This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft File: YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft (raw, json) Hash identifier: wMqh6e22kz//lhtic/DuqwBU5/5ZjNWYiC4TWPsPTgs= Subject key identifier: 6D:1C:8A:53:B5:4C:80:C4:F8:3A:60:4B:63:C1:39:35:6E:A0:06:9C Authority key identifier: 62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 Certificate issuer: /CN=626752d870c6696f012b2f465d549f4000fe1858 Certificate serial: 019B42B736C987657F01D941A9F8553A1F77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft Manifest number: 0376 Signing time: Sun 21 Dec 2025 21:01:01 +0000 Manifest this update: Sun 21 Dec 2025 21:01:01 +0000 Manifest next update: Mon 22 Dec 2025 21:01:01 +0000 Files and hashes: 1: YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl (hash: COYd3iBZ5QCcE2ubDahPhG5XtRmBA45wDHbwvncMx7c=) 2: qn60XTUhVIHXIbT-HvehrrpwogU.roa (hash: qJSoQQbXyMZY80sZe+6a8U7g7EqUHMfReU7Wd4AfetU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:36:c9:87:65:7f:01:d9:41:a9:f8:55:3a:1f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=626752d870c6696f012b2f465d549f4000fe1858 Validity Not Before: Dec 21 21:01:01 2025 GMT Not After : Dec 22 21:01:01 2025 GMT Subject: CN=6d1c8a53b54c80c4f83a604b63c139356ea0069c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:5e:78:b4:93:4b:ea:9e:db:74:fa:a1:b1: 02:d7:3d:78:cd:26:7b:15:7a:3a:76:78:54:de:69: b1:26:a9:28:16:3f:6b:e1:91:40:80:a6:5d:63:3a: f6:ce:b3:99:96:32:f5:2d:76:86:bd:dc:78:7a:00: dd:a1:e9:1d:fb:f4:ba:d4:6e:c8:84:ae:6f:7f:9a: ff:c3:11:92:02:63:83:38:7c:3d:a7:73:2d:fc:8b: 58:9c:36:0e:22:3d:24:20:ee:16:4c:da:22:f7:bb: 50:8a:fc:ee:e5:2f:df:24:d4:77:13:dd:17:33:45: 08:bf:f2:c5:00:68:f7:f2:da:4c:46:fa:88:4f:11: 3e:8c:35:d6:8e:be:35:63:ed:c2:a3:01:aa:17:41: c7:50:14:32:55:e4:41:86:62:12:05:76:d0:8f:dd: d0:9a:e6:22:9f:8b:bf:b1:1e:6b:4a:1f:3f:16:52: 66:78:8c:07:2d:58:86:ea:d3:ec:32:0f:23:c7:8c: ad:1c:1e:bf:2f:75:de:b9:19:7e:34:4d:f7:91:14: be:b5:45:84:91:b5:63:a3:ed:f9:ce:4e:cb:cf:12: 3f:bd:6a:a2:6a:e2:0f:49:4a:ec:1f:ab:53:fe:32: f0:27:7b:c8:45:f5:e1:b8:f1:98:63:63:dc:c4:64: 8e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1C:8A:53:B5:4C:80:C4:F8:3A:60:4B:63:C1:39:35:6E:A0:06:9C X509v3 Authority Key Identifier: keyid:62:67:52:D8:70:C6:69:6F:01:2B:2F:46:5D:54:9F:40:00:FE:18:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmdS2HDGaW8BKy9GXVSfQAD-GFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bfbb2f-b671-4814-8627-ba2648f151d3/1/YmdS2HDGaW8BKy9GXVSfQAD-GFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:7b:0d:9c:23:b9:d6:f9:2e:dc:14:3a:49:ad:ca:c5:d4: 