This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json) Hash identifier: Azlw3e+qYZS0DIltVrDREqO/igPBEGxBos0RT96RwUY= Subject key identifier: FA:0D:CE:25:0E:74:F4:87:B8:21:95:F8:23:EA:E3:45:E0:97:06:EE Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc Certificate serial: 019B5ABF9DDADB686DE3554403CC441101BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft Manifest number: 070C Signing time: Fri 26 Dec 2025 13:01:05 +0000 Manifest this update: Fri 26 Dec 2025 13:01:05 +0000 Manifest next update: Sat 27 Dec 2025 13:01:05 +0000 Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: gBaIhwPEiGUt+YMTOLBT3PeaMw6AtvKxN/T/9Mtqq1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:9d:da:db:68:6d:e3:55:44:03:cc:44:11:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc Validity Not Before: Dec 26 13:01:05 2025 GMT Not After : Dec 27 13:01:05 2025 GMT Subject: CN=fa0dce250e74f487b82195f823eae345e09706ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:62:69:2d:cc:09:f4:dd:55:b8:28:63:02: 70:b0:ac:67:91:2f:39:a6:fa:d9:55:4b:e6:ca:cb: 90:29:01:8a:c1:f1:4f:36:58:dc:96:b2:0e:d7:a5: e8:bd:6c:68:0a:19:a4:1a:44:02:7d:f7:35:37:13: f1:2a:7c:7e:77:04:0e:7f:a4:07:cd:75:93:e4:96: da:2d:f4:c8:7d:2f:37:f5:32:48:16:e2:8d:9c:ad: 49:b6:5a:ea:19:d7:4c:cc:85:35:c8:b1:c0:b6:f4: d2:fb:f7:e5:7a:5b:39:e5:39:7b:0f:64:72:1e:a5: 89:55:91:ec:31:18:ca:26:22:fe:50:e7:41:18:74: ed:c5:22:a9:be:b1:a1:0a:72:f5:3e:5b:70:eb:e0: 21:7b:d3:ca:c6:fd:e5:c3:33:a4:7c:03:cd:c3:27: cb:61:ec:78:38:65:1f:02:ff:65:20:c4:7b:8f:b2: 8b:13:2b:43:e1:f5:f3:12:c4:3d:75:81:77:73:9e: 44:0e:d6:ce:b9:4e:78:43:5c:41:d5:ed:75:64:7c: d8:0c:48:30:18:63:78:ce:53:db:0c:e0:e2:aa:ad: 0e:63:33:b6:75:d4:da:00:cc:e5:54:bc:12:f2:f5: 54:d1:53:f1:a1:dc:83:2e:1c:e7:f2:0e:e9:28:29: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0D:CE:25:0E:74:F4:87:B8:21:95:F8:23:EA:E3:45:E0:97:06:EE X509v3 Authority Key Identifier: keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:56:d1:5d:89:93:c9:65:ad:b6:c4:0e:83:17:ce:55:2b:d3: 85:cc:b4:7d:05:5d:37:5d:82:a6:56:c7:9e:53:68:6e:64:dc: 9b:b9:33:67:8f:32:a0:2e:a8:af:8d:69:a1:61:c3:30:0d:3f: bd:e2:16:10:76:36:fc:eb:50:f5:7d:31:72:f5:22:fa:b7:ab: ee:d2:e6:b9:42:a2:50:29:79:01:90:f0:7b:3e:5d:4a:1c:94: 79:12:56:75:06:88:06:f0:f3:bd:ee:fc:76:1e:fb:d6:a5:b1: a2:36:58:d2:e3:ac:68:5c:66:64:ec:bc:d1:87:87:43:17:68: 2c:90:ff:4e:f0:fd:a7:65:75:05:cb:72:ac:1e:24:96:3c:e4: 06:36:af:43:74:66:21:13:40:5e:98:cc:8c:78:83:5e:e5:47: 60:29:e3:a9:69:33:ac:63:ce:c2:b3:9d:b4:50:dc:03:77:78: ec:7b:ee:a4:66:6b:5d:a4:2e:bf:36:ff:d0:50:20:06:81:46: 46:a0:b5:61:e0:81:3a:1e:b4:ff:41:5a:8b:c5:14:3b:3c:fc: 00:76:50:76:44:98:1c:af:63:75:95:21:9d:20:0e:46:93:5f: 6b:4b:94:f8:2f:76:3a:f0:70:6e:cd:b9:38:6b:7f:0e:5b:3a: 56:b8:d0:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav53a22ht41VEA8xEEQG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy MWMyYmMwHhcNMjUxMjI2MTMwMTA1WhcNMjUxMjI3MTMwMTA1WjAzMTEwLwYDVQQD EyhmYTBkY2UyNTBlNzRmNDg3YjgyMTk1ZjgyM2VhZTM0NWUwOTcwNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT1iaS3MCfTdVbgoYwJwsKxnkS85 pvrZVUvmysuQKQGKwfFPNljclrIO16XovWxoChmkGkQCffc1NxPxKnx+dwQOf6QH zXWT5JbaLfTIfS839TJIFuKNnK1JtlrqGddMzIU1yLHAtvTS+/flels55Tl7D2Ry HqWJVZHsMRjKJiL+UOdBGHTtxSKpvrGhCnL1Pltw6+Ahe9PKxv3lwzOkfAPNwyfL Yex4OGUfAv9lIMR7j7KLEytD4fXzEsQ9dYF3c55EDtbOuU54Q1xB1e11ZHzYDEgw GGN4zlPbDODiqq0OYzO2ddTaAMzlVLwS8vVU0VPxodyDLhzn8g7pKCmR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoNziUOdPSHuCGV+CPq40XglwbuMB8GA1UdIwQY MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4 LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1VbRXYmT yWWttsQOgxfOVSvThcy0fQVdN12CplbHnlNobmTcm7kzZ48yoC6or41poWHDMA0/ veIWEHY2/OtQ9X0xcvUi+rer7tLmuUKiUCl5AZDwez5dShyUeRJWdQaIBvDzve78 dh771qWxojZY0uOsaFxmZOy80YeHQxdoLJD/TvD9p2V1BctyrB4kljzkBjavQ3Rm IRNAXpjMjHiDXuVHYCnjqWkzrGPOwrOdtFDcA3d47HvupGZrXaQuvzb/0FAgBoFG RqC1YeCBOh60/0Fai8UUOzz8AHZQdkSYHK9jdZUhnSAORpNfa0uU+C92OvBwbs25 OGt/Dls6VrjQaw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:36 2025 by rpki-client