This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft File: 0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json) Hash identifier: psw1ADhyjQ7qdogVRVdbe06UOaaX6KWkCR3xE9VZaZY= Subject key identifier: 8C:D3:77:6F:D4:6C:9F:E7:FE:C3:38:C7:80:50:29:74:AD:DC:A2:5A Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89 Certificate issuer: /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89 Certificate serial: 019AF19ACCF2CF568B359188DBFDB767474D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft Manifest number: 0673 Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: /bGQSAEJkAwSS1P347oCbIotuaDdXATX+PQ08T8wxns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cc:f2:cf:56:8b:35:91:88:db:fd:b7:67:47:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=8cd3776fd46c9fe7fec338c780502974addca25a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:a0:b3:5d:a3:d9:33:9b:90:07:5c:06:60: 5e:56:9d:fc:35:9c:5b:69:8a:2b:98:be:8b:6e:09: 52:0a:c1:88:98:24:1d:3f:39:a4:d0:48:bc:08:86: d7:10:23:b4:99:1c:d2:8d:c0:99:05:3b:71:d7:4d: 45:04:da:2d:83:fa:b2:1d:2d:06:68:49:2f:44:ac: 63:dd:14:be:c4:60:4d:b6:fa:4a:84:ec:6f:aa:00: 01:af:7e:9c:74:99:7b:e3:eb:cb:22:5a:34:72:a2: 76:e2:3a:66:94:b0:04:c7:11:11:95:6d:64:1b:3a: 16:c0:ce:8b:21:bc:3c:d5:cb:cf:56:de:00:e2:5e: 6c:b9:ea:9e:be:7d:d5:fe:05:10:f3:3b:a5:ac:a3: 96:b4:a2:a2:70:e3:8b:b0:52:99:d4:d7:4a:88:ea: ee:62:92:e6:ae:ef:b2:22:71:52:b4:f9:95:73:e9: c6:f0:28:bb:a7:07:0c:13:05:0a:06:e9:89:79:a2: 04:ab:a3:af:b0:a3:95:a5:63:59:c3:d4:17:41:c5: c1:0f:7f:ea:b0:07:19:3c:6a:38:15:f3:68:40:9b: 0a:0f:4c:56:63:64:08:d4:f5:ad:2d:bc:43:e1:34: cf:39:98:9e:96:e0:e4:b5:52:1e:c5:f1:62:71:b1: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:77:6F:D4:6C:9F:E7:FE:C3:38:C7:80:50:29:74:AD:DC:A2:5A X509v3 Authority Key Identifier: keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:31:67:32:28:20:e3:6b:15:0c:c0:c3:ef:f4:61:d3:d5:10: 79:ba:04:c3:6b:f6:0f:11:f4:c8:63:ae:4f:76:9a:77:ad:8e: 4e:8b:60:3a:47:ec:28:b8:4f:9b:f0:63:c1:bb:1b:31:8d:ee: c2:95:fd:19:46:8f:2b:fb:b7:82:38:c4:18:d8:82:8e:98:cd: b1:82:17:f1:a3:01:64:6e:4c:72:bf:44:ee:4f:c7:a8:32:6c: 21:f6:27:eb:ae:7f:c9:b9:17:8a:d1:8a:e1:1b:67:9f:a9:54: ee:eb:1a:28:c4:f7:ed:c3:8c:09:7c:93:f0:23:57:c8:04:c3: 04:40:e1:9d:09:f3:9c:70:8e:e3:2f:83:d7:02:ee:4a:f0:7c: 41:37:01:b4:0f:0a:6f:55:2f:dc:e8:f3:49:32:bc:e4:f6:2b: dd:ba:b2:b2:92:ae:7a:37:8d:b3:fd:7b:15:23:5e:70:ba:83: 57:71:c3:41:16:4f:33:9b:cb:28:a4:41:fc:9a:f7:c8:33:a7: 05:31:0f:04:5b:3a:9b:35:f5:48:52:24:56:ea:7a:c3:9a:d7: aa:fd:d7:75:3b:28:dd:f0:0d:26:7f:fb:77:c2:bf:56:cd:6a: 9d:0e:2b:a7:d6:be:4f:d2:f3:bf:04:3e:05:9e:c6:01:29:16: 0f:36:48:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmszyz1aLNZGI2/23Z0dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGM3OWZkMmQ2Y2M0NWVlMWI1ODBmOTNhMDUwNWM1OTdk ZjZkODkwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD Eyg4Y2QzNzc2ZmQ0NmM5ZmU3ZmVjMzM4Yzc4MDUwMjk3NGFkZGNhMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJWgs12j2TObkAdcBmBeVp38NZxb aYormL6LbglSCsGImCQdPzmk0Ei8CIbXECO0mRzSjcCZBTtx101FBNotg/qyHS0G aEkvRKxj3RS+xGBNtvpKhOxvqgABr36cdJl74+vLIlo0cqJ24jpmlLAExxERlW1k GzoWwM6LIbw81cvPVt4A4l5sueqevn3V/gUQ8zulrKOWtKKicOOLsFKZ1NdKiOru YpLmru+yInFStPmVc+nG8Ci7pwcMEwUKBumJeaIEq6OvsKOVpWNZw9QXQcXBD3/q sAcZPGo4FfNoQJsKD0xWY2QI1PWtLbxD4TTPOZieluDktVIexfFicbF+5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzTd2/UbJ/n/sM4x4BQKXSt3KJaMB8GA1UdIwQY MBaAFNGMef0tbMRe4bWA+ToFBcWX322JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMjY2OWQtOWY2Yy00YmMxLWFlNGIt OWExMWMzNGMyZmUyLzEvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wMjY2OWQtOWY2Yy00YmMxLWFlNGItOWExMWMzNGMyZmUy LzEvMFl4NV9TMXN4RjdodFlENU9nVUZ4WmZmYllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTFnMigg 42sVDMDD7/Rh09UQeboEw2v2DxH0yGOuT3aad62OTotgOkfsKLhPm/BjwbsbMY3u wpX9GUaPK/u3gjjEGNiCjpjNsYIX8aMBZG5Mcr9E7k/HqDJsIfYn665/ybkXitGK 4Rtnn6lU7usaKMT37cOMCXyT8CNXyATDBEDhnQnznHCO4y+D1wLuSvB8QTcBtA8K b1Uv3OjzSTK85PYr3bqyspKuejeNs/17FSNecLqDV3HDQRZPM5vLKKRB/Jr3yDOn BTEPBFs6mzX1SFIkVup6w5rXqv3XdTso3fANJn/7d8K/Vs1qnQ4rp9a+T9LzvwQ+ BZ7GASkWDzZISQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:05 2025 by rpki-client