This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json) Hash identifier: B82wpyn3wbYLAR9krjjha++F8Kg5iE07VuKRl73jbEA= Subject key identifier: 57:B5:1A:57:8E:37:FA:88:A9:8E:2E:BA:6C:F3:DF:AB:08:A0:C5:E5 Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5 Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5 Certificate serial: 019B2C6675153097E26BA0EB029C32499FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft Manifest number: 049B Signing time: Wed 17 Dec 2025 13:01:10 +0000 Manifest this update: Wed 17 Dec 2025 13:01:10 +0000 Manifest next update: Thu 18 Dec 2025 13:01:10 +0000 Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: YNEJJNsabZpuKBc/DTQkXRtGQDihj+frh/2nuT/zg84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:75:15:30:97:e2:6b:a0:eb:02:9c:32:49:9f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5 Validity Not Before: Dec 17 13:01:10 2025 GMT Not After : Dec 18 13:01:10 2025 GMT Subject: CN=57b51a578e37fa88a98e2eba6cf3dfab08a0c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:9a:e0:0c:90:08:86:27:83:51:f9:ea:9b: a2:80:ae:51:78:02:87:ce:70:37:1f:a9:ba:69:02: 37:a0:b8:f1:c2:23:d2:c5:85:af:10:46:86:60:34: 63:83:84:cf:53:f2:1a:9a:05:c2:8b:07:8b:57:9a: 73:52:e4:9e:61:8a:59:28:99:93:30:12:81:41:6c: 91:2d:97:1f:cf:3d:3f:b2:02:46:63:27:a5:4c:82: b6:90:ff:ee:82:0f:bb:49:c9:90:ae:51:d5:d8:60: 8e:47:e7:32:13:fa:aa:2b:a5:60:03:73:9f:39:56: 89:6c:f7:9f:d9:72:93:f0:07:e2:5d:44:d5:f7:e0: d0:21:ea:3e:80:36:98:c4:27:1a:08:dd:f6:ef:9d: 83:dc:f7:2b:a4:e6:90:86:6a:56:ed:dc:e0:da:29: 4d:66:15:09:13:9b:19:0b:98:20:30:f4:e5:8d:c6: 9a:16:cf:91:5f:54:11:bc:23:63:16:c8:34:d9:13: ed:5f:1b:21:bd:34:ef:9f:5b:41:ab:61:5f:b3:2d: 08:03:46:d5:93:5b:47:d1:51:52:e0:62:c8:8d:84: 79:aa:4e:96:e1:e6:f2:04:17:b4:25:da:f9:ef:6f: a9:91:d6:24:77:a2:5f:2f:98:ed:78:42:7e:79:2c: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B5:1A:57:8E:37:FA:88:A9:8E:2E:BA:6C:F3:DF:AB:08:A0:C5:E5 X509v3 Authority Key Identifier: keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ac:0d:a1:d0:e0:e9:6a:12:0a:79:dd:7d:3d:eb:02:43:16: c2:5b:4d:a4:9a:35:74:df:0b:6e:98:20:be:99:e2:7f:3d:20: 26:1e:90:88:cd:1f:83:ac:9b:0b:b6:fa:9e:81:24:b4:ee:61: 20:33:ca:6b:06:83:08:12:93:c7:14:96:77:00:eb:3d:34:0b: 82:6b:0b:24:1f:ca:26:3b:fc:96:60:70:ec:9d:7d:75:41:79: d7:a8:59:cf:ae:91:36:17:d9:53:1c:2f:b1:a8:cf:ba:5b:1a: 85:68:0b:74:ec:d8:5e:35:5d:a2:29:af:b0:93:30:35:5a:98: f9:23:f2:85:12:55:35:a4:ae:ad:c1:1b:1f:8e:aa:96:80:21: 57:28:31:99:07:ab:58:3b:87:85:dd:a8:3c:d7:41:e6:5b:a7: 8b:e3:52:70:3a:75:d5:37:f6:99:58:a4:76:c8:70:d3:33:40: 02:21:ec:3c:06:65:9f:29:c6:44:4b:51:7c:c2:f6:08:6a:8c: 3f:92:a8:11:62:e8:48:b0:af:cb:9f:79:1a:99:bc:65:74:68: 90:87:f9:97:8f:b2:4e:c0:79:ef:f2:4a:d6:a6:11:3d:96:a0: 79:7b:5e:df:5d:a1:33:28:7c:52:d3:94:5b:b3:c2:58:f8:10: 88:7e:75:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZnUVMJfia6DrApwySZ/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NDUwMzM2N2UwMWM2YzBjNGNmMDk1N2EwZmMxYzM2YmUw ZDJiYzUwHhcNMjUxMjE3MTMwMTEwWhcNMjUxMjE4MTMwMTEwWjAzMTEwLwYDVQQD Eyg1N2I1MWE1NzhlMzdmYTg4YTk4ZTJlYmE2Y2YzZGZhYjA4YTBjNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonGa4AyQCIYng1H56puigK5ReAKH znA3H6m6aQI3oLjxwiPSxYWvEEaGYDRjg4TPU/IamgXCiweLV5pzUuSeYYpZKJmT MBKBQWyRLZcfzz0/sgJGYyelTIK2kP/ugg+7ScmQrlHV2GCOR+cyE/qqK6VgA3Of OVaJbPef2XKT8AfiXUTV9+DQIeo+gDaYxCcaCN32752D3PcrpOaQhmpW7dzg2ilN ZhUJE5sZC5ggMPTljcaaFs+RX1QRvCNjFsg02RPtXxshvTTvn1tBq2Ffsy0IA0bV k1tH0VFS4GLIjYR5qk6W4ebyBBe0Jdr572+pkdYkd6JfL5jteEJ+eSyobwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe1GleON/qIqY4uumzz36sIoMXlMB8GA1UdIwQY MBaAFMhFAzZ+AcbAxM8JV6D8HDa+DSvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZGI5MjEtMmMwZi00MDRlLWFhYmQt ZTM1OTI4YjBhOTdhLzEveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kZGI5MjEtMmMwZi00MDRlLWFhYmQtZTM1OTI4YjBhOTdh LzEveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqwNodDg 6WoSCnndfT3rAkMWwltNpJo1dN8Lbpggvpnifz0gJh6QiM0fg6ybC7b6noEktO5h IDPKawaDCBKTxxSWdwDrPTQLgmsLJB/KJjv8lmBw7J19dUF516hZz66RNhfZUxwv sajPulsahWgLdOzYXjVdoimvsJMwNVqY+SPyhRJVNaSurcEbH46qloAhVygxmQer WDuHhd2oPNdB5luni+NScDp11Tf2mVikdshw0zNAAiHsPAZlnynGREtRfML2CGqM P5KoEWLoSLCvy595Gpm8ZXRokIf5l4+yTsB57/JK1qYRPZageXte312hMyh8UtOU W7PCWPgQiH51tA== -----END CERTIFICATE-----Generated at Wed Dec 17 15:27:24 2025 by rpki-client