This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft File: r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json) Hash identifier: rn4cwuKI2WzvXRYtVW2VfW0TSOlqOqFnCEwl9LAR3a8= Subject key identifier: 4A:D2:07:1A:C9:0B:FB:C1:0E:F1:64:DB:7A:BF:D6:AC:80:94:EA:93 Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3 Certificate issuer: /CN=affca7f6da689cc545bbbb950398bac407979aa3 Certificate serial: 019AF3C01A991F4C20C3588E91D78F9E0041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft Manifest number: 04CC Signing time: Sat 06 Dec 2025 13:00:44 +0000 Manifest this update: Sat 06 Dec 2025 13:00:44 +0000 Manifest next update: Sun 07 Dec 2025 13:00:44 +0000 Files and hashes: 1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: zJVpKHT4at5pnEXpbPHT+uURSbtuKsg2OCUHRQr1LnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:1a:99:1f:4c:20:c3:58:8e:91:d7:8f:9e:00:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3 Validity Not Before: Dec 6 13:00:44 2025 GMT Not After : Dec 7 13:00:44 2025 GMT Subject: CN=4ad2071ac90bfbc10ef164db7abfd6ac8094ea93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:f3:7a:13:9b:56:ae:cf:2c:e7:0d:2b:ca: 26:c7:64:eb:7e:03:fb:6b:e4:67:0a:d3:4f:9b:3a: 11:41:5f:2c:84:39:c2:ea:44:87:e7:8d:75:70:90: 29:89:02:97:38:cb:a8:eb:f3:94:08:49:8e:01:76: b5:6a:8a:0f:ba:f0:ba:68:43:7b:3c:f3:0c:bf:8b: 54:11:1a:cd:63:28:00:7f:32:b3:1c:67:d7:44:66: ef:67:94:82:48:4a:4a:95:27:18:ff:c7:a8:a2:d9: f7:a3:f4:61:e9:11:70:c5:a3:ba:26:01:0e:5c:a4: 77:68:db:ec:5b:40:71:17:20:4b:29:45:7b:ab:d1: 42:a8:67:6a:e8:47:af:67:05:3e:4c:be:b7:a4:07: af:74:83:15:e0:14:b3:ed:05:29:e8:49:01:ff:50: d6:b0:e5:c4:45:c0:3b:aa:49:8c:b8:94:78:d6:35: 47:ee:19:58:63:b8:da:17:07:aa:51:d3:27:6b:67: 22:ef:b5:bd:e5:75:1b:2d:76:20:07:01:e2:d1:c0: a2:ac:f0:d3:02:6b:05:cb:b6:85:fc:81:ed:7b:25: c8:d7:a5:25:49:2b:cb:c9:f6:ec:a7:8f:55:4c:ce: 4b:62:b2:b1:7c:bc:e3:a3:c0:88:18:fe:30:3a:b2: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:07:1A:C9:0B:FB:C1:0E:F1:64:DB:7A:BF:D6:AC:80:94:EA:93 X509v3 Authority Key Identifier: keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:53:87:ee:e0:ff:b9:9c:23:1a:71:38:33:d5:76:af:37:13: eb:f6:a9:7d:17:90:ca:64:53:ae:24:13:95:86:a3:14:ea:8e: 2c:39:aa:60:4d:f3:11:61:0e:4a:b0:69:87:b6:c7:24:d6:2c: 49:a5:18:40:54:6a:82:f6:3c:c5:69:30:13:8c:16:4c:c1:96: c4:2b:42:d8:36:9a:56:06:16:d2:30:3e:16:06:f4:6c:cb:26: 3c:e2:86:96:bd:d0:6b:e3:86:38:bf:d8:47:fe:13:16:f3:44: 04:e8:73:be:2b:1f:70:b0:a8:df:6a:32:fe:cb:b2:0e:a4:a3: 9a:f2:77:c3:2f:e1:0b:aa:fe:ce:fe:b2:1b:f1:5c:d8:37:31: fd:b0:7a:dc:4b:34:31:c8:82:47:50:13:58:32:9a:79:e9:6e: 4f:39:e2:da:3d:eb:04:da:a6:3a:96:2e:bc:6e:de:a5:09:77: 3d:30:ad:d8:62:94:ac:44:e3:3a:cf:0a:13:14:fe:ee:95:a7: a7:8b:5e:2a:d9:b8:b6:6c:a1:ca:d4:1b:25:7b:65:4e:e7:42: b6:eb:36:b7:61:b1:5e:0e:f3:76:5a:2f:c2:6c:fb:5a:54:ab: 75:af:3e:b6:05:e7:b9:3d:5d:91:3e:a3:8e:c6:a6:8a:25:8b: bf:6e:47:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBqZH0wgw1iOkdePngBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmNhN2Y2ZGE2ODljYzU0NWJiYmI5NTAzOThiYWM0MDc5 NzlhYTMwHhcNMjUxMjA2MTMwMDQ0WhcNMjUxMjA3MTMwMDQ0WjAzMTEwLwYDVQQD Eyg0YWQyMDcxYWM5MGJmYmMxMGVmMTY0ZGI3YWJmZDZhYzgwOTRlYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7zzehObVq7PLOcNK8omx2TrfgP7 a+RnCtNPmzoRQV8shDnC6kSH5411cJApiQKXOMuo6/OUCEmOAXa1aooPuvC6aEN7 PPMMv4tUERrNYygAfzKzHGfXRGbvZ5SCSEpKlScY/8eootn3o/Rh6RFwxaO6JgEO XKR3aNvsW0BxFyBLKUV7q9FCqGdq6EevZwU+TL63pAevdIMV4BSz7QUp6EkB/1DW sOXERcA7qkmMuJR41jVH7hlYY7jaFweqUdMna2ci77W95XUbLXYgBwHi0cCirPDT AmsFy7aF/IHteyXI16UlSSvLyfbsp49VTM5LYrKxfLzjo8CIGP4wOrIN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErSBxrJC/vBDvFk23q/1qyAlOqTMB8GA1UdIwQY MBaAFK/8p/baaJzFRbu7lQOYusQHl5qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEt MTk4NWIwYjA4MjVlLzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEtMTk4NWIwYjA4MjVl LzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVOH7uD/ uZwjGnE4M9V2rzcT6/apfReQymRTriQTlYajFOqOLDmqYE3zEWEOSrBph7bHJNYs SaUYQFRqgvY8xWkwE4wWTMGWxCtC2DaaVgYW0jA+Fgb0bMsmPOKGlr3Qa+OGOL/Y R/4TFvNEBOhzvisfcLCo32oy/suyDqSjmvJ3wy/hC6r+zv6yG/Fc2Dcx/bB63Es0 MciCR1ATWDKaeeluTzni2j3rBNqmOpYuvG7epQl3PTCt2GKUrETjOs8KExT+7pWn p4teKtm4tmyhytQbJXtlTudCtus2t2GxXg7zdlovwmz7WlSrda8+tgXnuT1dkT6j jsamiiWLv25Hew== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:16 2025 by rpki-client