This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft File: Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json) Hash identifier: A0g5MaKbvxo29G7qrIbH4KuA7YSdVjCyOp3WzIN9vHE= Subject key identifier: 33:EF:7A:85:28:B3:C6:4A:E4:E3:74:8C:D0:C1:AE:C8:5C:AC:A7:51 Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F Certificate issuer: /CN=6309aeff6dfa89e675837e454521235c99b1be2f Certificate serial: 019AF0BF89FA84AD07B6D3E41EDC515F7E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft Manifest number: 038C Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: fZJ5Ul5XubC9Vk6xhm/gythTIDgmvnrQIzCgNNNzx5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:89:fa:84:ad:07:b6:d3:e4:1e:dc:51:5f:7e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=33ef7a8528b3c64ae4e3748cd0c1aec85caca751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4e:58:f6:5d:66:78:39:fe:fd:fd:10:84:9c: 85:ed:13:22:2c:44:86:dd:16:be:6e:70:53:e7:1c: c4:24:80:10:e6:df:2a:52:46:ee:18:62:ca:7f:5f: 59:a9:76:5e:92:b5:55:cb:09:ec:27:c0:6f:5d:f1: b5:38:33:4d:00:42:d9:9a:fd:9f:6d:1f:81:b7:fe: 46:96:41:b5:e2:ce:4b:78:8c:8a:0d:98:93:61:94: b3:50:f5:89:0f:45:80:24:ec:36:80:74:c7:3b:93: d1:e2:50:6a:61:20:97:d1:c6:2b:90:34:34:d3:34: 6c:74:56:ae:0d:74:70:1a:c1:e4:fe:8a:b4:59:c6: e6:71:ae:19:42:01:20:8c:fb:dd:82:7c:d9:aa:97: ab:4a:9c:96:1e:83:ba:23:47:47:55:b6:35:03:4b: ec:82:a4:64:9e:ce:68:7a:a2:fa:ee:67:6c:dd:a7: c6:99:03:bd:aa:f0:55:74:c2:b5:b3:d5:e2:bf:65: d6:35:c8:18:fb:cf:cc:1b:82:c3:cb:4d:51:c8:81: c9:ef:ca:ea:d0:d7:22:58:6c:e0:32:fb:17:d7:7a: b0:e2:aa:d4:4e:79:41:1c:a5:73:f3:91:16:d1:b4: ab:67:48:79:b1:92:83:d8:73:d0:1d:f6:3f:dd:d9: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EF:7A:85:28:B3:C6:4A:E4:E3:74:8C:D0:C1:AE:C8:5C:AC:A7:51 X509v3 Authority Key Identifier: keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3d:b4:6e:70:40:3e:1b:ca:f6:d2:21:e7:9a:39:92:36:87: 2a:2a:87:1e:14:95:81:bf:af:39:e0:b3:60:9b:1c:98:08:58: 41:03:69:84:2c:67:3b:ad:0b:b9:4f:a7:07:eb:dd:49:dd:89: 97:81:09:53:c2:fc:bc:fd:20:13:9a:c5:db:15:73:64:c9:09: 20:51:27:3b:18:eb:6b:ed:a8:55:12:4b:73:ca:ce:d5:6d:ea: fa:8a:a3:ec:42:5f:79:99:3b:15:f3:5c:31:c0:c6:ec:03:05: 64:f6:1c:35:66:0d:33:ff:13:12:19:a8:01:e2:93:04:a1:31: 47:b8:30:33:6f:36:d0:00:14:fa:a5:78:11:30:10:3b:2c:5d: af:2e:e4:4b:a9:a2:09:15:ed:0d:f6:f2:c5:55:6d:2e:8f:3f: 80:b0:7d:6c:0f:05:43:02:9f:35:cf:27:87:8f:a9:6a:69:b0: 78:93:83:ec:d7:69:fb:5e:bf:65:1e:44:a4:e5:74:35:6c:ed: ab:46:f1:09:72:2d:9c:77:7c:dc:c7:c4:e8:1a:45:80:5e:b1: a3:b8:15:ff:62:0e:be:41:79:4b:b9:ed:b2:65:7c:01:ae:e3: 3a:00:9e:6b:a9:0f:e4:af:5b:bb:82:a2:c7:00:2f:e3:6c:f3: d8:2a:d4:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4n6hK0HttPkHtxRX35iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMDlhZWZmNmRmYTg5ZTY3NTgzN2U0NTQ1MjEyMzVjOTli MWJlMmYwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EygzM2VmN2E4NTI4YjNjNjRhZTRlMzc0OGNkMGMxYWVjODVjYWNhNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt05Y9l1meDn+/f0QhJyF7RMiLESG 3Ra+bnBT5xzEJIAQ5t8qUkbuGGLKf19ZqXZekrVVywnsJ8BvXfG1ODNNAELZmv2f bR+Bt/5GlkG14s5LeIyKDZiTYZSzUPWJD0WAJOw2gHTHO5PR4lBqYSCX0cYrkDQ0 0zRsdFauDXRwGsHk/oq0Wcbmca4ZQgEgjPvdgnzZqperSpyWHoO6I0dHVbY1A0vs gqRkns5oeqL67mds3afGmQO9qvBVdMK1s9Xiv2XWNcgY+8/MG4LDy01RyIHJ78rq 0NciWGzgMvsX13qw4qrUTnlBHKVz85EW0bSrZ0h5sZKD2HPQHfY/3dlwWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPveoUos8ZK5ON0jNDBrshcrKdRMB8GA1UdIwQY MBaAFGMJrv9t+onmdYN+RUUhI1yZsb4vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83OWM1OWQtZmRiMC00Yjc3LTlhNTEt YjhkYWIyOTA4ZmYxLzEvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83OWM1OWQtZmRiMC00Yjc3LTlhNTEtYjhkYWIyOTA4ZmYx LzEvWXdtdV8yMzZpZVoxZzM1RlJTRWpYSm14dmk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdT20bnBA PhvK9tIh55o5kjaHKiqHHhSVgb+vOeCzYJscmAhYQQNphCxnO60LuU+nB+vdSd2J l4EJU8L8vP0gE5rF2xVzZMkJIFEnOxjra+2oVRJLc8rO1W3q+oqj7EJfeZk7FfNc McDG7AMFZPYcNWYNM/8TEhmoAeKTBKExR7gwM2820AAU+qV4ETAQOyxdry7kS6mi CRXtDfbyxVVtLo8/gLB9bA8FQwKfNc8nh4+pammweJOD7Ndp+16/ZR5EpOV0NWzt q0bxCXItnHd83MfE6BpFgF6xo7gV/2IOvkF5S7ntsmV8Aa7jOgCea6kP5K9bu4Ki xwAv42zz2CrUIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:32 2025 by rpki-client