This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json) Hash identifier: n23rG6WHczP0lh3fKVNitDXI4n3HcVpiuFglMrQwg8M= Subject key identifier: 9C:2F:19:4E:06:DF:E7:60:AA:43:0F:F7:65:24:E8:EE:AD:88:77:AC Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c Certificate serial: 019B19BAF4D1DA7849F999565599E6A50613 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft Manifest number: 1704 Signing time: Sat 13 Dec 2025 22:00:41 +0000 Manifest this update: Sat 13 Dec 2025 22:00:41 +0000 Manifest next update: Sun 14 Dec 2025 22:00:41 +0000 Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: U0bvkabAfSJFbhhS+2k8kEfi5oFS2zDbL7gtDkOcS0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:f4:d1:da:78:49:f9:99:56:55:99:e6:a5:06:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c Validity Not Before: Dec 13 22:00:41 2025 GMT Not After : Dec 14 22:00:41 2025 GMT Subject: CN=9c2f194e06dfe760aa430ff76524e8eead8877ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5d:70:f5:5e:29:6a:01:e1:8d:33:04:09:d8: 1d:8c:56:e3:54:f2:9b:8d:5d:45:17:04:12:f6:1b: 61:2a:4b:42:7b:88:43:8b:78:b4:ee:80:fa:ec:40: cc:58:12:2c:fd:68:8f:93:89:e2:6a:9a:92:63:62: 89:97:1b:4b:27:ac:ae:aa:25:56:51:56:e9:9b:fd: e2:fe:3a:47:e8:e4:90:79:2c:b4:00:78:21:ee:39: 94:0f:50:cf:58:29:79:40:4c:dd:fa:76:c2:05:0a: 6f:f6:67:63:b6:38:56:dd:8e:c5:41:c1:2e:c4:86: 43:75:3d:90:4c:0d:0c:ba:ed:85:82:a1:a1:be:14: 15:1b:b4:c3:36:51:e6:1e:f3:6a:ff:ee:eb:05:3a: df:e1:8f:d2:a4:87:e1:44:c7:58:aa:61:80:f3:a6: 14:91:3e:d3:8e:dc:da:bd:42:6a:ec:08:39:64:09: 0e:fb:37:cc:e9:86:23:30:a2:b1:4f:d8:a2:bb:d8: 84:dc:ce:95:0b:9d:26:dd:b2:1d:9d:fd:18:21:e6: 28:b4:aa:22:a6:08:77:d0:e5:26:0e:e7:5d:6d:13: 45:ec:19:56:c1:b9:0e:99:35:10:1f:e5:22:da:00: 3e:91:6c:6f:21:40:4f:1e:ff:bc:7e:8f:1c:ac:0a: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2F:19:4E:06:DF:E7:60:AA:43:0F:F7:65:24:E8:EE:AD:88:77:AC X509v3 Authority Key Identifier: keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:65:8d:4b:23:7e:7b:10:d0:e8:c6:36:00:5c:6f:4a:16: 3f:fd:6b:99:6b:51:26:ab:97:fa:6f:39:a8:e1:c2:7f:13:ad: 8b:2e:bd:34:64:e4:49:6d:08:a7:15:d0:ab:93:45:a4:a2:f2: 91:23:f5:34:22:ea:d8:3a:ed:bf:7d:b7:88:a0:d5:8b:bc:f8: 7b:f5:ce:aa:1d:be:6f:fc:09:bb:5e:a3:23:30:d9:76:37:6a: 2f:a1:0e:67:75:6d:aa:8f:37:70:1d:62:a1:55:f4:b3:ff:8d: 10:99:d6:6f:64:64:0e:a4:1c:70:09:6c:14:e1:b9:5e:ef:ad: 56:64:af:c3:1e:e4:e3:5b:85:81:f7:45:85:19:34:c9:95:fc: c5:7b:38:74:be:f5:28:b5:be:a7:37:6d:97:98:9a:67:73:2b: 3e:14:30:af:5f:32:e2:b4:75:ce:a1:b1:0c:56:27:8a:9a:bd: c3:57:d3:28:d6:85:45:fd:33:8b:7b:19:43:60:6d:4b:3f:6d: ac:00:aa:d0:ef:26:47:93:cd:75:da:44:e6:94:3f:5e:a6:b5: e9:e8:ea:67:99:57:56:c5:81:c0:ec:b9:20:4d:c3:ab:3c:62: 04:c9:10:75:cf:0b:c3:05:60:24:4e:1f:fb:20:d0:fb:77:50: 11:4c:b9:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuvTR2nhJ+ZlWVZnmpQYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMmRlZDI3NzUxZjI5MWMwYjU1Yjc5NDU3MjA3Y2IzYTI1 NTE5N2MwHhcNMjUxMjEzMjIwMDQxWhcNMjUxMjE0MjIwMDQxWjAzMTEwLwYDVQQD Eyg5YzJmMTk0ZTA2ZGZlNzYwYWE0MzBmZjc2NTI0ZThlZWFkODg3N2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl1w9V4pagHhjTMECdgdjFbjVPKb jV1FFwQS9hthKktCe4hDi3i07oD67EDMWBIs/WiPk4niapqSY2KJlxtLJ6yuqiVW UVbpm/3i/jpH6OSQeSy0AHgh7jmUD1DPWCl5QEzd+nbCBQpv9mdjtjhW3Y7FQcEu xIZDdT2QTA0Muu2FgqGhvhQVG7TDNlHmHvNq/+7rBTrf4Y/SpIfhRMdYqmGA86YU kT7TjtzavUJq7Ag5ZAkO+zfM6YYjMKKxT9iiu9iE3M6VC50m3bIdnf0YIeYotKoi pgh30OUmDuddbRNF7BlWwbkOmTUQH+Ui2gA+kWxvIUBPHv+8fo8crArVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwvGU4G3+dgqkMP92Uk6O6tiHesMB8GA1UdIwQY MBaAFMot7Sd1HykcC1W3lFcgfLOiVRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wN2FkM2MtZWNhZC00ZjZkLWJjNTEt YTU5MWVhYWNjZTRmLzEveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wN2FkM2MtZWNhZC00ZjZkLWJjNTEtYTU5MWVhYWNjZTRm LzEveWkzdEozVWZLUndMVmJlVVZ5QjhzNkpWR1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaJljUsj fnsQ0OjGNgBcb0oWP/1rmWtRJquX+m85qOHCfxOtiy69NGTkSW0IpxXQq5NFpKLy kSP1NCLq2Drtv323iKDVi7z4e/XOqh2+b/wJu16jIzDZdjdqL6EOZ3Vtqo83cB1i oVX0s/+NEJnWb2RkDqQccAlsFOG5Xu+tVmSvwx7k41uFgfdFhRk0yZX8xXs4dL71 KLW+pzdtl5iaZ3MrPhQwr18y4rR1zqGxDFYnipq9w1fTKNaFRf0zi3sZQ2BtSz9t rACq0O8mR5PNddpE5pQ/Xqa16ejqZ5lXVsWBwOy5IE3DqzxiBMkQdc8LwwVgJE4f +yDQ+3dQEUy56w== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:32 2025 by rpki-client