This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft File: YcGgEMsk-ZbneJixJHJbVbY0OOA.mft (raw, json) Hash identifier: UuhJQCwjhYx11C4QVn47goK77cxvbWEzAMUt/zrC/ac= Subject key identifier: C9:52:C8:37:4A:C7:83:3B:C3:C7:59:2E:E8:9C:58:86:30:F4:3C:61 Authority key identifier: 61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0 Certificate issuer: /CN=61c1a010cb24f996e77898b124725b55b63438e0 Certificate serial: 019AF12CF0767409239AD91FC794D2AA7EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: YcGgEMsk-ZbneJixJHJbVbY0OOA.crl (hash: zvC/TM0I6qHcFVGP7uzXM89u2EfkRMiKN/VehIITRdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f0:76:74:09:23:9a:d9:1f:c7:94:d2:aa:7e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61c1a010cb24f996e77898b124725b55b63438e0 Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=c952c8374ac7833bc3c7592ee89c588630f43c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1e:2a:38:74:04:76:c2:62:f7:13:10:e6:e7: fc:3e:d0:f9:e0:d3:76:82:6a:d2:05:2a:f2:19:38: ec:e8:ca:c9:b8:82:17:82:16:02:e8:11:cf:52:bf: 47:0f:32:95:c9:55:0a:7f:ee:92:e9:a3:ea:b0:d2: c3:dc:15:87:63:77:f0:c4:44:06:ea:07:98:6d:34: 44:8e:80:9c:54:43:b4:3e:a5:5f:8b:d3:db:50:82: 7e:eb:bf:1f:9f:27:3c:77:3d:c1:4b:62:fd:94:1c: e4:5a:82:84:b7:e8:86:58:a9:26:35:eb:37:02:95: c3:ec:7e:26:e9:6e:a8:e3:e8:39:8d:3b:3e:55:77: 6c:33:35:ac:23:2c:c1:b6:62:7b:3b:8f:0a:8d:3a: ef:47:cf:2d:58:fd:48:a1:a2:1f:1a:67:48:e9:34: dd:b1:ba:bd:1a:28:a5:ae:ef:c6:f6:44:f5:b6:72: c2:73:14:00:04:0a:5f:49:9b:21:68:62:dd:12:d2: b2:e6:c9:39:61:4d:a8:c4:f9:47:3a:bb:93:f2:5b: 58:ae:65:68:c4:17:63:ee:51:df:18:d1:ad:20:13: f4:b9:29:8b:07:37:7c:a4:24:4f:64:15:84:aa:05: 9c:f0:86:d1:fc:3c:91:6d:57:5c:1b:8b:52:aa:48: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:C8:37:4A:C7:83:3B:C3:C7:59:2E:E8:9C:58:86:30:F4:3C:61 X509v3 Authority Key Identifier: keyid:61:C1:A0:10:CB:24:F9:96:E7:78:98:B1:24:72:5B:55:B6:34:38:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcGgEMsk-ZbneJixJHJbVbY0OOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/33c1c0-4cb8-44b9-a3e9-e9e9937b8dce/1/YcGgEMsk-ZbneJixJHJbVbY0OOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:61:cc:92:9c:d4:8f:62:ca:8e:39:cb:30:8a:f5:9d:b2:5a: c2:e1:62:ba:3d:c1:02:25:0c:b0:1f:a3:1b:e3:5e:1a:c9:72: 64:cf:22:e6:3f:99:e7:70:a0:b1:fd:40:31:2b:6e:ec:9f:28: 0c:f1:6a:ce:6b:23:80:93:07:dd:51:47:f6:2a:80:86:4a:be: 71:84:04:7d:d1:67:81:32:74:54:bc:89:a6:85:b2:93:48:6d: 4a:27:52:15:b7:0e:dd:68:4c:47:1b:c1:29:e9:c8:02:c8:66: 45:16:18:44:c1:f1:0d:a4:29:b1:b0:e7:73:0b:09:5b:00:de: fb:1f:96:c3:cb:06:54:34:cd:86:c7:8c:ce:52:13:b2:2a:92: b9:d9:af:17:71:97:6a:8c:ec:5f:7a:55:0b:1a:8a:7c:d7:e1: 9e:ce:da:c7:78:41:5a:c6:cc:0e:7a:44:ef:73:3a:93:0d:18: 29:f4:83:93:1f:4d:4e:c3:a1:fa:4c:21:d0:0a:77:3d:a9:b7: de:07:ea:6a:ca:76:b7:99:93:29:74:b3:96:32:c3:bb:7a:e6: b3:d0:c9:ff:c4:e0:46:21:cf:8e:f7:8e:3b:15:1a:7a:59:c0: 1c:ee:e7:43:ef:ca:5a:08:85:95:25:f0:b5:30:6d:2d:9a:3e: aa:bd:fb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPB2dAkjmtkfx5TSqn7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYzFhMDEwY2IyNGY5OTZlNzc4OThiMTI0NzI1YjU1YjYz NDM4ZTAwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhjOTUyYzgzNzRhYzc4MzNiYzNjNzU5MmVlODljNTg4NjMwZjQzYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox4qOHQEdsJi9xMQ5uf8PtD54NN2 gmrSBSryGTjs6MrJuIIXghYC6BHPUr9HDzKVyVUKf+6S6aPqsNLD3BWHY3fwxEQG 6geYbTREjoCcVEO0PqVfi9PbUIJ+678fnyc8dz3BS2L9lBzkWoKEt+iGWKkmNes3 ApXD7H4m6W6o4+g5jTs+VXdsMzWsIyzBtmJ7O48KjTrvR88tWP1IoaIfGmdI6TTd sbq9Giilru/G9kT1tnLCcxQABApfSZshaGLdEtKy5sk5YU2oxPlHOruT8ltYrmVo xBdj7lHfGNGtIBP0uSmLBzd8pCRPZBWEqgWc8IbR/DyRbVdcG4tSqkio6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlSyDdKx4M7w8dZLuicWIYw9DxhMB8GA1UdIwQY MBaAFGHBoBDLJPmW53iYsSRyW1W2NDjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWNHZ0VNc2stWmJuZUppeEpISmJWYlkwT09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zM2MxYzAtNGNiOC00NGI5LWEzZTkt ZTllOTkzN2I4ZGNlLzEvWWNHZ0VNc2stWmJuZUppeEpISmJWYlkwT09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zM2MxYzAtNGNiOC00NGI5LWEzZTktZTllOTkzN2I4ZGNl LzEvWWNHZ0VNc2stWmJuZUppeEpISmJWYlkwT09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWHMkpzU j2LKjjnLMIr1nbJawuFiuj3BAiUMsB+jG+NeGslyZM8i5j+Z53Cgsf1AMStu7J8o DPFqzmsjgJMH3VFH9iqAhkq+cYQEfdFngTJ0VLyJpoWyk0htSidSFbcO3WhMRxvB KenIAshmRRYYRMHxDaQpsbDncwsJWwDe+x+Ww8sGVDTNhseMzlITsiqSudmvF3GX aozsX3pVCxqKfNfhns7ax3hBWsbMDnpE73M6kw0YKfSDkx9NTsOh+kwh0Ap3Pam3 3gfqasp2t5mTKXSzljLDu3rms9DJ/8TgRiHPjveOOxUaelnAHO7nQ+/KWgiFlSXw tTBtLZo+qr37Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:09 2025 by rpki-client