This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json) Hash identifier: Npj2HtDJf4wIwGCI9dBl96j+XF4EgFhYGFbo7e68Hmw= Subject key identifier: F9:17:13:7B:E0:A7:D6:35:F6:E5:03:A3:86:F8:06:0B:BD:22:F7:FD Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c Certificate serial: 019AF19BA3969652B9AB4578A060F4F40688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: y+2aagO4ayv7ABgvgscSauwO6DwIBwAUSkOWTGRW3Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a3:96:96:52:b9:ab:45:78:a0:60:f4:f4:06:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=f917137be0a7d635f6e503a386f8060bbd22f7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:7e:d8:80:50:e8:31:03:7c:54:1e:bc:83: a0:04:e3:d8:37:7f:7f:82:4e:fc:51:e6:53:a3:d9: af:3e:37:be:1d:b7:42:7f:3b:4f:f0:32:3e:02:02: 3f:6b:e9:bb:80:7b:f2:13:9f:ce:6b:58:83:a4:80: 56:29:5f:0b:7c:2b:da:17:2c:5e:52:e0:e2:c1:27: ea:f5:45:25:56:7d:0c:9a:79:5c:26:09:8e:8c:78: 42:8d:d7:b7:9d:61:e0:10:05:82:f9:9f:2e:ff:b2: 22:b9:8e:5f:d2:ed:50:60:61:8e:98:0d:28:04:ad: 2f:1d:18:d1:fc:a9:d8:55:71:b3:b6:09:d1:9a:ce: 6f:cd:54:92:a2:c6:97:d3:50:4e:16:c8:96:98:89: 42:97:47:f9:d5:39:54:57:f1:98:61:d3:75:6e:9c: f6:e9:7b:a4:fd:32:6e:a2:ee:74:2b:4a:6f:7d:9c: 92:75:47:6d:44:30:a7:f5:37:09:3c:4a:f5:df:fb: de:89:6b:38:6b:b2:29:fb:2e:63:3d:1d:8a:33:bf: 4b:f1:83:c6:a9:cb:b0:fc:48:a7:39:c2:34:b5:21: cd:90:9e:50:78:e7:bf:da:18:f5:a0:2c:c3:91:b7: f0:22:35:d4:88:a5:bd:bd:6d:66:82:fc:45:e5:f7: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:17:13:7B:E0:A7:D6:35:F6:E5:03:A3:86:F8:06:0B:BD:22:F7:FD X509v3 Authority Key Identifier: keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:06:8b:55:e0:69:59:5b:3f:67:3b:09:74:84:00:e7:02:f9: 38:b6:1a:2b:9d:d5:56:55:44:91:23:c6:16:b5:c5:9b:3e:0d: b2:17:4e:88:9e:b9:ce:18:7c:8e:4a:cf:bc:81:fa:58:83:89: d7:40:f7:55:cf:5b:ca:a7:ab:a5:44:eb:51:0f:69:d3:41:b2: 63:cb:07:14:f6:33:02:a4:08:3e:41:10:ea:e8:11:81:ed:a3: f4:05:d6:9e:05:29:68:12:48:1d:a3:90:e7:f5:9b:48:d8:c4: 47:b2:be:6e:60:9b:c3:2f:00:fc:35:7f:b3:70:2b:f6:5b:13: 07:32:aa:de:29:19:0d:48:cc:df:95:f1:58:3f:c0:3e:9a:12: 5c:9e:f4:aa:53:45:e4:2d:c6:8f:4c:4f:b8:58:da:45:41:fd: 25:6c:8a:50:f6:26:7d:3c:37:06:fd:c7:2d:67:24:79:f2:b1: 13:0c:70:fd:4a:3d:85:e2:c0:15:e0:ce:8f:b9:01:50:0d:7e: 37:af:fa:ba:07:36:85:90:56:f0:04:d8:25:6b:6f:13:5d:41: 7a:6b:13:9e:a4:7f:06:96:95:c5:84:2e:23:4b:23:e1:71:c8: 6c:cd:07:f9:b5:f2:a1:77:73:d6:7b:68:c2:69:4a:48:3f:be: 48:e3:01:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6OWllK5q0V4oGD09AaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjE4MGRkNDg5Njc1ZDQ3OTM1MjVmZWU2Y2ZmZjQ2OTcy ZmYzM2MwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD EyhmOTE3MTM3YmUwYTdkNjM1ZjZlNTAzYTM4NmY4MDYwYmJkMjJmN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8N+2IBQ6DEDfFQevIOgBOPYN39/ gk78UeZTo9mvPje+HbdCfztP8DI+AgI/a+m7gHvyE5/Oa1iDpIBWKV8LfCvaFyxe UuDiwSfq9UUlVn0MmnlcJgmOjHhCjde3nWHgEAWC+Z8u/7IiuY5f0u1QYGGOmA0o BK0vHRjR/KnYVXGztgnRms5vzVSSosaX01BOFsiWmIlCl0f51TlUV/GYYdN1bpz2 6Xuk/TJuou50K0pvfZySdUdtRDCn9TcJPEr13/veiWs4a7Ip+y5jPR2KM79L8YPG qcuw/EinOcI0tSHNkJ5QeOe/2hj1oCzDkbfwIjXUiKW9vW1mgvxF5fcf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkXE3vgp9Y19uUDo4b4Bgu9Ivf9MB8GA1UdIwQY MBaAFMjxgN1IlnXUeTUl/ubP/0aXL/M8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEt ZGJkNzYwMDQ1ZWI3LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS82N2YxYzUtODIyOS00MTczLTk5YzEtZGJkNzYwMDQ1ZWI3 LzEveVBHQTNVaVdkZFI1TlNYLTVzX19ScGN2OHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwaLVeBp WVs/ZzsJdIQA5wL5OLYaK53VVlVEkSPGFrXFmz4NshdOiJ65zhh8jkrPvIH6WIOJ 10D3Vc9byqerpUTrUQ9p00GyY8sHFPYzAqQIPkEQ6ugRge2j9AXWngUpaBJIHaOQ 5/WbSNjER7K+bmCbwy8A/DV/s3Ar9lsTBzKq3ikZDUjM35XxWD/APpoSXJ70qlNF 5C3Gj0xPuFjaRUH9JWyKUPYmfTw3Bv3HLWckefKxEwxw/Uo9heLAFeDOj7kBUA1+ N6/6ugc2hZBW8ATYJWtvE11BemsTnqR/BpaVxYQuI0sj4XHIbM0H+bXyoXdz1nto wmlKSD++SOMBdw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:04 2025 by rpki-client