This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json) Hash identifier: uRrdB5FOhJl1LD9/DcdgqxcHFNUJRCFYldZjtNL8V3g= Subject key identifier: 27:C0:8F:B1:78:B2:13:5D:7C:F1:F0:85:9C:31:B4:E5:1E:7B:D8:F7 Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5 Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5 Certificate serial: 019AF088A13775BF66C4F9FDD6D33037664B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft Manifest number: 047C Signing time: Fri 05 Dec 2025 22:01:17 +0000 Manifest this update: Fri 05 Dec 2025 22:01:17 +0000 Manifest next update: Sat 06 Dec 2025 22:01:17 +0000 Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: A3eCMOZFdfSbYeT4YiJ62Usa1PuY4iHQai093qxllGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a1:37:75:bf:66:c4:f9:fd:d6:d3:30:37:66:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5 Validity Not Before: Dec 5 22:01:17 2025 GMT Not After : Dec 6 22:01:17 2025 GMT Subject: CN=27c08fb178b2135d7cf1f0859c31b4e51e7bd8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:73:dd:3f:4c:43:99:c0:74:d7:d9:26:82: f8:67:b5:fa:d0:99:3d:99:da:dc:65:47:14:74:80: 35:64:1d:d8:1c:a9:8f:b4:2e:ec:ba:fb:f1:62:2d: 42:a8:26:0b:fd:a8:36:d6:b3:bf:6e:29:ed:4d:62: 38:47:be:ab:38:f4:71:a2:1c:c7:45:02:56:26:d7: 7e:1f:61:10:1b:25:23:b1:7c:67:91:fa:58:f5:a8: 92:8e:9e:50:2a:13:87:97:9a:3d:57:20:40:25:60: c8:ec:7f:91:a8:22:6b:d3:1c:ec:54:c7:ae:9a:41: ce:fe:aa:0d:13:0b:d5:de:19:a7:e5:bf:12:7f:59: 05:5e:ec:44:01:dc:7e:27:93:b5:ca:12:4b:ed:08: e4:4d:d4:2b:1d:88:b0:aa:d1:00:99:b3:64:0e:08: 42:a8:c5:21:92:be:72:cb:0c:4e:87:43:04:28:14: 58:4b:78:90:95:2b:c2:ed:23:07:c1:d6:12:d4:f5: 7c:75:a4:a7:dd:c3:ab:21:02:05:8a:a5:9a:1e:d5: 33:5d:02:c9:56:c2:5a:bc:1e:29:2f:fd:96:ce:3b: 0b:93:37:d3:3c:7f:09:8e:e1:a2:14:2e:eb:76:33: 9d:82:aa:b1:9a:74:22:31:f7:31:ce:84:c7:05:74: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C0:8F:B1:78:B2:13:5D:7C:F1:F0:85:9C:31:B4:E5:1E:7B:D8:F7 X509v3 Authority Key Identifier: keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e3:9e:a8:97:fd:8a:02:3b:f9:7f:4c:18:01:cc:81:06:b5: 95:92:30:8f:57:23:ac:7f:6a:84:0b:3f:24:76:bd:25:5a:88: 2c:88:96:07:d4:f7:cb:f9:0f:a5:7a:53:a1:82:99:c5:77:af: fc:b3:1e:be:23:d7:78:97:c5:22:a4:a3:5e:63:73:a3:ff:e3: a6:af:74:6a:93:79:b3:80:b9:01:c0:84:ff:56:86:df:8e:3d: 8b:97:b4:18:f6:ee:99:0b:36:91:02:90:a8:1c:dc:48:ab:80: a3:02:f7:b5:92:c2:9d:ef:fc:c4:b7:f3:03:19:d3:33:82:7d: 25:28:f5:a7:fe:2f:c2:ff:61:98:bf:69:2f:55:b3:bd:84:96: ac:25:2e:2b:71:21:02:63:b4:6c:27:7a:aa:c2:9c:05:d6:36: 4a:37:a1:56:b3:e3:81:94:7f:2b:f8:4a:1e:58:80:f4:ca:a3: 98:7e:b2:46:83:3b:a5:8e:c3:c4:0c:57:26:b1:98:5a:44:52: b8:e1:cc:2f:5c:be:45:fb:40:c4:b3:ab:ef:01:29:7b:85:df: 6e:fd:cf:9b:06:3f:ad:cb:f2:b4:34:9f:81:f1:55:29:28:94: e2:6f:35:65:46:01:bd:66:17:f1:fd:f0:7f:4f:3b:29:da:8f: ff:b8:7a:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKE3db9mxPn91tMwN2ZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NDUwMzM2N2UwMWM2YzBjNGNmMDk1N2EwZmMxYzM2YmUw ZDJiYzUwHhcNMjUxMjA1MjIwMTE3WhcNMjUxMjA2MjIwMTE3WjAzMTEwLwYDVQQD EygyN2MwOGZiMTc4YjIxMzVkN2NmMWYwODU5YzMxYjRlNTFlN2JkOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApytz3T9MQ5nAdNfZJoL4Z7X60Jk9 mdrcZUcUdIA1ZB3YHKmPtC7suvvxYi1CqCYL/ag21rO/bintTWI4R76rOPRxohzH RQJWJtd+H2EQGyUjsXxnkfpY9aiSjp5QKhOHl5o9VyBAJWDI7H+RqCJr0xzsVMeu mkHO/qoNEwvV3hmn5b8Sf1kFXuxEAdx+J5O1yhJL7QjkTdQrHYiwqtEAmbNkDghC qMUhkr5yywxOh0MEKBRYS3iQlSvC7SMHwdYS1PV8daSn3cOrIQIFiqWaHtUzXQLJ VsJavB4pL/2WzjsLkzfTPH8JjuGiFC7rdjOdgqqxmnQiMfcxzoTHBXQ68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfAj7F4shNdfPHwhZwxtOUee9j3MB8GA1UdIwQY MBaAFMhFAzZ+AcbAxM8JV6D8HDa+DSvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZGI5MjEtMmMwZi00MDRlLWFhYmQt ZTM1OTI4YjBhOTdhLzEveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kZGI5MjEtMmMwZi00MDRlLWFhYmQtZTM1OTI4YjBhOTdh LzEveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjeOeqJf9 igI7+X9MGAHMgQa1lZIwj1cjrH9qhAs/JHa9JVqILIiWB9T3y/kPpXpToYKZxXev /LMeviPXeJfFIqSjXmNzo//jpq90apN5s4C5AcCE/1aG3449i5e0GPbumQs2kQKQ qBzcSKuAowL3tZLCne/8xLfzAxnTM4J9JSj1p/4vwv9hmL9pL1WzvYSWrCUuK3Eh AmO0bCd6qsKcBdY2SjehVrPjgZR/K/hKHliA9MqjmH6yRoM7pY7DxAxXJrGYWkRS uOHML1y+RftAxLOr7wEpe4Xfbv3PmwY/rcvytDSfgfFVKSiU4m81ZUYBvWYX8f3w f087KdqP/7h65w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:26 2025 by rpki-client