This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft File: yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json) Hash identifier: xd/EmHsIaDwx0cq7YUwb5K9o50PTFwKWkANxYxbtSdw= Subject key identifier: 6E:D4:B2:A0:50:07:AF:D9:24:5F:BE:0C:E4:3C:C6:8E:46:EB:73:7C Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51 Certificate issuer: /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51 Certificate serial: 019AF12E98D1A77715DD523AD419DF71ADF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft Manifest number: 07E9 Signing time: Sat 06 Dec 2025 01:02:33 +0000 Manifest this update: Sat 06 Dec 2025 01:02:33 +0000 Manifest next update: Sun 07 Dec 2025 01:02:33 +0000 Files and hashes: 1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: 4uLniJFzMQwx7kIouYIf4Mn+qdNkIdvpRpwkK7OEWDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:98:d1:a7:77:15:dd:52:3a:d4:19:df:71:ad:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51 Validity Not Before: Dec 6 01:02:33 2025 GMT Not After : Dec 7 01:02:33 2025 GMT Subject: CN=6ed4b2a05007afd9245fbe0ce43cc68e46eb737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:6e:1b:35:47:2e:6e:bc:19:c2:ef:59:4c: 86:1d:83:99:89:6d:5e:e2:5d:91:37:5e:65:65:b7: a4:6d:6d:6a:1d:11:db:a6:42:d6:48:03:17:32:9b: e5:4e:b1:fb:71:4e:76:98:ae:db:53:a0:ae:f4:bf: 34:4c:ea:8d:ab:cc:6d:19:d6:e6:d3:21:94:02:e1: c2:a1:64:e8:e0:35:16:f1:be:28:58:6a:31:bc:03: 86:9f:9f:3b:4f:6b:69:c9:17:8c:4c:78:57:e4:48: 08:54:34:8d:26:cc:11:8b:5a:a8:26:87:8e:c1:cf: 7b:e6:1f:65:fd:4f:41:00:54:d0:9b:b5:96:68:c5: cb:a6:43:de:53:d6:e5:84:ba:e2:9c:69:da:fc:0d: 06:55:1f:19:3c:90:ee:d0:48:e1:e3:0d:dd:4f:21: 3e:41:d3:4b:5e:05:f5:8f:83:c0:37:c0:ed:d4:96: 2c:54:db:47:ec:6a:3f:88:64:91:82:c0:5d:92:2d: 55:43:a2:6f:43:6d:4d:68:7c:38:e3:21:ba:02:42: 82:f7:d9:c3:cb:23:44:93:6c:83:04:7c:31:ac:da: 19:03:8d:c8:03:3e:3b:27:9c:d9:0b:b7:ae:6c:93: 5c:17:a7:72:29:24:e5:94:96:60:7d:44:22:3f:4a: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D4:B2:A0:50:07:AF:D9:24:5F:BE:0C:E4:3C:C6:8E:46:EB:73:7C X509v3 Authority Key Identifier: keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a4:8b:af:f8:a8:03:e9:cc:33:f7:44:ed:65:9c:3f:a4:2c: 9d:62:d2:f3:9a:84:01:99:11:45:f7:53:6f:47:17:b7:c2:18: eb:25:4e:cb:c9:99:b0:f9:38:0c:79:b0:58:25:95:02:f2:00: 4c:f9:3a:18:db:43:02:67:13:b8:66:80:3c:cb:59:50:ce:2b: 8c:19:93:6e:61:03:50:42:03:33:4a:25:b0:03:d1:95:01:6e: df:46:63:ff:9b:db:ad:05:01:18:fd:6d:19:94:3a:70:c8:3b: f1:bf:b4:3a:a1:f2:e8:22:b7:e3:cc:fb:e3:c1:29:7c:72:3b: 6c:9c:01:7c:91:04:10:8c:9f:fb:9a:c2:e2:8f:eb:93:29:b1: ea:06:08:e9:38:49:e6:44:83:28:9e:5a:10:55:d6:aa:d1:19: b7:e5:1e:80:2b:6f:ca:85:02:a5:6c:93:eb:6c:60:d2:07:52: f9:78:73:90:fa:3e:b4:2f:de:97:20:36:fe:c0:ff:4d:0e:92: 83:34:19:93:27:ec:d3:37:26:23:22:a9:6f:f2:a8:7f:61:b8: 51:62:67:ab:1d:f1:71:62:f4:2d:56:e7:0a:9b:d2:f5:0c:b8: 3d:8b:d5:01:89:e9:fe:69:99:ad:d0:d8:53:68:fd:69:2b:4d: 28:62:65:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpjRp3cV3VI61Bnfca34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MmQzZTYzYTFjMDE4OGQ3YmE2MGNiODRkNzBlNGViODli OGFlNTEwHhcNMjUxMjA2MDEwMjMzWhcNMjUxMjA3MDEwMjMzWjAzMTEwLwYDVQQD Eyg2ZWQ0YjJhMDUwMDdhZmQ5MjQ1ZmJlMGNlNDNjYzY4ZTQ2ZWI3MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39FuGzVHLm68GcLvWUyGHYOZiW1e 4l2RN15lZbekbW1qHRHbpkLWSAMXMpvlTrH7cU52mK7bU6Cu9L80TOqNq8xtGdbm 0yGUAuHCoWTo4DUW8b4oWGoxvAOGn587T2tpyReMTHhX5EgIVDSNJswRi1qoJoeO wc975h9l/U9BAFTQm7WWaMXLpkPeU9blhLrinGna/A0GVR8ZPJDu0Ejh4w3dTyE+ QdNLXgX1j4PAN8Dt1JYsVNtH7Go/iGSRgsBdki1VQ6JvQ21NaHw44yG6AkKC99nD yyNEk2yDBHwxrNoZA43IAz47J5zZC7eubJNcF6dyKSTllJZgfUQiP0pZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7UsqBQB6/ZJF++DOQ8xo5G63N8MB8GA1UdIwQY MBaAFMktPmOhwBiNe6YMuE1w5OuJuK5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVMwLVk2SEFHSTE3cGd5NFRYRGs2NG00cmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hN2MzOWMtNjFjNy00MWQ2LWE4MTYt N2ZlZjIzZjk3YTM0LzEveVMwLVk2SEFHSTE3cGd5NFRYRGs2NG00cmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hN2MzOWMtNjFjNy00MWQ2LWE4MTYtN2ZlZjIzZjk3YTM0 LzEveVMwLVk2SEFHSTE3cGd5NFRYRGs2NG00cmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaSLr/io A+nMM/dE7WWcP6QsnWLS85qEAZkRRfdTb0cXt8IY6yVOy8mZsPk4DHmwWCWVAvIA TPk6GNtDAmcTuGaAPMtZUM4rjBmTbmEDUEIDM0olsAPRlQFu30Zj/5vbrQUBGP1t GZQ6cMg78b+0OqHy6CK348z748EpfHI7bJwBfJEEEIyf+5rC4o/rkymx6gYI6ThJ 5kSDKJ5aEFXWqtEZt+UegCtvyoUCpWyT62xg0gdS+XhzkPo+tC/elyA2/sD/TQ6S gzQZkyfs0zcmIyKpb/Kof2G4UWJnqx3xcWL0LVbnCpvS9Qy4PYvVAYnp/mmZrdDY U2j9aStNKGJlKw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:29 2025 by rpki-client