This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft File: ySqWHIeskFGOp1LxhbtlEoq6KGY.mft (raw, json) Hash identifier: q0Ttr+Y3a2F2V3FsSe6ouCGWrTEzNxqSj9ke+KOji68= Subject key identifier: 66:A8:16:15:60:3D:4B:54:D5:DB:A0:56:11:83:6B:F0:A2:21:0B:2B Authority key identifier: C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66 Certificate issuer: /CN=c92a961c87ac90518ea752f185bb65128aba2866 Certificate serial: 019AF50AEE9CD8761593024EB55A8BB03A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft Manifest number: 0407 Signing time: Sat 06 Dec 2025 19:02:05 +0000 Manifest this update: Sat 06 Dec 2025 19:02:05 +0000 Manifest next update: Sun 07 Dec 2025 19:02:05 +0000 Files and hashes: 1: ySqWHIeskFGOp1LxhbtlEoq6KGY.crl (hash: QO3tiQkCR7opN2quWq7kkdHNiIf/NEEcTmfCNDQtPHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ee:9c:d8:76:15:93:02:4e:b5:5a:8b:b0:3a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c92a961c87ac90518ea752f185bb65128aba2866 Validity Not Before: Dec 6 19:02:05 2025 GMT Not After : Dec 7 19:02:05 2025 GMT Subject: CN=66a81615603d4b54d5dba05611836bf0a2210b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:ba:a5:e2:47:db:c7:ee:ae:b7:0b:ab:69: 0d:19:3b:db:65:cf:d3:9e:19:10:91:79:5c:54:e8: e4:9b:7a:2f:b1:de:f9:36:f0:4c:1b:0d:77:19:6f: 13:2f:aa:5b:06:16:e5:43:0a:fb:86:5d:fc:20:e8: 7d:a5:d4:b9:0c:de:fe:c5:db:05:54:34:ac:f9:32: 5f:fd:12:b0:19:8d:ac:7f:ce:52:5d:b9:e0:cd:e6: ad:b9:c8:ff:c8:b8:3e:37:8a:4d:cd:12:ca:a3:1a: 40:2a:84:c0:60:76:87:bc:df:26:d0:c7:72:a9:f8: 7d:a1:d3:4d:78:85:94:67:3d:5b:b4:0f:99:c7:36: 24:d9:6f:39:ba:31:61:62:dd:2a:fc:29:89:12:f9: 4b:00:ab:c1:4f:30:db:44:e7:ba:ed:ce:c1:c8:4e: 95:b4:29:77:b8:a6:31:80:1a:a7:11:ee:fe:67:1a: 5e:3d:92:22:02:19:4b:dd:af:34:ea:56:5e:97:84: fa:0d:87:cc:78:1e:8f:e0:96:61:dc:75:ff:92:01: e9:f9:09:05:41:75:7d:17:2d:ee:d8:34:4b:be:f7: 8f:b1:5c:c3:f4:2c:cf:7a:63:64:ec:52:64:57:91: a6:1f:dd:d5:ab:c5:90:86:61:c6:9f:8e:30:e6:0e: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:16:15:60:3D:4B:54:D5:DB:A0:56:11:83:6B:F0:A2:21:0B:2B X509v3 Authority Key Identifier: keyid:C9:2A:96:1C:87:AC:90:51:8E:A7:52:F1:85:BB:65:12:8A:BA:28:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySqWHIeskFGOp1LxhbtlEoq6KGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e5055f-dd77-4e66-b76e-f1e18b31292c/1/ySqWHIeskFGOp1LxhbtlEoq6KGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c5:f0:09:28:2e:7b:18:c4:76:6c:9d:07:39:79:40:1a:cf: 