This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json) Hash identifier: TMbTIrWPGY+4qSFdiPelAvpoJAUw6qsLSTL4qh2ZfXQ= Subject key identifier: DA:92:D5:23:DB:D8:81:AE:B1:57:28:24:15:8A:16:7E:16:E1:94:AB Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f Certificate serial: 019AF79D05398FA2AFFE9DD70562230C56B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft Manifest number: 0119 Signing time: Sun 07 Dec 2025 07:00:54 +0000 Manifest this update: Sun 07 Dec 2025 07:00:54 +0000 Manifest next update: Mon 08 Dec 2025 07:00:54 +0000 Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: spU+QfeKZ1+dI6Fea1CY7uzb7jCTWNIqC0F8p0r96Mo=) 2: ZvIBvN3gO9RJM7uC8BrV6jzhAmk.roa (hash: dioBOx3h8ph3ofANtrh34SCoANsWuT4s9fkC5DmIrUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9d:05:39:8f:a2:af:fe:9d:d7:05:62:23:0c:56:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f Validity Not Before: Dec 7 07:00:54 2025 GMT Not After : Dec 8 07:00:54 2025 GMT Subject: CN=da92d523dbd881aeb1572824158a167e16e194ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:51:bb:95:aa:7f:ad:2a:cb:a3:ca:5f:ec: 3e:2a:fe:52:0f:1f:09:2d:f0:93:4e:bb:21:0a:1b: d5:ea:d2:d4:ab:6d:18:cb:ad:33:5c:43:99:e3:da: ff:85:45:00:7e:ce:71:7e:b8:a6:14:67:d8:ae:37: c1:33:51:29:39:a6:52:62:41:8c:4d:62:8a:b7:5d: 4a:d2:8a:9d:8d:fb:af:33:9b:09:57:5e:3d:c3:f5: 51:5c:0b:f6:b1:26:5b:71:6e:d8:69:1c:2c:e1:b6: 97:6a:b0:44:14:ea:ca:07:e4:f9:2d:59:22:01:11: dc:3f:61:e8:d9:ca:bf:a3:2b:ba:4e:8f:1e:e2:03: ea:86:6e:10:fd:97:db:6a:32:d3:d4:9c:9b:3a:3b: a2:b5:16:a2:49:1d:a8:57:c5:8c:7d:d3:34:73:66: 4d:0a:2d:bc:ac:c1:d4:45:44:cc:02:1b:6d:7a:ad: 27:97:b2:bc:66:7d:9c:ee:97:6a:9c:eb:ee:64:7e: f5:1a:e9:24:f6:85:4b:a4:48:bf:94:b1:49:68:9a: 38:ba:89:c4:de:ea:0d:42:9b:e1:76:86:ac:be:64: 6d:16:c5:1f:fd:f2:68:c9:a5:cd:f6:27:bd:7a:8d: 8d:15:c8:45:0e:6a:ab:8d:09:ed:4e:4b:33:d9:9f: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:92:D5:23:DB:D8:81:AE:B1:57:28:24:15:8A:16:7E:16:E1:94:AB X509v3 Authority Key Identifier: keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:26:3c:e3:cb:80:c5:c6:8b:82:39:ce:13:76:fb:91:2a:b6: 8a:f4:eb:0b:9c:b8:8e:17:ed:7a:a8:3f:23:9e:6a:bb:dd:2e: 3f:06:25:c0:ad:d2:56:09:d9:45:96:31:c2:3e:ed:9d:b6:ad: bc:1c:ef:37:d7:88:88:18:79:cc:28:6e:1e:55:5b:69:d0:4c: db:8f:28:f8:29:b0:c3:cf:cf:0e:85:59:c0:b4:44:d0:66:2b: 5c:90:22:bd:14:cc:40:02:da:d1:71:9e:b6:1a:3c:d5:65:c8: 6d:64:97:5c:14:e6:5c:29:ff:7b:57:2c:aa:7e:40:5e:56:c1: 5b:2a:e4:be:6b:71:c5:9d:05:30:84:4d:24:2a:a9:76:96:2f: bd:45:33:66:3c:14:71:d7:e1:0b:4a:e9:68:71:bf:dc:87:f6: 88:7c:67:e8:33:ab:0a:47:5f:5b:0a:17:74:fe:bb:0b:68:e4: e5:84:76:8b:ff:36:84:8f:fe:7e:4a:d6:97:0b:a4:dc:e5:1f: 6e:60:16:01:b9:df:bc:55:9c:93:e3:d0:cc:33:5d:6b:c0:95: 94:05:ea:55:2a:16:88:a6:60:c4:21:83:aa:da:9b:4d:de:04: 41:64:95:9a:1d:1b:3a:71:94:f4:ab:e2:93:48:bc:4d:e7:03: 85:38:0f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nQU5j6Kv/p3XBWIjDFa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZjRkOWM1ZmEwYWUzNjRiNGQ4MWVkYmM0ZDE4MjAwZjAw ZmJjN2YwHhcNMjUxMjA3MDcwMDU0WhcNMjUxMjA4MDcwMDU0WjAzMTEwLwYDVQQD EyhkYTkyZDUyM2RiZDg4MWFlYjE1NzI4MjQxNThhMTY3ZTE2ZTE5NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqptRu5Wqf60qy6PKX+w+Kv5SDx8J LfCTTrshChvV6tLUq20Yy60zXEOZ49r/hUUAfs5xfrimFGfYrjfBM1EpOaZSYkGM TWKKt11K0oqdjfuvM5sJV149w/VRXAv2sSZbcW7YaRws4baXarBEFOrKB+T5LVki ARHcP2Ho2cq/oyu6To8e4gPqhm4Q/ZfbajLT1JybOjuitRaiSR2oV8WMfdM0c2ZN Ci28rMHURUTMAhtteq0nl7K8Zn2c7pdqnOvuZH71Gukk9oVLpEi/lLFJaJo4uonE 3uoNQpvhdoasvmRtFsUf/fJoyaXN9ie9eo2NFchFDmqrjQntTksz2Z/howIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqS1SPb2IGusVcoJBWKFn4W4ZSrMB8GA1UdIwQY MBaAFGH02cX6CuNktNge28TRggDwD7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWIt N2VlNTMxMWEyYTNjLzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NTE4MmEtYTYyZi00MDQyLThhOWItN2VlNTMxMWEyYTNj LzEvWWZUWnhmb0s0MlMwMkI3YnhOR0NBUEFQdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCY848uA xcaLgjnOE3b7kSq2ivTrC5y4jhfteqg/I55qu90uPwYlwK3SVgnZRZYxwj7tnbat vBzvN9eIiBh5zChuHlVbadBM248o+Cmww8/PDoVZwLRE0GYrXJAivRTMQALa0XGe tho81WXIbWSXXBTmXCn/e1csqn5AXlbBWyrkvmtxxZ0FMIRNJCqpdpYvvUUzZjwU cdfhC0rpaHG/3If2iHxn6DOrCkdfWwoXdP67C2jk5YR2i/82hI/+fkrWlwuk3OUf bmAWAbnfvFWck+PQzDNda8CVlAXqVSoWiKZgxCGDqtqbTd4EQWSVmh0bOnGU9Kvi k0i8TecDhTgPDQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:31 2025 by rpki-client