This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json) Hash identifier: e+WUafin9UMlV3rBnO47HASGGnK9jEtDvZaNq7Rz0Yc= Subject key identifier: D6:D8:5F:F8:EE:DE:BA:40:E8:6D:F4:36:20:9D:2D:B4:55:D1:73:DA Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c Certificate serial: 019B3C7FA1B97A37FCBA03165AE1DDA68CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft Manifest number: 0ADE Signing time: Sat 20 Dec 2025 16:02:35 +0000 Manifest this update: Sat 20 Dec 2025 16:02:35 +0000 Manifest next update: Sun 21 Dec 2025 16:02:35 +0000 Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: TR9WOl1rMjXO4Ci7h1D6BIx0MUg2fLy/8LI/vMmLXq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:a1:b9:7a:37:fc:ba:03:16:5a:e1:dd:a6:8c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c Validity Not Before: Dec 20 16:02:35 2025 GMT Not After : Dec 21 16:02:35 2025 GMT Subject: CN=d6d85ff8eedeba40e86df436209d2db455d173da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:d6:dd:15:97:25:e6:33:7b:3a:17:fd:09: 73:5f:47:bd:3f:34:53:40:60:7a:13:dc:47:c3:61: 7c:e4:98:9b:2b:fb:88:68:96:7d:d3:7e:cb:e4:f8: 4c:7e:ed:56:af:d4:f5:c2:35:a0:fa:d4:7d:27:bd: cc:ca:4e:61:33:f3:c5:2a:49:15:1a:8f:ee:45:1f: 29:9d:e6:43:c5:d3:48:a4:0c:fc:e5:b4:81:af:41: 78:ac:ff:f7:d2:09:5e:9d:5e:93:3b:84:c9:e3:d1: b8:f6:2a:c6:c2:d9:c3:71:4c:3e:b5:33:fe:cc:cb: 42:84:53:d6:40:16:41:17:03:b8:00:5f:d0:90:40: 46:19:32:bd:53:40:ca:7a:b1:71:48:e2:76:07:22: 17:fe:fb:d7:6e:bc:f3:a7:a0:8e:bc:69:1d:3c:7c: 50:cf:10:0f:48:75:35:47:9c:6c:f6:3e:98:28:37: cc:e0:2e:02:0d:cd:28:bb:1c:9e:d7:0d:67:eb:79: 8a:a7:fb:89:35:52:c5:82:c2:07:b9:99:a8:d6:ff: 0d:d3:ce:36:e9:75:86:3b:4d:0b:ed:10:9b:5a:7e: 2b:2d:28:41:f7:fe:e0:3b:57:9b:a0:47:be:79:98: 24:4c:23:d2:ac:ba:2d:30:c6:99:16:9a:99:9d:37: 42:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D8:5F:F8:EE:DE:BA:40:E8:6D:F4:36:20:9D:2D:B4:55:D1:73:DA X509v3 Authority Key Identifier: keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dd:6d:b5:da:a4:c4:b6:43:82:d4:f6:8a:76:af:8a:04:de: c9:b5:30:50:48:dc:f7:a7:7a:37:cc:f0:db:86:e7:2a:b2:72: 8b:38:d3:a3:6a:37:22:85:4e:70:77:5f:cf:61:cd:4b:6d:27: 86:c3:a2:e2:23:2a:12:07:2c:df:cb:d0:0d:99:7e:04:28:36: 6e:17:c7:05:ee:16:bc:3c:b5:ae:ce:d9:61:b3:9e:3f:8d:07: 44:ea:a5:c6:2e:c6:08:64:9f:70:9e:80:fa:7d:9b:20:6d:0c: 61:f0:7a:d6:1a:fb:21:52:ae:76:ba:7c:62:51:c8:36:5b:67: e9:0c:f2:d1:77:70:f7:a2:d2:0b:77:02:54:94:f1:2c:3d:97: 45:af:c0:dd:c3:c0:8a:31:21:0b:23:29:d7:4c:73:97:b9:da: 75:94:98:a2:c4:62:fd:c9:85:7e:d2:27:24:08:c5:be:b8:f5: 51:bb:f6:3e:7a:52:d0:da:3a:d4:04:d8:00:2b:2f:00:7d:ec: 13:50:3a:ba:51:97:82:fe:10:5c:e3:eb:37:4f:d4:09:cd:59: ff:fb:6b:f2:26:df:fb:7b:aa:b2:30:bd:d7:58:a8:5c:95:c0: 14:4c:d8:a6:85:d6:f7:1e:26:b4:87:5e:fb:e0:b7:5c:a2:e2: 68:02:6d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6G5ejf8ugMWWuHdpoy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTdlZDlhOTVlMGIyMjM3NjkwYzc0YmZlNzhjZmVkZTJj NDRlN2MwHhcNMjUxMjIwMTYwMjM1WhcNMjUxMjIxMTYwMjM1WjAzMTEwLwYDVQQD EyhkNmQ4NWZmOGVlZGViYTQwZTg2ZGY0MzYyMDlkMmRiNDU1ZDE3M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBHW3RWXJeYzezoX/QlzX0e9PzRT QGB6E9xHw2F85JibK/uIaJZ9037L5PhMfu1Wr9T1wjWg+tR9J73Myk5hM/PFKkkV Go/uRR8pneZDxdNIpAz85bSBr0F4rP/30glenV6TO4TJ49G49irGwtnDcUw+tTP+ zMtChFPWQBZBFwO4AF/QkEBGGTK9U0DKerFxSOJ2ByIX/vvXbrzzp6COvGkdPHxQ zxAPSHU1R5xs9j6YKDfM4C4CDc0ouxye1w1n63mKp/uJNVLFgsIHuZmo1v8N0842 6XWGO00L7RCbWn4rLShB9/7gO1eboEe+eZgkTCPSrLotMMaZFpqZnTdCoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbYX/ju3rpA6G30NiCdLbRV0XPaMB8GA1UdIwQY MBaAFGPn7ZqV4LIjdpDHS/54z+3ixE58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDct MTliMmQ0MWJlYTc5LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDctMTliMmQ0MWJlYTc5 LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit1ttdqk xLZDgtT2inavigTeybUwUEjc96d6N8zw24bnKrJyizjTo2o3IoVOcHdfz2HNS20n hsOi4iMqEgcs38vQDZl+BCg2bhfHBe4WvDy1rs7ZYbOeP40HROqlxi7GCGSfcJ6A +n2bIG0MYfB61hr7IVKudrp8YlHINltn6Qzy0Xdw96LSC3cCVJTxLD2XRa/A3cPA ijEhCyMp10xzl7nadZSYosRi/cmFftInJAjFvrj1Ubv2PnpS0No61ATYACsvAH3s E1A6ulGXgv4QXOPrN0/UCc1Z//tr8ibf+3uqsjC911ioXJXAFEzYpoXW9x4mtIde ++C3XKLiaAJtDw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:37 2025 by rpki-client