This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft File: yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json) Hash identifier: yeeq4OhPmU0oIiq84rlQ5RpMp8hpVURnh08h8tQ754Y= Subject key identifier: 9C:AF:FD:DB:50:0B:94:7C:1C:81:FD:B9:40:20:F0:29:85:E1:26:49 Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03 Certificate issuer: /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03 Certificate serial: 019AF509D8F9E1C725CE032B0A924B30D917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft Manifest number: 1261 Signing time: Sat 06 Dec 2025 19:00:54 +0000 Manifest this update: Sat 06 Dec 2025 19:00:54 +0000 Manifest next update: Sun 07 Dec 2025 19:00:54 +0000 Files and hashes: 1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: hfIFSi08YGiJKD/+PaC7J9ftKFFxE25Q4RnEPC77pK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:d8:f9:e1:c7:25:ce:03:2b:0a:92:4b:30:d9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03 Validity Not Before: Dec 6 19:00:54 2025 GMT Not After : Dec 7 19:00:54 2025 GMT Subject: CN=9caffddb500b947c1c81fdb94020f02985e12649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:b8:46:8f:2a:c7:58:19:d7:16:b7:af:03: 04:88:f0:5c:be:bc:12:3a:da:48:ea:31:ff:00:7a: f0:3f:16:23:f1:7f:83:b0:33:89:3a:93:55:b9:f1: a0:cd:b2:85:0c:b1:19:38:ef:57:fe:c8:13:fa:83: d1:44:d9:2d:e3:23:1a:e8:f8:44:10:11:f5:af:ae: 19:fa:a0:15:f8:b5:a9:54:36:78:71:75:02:40:e1: c2:6c:76:93:2d:91:88:59:91:0d:29:42:b9:f3:0b: 73:a8:a3:a5:77:2c:63:b9:83:fd:6f:1e:6d:5e:28: d6:0b:dc:a8:22:6c:d8:c9:7c:9b:10:b1:65:19:71: 8d:a9:05:16:19:15:c3:98:9e:fa:f7:11:63:65:5e: 47:65:6a:13:f1:68:1f:ba:99:63:9b:03:64:60:75: 63:1d:81:30:75:3c:e0:78:79:76:db:20:66:c3:6a: 2b:72:44:27:d8:0d:c6:36:cc:98:65:3c:f8:a5:af: bb:9c:50:0d:07:d6:3e:4b:49:55:16:1d:6b:85:7b: ae:3e:e3:3a:05:04:5e:99:cc:5a:e6:62:a1:62:1b: 33:68:cc:0e:56:1c:86:01:36:2d:8d:9e:07:2f:2f: 7e:37:43:8f:f7:9c:11:a9:9c:a3:39:06:a0:83:74: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AF:FD:DB:50:0B:94:7C:1C:81:FD:B9:40:20:F0:29:85:E1:26:49 X509v3 Authority Key Identifier: keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e4:19:af:64:92:3e:22:39:ef:f4:13:7a:82:f8:9d:c8:c8: 4e:83:03:77:42:18:50:38:3e:81:8d:92:76:8c:01:0e:14:62: 35:51:7f:9b:45:89:f0:30:80:af:9d:c1:74:33:80:40:d0:a1: 7e:5a:c9:9a:5c:95:32:11:2e:80:48:fc:a4:5f:4c:0f:3b:bd: e5:f6:73:62:21:bd:d6:33:47:c0:17:5f:40:34:51:1e:c8:32: 9b:bc:85:28:f2:26:46:1d:e6:9f:f4:31:db:87:f9:cf:fe:fc: a7:c2:e6:0b:eb:60:a6:b6:13:64:c2:79:29:bd:dc:6a:e3:4e: 24:df:15:ca:c4:12:b6:a4:d3:3c:a0:62:b9:66:4b:aa:0c:18: 6e:28:47:15:f7:26:af:be:ca:1e:8a:0a:b7:89:76:c5:fa:2e: cd:52:7c:7f:17:91:3d:9e:87:1b:2f:a0:2a:c1:5e:84:08:12: 37:ba:38:f4:47:e9:0d:ae:b6:62:18:00:4a:ac:c6:40:b6:a4: 7e:f8:55:14:df:ae:58:8e:aa:ad:9c:41:43:02:6d:e3:e4:c9: d8:c1:ca:d7:49:70:7d:b9:3a:40:db:de:a8:51:fe:45:3e:c1: b9:97:ac:30:a5:86:4d:78:97:a6:cf:e7:2d:7c:54:68:94:4f: 1a:70:4d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cdj54cclzgMrCpJLMNkXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MDFmYzFmOTE4MThlNDhkNmZkMTBlZDZmOWM1MzlhODg4 NTRiMDMwHhcNMjUxMjA2MTkwMDU0WhcNMjUxMjA3MTkwMDU0WjAzMTEwLwYDVQQD Eyg5Y2FmZmRkYjUwMGI5NDdjMWM4MWZkYjk0MDIwZjAyOTg1ZTEyNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHq4Ro8qx1gZ1xa3rwMEiPBcvrwS OtpI6jH/AHrwPxYj8X+DsDOJOpNVufGgzbKFDLEZOO9X/sgT+oPRRNkt4yMa6PhE EBH1r64Z+qAV+LWpVDZ4cXUCQOHCbHaTLZGIWZENKUK58wtzqKOldyxjuYP9bx5t XijWC9yoImzYyXybELFlGXGNqQUWGRXDmJ769xFjZV5HZWoT8WgfupljmwNkYHVj HYEwdTzgeHl22yBmw2orckQn2A3GNsyYZTz4pa+7nFANB9Y+S0lVFh1rhXuuPuM6 BQRemcxa5mKhYhszaMwOVhyGATYtjZ4HLy9+N0OP95wRqZyjOQagg3S5AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyv/dtQC5R8HIH9uUAg8CmF4SZJMB8GA1UdIwQY MBaAFMkB/B+RgY5I1v0Q7W+cU5qIhUsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgt NWYxZDg1NjJiNTJmLzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgtNWYxZDg1NjJiNTJm LzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+QZr2SS PiI57/QTeoL4ncjIToMDd0IYUDg+gY2SdowBDhRiNVF/m0WJ8DCAr53BdDOAQNCh flrJmlyVMhEugEj8pF9MDzu95fZzYiG91jNHwBdfQDRRHsgym7yFKPImRh3mn/Qx 24f5z/78p8LmC+tgprYTZMJ5Kb3cauNOJN8VysQStqTTPKBiuWZLqgwYbihHFfcm r77KHooKt4l2xfouzVJ8fxeRPZ6HGy+gKsFehAgSN7o49EfpDa62YhgASqzGQLak fvhVFN+uWI6qrZxBQwJt4+TJ2MHK10lwfbk6QNveqFH+RT7BuZesMKWGTXiXps/n LXxUaJRPGnBNWg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:33:28 2025 by rpki-client