This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json) Hash identifier: Ea7T+kKYt1LH5JWhHImnPg0nWZvQLnTlH0Ud6NbI/cQ= Subject key identifier: 9C:56:EC:B2:4F:AA:3B:00:65:80:EA:AB:DD:1C:41:2D:AF:D3:8F:A6 Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f Certificate serial: 019AF1D1FBC3293A03D589EEDC304AC2AC37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft Manifest number: 10E0 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: O+T+8xoiNSchsdv1+Xbx0B8e6pWDtkvaWxvPtxz9hDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:fb:c3:29:3a:03:d5:89:ee:dc:30:4a:c2:ac:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=9c56ecb24faa3b006580eaabdd1c412dafd38fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:21:56:e3:45:49:20:9b:aa:39:4e:a1:3d:90: 73:55:8c:7d:61:8e:f9:93:be:7e:17:5d:85:11:81: 4f:9f:6c:75:df:48:2a:81:af:db:0d:f4:e2:b3:6e: 3d:04:9b:00:e7:f5:5d:0d:04:a4:c6:3d:d2:19:8e: 7b:7d:78:70:fc:65:3b:7c:6f:09:d0:e8:1b:d4:92: b5:62:9f:11:bc:4b:9c:66:55:04:e2:e0:8b:8a:22: ba:61:f7:cb:25:3f:e2:7b:69:ba:4c:6d:97:11:52: 4b:7d:c6:a7:61:bf:d6:8c:b5:e9:28:f5:7c:32:7b: 3b:de:bb:df:ad:b0:b6:25:41:56:69:b1:ba:64:75: 1d:ca:c0:00:98:72:1e:fe:2a:52:bf:40:dd:a1:77: 44:53:2c:7a:36:2c:fe:3d:c5:0d:b9:cd:40:8e:7a: fe:75:fa:6b:b1:b5:a6:45:73:17:c7:d0:3c:5f:f2: 8b:f8:87:f7:b6:9c:21:63:fd:63:00:3d:9c:79:25: 58:d6:e8:22:27:ee:dd:35:81:e8:b8:98:b8:0a:14: 35:30:77:73:09:f2:35:a4:a4:91:2a:04:b5:6e:cd: f0:aa:19:a4:3c:8a:cb:04:e1:63:74:78:c9:28:19: 6b:ed:83:2e:10:d5:76:21:3a:05:d5:93:35:b6:30: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:56:EC:B2:4F:AA:3B:00:65:80:EA:AB:DD:1C:41:2D:AF:D3:8F:A6 X509v3 Authority Key Identifier: keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d5:e3:12:03:7d:81:bb:ad:b7:18:9e:cd:4a:72:13:55:f0: c3:c7:6c:b6:f0:d0:69:5f:9e:14:db:7a:df:e8:51:d2:ec:b5: 5f:b8:d1:ee:20:5f:e7:e1:09:b8:b8:04:9e:b1:f0:56:21:a8: 5e:c1:f2:fc:aa:4c:90:5f:64:4d:e1:5f:d6:8f:fc:45:16:ba: 18:2c:e6:1a:d1:6d:34:32:89:38:a3:7d:9f:a5:94:89:f7:ce: b8:a4:35:04:7b:31:33:12:0e:20:5f:ed:75:63:d4:be:37:c3: 98:c7:43:2f:0e:be:86:fa:8d:7d:d5:e7:de:e3:65:0b:3e:96: 04:c6:22:21:78:f4:7e:33:f8:36:4a:18:01:6c:05:49:e1:d3: 7d:56:01:51:e4:d3:16:dc:86:69:63:74:cc:7d:2d:71:d1:e1: 7c:c1:02:4c:ab:ea:37:12:d7:28:58:35:e8:fb:0c:f8:8c:da: 32:c1:45:41:4a:b6:7f:08:61:55:3b:ef:51:09:a0:ef:56:2a: 93:06:e0:d2:96:ea:88:bc:ca:b5:cb:34:c0:1b:be:cf:65:ca: ef:01:9e:cc:0c:cc:5e:a0:fb:cc:5e:2c:72:fd:33:4b:0e:7f: cd:dc:29:6b:92:d2:35:8c:9e:7c:ad:56:bb:6f:23:05:04:5a: a0:3d:c5:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fvDKToD1Ynu3DBKwqw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzODVlYmVlNDM2M2Y1YWQ5MzM2NmNiMjhmNDJmZDViNzI3 ODNlNmYwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD Eyg5YzU2ZWNiMjRmYWEzYjAwNjU4MGVhYWJkZDFjNDEyZGFmZDM4ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSFW40VJIJuqOU6hPZBzVYx9YY75 k75+F12FEYFPn2x130gqga/bDfTis249BJsA5/VdDQSkxj3SGY57fXhw/GU7fG8J 0Ogb1JK1Yp8RvEucZlUE4uCLiiK6YffLJT/ie2m6TG2XEVJLfcanYb/WjLXpKPV8 Mns73rvfrbC2JUFWabG6ZHUdysAAmHIe/ipSv0DdoXdEUyx6Niz+PcUNuc1Ajnr+ dfprsbWmRXMXx9A8X/KL+If3tpwhY/1jAD2ceSVY1ugiJ+7dNYHouJi4ChQ1MHdz CfI1pKSRKgS1bs3wqhmkPIrLBOFjdHjJKBlr7YMuENV2IToF1ZM1tjBH/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxW7LJPqjsAZYDqq90cQS2v04+mMB8GA1UdIwQY MBaAFGOF6+5DY/WtkzZsso9C/VtyeD5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjJjZDctMzNmMi00NmEyLThiM2Ut N2Q3NGJlNmFlNTU4LzEvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjJjZDctMzNmMi00NmEyLThiM2UtN2Q3NGJlNmFlNTU4 LzEvWTRYcjdrTmo5YTJUTm15eWowTDlXM0o0UG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdXjEgN9 gbuttxiezUpyE1Xww8dstvDQaV+eFNt63+hR0uy1X7jR7iBf5+EJuLgEnrHwViGo XsHy/KpMkF9kTeFf1o/8RRa6GCzmGtFtNDKJOKN9n6WUiffOuKQ1BHsxMxIOIF/t dWPUvjfDmMdDLw6+hvqNfdXn3uNlCz6WBMYiIXj0fjP4NkoYAWwFSeHTfVYBUeTT FtyGaWN0zH0tcdHhfMECTKvqNxLXKFg16PsM+IzaMsFFQUq2fwhhVTvvUQmg71Yq kwbg0pbqiLzKtcs0wBu+z2XK7wGezAzMXqD7zF4scv0zSw5/zdwpa5LSNYyefK1W u28jBQRaoD3F4g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:21 2025 by rpki-client