This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json) Hash identifier: sUJGZirFI7dugBeJT3ErSLNg0LoinRChYSccn4HKdIc= Subject key identifier: 69:70:F6:25:E9:5C:13:EC:9B:DC:52:E9:D2:F4:75:4C:2D:F9:F4:A2 Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42 Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442 Certificate serial: 019AF5E59747EE69F92B6245FD9AD3B5849B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft Manifest number: 0E35 Signing time: Sat 06 Dec 2025 23:00:55 +0000 Manifest this update: Sat 06 Dec 2025 23:00:55 +0000 Manifest next update: Sun 07 Dec 2025 23:00:55 +0000 Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: 4AGKsiyEPp0KsjhX2spASuzTFtNadmwoQjHTORWj4lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:97:47:ee:69:f9:2b:62:45:fd:9a:d3:b5:84:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442 Validity Not Before: Dec 6 23:00:55 2025 GMT Not After : Dec 7 23:00:55 2025 GMT Subject: CN=6970f625e95c13ec9bdc52e9d2f4754c2df9f4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:e6:8d:0d:6c:fe:68:87:14:ca:64:9a:fa: 09:40:5c:e8:2a:dc:33:ca:ec:bf:07:65:fc:dd:8b: 28:ae:06:30:c1:63:9c:b0:e4:48:70:ef:2f:10:37: 08:91:c4:b0:eb:a7:7a:23:8a:73:89:58:2d:fb:5f: ac:ce:a6:de:b3:80:75:82:19:9a:98:1f:e6:1a:ad: 50:3e:0f:06:f9:3f:d8:53:36:3f:33:41:ac:2e:e3: e9:fd:4f:db:11:66:2e:6a:82:1c:d0:f3:43:6e:32: 21:be:14:9f:27:2f:68:b7:f8:df:87:1e:e0:1e:69: 03:98:11:c7:da:33:5c:32:fc:7d:99:63:d6:aa:d9: 58:90:7c:49:ba:63:55:ae:a5:60:3c:78:4f:3d:b6: fc:60:d3:18:45:32:c3:81:fb:b4:19:bd:19:6c:00: 58:57:1b:36:88:5f:d2:29:c8:fc:70:24:3d:13:cf: 54:fd:61:ba:b6:b8:ca:e6:8a:53:a8:62:8d:4d:d8: 1e:2f:7e:64:67:fc:d9:d8:e9:b1:97:f5:bd:11:68: 22:87:03:c8:6a:04:65:29:74:cd:ae:f7:3c:25:f8: a8:57:f7:ef:82:e8:2f:10:2d:e5:f1:90:ab:ff:30: 0c:72:28:4c:2a:3f:cf:e2:b4:a2:50:12:03:15:8e: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:70:F6:25:E9:5C:13:EC:9B:DC:52:E9:D2:F4:75:4C:2D:F9:F4:A2 X509v3 Authority Key Identifier: keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1f:09:f6:2c:0d:00:c6:6d:c2:aa:cb:ea:74:b1:35:ee:b6: 89:80:64:c4:ba:94:e4:44:fe:50:61:87:72:b3:dd:87:1b:70: 0e:1f:a1:84:dd:e0:47:f1:57:3b:fb:5e:2d:0d:7c:4d:06:f3: f2:8b:bf:79:46:fe:e0:d0:3f:01:0a:a3:54:9f:9b:82:b8:96: 9b:b8:bd:36:eb:20:0d:e2:f5:1f:78:15:50:b9:37:51:c2:ec: 61:df:c8:8a:68:a4:9c:ff:d7:27:b5:f8:f3:31:b8:2a:4a:69: 8f:e7:03:26:39:34:23:5a:19:39:07:e6:cf:18:58:73:e7:82: aa:62:51:a5:14:05:a0:2f:f1:50:e1:7c:37:2e:d8:91:ea:fd: 5e:98:1b:24:75:ee:b0:bb:94:1b:61:67:e9:1c:ae:18:a1:3c: 9f:cc:b8:af:3d:56:72:0d:2f:fa:17:f3:e8:dd:98:6e:f3:68: f5:35:8a:48:88:ea:e7:88:d7:34:55:0f:00:02:30:35:2f:b5: 2c:cc:df:74:66:29:18:92:ab:32:68:f1:bc:2f:dd:96:8f:05: 72:3c:3f:f0:3a:aa:6d:1b:58:29:ae:37:df:31:3b:66:9a:91: db:68:66:22:30:a4:42:4b:43:e8:d3:ed:90:27:fe:03:48:02: bd:91:98:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ZdH7mn5K2JF/ZrTtYSbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWI1YjI5Njk5ZTJkZDQxODA0MGMwZWRmNzUwMDg1ZDg3 MjA0NDIwHhcNMjUxMjA2MjMwMDU1WhcNMjUxMjA3MjMwMDU1WjAzMTEwLwYDVQQD Eyg2OTcwZjYyNWU5NWMxM2VjOWJkYzUyZTlkMmY0NzU0YzJkZjlmNGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneTmjQ1s/miHFMpkmvoJQFzoKtwz yuy/B2X83YsorgYwwWOcsORIcO8vEDcIkcSw66d6I4pziVgt+1+szqbes4B1ghma mB/mGq1QPg8G+T/YUzY/M0GsLuPp/U/bEWYuaoIc0PNDbjIhvhSfJy9ot/jfhx7g HmkDmBHH2jNcMvx9mWPWqtlYkHxJumNVrqVgPHhPPbb8YNMYRTLDgfu0Gb0ZbABY Vxs2iF/SKcj8cCQ9E89U/WG6trjK5opTqGKNTdgeL35kZ/zZ2Omxl/W9EWgihwPI agRlKXTNrvc8JfioV/fvgugvEC3l8ZCr/zAMcihMKj/P4rSiUBIDFY7VYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlw9iXpXBPsm9xS6dL0dUwt+fSiMB8GA1UdIwQY MBaAFMibWylpni3UGAQMDt91AIXYcgRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEt Njc1NzU5YTNiMGI3LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEtNjc1NzU5YTNiMGI3 LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASh8J9iwN AMZtwqrL6nSxNe62iYBkxLqU5ET+UGGHcrPdhxtwDh+hhN3gR/FXO/teLQ18TQbz 8ou/eUb+4NA/AQqjVJ+bgriWm7i9NusgDeL1H3gVULk3UcLsYd/IimiknP/XJ7X4 8zG4Kkppj+cDJjk0I1oZOQfmzxhYc+eCqmJRpRQFoC/xUOF8Ny7Yker9XpgbJHXu sLuUG2Fn6RyuGKE8n8y4rz1Wcg0v+hfz6N2YbvNo9TWKSIjq54jXNFUPAAIwNS+1 LMzfdGYpGJKrMmjxvC/dlo8Fcjw/8DqqbRtYKa433zE7ZpqR22hmIjCkQktD6NPt kCf+A0gCvZGY0Q== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:16 2025 by rpki-client