49:55:13:38:bf:f9:b9:4f:ea:12:7e:80:7a:78:8c:82:41:9a: c1:16:43:b0:2d:8b:84:ab:a1:bc:1b:d7:a7:39:7f:82:f3:68: e4:b9:09:22:3f:00:93:b1:d3:67:12:73:6d:f1:c1:ae:80:8f: 42:6b:86:12:47:c4:5c:9c:85:0e:d6:c9:de:a9:36:5a:a6:6c: 10:83:d1:82:b7:c4:b3:79:e9:b8:05:f3:cc:ff:fd:14:bb:f9: cb:b9:91:1c:e1:d8:57:83:bd:7c:fe:11:75:83:9a:05:f1:31: b4:63:0f:f5:9c:96:50:fd:bc:6f:55:3c:75:28:9a:9d:54:79: 30:75:91:12:38:c8:8f:38:44:49:4d:66:e1:6d:67:ea:d7:97: d2:85:c2:10:0b:4a:22:83:1b:f7:3c:cf:2c:21:4d:6e:95:70: 9f:3f:3e:df:19:48:65:ac:27:e8:ee:5f:bc:99:e7:a4:af:27: f0:26:fd:0c:f2:02:ac:88:e8:4b:f8:6a:5e:2a:77:34:10:77: 95:d7:ed:17:21:da:3e:7a:2e:70:a7:78:4d:c1:08:e6:f8:a1: 65:65:3c:d6:cc:3a:11:79:1f:49:96:84:37:16:c7:4a:c0:71: d7:2d:2d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cu6c2HYVkwJOtVqLsDqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MmE5NjFjODdhYzkwNTE4ZWE3NTJmMTg1YmI2NTEyOGFi YTI4NjYwHhcNMjUxMjA2MTkwMjA1WhcNMjUxMjA3MTkwMjA1WjAzMTEwLwYDVQQD Eyg2NmE4MTYxNTYwM2Q0YjU0ZDVkYmEwNTYxMTgzNmJmMGEyMjEwYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xW6peJH28furrcLq2kNGTvbZc/T nhkQkXlcVOjkm3ovsd75NvBMGw13GW8TL6pbBhblQwr7hl38IOh9pdS5DN7+xdsF VDSs+TJf/RKwGY2sf85SXbngzeatucj/yLg+N4pNzRLKoxpAKoTAYHaHvN8m0Mdy qfh9odNNeIWUZz1btA+ZxzYk2W85ujFhYt0q/CmJEvlLAKvBTzDbROe67c7ByE6V tCl3uKYxgBqnEe7+ZxpePZIiAhlL3a806lZel4T6DYfMeB6P4JZh3HX/kgHp+QkF QXV9Fy3u2DRLvvePsVzD9CzPemNk7FJkV5GmH93Vq8WQhmHGn44w5g4fuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaoFhVgPUtU1dugVhGDa/CiIQsrMB8GA1UdIwQY MBaAFMkqlhyHrJBRjqdS8YW7ZRKKuihmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVNxV0hJZXNrRkdPcDFMeGhidGxFb3E2S0dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lNTA1NWYtZGQ3Ny00ZTY2LWI3NmUt ZjFlMThiMzEyOTJjLzEveVNxV0hJZXNrRkdPcDFMeGhidGxFb3E2S0dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9lNTA1NWYtZGQ3Ny00ZTY2LWI3NmUtZjFlMThiMzEyOTJj LzEveVNxV0hJZXNrRkdPcDFMeGhidGxFb3E2S0dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMXwCSgu exjEdmydBzl5QBrPSVUTOL/5uU/qEn6AeniMgkGawRZDsC2LhKuhvBvXpzl/gvNo 5LkJIj8Ak7HTZxJzbfHBroCPQmuGEkfEXJyFDtbJ3qk2WqZsEIPRgrfEs3npuAXz zP/9FLv5y7mRHOHYV4O9fP4RdYOaBfExtGMP9ZyWUP28b1U8dSianVR5MHWREjjI jzhESU1m4W1n6teX0oXCEAtKIoMb9zzPLCFNbpVwnz8+3xlIZawn6O5fvJnnpK8n 8Cb9DPICrIjoS/hqXip3NBB3ldftFyHaPnoucKd4TcEI5vihZWU81sw6EXkfSZaE NxbHSsBx1y0tnA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:31 2025 by rpki-client