This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json) Hash identifier: 1n5mW/cTJXk9QEDunDnaXwHubEln+cBuMhJzW58aSjw= Subject key identifier: DC:53:EA:DA:09:22:AE:40:66:5E:2B:FF:0D:B2:FF:FE:1C:B2:51:B6 Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5 Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5 Certificate serial: 019AF31C26FDF6EDA17669A4444F419A5B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft Manifest number: 0C55 Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: p6RH5eT8o+mlOY27g9FuMoYmCY/yetZ7fLaHUnhy76A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:26:fd:f6:ed:a1:76:69:a4:44:4f:41:9a:5b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5 Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=dc53eada0922ae40665e2bff0db2fffe1cb251b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:81:30:bb:95:3c:63:07:8d:0b:e2:b1:d4: e7:c3:37:3a:84:52:8a:1c:a0:a1:c7:68:ae:e6:c7: 35:c9:66:a5:94:65:a4:7c:20:50:e4:55:c0:d3:4c: 9d:1f:f2:28:b5:98:ae:a3:9f:d4:bf:95:df:27:c4: 9c:18:ef:2f:85:ea:78:ad:6e:10:d3:c1:a4:91:72: bd:a1:0f:01:f6:75:1f:d3:ca:10:05:10:0b:f4:24: 7f:5d:2f:b3:f9:72:a0:cf:e8:ff:f4:dd:4c:7d:61: 46:ce:4f:06:70:25:f9:e1:70:2c:f2:50:7d:09:ef: 15:0e:7c:bc:b3:77:03:d2:73:84:1d:24:07:43:b6: bd:96:1d:1b:4b:0d:d0:b6:8f:07:c1:c4:2f:88:13: cc:a2:82:5e:fb:9f:7b:ae:b9:37:e5:c4:5f:67:cf: 13:89:f4:d3:1a:0b:9a:13:c5:8e:96:7e:f2:e2:28: c2:a5:d9:4d:bf:40:12:c5:21:08:a6:74:a5:d2:54: 1c:a6:61:7a:f5:80:61:68:63:79:02:5f:19:96:32: ad:43:37:b3:70:34:b3:db:fe:1b:e4:76:9d:01:55: e2:4a:f4:28:27:27:ed:20:9d:73:d1:35:79:a2:6a: 48:0e:07:4b:1a:0c:c1:ea:40:5c:60:9f:80:03:16: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:53:EA:DA:09:22:AE:40:66:5E:2B:FF:0D:B2:FF:FE:1C:B2:51:B6 X509v3 Authority Key Identifier: keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5c:49:91:c4:53:01:1a:71:2a:48:02:72:62:34:c9:63:e1: b9:ef:8a:73:15:dd:86:6c:14:fa:5d:bd:53:9f:a1:05:33:d4: ff:12:28:75:d4:fb:f2:d3:94:0e:36:ef:04:ba:04:ec:38:3f: 7c:84:5a:3f:7b:d6:ac:72:d0:c9:8d:89:4b:c7:ee:5d:ac:03: 91:27:5e:4a:d0:ea:f9:6a:41:43:cd:54:7c:b0:f7:de:bd:42: e2:f7:01:48:43:e7:c2:e6:ac:30:ae:bb:95:08:92:35:61:7a: 62:be:92:0d:9d:d0:5c:3a:c8:62:05:96:b5:e5:e7:c7:99:89: ae:45:56:d8:3a:ae:24:61:fa:1b:1a:8c:d5:74:7d:f4:81:94: 2a:a1:c9:32:07:9a:51:bb:3e:27:be:93:b3:53:b2:be:71:4c: 95:c8:a3:73:b4:83:89:b4:bc:96:67:fe:58:c3:99:76:05:e7: 90:ca:98:bb:83:b4:82:a7:b3:29:80:25:9e:28:60:e0:1c:dc: f5:51:d9:73:69:e0:9b:53:ac:45:9c:ce:7a:f9:16:50:2d:c4: c2:c2:cf:99:ec:b6:44:46:5c:71:b8:55:83:18:5a:f5:36:05: dc:bb:3e:ff:e7:6c:90:a8:3e:c6:5d:24:11:da:71:b0:1f:f2: 9d:05:c5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCb99u2hdmmkRE9BmltYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOGUwZmQxODgzMjQ3NTY5NTk5NWY0NTA3ZjhmY2ZkYWYx YzFjZTUwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD EyhkYzUzZWFkYTA5MjJhZTQwNjY1ZTJiZmYwZGIyZmZmZTFjYjI1MWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCyBMLuVPGMHjQvisdTnwzc6hFKK HKChx2iu5sc1yWallGWkfCBQ5FXA00ydH/IotZiuo5/Uv5XfJ8ScGO8vhep4rW4Q 08GkkXK9oQ8B9nUf08oQBRAL9CR/XS+z+XKgz+j/9N1MfWFGzk8GcCX54XAs8lB9 Ce8VDny8s3cD0nOEHSQHQ7a9lh0bSw3Qto8HwcQviBPMooJe+597rrk35cRfZ88T ifTTGguaE8WOln7y4ijCpdlNv0ASxSEIpnSl0lQcpmF69YBhaGN5Al8ZljKtQzez cDSz2/4b5HadAVXiSvQoJyftIJ1z0TV5ompIDgdLGgzB6kBcYJ+AAxYHWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxT6toJIq5AZl4r/w2y//4cslG2MB8GA1UdIwQY MBaAFGOOD9GIMkdWlZlfRQf4/P2vHBzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUt YjRlMjVkNDBhMzgzLzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yNjZlOTgtNDU3Ni00NDdhLTk4MjUtYjRlMjVkNDBhMzgz LzEvWTQ0UDBZZ3lSMWFWbVY5RkJfajhfYThjSE9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFxJkcRT ARpxKkgCcmI0yWPhue+KcxXdhmwU+l29U5+hBTPU/xIoddT78tOUDjbvBLoE7Dg/ fIRaP3vWrHLQyY2JS8fuXawDkSdeStDq+WpBQ81UfLD33r1C4vcBSEPnwuasMK67 lQiSNWF6Yr6SDZ3QXDrIYgWWteXnx5mJrkVW2DquJGH6GxqM1XR99IGUKqHJMgea Ubs+J76Ts1OyvnFMlcijc7SDibS8lmf+WMOZdgXnkMqYu4O0gqezKYAlnihg4Bzc 9VHZc2ngm1OsRZzOevkWUC3EwsLPmey2REZccbhVgxha9TYF3Ls+/+dskKg+xl0k EdpxsB/ynQXFWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:20 2025 by rpki-client