This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json) Hash identifier: 78kXnGcSibTH+cXEs7ZwjS5kOdRkuyOHOSSfxiQgFi0= Subject key identifier: 14:0A:CD:AF:FC:5A:EB:1E:D1:42:4F:BC:FC:1E:43:53:07:F6:5B:9D Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37 Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437 Certificate serial: 019AF208E5AD954A9E0C47D3D50BE633CFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft Manifest number: 10C2 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: 4B+Iuq0TRp14SAQCmt2Je5oaHvL12Y3pkqn5lPV/wwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e5:ad:95:4a:9e:0c:47:d3:d5:0b:e6:33:cf:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=140acdaffc5aeb1ed1424fbcfc1e435307f65b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:9f:68:f3:16:56:ec:61:02:0d:90:2e:76: e8:76:5d:13:5a:7b:f9:0c:03:e8:21:50:73:6e:d5: bf:17:45:ae:dd:08:a7:0f:86:75:bc:f2:d6:69:b1: 26:cc:b7:72:66:74:75:7c:e7:e3:0f:ce:5f:b4:97: 05:a5:d4:c4:b9:d6:c9:37:84:2d:79:ca:c4:bc:13: 7e:85:4e:30:e0:20:33:3f:97:21:48:39:4e:8d:be: 70:f5:66:d7:a1:f0:54:12:bf:e6:c4:43:e6:5a:fa: f8:2d:34:ab:a5:e9:8c:e7:b9:cf:ae:a8:7a:3c:16: 51:20:77:34:f1:30:7f:49:a2:3e:17:7c:5f:57:0a: 03:3d:a0:66:fa:fc:c9:d1:02:f0:9d:90:67:8e:c5: 17:55:49:75:1a:03:9e:6d:c6:5c:40:b2:ff:fb:54: 08:01:4e:e6:51:0d:5a:ed:04:75:d0:56:08:8d:0b: 98:b6:00:69:1d:26:26:ac:cf:b6:e9:2b:ef:06:cf: 4a:c7:51:8a:a6:8a:0c:c0:a6:8a:5d:1f:d6:cb:63: 39:86:34:09:c8:87:bc:0f:0e:b9:9e:47:a8:71:55: 27:d6:59:99:86:2e:d8:86:7e:83:16:31:82:cf:d3: 9d:f2:95:b5:ad:5a:cf:a8:02:d1:ac:6d:89:84:40: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0A:CD:AF:FC:5A:EB:1E:D1:42:4F:BC:FC:1E:43:53:07:F6:5B:9D X509v3 Authority Key Identifier: keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:26:1c:75:8d:7b:e0:ad:ae:6c:4e:03:82:5b:7a:f1:74:1c: d0:cd:ad:85:a1:e4:d4:da:f3:56:df:c0:ac:c8:6e:be:da:2a: b3:9a:77:ef:f7:db:33:15:6a:ee:35:cb:e2:38:8e:52:1f:48: 17:ce:c0:bb:9d:56:84:17:d8:df:a1:b2:64:b8:fb:52:18:13: f2:0f:7b:0f:bc:ed:bb:19:b8:18:de:52:e1:34:57:db:d6:a4: 7b:e2:6c:67:0b:3e:a1:c9:87:1f:d2:a0:07:c9:c0:37:6c:6b: 49:14:87:0a:33:89:9c:21:87:8d:57:15:26:ae:8d:8c:f7:34: 4a:01:95:f7:00:6c:d9:31:08:32:87:5d:a9:61:f9:4d:5a:55: 09:0e:0f:1c:87:8b:b6:03:ed:d1:3b:20:ee:0f:e3:29:a1:bd: 4c:ad:96:ac:3b:64:6f:d9:2f:18:0f:7b:49:c0:c3:de:33:59: 99:54:ba:ba:af:0e:47:4e:91:89:8c:6b:62:64:1f:21:10:4c: 2c:85:0e:94:6a:8f:c3:8b:86:14:1e:b2:fb:2b:34:92:ee:95: 38:a2:37:55:9c:95:77:a6:a3:f4:c3:5b:a0:fe:49:98:f1:e6: 9a:ce:f0:49:60:01:bf:ea:4d:c1:49:62:0f:1c:06:cc:21:7a: a1:c2:03:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOWtlUqeDEfT1QvmM8+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjgyNjVlMGFiODMzMjdhYTU0OTIzNGNhYmIxM2ViOGZm NjY0MzcwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EygxNDBhY2RhZmZjNWFlYjFlZDE0MjRmYmNmYzFlNDM1MzA3ZjY1YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqefaPMWVuxhAg2QLnbodl0TWnv5 DAPoIVBzbtW/F0Wu3QinD4Z1vPLWabEmzLdyZnR1fOfjD85ftJcFpdTEudbJN4Qt ecrEvBN+hU4w4CAzP5chSDlOjb5w9WbXofBUEr/mxEPmWvr4LTSrpemM57nPrqh6 PBZRIHc08TB/SaI+F3xfVwoDPaBm+vzJ0QLwnZBnjsUXVUl1GgOebcZcQLL/+1QI AU7mUQ1a7QR10FYIjQuYtgBpHSYmrM+26SvvBs9Kx1GKpooMwKaKXR/Wy2M5hjQJ yIe8Dw65nkeocVUn1lmZhi7Yhn6DFjGCz9Od8pW1rVrPqALRrG2JhED5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQKza/8Wuse0UJPvPweQ1MH9ludMB8GA1UdIwQY MBaAFMooJl4KuDMnqlSSNMq7E+uP9mQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEt MTJkZmQ1ZTM5NWY5LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEtMTJkZmQ1ZTM5NWY5 LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyYcdY17 4K2ubE4Dglt68XQc0M2thaHk1NrzVt/ArMhuvtoqs5p37/fbMxVq7jXL4jiOUh9I F87Au51WhBfY36GyZLj7UhgT8g97D7ztuxm4GN5S4TRX29ake+JsZws+ocmHH9Kg B8nAN2xrSRSHCjOJnCGHjVcVJq6NjPc0SgGV9wBs2TEIModdqWH5TVpVCQ4PHIeL tgPt0Tsg7g/jKaG9TK2WrDtkb9kvGA97ScDD3jNZmVS6uq8OR06RiYxrYmQfIRBM LIUOlGqPw4uGFB6y+ys0ku6VOKI3VZyVd6aj9MNboP5JmPHmms7wSWABv+pNwUli DxwGzCF6ocIDDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:57 2025 by rpki-client