This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft File: ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json) Hash identifier: /E7B7oDC56ADMI2gMcXcKL/+SgEFtuWjBhkT4fDw19o= Subject key identifier: 09:71:33:50:E4:25:9F:7C:B6:62:84:C3:67:81:18:A4:39:AD:87:9D Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC Certificate issuer: /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc Certificate serial: 019B4F29037360DE1631F65AA7A829F39611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft Manifest number: 0706 Signing time: Wed 24 Dec 2025 07:00:46 +0000 Manifest this update: Wed 24 Dec 2025 07:00:46 +0000 Manifest next update: Thu 25 Dec 2025 07:00:46 +0000 Files and hashes: 1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: sm07ndo6AX2ZRfZ3ka8IyqHXMwsOJvtwZlAevncWWKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:03:73:60:de:16:31:f6:5a:a7:a8:29:f3:96:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc Validity Not Before: Dec 24 07:00:46 2025 GMT Not After : Dec 25 07:00:46 2025 GMT Subject: CN=09713350e4259f7cb66284c3678118a439ad879d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:e3:bd:e9:76:64:f6:32:fd:7c:5d:1a:1a: 7f:cd:6f:0d:84:b3:4b:5c:48:88:76:e3:de:aa:a2: 4f:b4:43:e8:be:7d:39:82:b8:61:07:a7:a0:45:54: e0:75:6f:c1:c4:09:11:e0:f6:03:89:b3:7c:82:d1: 0e:0a:53:e4:22:40:c6:3a:4e:0c:44:cb:13:60:67: 65:a8:7d:79:a1:2f:62:46:46:b2:c1:2d:09:ec:fc: a5:56:39:62:61:51:ea:29:a6:ed:87:7a:19:c9:80: a8:24:7d:60:46:42:d0:8f:1d:b7:dc:2d:ba:10:f0: a8:c8:5d:40:6f:25:d0:e7:40:93:4d:cf:d4:5c:2f: 64:49:d9:13:c3:da:bd:7b:72:0f:37:10:df:fc:67: 30:55:a7:4b:f2:71:fe:b7:c4:4a:40:22:6f:a6:d7: 21:37:0c:4c:23:e4:c0:9d:60:c1:fe:a6:64:1b:f1: 51:ad:79:9e:c3:97:05:1f:59:12:7f:6a:d6:00:54: 01:d3:f3:f8:4a:a8:08:4d:e1:50:a1:22:38:07:7c: 82:2a:08:9a:47:93:fd:4a:32:cf:02:dc:ba:19:5f: 19:cb:ad:8d:8a:20:40:18:43:ad:61:75:de:e1:e4: 0b:13:37:3a:0b:8b:77:82:99:40:2d:90:fc:58:e2: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:33:50:E4:25:9F:7C:B6:62:84:C3:67:81:18:A4:39:AD:87:9D X509v3 Authority Key Identifier: keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:da:15:a7:0d:ea:12:23:24:77:9c:21:12:4e:33:23:c4: fe:8d:17:13:f9:72:dc:40:53:cc:5f:59:04:c9:b7:eb:2f:6c: eb:72:3b:61:58:31:88:f6:c3:ef:41:f8:5d:fa:0d:fa:bb:ba: b7:06:35:cd:5b:fc:a7:d4:58:31:2a:04:ff:9d:80:8b:71:de: b0:e6:1c:58:2c:e4:ee:b1:07:a9:eb:82:9a:98:4c:20:e5:59: 04:bc:43:42:07:2d:16:75:0f:a1:f5:b4:67:b7:68:4b:7c:81: ce:68:43:ec:46:8a:52:0b:b8:dd:5c:80:d1:d9:45:08:f4:04: ab:d6:05:fa:9c:b7:40:d4:58:68:aa:f1:a7:c3:ea:bf:b4:09: 8e:e3:6e:8c:06:e8:85:cc:cc:6d:d1:ba:ab:ec:ec:4f:87:99: 4d:93:03:e3:dc:a8:88:e8:38:a9:a7:cc:8c:ac:59:9b:95:17: b4:51:40:c5:79:3f:bf:17:e7:98:4d:50:29:29:fd:58:e6:d2: a6:07:7a:55:ab:50:38:00:53:c3:b9:0c:7d:c4:c8:7c:8d:a0: b9:ed:e4:d3:2c:8a:50:d6:59:11:8b:89:8d:a5:18:a4:b2:fa: 1e:14:a9:65:76:60:22:22:48:e3:1e:c3:84:e7:8e:4a:4a:15: 57:9e:4b:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKQNzYN4WMfZap6gp85YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy MWMyYmMwHhcNMjUxMjI0MDcwMDQ2WhcNMjUxMjI1MDcwMDQ2WjAzMTEwLwYDVQQD EygwOTcxMzM1MGU0MjU5ZjdjYjY2Mjg0YzM2NzgxMThhNDM5YWQ4NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ivjvel2ZPYy/XxdGhp/zW8NhLNL XEiIduPeqqJPtEPovn05grhhB6egRVTgdW/BxAkR4PYDibN8gtEOClPkIkDGOk4M RMsTYGdlqH15oS9iRkaywS0J7PylVjliYVHqKabth3oZyYCoJH1gRkLQjx233C26 EPCoyF1AbyXQ50CTTc/UXC9kSdkTw9q9e3IPNxDf/GcwVadL8nH+t8RKQCJvptch NwxMI+TAnWDB/qZkG/FRrXmew5cFH1kSf2rWAFQB0/P4SqgITeFQoSI4B3yCKgia R5P9SjLPAty6GV8Zy62NiiBAGEOtYXXe4eQLEzc6C4t3gplALZD8WOIZ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlxM1DkJZ98tmKEw2eBGKQ5rYedMB8GA1UdIwQY MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4 LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPTaFacN 6hIjJHecIRJOMyPE/o0XE/ly3EBTzF9ZBMm36y9s63I7YVgxiPbD70H4XfoN+ru6 twY1zVv8p9RYMSoE/52Ai3HesOYcWCzk7rEHqeuCmphMIOVZBLxDQgctFnUPofW0 Z7doS3yBzmhD7EaKUgu43VyA0dlFCPQEq9YF+py3QNRYaKrxp8Pqv7QJjuNujAbo hczMbdG6q+zsT4eZTZMD49yoiOg4qafMjKxZm5UXtFFAxXk/vxfnmE1QKSn9WObS pgd6VatQOABTw7kMfcTIfI2gue3k0yyKUNZZEYuJjaUYpLL6HhSpZXZgIiJI4x7D hOeOSkoVV55LOw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:41:34 2025 by rpki-client