This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json) Hash identifier: m9HUUFrpGEhF8zk75h4RL/XFBShlnhytiiPADZhHugM= Subject key identifier: 7D:AE:3E:6B:B5:92:5F:D7:ED:91:62:AA:8C:07:88:78:95:C4:AF:B8 Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8 Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8 Certificate serial: 019AF42E865DA620000A5E0B8FDA8C745FA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft Manifest number: 0F81 Signing time: Sat 06 Dec 2025 15:01:21 +0000 Manifest this update: Sat 06 Dec 2025 15:01:21 +0000 Manifest next update: Sun 07 Dec 2025 15:01:21 +0000 Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: N9rba9911e1s1xpMO8vWjgoDedUjV+4pq9VDuXdIzfU=) 2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:86:5d:a6:20:00:0a:5e:0b:8f:da:8c:74:5f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8 Validity Not Before: Dec 6 15:01:21 2025 GMT Not After : Dec 7 15:01:21 2025 GMT Subject: CN=7dae3e6bb5925fd7ed9162aa8c07887895c4afb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:ef:b2:f3:54:29:ab:da:1a:96:a3:e1:24: 8d:41:7d:92:f0:4e:f9:04:2a:45:ae:fe:3c:07:12: 60:b6:a1:4b:77:da:63:93:3b:f2:18:6f:60:1f:0e: c8:65:99:0f:8e:b1:f8:a2:fa:5e:ef:e0:3e:c3:7f: 76:f1:4b:27:c8:11:03:7e:94:7b:66:a1:2e:b2:c9: 13:ce:71:6c:e3:1c:8f:ff:55:b8:b9:ba:c0:1a:2c: 58:96:9c:dd:d4:79:5e:25:da:92:cb:55:12:72:66: f9:40:2d:ac:bc:bf:e3:b2:41:27:3b:5c:ea:d9:0c: f6:b9:e0:34:c8:2f:37:fd:74:df:15:ce:62:4b:13: ca:b1:47:cb:26:58:9c:3c:0f:c0:cf:90:c0:08:91: 40:4b:41:84:11:29:5a:99:4b:d2:19:6d:7a:5b:f8: d2:b7:b7:c4:e6:13:72:2f:2d:06:84:62:e7:89:ee: 0a:fd:e2:a4:2b:d5:f6:1b:fe:4c:55:bd:f6:1b:06: 4b:b3:cb:c0:14:08:57:63:e4:54:60:79:c9:71:a2: 22:51:e3:93:20:d5:93:71:f2:53:e4:00:e3:5a:24: 4e:9b:69:0c:4b:cb:1b:4a:b3:9e:69:b2:c9:88:81: 9b:0f:2f:44:a1:ed:19:3e:8a:bf:cf:b1:19:5c:db: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AE:3E:6B:B5:92:5F:D7:ED:91:62:AA:8C:07:88:78:95:C4:AF:B8 X509v3 Authority Key Identifier: keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3e:f7:84:13:64:d3:bf:e4:cf:0b:35:44:ac:16:fa:dd:59: 7c:22:16:89:79:01:47:ae:68:f3:0f:95:69:27:fa:c9:1e:6f: d0:2a:a6:0e:d4:78:59:33:91:e2:05:99:bc:49:10:6b:4a:39: 4e:93:87:9c:f2:6f:84:6a:05:5d:c1:3a:e4:0e:4b:36:b4:67: 85:31:66:5e:f5:bf:d6:0a:61:b5:85:6e:c6:71:58:2a:26:55: e4:aa:b6:ac:c7:55:10:91:fa:22:16:0e:b3:40:7f:55:6f:1d: 7b:79:bb:36:71:b4:a5:22:d1:b1:48:5a:60:6b:1d:5b:5f:27: bc:7a:17:c0:d6:2d:bd:c5:2b:2c:ce:12:a0:28:b3:06:b9:e6: 82:60:9f:07:25:a1:cc:69:8c:66:f2:0b:09:59:41:72:a2:53: 02:38:83:40:fc:9a:56:64:ef:5a:62:33:f9:36:8b:17:35:b6: bc:59:85:6a:5f:12:30:13:0a:e0:29:bf:d5:87:5c:1b:7b:bf: f5:b2:c1:be:0d:3b:60:2d:29:8b:3a:c3:d3:e4:11:d0:8f:ee: 8b:21:d7:87:ae:57:73:5e:d6:2d:ad:dc:98:1b:7c:cf:e7:62: ac:ab:57:a1:58:06:07:98:6d:af:f5:ec:c7:a4:79:3b:de:84: 1e:53:e4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoZdpiAACl4Lj9qMdF+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOGEwOGUyOGIzMWJiZTVjMTgxMmZkYTkwZTdlOGM4YTQ4 MzM1ZTgwHhcNMjUxMjA2MTUwMTIxWhcNMjUxMjA3MTUwMTIxWjAzMTEwLwYDVQQD Eyg3ZGFlM2U2YmI1OTI1ZmQ3ZWQ5MTYyYWE4YzA3ODg3ODk1YzRhZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4/vsvNUKavaGpaj4SSNQX2S8E75 BCpFrv48BxJgtqFLd9pjkzvyGG9gHw7IZZkPjrH4ovpe7+A+w3928UsnyBEDfpR7 ZqEusskTznFs4xyP/1W4ubrAGixYlpzd1HleJdqSy1UScmb5QC2svL/jskEnO1zq 2Qz2ueA0yC83/XTfFc5iSxPKsUfLJlicPA/Az5DACJFAS0GEESlamUvSGW16W/jS t7fE5hNyLy0GhGLnie4K/eKkK9X2G/5MVb32GwZLs8vAFAhXY+RUYHnJcaIiUeOT INWTcfJT5ADjWiROm2kMS8sbSrOeabLJiIGbDy9Eoe0ZPoq/z7EZXNsFNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2uPmu1kl/X7ZFiqowHiHiVxK+4MB8GA1UdIwQY MBaAFGKKCOKLMbvlwYEv2pDn6MikgzXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt MGExZDRjMDIyZTUxLzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx LzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEART73hBNk 07/kzws1RKwW+t1ZfCIWiXkBR65o8w+VaSf6yR5v0CqmDtR4WTOR4gWZvEkQa0o5 TpOHnPJvhGoFXcE65A5LNrRnhTFmXvW/1gphtYVuxnFYKiZV5Kq2rMdVEJH6IhYO s0B/VW8de3m7NnG0pSLRsUhaYGsdW18nvHoXwNYtvcUrLM4SoCizBrnmgmCfByWh zGmMZvILCVlBcqJTAjiDQPyaVmTvWmIz+TaLFzW2vFmFal8SMBMK4Cm/1YdcG3u/ 9bLBvg07YC0pizrD0+QR0I/uiyHXh65Xc17WLa3cmBt8z+dirKtXoVgGB5htr/Xs x6R5O96EHlPk4Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:00 2025 by rpki-client