This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json) Hash identifier: aew6tmRHetSZvkPrYXwBlcyC0S8V9ahBCUMZbmbfMWI= Subject key identifier: DB:F7:3E:6F:D7:7A:20:45:09:87:83:1D:C3:CD:DC:ED:98:F9:59:DF Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d Certificate serial: 019AF4D298DD5DACB9CD9CF16786F783B8C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft Manifest number: 0E98 Signing time: Sat 06 Dec 2025 18:00:33 +0000 Manifest this update: Sat 06 Dec 2025 18:00:33 +0000 Manifest next update: Sun 07 Dec 2025 18:00:33 +0000 Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: ear6oUdmTjcJwPkDkBIGNrSrp+rSTGMX4UYiYzfNwvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:98:dd:5d:ac:b9:cd:9c:f1:67:86:f7:83:b8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d Validity Not Before: Dec 6 18:00:33 2025 GMT Not After : Dec 7 18:00:33 2025 GMT Subject: CN=dbf73e6fd77a20450987831dc3cddced98f959df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:a2:f7:b4:92:a5:02:86:65:34:ff:5f:f3: 35:ce:29:c4:29:3a:44:12:4d:d3:e6:e9:39:b6:29: 31:53:81:1a:e9:97:e0:76:8a:74:94:a8:c6:ff:0d: b3:3e:19:89:1a:7b:6b:96:52:94:3d:42:5a:ec:27: 39:46:40:9f:a6:1b:b6:ca:14:f5:a5:49:b3:cd:4c: b6:d4:bf:d6:3b:f7:24:72:43:91:59:82:38:10:00: 18:1b:ee:40:5a:12:9e:8d:bd:bc:5a:ef:69:8a:1b: f9:b7:04:5a:97:0f:1e:4f:c4:ba:9a:40:c4:9a:49: b2:ab:d1:6e:53:b2:62:75:53:49:fb:d0:c8:1e:f6: de:cd:86:3b:cb:aa:af:cb:5c:2f:20:26:b3:02:42: 1c:52:2b:5f:cb:13:1a:90:f1:ad:6f:ef:81:6a:cc: 49:93:c3:d0:56:5c:a7:71:04:8f:ba:b2:ff:d2:da: 33:8d:01:d0:29:35:c8:0f:5c:64:f7:1c:fd:34:7e: a3:d4:01:7d:53:df:ab:5a:dc:b7:8c:9c:c7:dc:44: 8c:54:a5:7e:a8:3f:ae:6f:ae:c3:58:76:47:16:b1: 65:27:f4:d6:22:20:68:78:57:9b:a0:8e:b1:81:06: a2:95:63:ba:97:7c:c8:b3:60:4c:50:de:4a:c4:fb: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F7:3E:6F:D7:7A:20:45:09:87:83:1D:C3:CD:DC:ED:98:F9:59:DF X509v3 Authority Key Identifier: keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:49:2c:31:00:41:9e:41:5c:b6:51:cb:21:d7:ef:a9:3a:fb: b0:3f:e4:99:b4:d0:dd:3a:d6:bd:51:03:42:1a:3e:de:04:b7: 39:6c:b8:e3:ce:72:28:b3:9e:53:11:dc:6d:b6:3b:3f:57:26: 45:72:24:4c:4e:5c:68:9a:48:64:ff:88:71:0c:1f:1e:b0:4a: 24:a6:c4:e1:3b:09:66:b8:29:f3:30:57:29:be:0a:b5:1b:03: dc:65:7b:95:b3:a8:92:5e:f7:1c:04:ad:50:be:ae:4c:fa:a8: 26:85:bd:66:77:b3:ab:13:76:7e:e2:89:e5:18:44:bd:23:5d: 14:fc:6b:88:a7:37:73:3a:1b:c7:ac:0d:ef:c6:b4:d4:57:ce: 36:5d:a1:b3:7f:2e:3a:88:ef:b2:a1:8d:29:fe:c0:67:28:21: 75:b2:44:26:6c:e6:32:da:fd:d6:06:17:29:ec:07:5b:3f:02: 24:9e:69:31:3d:37:8c:0e:59:80:09:68:17:78:09:a6:5a:a7: dd:a6:bd:48:d9:04:7f:2f:33:c4:b3:14:10:5f:65:32:99:7a: 3c:66:97:67:54:c8:df:e6:10:6f:1c:ef:7f:27:a1:17:2c:d4: c1:86:de:0a:6f:1b:f6:ba:80:3f:c4:10:09:4f:fa:1e:c6:da: ab:f8:9c:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00pjdXay5zZzxZ4b3g7jEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3 NmEzOGQwHhcNMjUxMjA2MTgwMDMzWhcNMjUxMjA3MTgwMDMzWjAzMTEwLwYDVQQD EyhkYmY3M2U2ZmQ3N2EyMDQ1MDk4NzgzMWRjM2NkZGNlZDk4Zjk1OWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon6i97SSpQKGZTT/X/M1zinEKTpE Ek3T5uk5tikxU4Ea6Zfgdop0lKjG/w2zPhmJGntrllKUPUJa7Cc5RkCfphu2yhT1 pUmzzUy21L/WO/ckckORWYI4EAAYG+5AWhKejb28Wu9pihv5twRalw8eT8S6mkDE mkmyq9FuU7JidVNJ+9DIHvbezYY7y6qvy1wvICazAkIcUitfyxMakPGtb++BasxJ k8PQVlyncQSPurL/0tozjQHQKTXID1xk9xz9NH6j1AF9U9+rWty3jJzH3ESMVKV+ qD+ub67DWHZHFrFlJ/TWIiBoeFeboI6xgQailWO6l3zIs2BMUN5KxPuWvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv3Pm/XeiBFCYeDHcPN3O2Y+VnfMB8GA1UdIwQY MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0 LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUksMQBB nkFctlHLIdfvqTr7sD/kmbTQ3TrWvVEDQho+3gS3OWy4485yKLOeUxHcbbY7P1cm RXIkTE5caJpIZP+IcQwfHrBKJKbE4TsJZrgp8zBXKb4KtRsD3GV7lbOokl73HASt UL6uTPqoJoW9ZnezqxN2fuKJ5RhEvSNdFPxriKc3czobx6wN78a01FfONl2hs38u OojvsqGNKf7AZyghdbJEJmzmMtr91gYXKewHWz8CJJ5pMT03jA5ZgAloF3gJplqn 3aa9SNkEfy8zxLMUEF9lMpl6PGaXZ1TI3+YQbxzvfyehFyzUwYbeCm8b9rqAP8QQ CU/6Hsbaq/icog== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:04 2025 by rpki-client