This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft File: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json) Hash identifier: qpo0Dgiu0A1qnrNUcj88iyDwLNjGimQp+b/+TMJaYLo= Subject key identifier: 1D:78:56:7D:17:85:E2:2F:4A:C0:E9:43:D7:08:4B:C7:5E:F5:C9:3A Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 Certificate issuer: /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Certificate serial: 019AAD27AE3C296A3B4B39E921F4BED018FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft Manifest number: 0824 Signing time: Sat 22 Nov 2025 20:00:49 +0000 Manifest this update: Sat 22 Nov 2025 20:00:49 +0000 Manifest next update: Sun 23 Nov 2025 20:00:49 +0000 Files and hashes: 1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: DPvBiq181c1abs7TD/9ufv7SwZ2zkOWdw+5o+PTf2EM=) 2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=) 3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=) 4: HANmGqWDLzD8xzgH1N2qbf2RpVU.roa (hash: w2O64hJj+mcPhVqUkjApVC5JtsigQzHQewLezmoT9do=) 5: ap5KNPIgh8eRLDgd9o9o98m3A_g.roa (hash: wFA6DMYFq5ZeJnSJaOkvybASHTJl6BSASaBH5ShXruc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ad:27:ae:3c:29:6a:3b:4b:39:e9:21:f4:be:d0:18:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054 Validity Not Before: Nov 22 20:00:49 2025 GMT Not After : Nov 23 20:00:49 2025 GMT Subject: CN=1d78567d1785e22f4ac0e943d7084bc75ef5c93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9b:34:cc:5c:a4:1b:66:e8:25:04:a9:3a:bf: a7:29:35:d2:f8:b9:08:af:b4:e2:57:e9:2b:95:c2: d0:d5:26:d6:fe:39:6e:e1:d0:be:43:2a:5d:de:50: 22:7f:16:6c:d3:2c:bc:01:14:2a:a4:7e:7c:50:07: 84:be:77:a6:c8:ea:a8:83:99:49:4e:2d:94:44:b2: 0b:8d:85:c1:00:7e:03:81:dc:d4:aa:26:94:8e:3e: 50:1c:5b:da:27:d9:18:d8:2c:09:1a:b8:b9:1c:a1: 30:af:3a:2e:8b:d6:4f:38:76:dc:a1:62:27:2b:21: f6:87:e0:01:a2:e3:e0:bf:46:c8:76:d3:f1:42:9f: 5f:61:d4:83:ed:9d:88:57:0d:75:47:85:52:64:ce: 31:1c:66:50:aa:18:bb:f0:4f:4d:e0:93:8b:6d:30: 80:c9:ab:b7:03:63:2d:e8:59:d4:5b:94:a6:6f:b4: 92:b0:98:3b:df:c7:04:4e:33:10:f3:a2:ac:59:88: ac:74:43:c8:ad:55:23:e2:1f:8a:cb:b1:76:ce:f0: 39:fd:79:eb:aa:19:91:ce:d1:39:19:1d:34:30:47: 29:25:aa:75:8d:05:7f:d4:5e:0d:56:f0:81:3c:19: bf:49:03:18:88:a2:4d:10:e5:49:7e:f3:e0:7a:f3: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:78:56:7D:17:85:E2:2F:4A:C0:E9:43:D7:08:4B:C7:5E:F5:C9:3A X509v3 Authority Key Identifier: keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2d:4f:4c:c1:7a:bf:49:42:45:91:50:73:12:57:5d:94:70: e4:63:75:a1:63:84:03:8a:63:c8:91:36:f8:a3:b2:40:5f:d6: 19:01:67:99:0e:53:97:13:b8:c0:64:1c:9b:b6:63:bc:ae:84: 1a:f8:61:a5:2d:99:b0:e0:24:3c:21:60:8f:14:79:1c:2f:81: 25:23:a4:4b:f8:26:11:e9:23:b4:81:56:59:8b:15:aa:86:50: 6d:3f:79:e7:17:e5:d9:a1:65:65:56:4e:a2:26:0d:5e:4d:e9: 31:27:40:d1:b2:86:92:01:dd:7f:c5:86:cb:2b:66:96:df:8c: ad:b2:9f:fa:74:97:d5:88:9f:6d:0c:72:ae:a5:b4:10:ab:78: c1:92:63:1b:ab:f6:7f:9a:3b:de:54:cf:bc:1e:4f:78:56:c2: 5a:d3:0f:11:ae:a8:47:3a:28:a6:82:5c:ed:55:86:35:46:a4: df:30:d3:49:36:3f:eb:e7:c2:cc:2a:17:88:e4:d4:9d:a8:20: f3:3c:bc:1b:9f:33:e0:5f:1e:03:f7:43:8f:4f:bf:b5:93:42: 14:91:21:71:6c:47:dd:cc:3d:9f:7a:b9:02:15:7d:77:a1:7a: 2a:d1:96:a9:1c:f1:f8:7e:e5:bc:2b:ab:83:44:0e:6e:db:77: 5a:5a:86:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqtJ648KWo7SznpIfS+0Bj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm N2YwNTQwHhcNMjUxMTIyMjAwMDQ5WhcNMjUxMTIzMjAwMDQ5WjAzMTEwLwYDVQQD EygxZDc4NTY3ZDE3ODVlMjJmNGFjMGU5NDNkNzA4NGJjNzVlZjVjOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZs0zFykG2boJQSpOr+nKTXS+LkI r7TiV+krlcLQ1SbW/jlu4dC+Qypd3lAifxZs0yy8ARQqpH58UAeEvnemyOqog5lJ Ti2URLILjYXBAH4DgdzUqiaUjj5QHFvaJ9kY2CwJGri5HKEwrzoui9ZPOHbcoWIn KyH2h+ABouPgv0bIdtPxQp9fYdSD7Z2IVw11R4VSZM4xHGZQqhi78E9N4JOLbTCA yau3A2Mt6FnUW5Smb7SSsJg738cETjMQ86KsWYisdEPIrVUj4h+Ky7F2zvA5/Xnr qhmRztE5GR00MEcpJap1jQV/1F4NVvCBPBm/SQMYiKJNEOVJfvPgevPm2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB14Vn0XheIvSsDpQ9cIS8de9ck6MB8GA1UdIwQY MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct MTE3NWU1YTA3YTU1LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1 LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVy1PTMF6 v0lCRZFQcxJXXZRw5GN1oWOEA4pjyJE2+KOyQF/WGQFnmQ5TlxO4wGQcm7ZjvK6E GvhhpS2ZsOAkPCFgjxR5HC+BJSOkS/gmEekjtIFWWYsVqoZQbT955xfl2aFlZVZO oiYNXk3pMSdA0bKGkgHdf8WGyytmlt+MrbKf+nSX1YifbQxyrqW0EKt4wZJjG6v2 f5o73lTPvB5PeFbCWtMPEa6oRzoopoJc7VWGNUak3zDTSTY/6+fCzCoXiOTUnagg 8zy8G58z4F8eA/dDj0+/tZNCFJEhcWxH3cw9n3q5AhV9d6F6KtGWqRzx+H7lvCur g0QObtt3WlqGqg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:35:20 2025 by rpki-client