This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json) Hash identifier: 5o+EACNO1AEZBjmWAGdwnqc5pOJn1sQ7ZqrMMcBW4z4= Subject key identifier: 6E:8D:64:E6:B0:FB:5B:24:68:2E:EC:AF:04:A1:C5:52:94:1C:E8:C8 Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Certificate serial: 019B32D60FCC51CA19BF21107463DF2C9594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft Manifest number: 0AAB Signing time: Thu 18 Dec 2025 19:00:48 +0000 Manifest this update: Thu 18 Dec 2025 19:00:48 +0000 Manifest next update: Fri 19 Dec 2025 19:00:48 +0000 Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: 2dq+zZ5UqHFgZn1P6joyBHzu7J0JuJrmjYIo989VtM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:0f:cc:51:ca:19:bf:21:10:74:63:df:2c:95:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Validity Not Before: Dec 18 19:00:48 2025 GMT Not After : Dec 19 19:00:48 2025 GMT Subject: CN=6e8d64e6b0fb5b24682eecaf04a1c552941ce8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:c1:5d:5e:93:22:e1:a3:e5:81:32:92:5f: cd:59:e7:31:21:79:5c:7f:a9:40:19:11:f0:62:e4: 10:84:3f:b1:9a:47:0f:35:98:cd:fd:4b:c6:12:57: a5:bf:27:9d:3b:fa:4f:ba:56:c9:2b:87:ae:27:fb: 36:a0:0e:af:cb:e6:4d:22:8d:56:89:f2:49:04:32: 42:cc:b8:c1:cd:25:0f:32:5c:c7:f8:f0:87:6e:df: 80:e8:5b:14:a0:91:4c:4e:00:1d:84:19:77:90:fe: 21:62:31:3b:34:dd:26:7a:38:d4:b6:a8:f7:50:65: 91:1d:4e:d8:d2:d6:be:72:1b:c1:d0:1e:c9:76:35: 30:e5:ed:d5:0e:9a:e7:ad:2a:f0:f9:dc:07:9a:8d: 27:65:e7:3d:15:d3:13:77:4d:b1:1e:fe:67:f3:7f: 61:d5:3f:fd:97:22:f2:d1:9f:3c:fa:55:3f:ab:dd: c4:88:03:ed:35:d6:bf:8a:e6:7e:b9:1c:c0:1d:a5: 32:11:8c:aa:22:70:e9:18:b4:8a:a4:7b:13:ce:35: 8b:a8:82:65:81:74:68:04:b8:2c:1a:8c:93:91:c4: 12:95:25:1a:75:2f:19:00:e9:5b:83:c5:10:ad:f6: 33:b8:b0:38:0a:8a:e4:85:84:7d:d9:34:42:bb:4b: 8a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:64:E6:B0:FB:5B:24:68:2E:EC:AF:04:A1:C5:52:94:1C:E8:C8 X509v3 Authority Key Identifier: keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:92:f4:de:b2:34:07:cb:a2:93:d1:c1:c7:fb:59:98:b4:44: 3e:5b:9c:b5:4c:56:4e:2e:dc:27:8d:89:ae:a8:93:9e:37:09: 0a:5c:1b:66:7c:a0:41:83:46:32:8d:73:22:c7:10:33:3f:e0: 1b:6a:f9:62:45:1e:f7:c5:9b:05:6e:e7:5a:6a:3c:5f:44:e6: df:6f:76:19:9f:3f:f0:17:4a:2a:28:67:ec:37:4f:e6:ba:11: 27:88:cc:1c:07:5d:8e:01:6f:a7:c6:b4:83:ce:5e:1e:6a:22: 62:89:e7:fa:44:93:f8:12:eb:1b:97:ca:39:47:6f:37:20:28: 3f:ee:1b:05:f3:d8:bb:e4:6e:87:8b:fa:3a:0e:25:ec:57:d7: f6:4a:07:03:2f:ce:87:f8:15:1d:c9:eb:d9:4d:ce:c0:38:cc: aa:f7:bf:ae:b0:e2:e4:cb:76:5b:cc:b0:e8:2c:8d:9a:0b:97: 0f:8a:56:98:a4:5e:08:76:5d:c1:0f:02:98:d6:0f:a6:52:fd: c8:d4:eb:13:51:7f:26:82:20:24:e6:5e:4f:eb:5b:80:bb:54: 7e:f5:26:57:77:6e:ee:ef:73:94:ce:ff:16:e3:ee:f7:12:85: ed:c1:32:06:83:80:bd:26:ac:25:05:0e:c3:a6:f6:25:cd:a0: 06:ec:97:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1g/MUcoZvyEQdGPfLJWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGIzYTQ0MGFiN2VkNzk0MWUyYzQxNDg0NzU0NmZkNjNm ZjEzZWEwHhcNMjUxMjE4MTkwMDQ4WhcNMjUxMjE5MTkwMDQ4WjAzMTEwLwYDVQQD Eyg2ZThkNjRlNmIwZmI1YjI0NjgyZWVjYWYwNGExYzU1Mjk0MWNlOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh3BXV6TIuGj5YEykl/NWecxIXlc f6lAGRHwYuQQhD+xmkcPNZjN/UvGElelvyedO/pPulbJK4euJ/s2oA6vy+ZNIo1W ifJJBDJCzLjBzSUPMlzH+PCHbt+A6FsUoJFMTgAdhBl3kP4hYjE7NN0mejjUtqj3 UGWRHU7Y0ta+chvB0B7JdjUw5e3VDprnrSrw+dwHmo0nZec9FdMTd02xHv5n839h 1T/9lyLy0Z88+lU/q93EiAPtNda/iuZ+uRzAHaUyEYyqInDpGLSKpHsTzjWLqIJl gXRoBLgsGoyTkcQSlSUadS8ZAOlbg8UQrfYzuLA4CorkhYR92TRCu0uKZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6NZOaw+1skaC7srwShxVKUHOjIMB8GA1UdIwQY MBaAFD2LOkQKt+15QeLEFIR1Rv1j/xPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMt NzhhYzkwZTQ4ODkyLzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMtNzhhYzkwZTQ4ODky LzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZL03rI0 B8uik9HBx/tZmLREPluctUxWTi7cJ42JrqiTnjcJClwbZnygQYNGMo1zIscQMz/g G2r5YkUe98WbBW7nWmo8X0Tm3292GZ8/8BdKKihn7DdP5roRJ4jMHAddjgFvp8a0 g85eHmoiYonn+kST+BLrG5fKOUdvNyAoP+4bBfPYu+Ruh4v6Og4l7FfX9koHAy/O h/gVHcnr2U3OwDjMqve/rrDi5Mt2W8yw6CyNmguXD4pWmKReCHZdwQ8CmNYPplL9 yNTrE1F/JoIgJOZeT+tbgLtUfvUmV3du7u9zlM7/FuPu9xKF7cEyBoOAvSasJQUO w6b2Jc2gBuyXHg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:31:29 2025 by rpki-client