This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json) Hash identifier: FkDdeLTG0Rv8uuvCKHrTdRAcTUkChuXyutnOo5hR9as= Subject key identifier: 16:9E:92:CB:35:48:A0:A5:54:13:B2:77:92:3D:B1:42:F0:3F:81:C6 Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94 Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194 Certificate serial: 019AF209426536E402496C8E439AEFC508F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: CIWKSfGrVs8Sysg6Gyw8BbkLe7KfXNfOBD4Uz4YYHQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:42:65:36:e4:02:49:6c:8e:43:9a:ef:c5:08:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=169e92cb3548a0a55413b277923db142f03f81c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:16:8e:38:65:bf:66:46:0f:a0:e1:d0:a8: da:89:18:ab:a4:d6:c3:0b:ea:e8:83:fa:39:0e:36: 84:f0:c9:a1:80:b6:50:b2:f7:a2:9e:f8:23:ef:9a: 53:95:24:64:69:27:1f:e3:7f:f7:b5:38:a9:e8:bb: 37:ba:52:e0:9e:d7:ad:c8:49:b5:54:f6:85:2c:58: 84:73:9b:e1:0c:bf:4a:39:42:5a:44:a9:bd:07:37: 1e:f2:2b:02:ee:fc:6d:63:6a:21:c5:30:29:d6:12: 38:3d:9b:d4:44:a9:a2:d2:1b:fa:86:60:b4:d7:96: 75:8a:1e:ca:eb:81:81:72:06:f9:cb:29:dc:d1:1d: 4d:f3:4c:eb:de:4a:b6:c4:7b:ff:b6:cb:68:31:e3: 9e:03:07:44:bc:65:62:d8:25:55:89:6a:9f:9d:2f: 5d:11:85:ee:d5:06:be:cc:a1:3b:26:01:98:78:4a: 51:65:b0:39:77:b6:b5:3d:0a:24:d1:bc:56:7b:7f: 24:16:e4:55:5d:0c:e4:5f:a8:1c:a9:fd:0c:3f:00: b5:0e:bc:f7:45:dd:30:79:b2:90:f5:8f:87:3e:ff: b2:fb:32:55:2e:25:11:cd:d7:d2:f9:b6:b5:d2:dd: a4:a0:be:be:10:8b:30:43:b1:88:25:62:f7:8a:b2: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:92:CB:35:48:A0:A5:54:13:B2:77:92:3D:B1:42:F0:3F:81:C6 X509v3 Authority Key Identifier: keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bf:a8:28:04:f3:82:16:18:be:31:a1:e6:6e:3a:d8:cf:7b: 68:5d:2d:61:8d:99:5f:1b:a7:23:a7:7c:84:e4:4f:64:3d:78: d2:ed:7b:82:63:a2:10:a0:71:9b:bc:4e:0a:14:14:c9:9c:c5: 1e:c4:e4:4c:bc:ee:c1:66:fc:34:43:47:07:cc:d7:d6:68:1e: 2a:70:a2:1b:8b:df:b0:8b:25:49:e9:be:6a:4e:67:c0:f1:63: 09:13:1c:82:02:94:3c:73:96:ac:23:7b:d2:51:99:00:70:43: c0:e4:1c:a1:a8:36:c2:e5:7b:a6:07:f2:98:e1:08:68:43:23: e3:91:2a:d0:92:28:ad:72:10:52:b3:44:d9:85:00:83:a0:aa: 45:74:30:58:92:07:ac:6b:ef:5e:de:2a:1d:f0:4a:7a:fa:8c: 07:12:de:a0:98:d1:91:fc:11:c6:6c:3a:95:44:4b:78:b5:83: d9:52:19:da:33:8a:22:9e:70:cf:9a:62:70:5e:5c:26:9a:ab: ed:d0:6f:51:dd:c6:09:c0:ca:34:14:9a:b8:89:1d:8a:dd:86: bc:84:01:88:bf:47:04:85:b9:1d:bf:db:f9:46:8e:b6:a2:4c: 3e:bf:90:1d:fe:5b:14:f9:19:59:67:c7:e5:e5:82:c8:29:0d: 66:54:ca:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUJlNuQCSWyOQ5rvxQj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMTgzYTY2OTEzMDlhNzlkNmU2NjA1YjBkNWMxMWUzZmY3 ZTkxOTQwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EygxNjllOTJjYjM1NDhhMGE1NTQxM2IyNzc5MjNkYjE0MmYwM2Y4MWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1UWjjhlv2ZGD6Dh0KjaiRirpNbD C+rog/o5DjaE8MmhgLZQsveinvgj75pTlSRkaScf43/3tTip6Ls3ulLgntetyEm1 VPaFLFiEc5vhDL9KOUJaRKm9Bzce8isC7vxtY2ohxTAp1hI4PZvURKmi0hv6hmC0 15Z1ih7K64GBcgb5yync0R1N80zr3kq2xHv/tstoMeOeAwdEvGVi2CVViWqfnS9d EYXu1Qa+zKE7JgGYeEpRZbA5d7a1PQok0bxWe38kFuRVXQzkX6gcqf0MPwC1Drz3 Rd0webKQ9Y+HPv+y+zJVLiURzdfS+ba10t2koL6+EIswQ7GIJWL3irIzqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaekss1SKClVBOyd5I9sULwP4HGMB8GA1UdIwQY MBaAFMoYOmaRMJp51uZgWw1cEeP/fpGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEt MTllNzA4NDY5Y2VlLzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEtMTllNzA4NDY5Y2Vl LzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7+oKATz ghYYvjGh5m462M97aF0tYY2ZXxunI6d8hORPZD140u17gmOiEKBxm7xOChQUyZzF HsTkTLzuwWb8NENHB8zX1mgeKnCiG4vfsIslSem+ak5nwPFjCRMcggKUPHOWrCN7 0lGZAHBDwOQcoag2wuV7pgfymOEIaEMj45Eq0JIorXIQUrNE2YUAg6CqRXQwWJIH rGvvXt4qHfBKevqMBxLeoJjRkfwRxmw6lURLeLWD2VIZ2jOKIp5wz5picF5cJpqr 7dBvUd3GCcDKNBSauIkdit2GvIQBiL9HBIW5Hb/b+UaOtqJMPr+QHf5bFPkZWWfH 5eWCyCkNZlTK6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:48 2025 by rpki-client