a7:72:45:fe: ae:18:ef:d6:5b:97:69:84:73:d6:86:74:57:31:c4:9e:bf:6d: 01:fa:6c:75:40:aa:b4:fd:95:23:90:bb:5b:3f:40:ce:25:9c: 18:89:3b:b0:4e:90:44:c7:f4:6f:d8:d2:04:f0:e4:69:af:9a: 5a:0e:5d:21:31:d6:f3:0d:cf:53:02:b7:82:81:1b:0b:fc:83: a4:a5:e2:32:41:82:0c:77:c3:c6:42:8b:af:ef:2b:79:28:cf: 95:a4:08:8e:1c:20:d2:c3:02:9f:9e:93:ac:11:57:63:db:66: 0c:4b:a4:a8:ed:6f:f8:48:61:67:39:78:33:d4:d2:fb:1d:3b: 78:89:13:63:2b:a0:25:db:ea:74:aa:c5:42:a0:ca:63:88:21: 92:a4:22:1b:ed:e7:de:d9:bf:f9:8d:58:78:91:8a:da:bf:f2: bc:f6:86:c2:5c:4d:b6:89:c7:15:84:20:05:63:9b:5c:d7:28: d7:30:21:2d:c1:fe:d7:a1:af:df:01:e3:de:b8:9e:43:d8:d7: 5b:11:bf:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ70kAnxsRyojXdYdfPrc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODJmMDUxMzJhOTk4OTUwN2ViZjZlZTk4OTUxODc1M2Jh MmNkYjUwHhcNMjUxMjEyMDUwMTE1WhcNMjUxMjEzMDUwMTE1WjAzMTEwLwYDVQQD EygyMDUxZmIwNzEzNjA4NzI0Nzc4M2VmMzZiOGI0YjIxOWFkYjBjY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubjuQWwBYKQws5kviA4S92f7FTgX SzgANheY2N8k8zOiM2D4lv4Sr/XrWqiBEeKypo4TN273MVEWxn6Jxos7q2A39CF0 u7m+SO711UmqSwzeFYEd0dyjqU+nQMvAIx6SVa/dzUIw0/ctaHRC4e8FVt7HDttg 2XtFF4Zi2EOA0c4LoYnEKavXXrKKocGIimqN2q/t0/NYqZVwggltD1zTf/qEpYuj QBghNUFvJB5tBWhlrbr4QyWE98ganQ0fit1FP8RyWTBAb694NqyjHLcDJxMdZhSa 1wEZ1miYxtrdowjD0mBmhII0GNO02PGX/7L44wiilP98j0ZUl5+2lSE2dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBR+wcTYIckd4PvNri0shmtsMzUMB8GA1UdIwQY MBaAFGmC8FEyqZiVB+v27piVGHU7os21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMt ZjkyNmZhYmY3YWZhLzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMtZjkyNmZhYmY3YWZh LzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/I8PEhF UA6jIVyyWp7rFplIiOy773FiE/7bLcGW7A34nAzbT8+XiInrglp1CK2bvNynckX+ rhjv1luXaYRz1oZ0VzHEnr9tAfpsdUCqtP2VI5C7Wz9AziWcGIk7sE6QRMf0b9jS BPDkaa+aWg5dITHW8w3PUwK3goEbC/yDpKXiMkGCDHfDxkKLr+8reSjPlaQIjhwg 0sMCn56TrBFXY9tmDEukqO1v+EhhZzl4M9TS+x07eIkTYyugJdvqdKrFQqDKY4gh kqQiG+3n3tm/+Y1YeJGK2r/yvPaGwlxNtonHFYQgBWObXNco1zAhLcH+16Gv3wHj 3rieQ9jXWxG/Uw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:26:16 2025 by rpki-client