This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft File: YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json) Hash identifier: JryvZKcELqaE23kVhrp1TUqVDyaGaUb3PeVvuC4aGvc= Subject key identifier: 94:7A:61:24:11:91:E6:79:1A:1F:2E:BE:42:68:E5:55:C1:50:3F:73 Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 Certificate issuer: /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Certificate serial: 019AF50B9A8517293FD79472FE60A326B4D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft Manifest number: 0450 Signing time: Sat 06 Dec 2025 19:02:49 +0000 Manifest this update: Sat 06 Dec 2025 19:02:49 +0000 Manifest next update: Sun 07 Dec 2025 19:02:49 +0000 Files and hashes: 1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: fuEp2sxoXXmveFzfLiFvc5JirURbr1jUZ/6GXGEHBro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9a:85:17:29:3f:d7:94:72:fe:60:a3:26:b4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1 Validity Not Before: Dec 6 19:02:49 2025 GMT Not After : Dec 7 19:02:49 2025 GMT Subject: CN=947a61241191e6791a1f2ebe4268e555c1503f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:b4:36:07:81:6d:e0:3f:b6:2b:f8:cd:9f: dc:fa:76:de:43:1b:73:8a:f4:6d:7f:13:97:c2:2b: e1:75:26:bc:8a:6a:35:27:e6:36:77:0a:32:83:4b: 4e:e5:24:f4:d9:cf:77:bc:92:c4:20:97:9a:41:e3: 8a:6c:4f:49:f1:cf:88:ea:91:bd:02:8f:32:6a:33: 55:67:b8:86:83:f0:60:64:48:18:65:b5:ce:eb:b0: c1:fe:a3:0e:f7:ba:72:7d:db:fa:e7:06:0c:56:f6: 3f:2c:ab:f7:1e:f1:a9:21:d5:21:a5:f2:c9:39:77: fa:81:32:f3:d3:00:7c:0f:39:78:57:a3:ac:28:ac: 0f:78:d0:83:d7:1d:21:4e:2b:4d:12:92:c0:d6:9b: 40:b8:40:c4:1c:84:38:f2:75:7d:62:f6:c3:40:17: 69:11:d2:6f:7e:bb:2c:fb:2b:e4:a7:3b:13:a9:36: 95:cd:22:07:54:53:6d:4b:2f:1f:08:73:6f:36:31: 06:43:64:e1:8c:d0:04:74:03:28:fb:c2:5f:f9:53: e1:a8:78:e6:f0:eb:fa:b1:b3:e7:c4:76:1c:6c:a7: 79:16:c4:73:31:4f:e2:fc:c8:57:b0:8d:cc:e1:a0: 06:b6:5c:d4:5a:b9:cb:96:fd:46:03:28:b4:a8:54: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7A:61:24:11:91:E6:79:1A:1F:2E:BE:42:68:E5:55:C1:50:3F:73 X509v3 Authority Key Identifier: keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:67:f0:35:93:dc:f8:03:fd:ab:d8:9c:46:cc:6c:69:23:19: 5e:87:7f:10:04:59:3f:3d:a0:a9:3c:f6:2b:bb:fe:bb:ee:8e: 37:d1:a4:a0:f1:47:37:ae:3f:2b:1c:e1:2e:fe:37:b8:c9:43: 04:e6:6b:a7:95:5e:66:01:00:2d:d0:50:72:4b:82:48:9f:11: 03:08:24:fe:e6:98:fb:fb:08:70:3e:df:6e:cb:0b:0b:46:1f: 46:72:f8:dc:f2:8c:9c:98:c0:ca:08:4b:34:45:81:31:db:ca: 20:23:b5:22:28:c5:ed:db:b6:4a:28:ce:61:f4:0b:78:13:63: a1:58:a8:e8:2f:67:ea:15:cb:a1:86:f3:75:b8:7d:54:f5:5c: e1:2c:81:5b:04:cf:ce:5a:0e:e8:02:81:06:25:08:95:f3:7d: 96:d4:0b:76:ae:41:b5:2b:0f:c9:3e:22:32:fa:66:ea:53:99: f1:8c:94:24:6c:97:61:0d:2f:6d:df:16:64:f4:48:eb:9c:8c: d0:5c:50:0c:7a:ee:33:c1:8f:35:33:c4:44:ec:99:be:9a:1d: 7f:67:41:51:3d:e7:23:ed:bc:80:68:ba:c0:06:f9:e3:83:e9: 61:77:c2:a7:04:98:29:bf:7b:02:de:c0:2f:c9:ec:e0:ef:48: 0f:94:5e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5qFFyk/15Ry/mCjJrTQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2 ZWY5YzEwHhcNMjUxMjA2MTkwMjQ5WhcNMjUxMjA3MTkwMjQ5WjAzMTEwLwYDVQQD Eyg5NDdhNjEyNDExOTFlNjc5MWExZjJlYmU0MjY4ZTU1NWMxNTAzZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLO0NgeBbeA/tiv4zZ/c+nbeQxtz ivRtfxOXwivhdSa8imo1J+Y2dwoyg0tO5ST02c93vJLEIJeaQeOKbE9J8c+I6pG9 Ao8yajNVZ7iGg/BgZEgYZbXO67DB/qMO97pyfdv65wYMVvY/LKv3HvGpIdUhpfLJ OXf6gTLz0wB8Dzl4V6OsKKwPeNCD1x0hTitNEpLA1ptAuEDEHIQ48nV9YvbDQBdp EdJvfrss+yvkpzsTqTaVzSIHVFNtSy8fCHNvNjEGQ2ThjNAEdAMo+8Jf+VPhqHjm 8Ov6sbPnxHYcbKd5FsRzMU/i/MhXsI3M4aAGtlzUWrnLlv1GAyi0qFT65QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR6YSQRkeZ5Gh8uvkJo5VXBUD9zMB8GA1UdIwQY MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGfwNZPc +AP9q9icRsxsaSMZXod/EARZPz2gqTz2K7v+u+6ON9GkoPFHN64/KxzhLv43uMlD BOZrp5VeZgEALdBQckuCSJ8RAwgk/uaY+/sIcD7fbssLC0YfRnL43PKMnJjAyghL NEWBMdvKICO1IijF7du2SijOYfQLeBNjoVio6C9n6hXLoYbzdbh9VPVc4SyBWwTP zloO6AKBBiUIlfN9ltQLdq5BtSsPyT4iMvpm6lOZ8YyUJGyXYQ0vbd8WZPRI65yM 0FxQDHruM8GPNTPEROyZvpodf2dBUT3nI+28gGi6wAb544PpYXfCpwSYKb97At7A L8ns4O9ID5RemA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:38 2025 by rpki-client