This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft File: yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json) Hash identifier: qoEkBApNHQeMdqrkDWvrJyT0j+UPB+2uYV7B7VVeOmc= Subject key identifier: 75:E2:FF:56:53:EE:46:03:13:5E:AB:16:F7:47:F2:86:2C:02:80:11 Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D Certificate issuer: /CN=caf23362dc1a714536d8b5e143f79dada002713d Certificate serial: 019B31C3D847D286DB1B69E9552946854B59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft Manifest number: 0867 Signing time: Thu 18 Dec 2025 14:01:16 +0000 Manifest this update: Thu 18 Dec 2025 14:01:16 +0000 Manifest next update: Fri 19 Dec 2025 14:01:16 +0000 Files and hashes: 1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: Eaibs2+5U+SAVP7bJ1WD9++3ihBD2XEr+2Mg50VbITE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:d8:47:d2:86:db:1b:69:e9:55:29:46:85:4b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d Validity Not Before: Dec 18 14:01:16 2025 GMT Not After : Dec 19 14:01:16 2025 GMT Subject: CN=75e2ff5653ee4603135eab16f747f2862c028011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:92:b4:84:81:30:c2:a4:e2:5a:50:4a:fa: d5:cf:ab:5f:03:4c:3f:57:2f:e1:40:57:f5:72:b5: c4:fb:6b:dc:d0:4c:90:e4:16:8e:45:52:97:ba:c7: 24:63:5a:a0:58:53:64:63:3a:43:a4:9b:dd:67:fc: 7e:fa:75:4b:6c:d7:68:a8:d9:89:56:0d:cb:ef:03: 9e:bc:c5:b4:20:a7:68:d1:da:a9:30:0b:dd:9a:2b: d2:70:82:32:26:75:5c:a1:61:41:9d:44:4a:bd:b7: e4:9c:1d:3e:e7:5a:44:0c:78:7b:36:71:59:d3:ed: b5:dd:fe:73:ea:74:86:ab:d0:c3:7f:b7:ea:9d:a8: 2e:31:d3:8a:c9:c8:a1:dc:05:bd:8b:7c:10:66:e5: 88:3a:65:f1:95:21:2f:79:6e:e1:4e:1c:f7:91:4a: 31:00:28:de:69:73:34:8f:7e:38:49:f9:b9:3e:c7: 0a:13:ad:9a:33:cc:c7:a5:a7:8f:e3:32:8a:e7:47: 10:fe:83:22:d2:fc:8f:99:ee:cd:14:26:c9:94:8d: d8:65:43:78:1f:8d:eb:6f:91:c4:cd:74:5b:4b:a3: c0:4a:92:13:80:61:2c:85:e3:8a:09:a0:a3:08:1e: 00:93:cf:93:41:87:c0:cc:f1:a6:45:ea:af:3d:b6: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E2:FF:56:53:EE:46:03:13:5E:AB:16:F7:47:F2:86:2C:02:80:11 X509v3 Authority Key Identifier: keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ee:b7:74:b1:a8:67:90:43:63:81:f5:8d:82:d6:bf:6a:46: 34:e1:0d:6d:48:0a:f8:d4:8e:8a:3e:13:f4:43:2d:e3:34:1b: 83:77:74:9a:3a:6c:da:30:0b:21:f2:72:9a:d7:71:53:86:63: b6:33:dc:37:9b:e4:96:05:6e:f3:5d:80:ed:f9:37:48:18:71: ad:76:d3:ff:5b:ff:55:64:ff:0e:51:af:69:bc:f7:aa:f4:8a: 74:90:3a:a4:86:1c:1e:aa:21:30:5d:87:d3:04:f4:53:4f:8e: ce:9e:87:6d:30:66:00:f1:cc:42:6f:fe:b9:c6:b0:18:da:d1: 53:a0:07:d5:8f:b4:32:46:c5:a9:09:ca:2a:5a:a6:c2:7f:a5: a7:9b:58:5d:e9:65:26:3a:fd:91:b3:21:61:f5:8b:60:15:dc: a6:58:9f:3d:20:2e:8a:7b:97:93:81:78:c1:b1:64:0a:48:9d: 6a:db:6f:0d:34:cf:aa:db:17:f4:04:f7:78:7a:19:11:36:8c: 02:47:90:57:19:18:43:7c:fb:1b:b9:d5:a0:70:12:00:f0:8e: 69:5b:ac:7c:f2:db:55:91:34:59:b7:6c:ed:b3:22:ab:67:70: 0b:52:14:33:d9:68:59:70:09:24:ca:b9:3a:8d:d2:2a:c2:b6: a0:41:50:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw9hH0obbG2npVSlGhUtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw MjcxM2QwHhcNMjUxMjE4MTQwMTE2WhcNMjUxMjE5MTQwMTE2WjAzMTEwLwYDVQQD Eyg3NWUyZmY1NjUzZWU0NjAzMTM1ZWFiMTZmNzQ3ZjI4NjJjMDI4MDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlACStISBMMKk4lpQSvrVz6tfA0w/ Vy/hQFf1crXE+2vc0EyQ5BaORVKXusckY1qgWFNkYzpDpJvdZ/x++nVLbNdoqNmJ Vg3L7wOevMW0IKdo0dqpMAvdmivScIIyJnVcoWFBnURKvbfknB0+51pEDHh7NnFZ 0+213f5z6nSGq9DDf7fqnaguMdOKycih3AW9i3wQZuWIOmXxlSEveW7hThz3kUox ACjeaXM0j344Sfm5PscKE62aM8zHpaeP4zKK50cQ/oMi0vyPme7NFCbJlI3YZUN4 H43rb5HEzXRbS6PASpITgGEsheOKCaCjCB4Ak8+TQYfAzPGmReqvPbbxYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXi/1ZT7kYDE16rFvdH8oYsAoARMB8GA1UdIwQY MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4 LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKe63dLGo Z5BDY4H1jYLWv2pGNOENbUgK+NSOij4T9EMt4zQbg3d0mjps2jALIfJymtdxU4Zj tjPcN5vklgVu812A7fk3SBhxrXbT/1v/VWT/DlGvabz3qvSKdJA6pIYcHqohMF2H 0wT0U0+Ozp6HbTBmAPHMQm/+ucawGNrRU6AH1Y+0MkbFqQnKKlqmwn+lp5tYXell Jjr9kbMhYfWLYBXcplifPSAuinuXk4F4wbFkCkidattvDTTPqtsX9AT3eHoZETaM AkeQVxkYQ3z7G7nVoHASAPCOaVusfPLbVZE0Wbds7bMiq2dwC1IUM9loWXAJJMq5 Oo3SKsK2oEFQvg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:49:39 2025 by rpki-client