This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json) Hash identifier: 8NTETweq8OrNu8XgG3JTelDszyogTZ8qwkdu4V1CHgs= Subject key identifier: 69:B1:E1:65:BE:4B:E2:D9:45:FC:EA:32:0F:D8:1C:06:AF:75:3B:32 Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37 Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437 Certificate serial: 019B2FD531B87A92671A7A9D0C9E227C1BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft Manifest number: 10E2 Signing time: Thu 18 Dec 2025 05:00:59 +0000 Manifest this update: Thu 18 Dec 2025 05:00:59 +0000 Manifest next update: Fri 19 Dec 2025 05:00:59 +0000 Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: i/iM4STRFuUMAYLc8fjVIPpIT9I+IB3NFusAhqkyi9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:31:b8:7a:92:67:1a:7a:9d:0c:9e:22:7c:1b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437 Validity Not Before: Dec 18 05:00:59 2025 GMT Not After : Dec 19 05:00:59 2025 GMT Subject: CN=69b1e165be4be2d945fcea320fd81c06af753b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:92:cb:00:cc:18:37:82:4d:bc:4e:b1:35:f5: 65:ad:7f:70:9f:78:a3:25:96:f4:36:ad:65:47:fe: ed:8c:bf:60:bf:8d:b6:d1:78:e5:9d:6b:50:47:56: 61:13:ed:c8:c4:ee:dc:59:6e:88:35:67:d0:d2:4e: c3:7f:4d:08:9e:14:24:ef:2a:dc:79:e8:f6:0d:53: 2b:e9:c3:a4:1b:97:27:7e:4f:bf:b0:a9:fd:8d:dd: 45:cb:2d:eb:b3:26:aa:3e:90:6c:5b:04:ec:09:ca: 7c:9a:90:71:31:3f:ef:c2:a4:17:d3:81:d8:83:0c: 4e:5f:27:21:13:f7:35:a4:d7:24:bd:77:02:3b:24: 0d:f0:b9:75:ee:88:48:40:c1:57:da:b6:49:55:d4: 4c:51:15:0a:07:66:31:93:75:1d:1a:d5:b2:7c:ba: db:de:f4:88:21:a1:de:01:4f:6a:d2:b7:7a:6a:86: 8f:e8:85:03:06:2e:44:2e:ea:1c:54:7f:6c:5d:3c: d1:c0:b2:c5:ee:45:cb:33:63:b0:98:e2:44:16:64: f1:c4:5a:b6:91:51:23:c1:84:a8:e4:10:ce:b9:3b: 1c:51:fa:8c:ed:77:6a:84:bd:15:2f:cc:eb:9c:c9: b0:ca:fe:e7:f8:9d:2a:f3:62:46:20:7e:86:62:2d: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:E1:65:BE:4B:E2:D9:45:FC:EA:32:0F:D8:1C:06:AF:75:3B:32 X509v3 Authority Key Identifier: keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:70:32:8b:da:bf:da:92:21:f4:17:9d:a3:04:e6:25:18:53: db:6f:58:fb:72:b2:ea:39:7f:1b:f5:e9:74:0b:e3:b4:ba:2d: 87:af:f3:c7:88:26:5d:3e:5c:b1:68:02:fa:f5:7a:09:9a:56: 41:77:22:27:eb:02:30:6c:6c:4c:c1:71:6e:be:e9:52:49:08: fa:e6:08:18:7c:5b:2b:1e:77:7d:9f:cb:c4:92:c9:80:37:5d: b6:03:32:03:94:8d:d0:32:a8:35:25:8f:b1:29:f6:82:39:a3: a3:7e:36:61:cf:6e:08:78:5f:4f:88:9b:5d:3d:82:4d:56:59: a9:0a:52:d8:43:80:22:3f:82:0e:a8:72:59:55:cb:e0:41:49: 8c:33:c9:b5:e9:fc:d4:56:cc:d3:60:56:60:1b:4a:50:e1:1a: 37:4d:84:5c:7e:93:94:79:84:c0:77:4a:9c:96:24:19:39:b9: 30:97:09:d0:ec:b5:89:d4:a0:d9:92:2d:c0:a7:8e:ef:a0:14: a9:71:71:36:34:77:c9:36:0a:55:5f:d4:34:9b:f0:c2:49:c3: 29:41:fa:ce:18:5f:3f:7a:f7:87:57:0a:e8:fb:e0:dd:cc:c1: 4d:b5:98:04:bc:50:ba:a6:08:fa:70:8e:75:ba:e5:97:40:54: 6a:44:02:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1TG4epJnGnqdDJ4ifBv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjgyNjVlMGFiODMzMjdhYTU0OTIzNGNhYmIxM2ViOGZm NjY0MzcwHhcNMjUxMjE4MDUwMDU5WhcNMjUxMjE5MDUwMDU5WjAzMTEwLwYDVQQD Eyg2OWIxZTE2NWJlNGJlMmQ5NDVmY2VhMzIwZmQ4MWMwNmFmNzUzYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05LLAMwYN4JNvE6xNfVlrX9wn3ij JZb0Nq1lR/7tjL9gv4220XjlnWtQR1ZhE+3IxO7cWW6INWfQ0k7Df00InhQk7yrc eej2DVMr6cOkG5cnfk+/sKn9jd1Fyy3rsyaqPpBsWwTsCcp8mpBxMT/vwqQX04HY gwxOXychE/c1pNckvXcCOyQN8Ll17ohIQMFX2rZJVdRMURUKB2Yxk3UdGtWyfLrb 3vSIIaHeAU9q0rd6aoaP6IUDBi5ELuocVH9sXTzRwLLF7kXLM2OwmOJEFmTxxFq2 kVEjwYSo5BDOuTscUfqM7XdqhL0VL8zrnMmwyv7n+J0q82JGIH6GYi0F2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmx4WW+S+LZRfzqMg/YHAavdTsyMB8GA1UdIwQY MBaAFMooJl4KuDMnqlSSNMq7E+uP9mQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEt MTJkZmQ1ZTM5NWY5LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEtMTJkZmQ1ZTM5NWY5 LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3Ayi9q/ 2pIh9BedowTmJRhT229Y+3Ky6jl/G/XpdAvjtLoth6/zx4gmXT5csWgC+vV6CZpW QXciJ+sCMGxsTMFxbr7pUkkI+uYIGHxbKx53fZ/LxJLJgDddtgMyA5SN0DKoNSWP sSn2gjmjo342Yc9uCHhfT4ibXT2CTVZZqQpS2EOAIj+CDqhyWVXL4EFJjDPJten8 1FbM02BWYBtKUOEaN02EXH6TlHmEwHdKnJYkGTm5MJcJ0Oy1idSg2ZItwKeO76AU qXFxNjR3yTYKVV/UNJvwwknDKUH6zhhfP3r3h1cK6Pvg3czBTbWYBLxQuqYI+nCO dbrll0BUakQCVA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:33 2025 by rpki-client