46:72:4d:62:e9:fd:71:91:4b:54:9a:2b:17:23:37:d2:50:56: 0e:12:a6:46:8e:70:8f:63:93:dd:e3:8e:ed:ec:92:d4:c4:6b: 1c:08:88:cd:30:63:72:ba:55:86:95:20:55:0f:8f:28:7f:80: a9:2c:aa:f5:c4:33:40:e6:ab:86:e3:ef:41:f8:6f:ea:39:bc: 8d:4a:e4:aa:31:4f:78:1f:ff:a3:7c:d3:16:28:d4:9c:3a:e9: ef:3e:40:fe:07:dd:d6:87:eb:16:2e:0e:15:cb:07:93:71:e1: f6:10:44:ec:1c:bd:fb:3a:4d:c4:a5:a4:84:83:eb:97:d9:b6: 11:d6:96:86:73:97:ec:6a:cb:da:df:91:82:ba:17:20:89:5e: 7c:1d:a7:34:01:36:22:4b:ab:61:5d:99:6c:d4:42:60:d7:ee: f5:bf:2f:9d:ba:c7:8e:8f:0a:69:1f:15:2b:4d:df:6d:21:c6: 41:2a:a3:4c:d2:65:72:da:94:dd:7d:96:70:9a:c2:2e:8d:c9: 9d:69:b7:fd:85:25:e2:45:94:eb:f3:93:06:78:ad:ba:00:0e: e9:55:2c:ca:c3:82:1f:2d:f7:83:be:59:cc:0a:a0:26:af:2f: 39:9f:81:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtzbJh2V/AdlBqfhVOh93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc1MmQ4NzBjNjY5NmYwMTJiMmY0NjVkNTQ5ZjQwMDBm ZTE4NTgwHhcNMjUxMjIxMjEwMTAxWhcNMjUxMjIyMjEwMTAxWjAzMTEwLwYDVQQD Eyg2ZDFjOGE1M2I1NGM4MGM0ZjgzYTYwNGI2M2MxMzkzNTZlYTAwNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy9eeLSTS+qe23T6obEC1z14zSZ7 FXo6dnhU3mmxJqkoFj9r4ZFAgKZdYzr2zrOZljL1LXaGvdx4egDdoekd+/S61G7I hK5vf5r/wxGSAmODOHw9p3Mt/ItYnDYOIj0kIO4WTNoi97tQivzu5S/fJNR3E90X M0UIv/LFAGj38tpMRvqITxE+jDXWjr41Y+3CowGqF0HHUBQyVeRBhmISBXbQj93Q muYin4u/sR5rSh8/FlJmeIwHLViG6tPsMg8jx4ytHB6/L3XeuRl+NE33kRS+tUWE kbVjo+35zk7LzxI/vWqiauIPSUrsH6tT/jLwJ3vIRfXhuPGYY2PcxGSOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0cilO1TIDE+DpgS2PBOTVuoAacMB8GA1UdIwQY MBaAFGJnUthwxmlvASsvRl1Un0AA/hhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2Mjct YmEyNjQ4ZjE1MWQzLzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iZmJiMmYtYjY3MS00ODE0LTg2MjctYmEyNjQ4ZjE1MWQz LzEvWW1kUzJIREdhVzhCS3k5R1hWU2ZRQUQtR0ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/t7DZwj udb5LtwUOkmtysXURnJNYun9cZFLVJorFyM30lBWDhKmRo5wj2OT3eOO7eyS1MRr HAiIzTBjcrpVhpUgVQ+PKH+AqSyq9cQzQOarhuPvQfhv6jm8jUrkqjFPeB//o3zT FijUnDrp7z5A/gfd1ofrFi4OFcsHk3Hh9hBE7By9+zpNxKWkhIPrl9m2EdaWhnOX 7GrL2t+RgroXIIlefB2nNAE2IkurYV2ZbNRCYNfu9b8vnbrHjo8KaR8VK03fbSHG QSqjTNJlctqU3X2WcJrCLo3JnWm3/YUl4kWU6/OTBnitugAO6VUsysOCHy33g75Z zAqgJq8vOZ+B/w== -----END CERTIFICATE-----Generated at Mon Dec 22 03:49:47 2025 by rpki-client