This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft File: Yefv0ZrydUeUJswZJcW8Ls7ums4.mft (raw, json) Hash identifier: Uft9DhHt3vlxT+nLXC4tGJMiQgpsdq4+458WwapwKYU= Subject key identifier: 91:33:F7:9E:B5:37:0F:30:A6:CC:1C:CD:11:BA:80:2A:46:73:D8:94 Authority key identifier: 61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE Certificate issuer: /CN=61e7efd19af275479426cc1925c5bc2eceee9ace Certificate serial: 019AF2768D670876363FB5DB73CDE6FE40F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft Manifest number: 1673 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: Yefv0ZrydUeUJswZJcW8Ls7ums4.crl (hash: lsvE5uCE/VG3MuNU/aHbyOboZ5qPT9EI6+yvSKyi9Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8d:67:08:76:36:3f:b5:db:73:cd:e6:fe:40:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7efd19af275479426cc1925c5bc2eceee9ace Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=9133f79eb5370f30a6cc1ccd11ba802a4673d894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:42:57:9e:54:31:50:e4:ca:fe:81:1f:ae: 52:fc:6f:63:52:0e:51:87:f3:94:1b:8f:78:05:4c: 05:b6:52:d9:6e:10:33:32:7b:97:94:9e:48:75:ed: 49:64:e4:9c:ed:2d:a3:aa:a2:95:c2:62:76:36:ec: 63:3f:5d:d3:83:ef:6e:62:de:a4:2a:ee:72:cb:e2: 60:2f:5b:97:9d:5e:ea:84:7d:d0:74:0e:6a:3a:1d: c2:66:17:1e:23:32:3c:a9:c2:dd:76:b2:fc:1f:ad: e4:70:38:a6:70:64:da:16:84:2c:a0:a0:ae:5d:4d: 23:f6:c5:ba:ba:5d:73:53:b7:b6:f0:83:23:d1:7d: 49:56:7c:3d:9e:bd:74:bf:a3:36:7f:b1:69:57:21: 96:b6:9d:4d:06:89:22:98:87:1f:c2:1b:6b:f8:c3: e8:02:a2:7e:bd:4a:ea:70:0a:f5:67:18:c4:9d:46: 52:06:0d:bb:f3:05:95:e0:63:bc:a6:49:66:41:aa: a5:00:a7:db:ed:55:f4:a7:26:ef:6a:cd:9e:f0:1d: 36:61:d2:69:80:a0:51:05:bd:c7:e1:91:21:a3:28: c1:32:cc:65:92:01:82:e9:9a:e3:a5:52:87:70:46: 79:20:41:20:b7:cb:03:4c:0a:d5:b1:3d:c4:25:f2: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:F7:9E:B5:37:0F:30:A6:CC:1C:CD:11:BA:80:2A:46:73:D8:94 X509v3 Authority Key Identifier: keyid:61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:30:1f:bb:f7:10:3a:87:07:75:75:90:24:8c:67:09:c0:5c: 33:15:2a:04:b3:98:02:d8:c6:96:50:16:7a:07:06:45:fc:8b: bd:cc:3c:32:44:3f:b2:90:c3:a3:2b:b1:79:0b:e3:40:0f:d5: 3b:35:7e:d9:ca:a5:16:e3:47:d6:d8:76:65:88:42:37:27:6c: 11:76:52:49:ce:b4:64:95:bf:94:38:25:13:8a:7c:3b:a6:bf: 36:cf:01:2f:e4:ec:e1:83:d1:ff:34:bb:c3:6f:b8:fd:33:54: f5:ca:b6:08:0f:0e:56:b7:b8:68:36:50:dc:8b:06:91:03:77: 23:98:27:5c:23:ac:45:77:47:a8:f6:90:b0:be:d3:3b:37:de: 36:1a:dc:c7:79:dd:f6:eb:bc:d8:53:03:df:b8:66:5b:ff:41: 60:6c:00:34:d0:63:65:e8:2e:f0:45:0c:8f:6e:71:3d:be:a9: 95:ba:62:7d:6e:27:f1:ee:a8:3b:3b:7e:44:5e:2c:0a:97:40: ae:cf:0b:a9:c8:d9:be:5b:4b:d7:cb:8e:a1:1f:fe:bb:b1:4e: ec:9f:ea:89:d8:db:66:33:74:63:a5:c2:ab:e6:40:da:32:49: 06:73:6c:1a:b8:ce:ed:1d:14:65:98:be:5e:8e:7d:74:2a:c6: 53:b2:27:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo1nCHY2P7Xbc83m/kD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZTdlZmQxOWFmMjc1NDc5NDI2Y2MxOTI1YzViYzJlY2Vl ZTlhY2UwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg5MTMzZjc5ZWI1MzcwZjMwYTZjYzFjY2QxMWJhODAyYTQ2NzNkODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM1CV55UMVDkyv6BH65S/G9jUg5R h/OUG494BUwFtlLZbhAzMnuXlJ5Ide1JZOSc7S2jqqKVwmJ2NuxjP13Tg+9uYt6k Ku5yy+JgL1uXnV7qhH3QdA5qOh3CZhceIzI8qcLddrL8H63kcDimcGTaFoQsoKCu XU0j9sW6ul1zU7e28IMj0X1JVnw9nr10v6M2f7FpVyGWtp1NBokimIcfwhtr+MPo AqJ+vUrqcAr1ZxjEnUZSBg278wWV4GO8pklmQaqlAKfb7VX0pybvas2e8B02YdJp gKBRBb3H4ZEhoyjBMsxlkgGC6ZrjpVKHcEZ5IEEgt8sDTArVsT3EJfJFpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEz9561Nw8wpswczRG6gCpGc9iUMB8GA1UdIwQY MBaAFGHn79Ga8nVHlCbMGSXFvC7O7prOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWVmdjBacnlkVWVVSnN3WkpjVzhMczd1bXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lM2MzOTAtZTQ3NS00MDI0LWFjN2Yt MDg3NDBkZjg3MTA2LzEvWWVmdjBacnlkVWVVSnN3WkpjVzhMczd1bXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lM2MzOTAtZTQ3NS00MDI0LWFjN2YtMDg3NDBkZjg3MTA2 LzEvWWVmdjBacnlkVWVVSnN3WkpjVzhMczd1bXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjAfu/cQ OocHdXWQJIxnCcBcMxUqBLOYAtjGllAWegcGRfyLvcw8MkQ/spDDoyuxeQvjQA/V OzV+2cqlFuNH1th2ZYhCNydsEXZSSc60ZJW/lDglE4p8O6a/Ns8BL+Ts4YPR/zS7 w2+4/TNU9cq2CA8OVre4aDZQ3IsGkQN3I5gnXCOsRXdHqPaQsL7TOzfeNhrcx3nd 9uu82FMD37hmW/9BYGwANNBjZegu8EUMj25xPb6plbpifW4n8e6oOzt+RF4sCpdA rs8LqcjZvltL18uOoR/+u7FO7J/qidjbZjN0Y6XCq+ZA2jJJBnNsGrjO7R0UZZi+ Xo59dCrGU7InCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:41 2025 by rpki-client