This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft File: YmJJH6XuZw3MLCvhaY436ZMXSSM.mft (raw, json) Hash identifier: WrxCTRpTUqf+QVPUXQNbpUzKnWF4rHgK2S0dbXoqzo0= Subject key identifier: 47:7B:2B:C6:65:D8:7B:52:65:49:CC:41:BB:60:D3:B1:9C:2C:26:FC Authority key identifier: 62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23 Certificate issuer: /CN=6262491fa5ee670dcc2c2be1698e37e993174923 Certificate serial: 019AF1D22EC055756993FFC5543BDEC6E7D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft Manifest number: 01F3 Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: YmJJH6XuZw3MLCvhaY436ZMXSSM.crl (hash: cmSgjbOOelxEfokQ1niiA0qJxKE35WTO16sZsWuHxKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2e:c0:55:75:69:93:ff:c5:54:3b:de:c6:e7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6262491fa5ee670dcc2c2be1698e37e993174923 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=477b2bc665d87b526549cc41bb60d3b19c2c26fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:28:b0:83:ba:50:1a:f8:74:bb:1a:e9:9b:8f: f9:77:78:2a:5e:46:a4:28:ba:7c:f2:15:88:00:45: 33:ef:18:3b:a1:96:15:63:c5:02:71:9b:02:d7:9d: 98:a4:79:df:d4:a8:b5:fd:bc:f2:03:ef:63:04:c8: 75:14:c2:68:eb:42:b0:5b:39:de:fc:81:1e:2d:59: 44:68:bf:9a:ff:38:32:3c:eb:4c:20:84:75:7b:6b: 24:93:97:2f:67:11:b6:6e:88:81:1b:9d:ad:dd:04: 79:32:7a:97:42:36:a3:b5:42:d1:af:b3:66:3a:78: e1:85:f1:67:dc:e9:65:ee:9e:da:49:92:bf:70:f6: 23:ea:37:fb:9c:da:b6:fb:2c:fe:8a:86:52:96:32: d1:a2:8a:8d:49:9a:1a:e5:2a:4e:f9:cd:d0:70:e3: 1d:eb:fc:0c:19:5e:13:95:38:20:de:69:d8:ec:c7: 22:8b:bc:e8:3e:8e:9f:02:3c:78:3d:46:15:7f:95: e8:f6:f8:09:86:fc:cd:c9:41:4e:4e:13:80:71:df: d3:19:b6:28:84:1e:60:57:c1:c3:5d:34:47:c8:2a: 5b:3b:44:c3:0f:71:fb:e5:86:2b:69:d5:34:4a:d3: 8c:4f:12:46:b7:55:b9:d6:ca:bd:68:4c:36:80:2d: c9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:2B:C6:65:D8:7B:52:65:49:CC:41:BB:60:D3:B1:9C:2C:26:FC X509v3 Authority Key Identifier: keyid:62:62:49:1F:A5:EE:67:0D:CC:2C:2B:E1:69:8E:37:E9:93:17:49:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmJJH6XuZw3MLCvhaY436ZMXSSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9e9262-d957-4c2f-9076-6e89bc6d433b/1/YmJJH6XuZw3MLCvhaY436ZMXSSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b7:7d:05:95:e8:da:d4:3e:79:f9:1a:8b:ed:76:1d:93:c0: 02:d3:48:24:e0:06:03:87:7f:49:0f:7c:16:64:50:63:95:70: 7c:20:88:e4:1b:db:d1:9d:64:74:12:04:48:6a:c4:59:bb:0e: c9:fe:9a:35:19:86:f4:4e:cb:a1:c5:ac:f5:39:27:20:33:05: 20:a6:50:35:17:9c:d6:62:e9:34:a4:55:e1:0d:98:bd:a7:9e: 5b:d9:46:5a:c0:11:f3:96:5d:d3:31:d4:ed:84:97:2f:79:9c: 9c:c1:0d:c4:c0:02:27:8f:09:05:52:ca:08:fa:c7:cd:4a:6e: de:b7:94:eb:ec:a9:ac:22:cb:14:75:56:de:e2:06:6f:2f:34: ff:2b:64:21:91:8e:07:36:1b:e4:d6:ff:43:43:fc:a4:9b:83: 9e:5a:e8:13:2b:ba:13:ca:52:a6:ca:7d:c8:4b:b9:f2:12:d7: 74:04:30:78:5e:7e:c6:08:ad:0d:90:86:bf:d2:49:d1:e7:8c: 9c:7c:c3:09:18:3e:73:d5:a3:c3:3d:b1:8c:19:ca:4c:55:22: 86:f7:d4:22:b0:62:ac:2a:e8:1a:db:36:7e:40:53:37:e0:b1: c7:f7:2f:97:71:6c:f1:52:dc:6b:ac:08:ba:c4:2c:5d:ea:bb: 11:9c:17:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0i7AVXVpk//FVDvexufVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjI0OTFmYTVlZTY3MGRjYzJjMmJlMTY5OGUzN2U5OTMx NzQ5MjMwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD Eyg0NzdiMmJjNjY1ZDg3YjUyNjU0OWNjNDFiYjYwZDNiMTljMmMyNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yiwg7pQGvh0uxrpm4/5d3gqXkak KLp88hWIAEUz7xg7oZYVY8UCcZsC152YpHnf1Ki1/bzyA+9jBMh1FMJo60KwWzne /IEeLVlEaL+a/zgyPOtMIIR1e2skk5cvZxG2boiBG52t3QR5MnqXQjajtULRr7Nm OnjhhfFn3Oll7p7aSZK/cPYj6jf7nNq2+yz+ioZSljLRooqNSZoa5SpO+c3QcOMd 6/wMGV4TlTgg3mnY7Mcii7zoPo6fAjx4PUYVf5Xo9vgJhvzNyUFOThOAcd/TGbYo hB5gV8HDXTRHyCpbO0TDD3H75YYradU0StOMTxJGt1W51sq9aEw2gC3JCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd7K8Zl2HtSZUnMQbtg07GcLCb8MB8GA1UdIwQY MBaAFGJiSR+l7mcNzCwr4WmON+mTF0kjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1KSkg2WHVadzNNTEN2aGFZNDM2Wk1YU1NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85ZTkyNjItZDk1Ny00YzJmLTkwNzYt NmU4OWJjNmQ0MzNiLzEvWW1KSkg2WHVadzNNTEN2aGFZNDM2Wk1YU1NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85ZTkyNjItZDk1Ny00YzJmLTkwNzYtNmU4OWJjNmQ0MzNi LzEvWW1KSkg2WHVadzNNTEN2aGFZNDM2Wk1YU1NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrd9BZXo 2tQ+efkai+12HZPAAtNIJOAGA4d/SQ98FmRQY5VwfCCI5Bvb0Z1kdBIESGrEWbsO yf6aNRmG9E7LocWs9TknIDMFIKZQNRec1mLpNKRV4Q2YvaeeW9lGWsAR85Zd0zHU 7YSXL3mcnMENxMACJ48JBVLKCPrHzUpu3reU6+yprCLLFHVW3uIGby80/ytkIZGO BzYb5Nb/Q0P8pJuDnlroEyu6E8pSpsp9yEu58hLXdAQweF5+xgitDZCGv9JJ0eeM nHzDCRg+c9Wjwz2xjBnKTFUihvfUIrBirCroGts2fkBTN+Cxx/cvl3Fs8VLca6wI usQsXeq7EZwX/A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:55 2025 by rpki-client