This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft File: RYemiKiamJlJQWqBnMSoDepFTJ0.mft (raw, json) Hash identifier: uKmWl4XfVOLSbXsTe4TAEipjvnYbKa/mZoQS3UOPxBU= Subject key identifier: F5:65:07:08:97:FA:38:C9:38:F9:29:9E:85:70:07:67:68:45:0C:9A Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d Certificate serial: 019AF19BD4091CF35A5E99B2775FA119A98F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft Manifest number: 041B Signing time: Sat 06 Dec 2025 03:01:52 +0000 Manifest this update: Sat 06 Dec 2025 03:01:52 +0000 Manifest next update: Sun 07 Dec 2025 03:01:52 +0000 Files and hashes: 1: RYemiKiamJlJQWqBnMSoDepFTJ0.crl (hash: gDy2bqMyMq0h9nY1CuWD1pCsMzsJ9LFauqQVZ6kwwUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:d4:09:1c:f3:5a:5e:99:b2:77:5f:a1:19:a9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d Validity Not Before: Dec 6 03:01:52 2025 GMT Not After : Dec 7 03:01:52 2025 GMT Subject: CN=f565070897fa38c938f9299e8570076768450c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:a5:bd:39:0b:d3:a1:42:4e:2a:c7:6d:2e: 84:11:ef:fb:90:f6:ad:7e:fa:ab:3d:1e:5f:40:bc: e8:1e:a9:82:44:a1:05:7a:f8:71:fe:d8:02:f1:e9: 02:57:d5:dd:31:61:96:78:db:16:52:8c:e2:38:80: 1f:dc:58:9d:c7:66:e6:a8:4c:25:aa:1e:cb:e9:f8: 59:5b:a2:37:b5:ca:a6:4b:a9:73:bb:1b:83:64:6c: 3c:80:c4:03:2b:83:f4:6f:f8:58:18:43:b4:16:54: 09:22:d9:28:c4:a3:b4:5f:a8:93:10:c8:09:f1:b7: 15:5f:80:41:76:29:34:af:53:ad:3a:be:b9:cb:62: 90:6e:d2:3f:4a:f1:ae:83:b9:35:43:26:5b:91:14: 39:85:bf:ed:48:61:00:01:2e:3d:7b:f6:11:56:ac: e9:c2:32:f2:70:ca:f6:6e:9a:f2:67:e0:39:8f:6f: da:1d:5d:a8:24:77:77:b8:ee:00:a7:39:fd:5e:6a: f5:42:47:25:58:b4:0f:2b:32:cc:a1:21:13:fb:91: fa:23:e7:6c:12:71:1a:3c:c1:8d:48:f8:fb:72:e0: 8b:16:fa:0f:60:f6:32:02:8a:3c:c1:ee:a3:af:88: ea:2e:46:25:af:50:7e:8c:dc:be:8f:cd:5d:a2:b0: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:65:07:08:97:FA:38:C9:38:F9:29:9E:85:70:07:67:68:45:0C:9A X509v3 Authority Key Identifier: keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ce:16:57:93:6f:9f:b6:3c:e9:7b:11:93:6d:29:87:74:2a: aa:e8:d8:31:77:74:ec:79:68:b1:61:24:79:80:ad:7e:8d:37: 97:3e:21:bd:ec:3e:b8:a7:14:e5:eb:7a:99:52:17:b2:ad:f0: 89:8e:e3:f6:b4:88:2f:be:8d:28:43:74:af:25:5c:55:31:ab: e8:e9:cd:7d:d9:3e:e1:23:e6:ce:17:31:45:22:37:ab:c0:e6: 97:74:28:7a:f7:3c:cb:1d:6c:93:a4:d9:d7:b7:d5:3b:c1:3b: 60:16:d2:a5:58:1d:4f:cf:37:6f:89:7c:43:ce:ef:4a:0f:1d: c2:90:81:17:2b:fc:91:e6:b6:42:d0:37:90:a6:39:37:30:86: 2d:ac:89:76:5b:db:9e:64:91:d7:a0:0c:fa:ac:e3:c7:b1:a9: 99:5d:62:0e:f0:17:e1:39:09:76:3b:eb:8b:3d:46:fb:5d:24: bf:2e:d4:c4:71:bf:2c:76:e4:af:b5:42:0b:87:01:e9:d6:b0: ac:c5:f8:f7:d1:d7:44:5d:a4:59:c9:b4:78:6b:40:4d:d6:ab: f9:c1:06:27:1e:87:53:2c:05:a5:96:ed:26:ac:cd:b8:5f:0f: 85:25:32:14:c7:18:78:44:e0:72:9b:e5:b2:ed:c3:77:fa:6f: 47:e3:57:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm9QJHPNaXpmyd1+hGamPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ODdhNjg4YTg5YTk4OTk0OTQxNmE4MTljYzRhODBkZWE0 NTRjOWQwHhcNMjUxMjA2MDMwMTUyWhcNMjUxMjA3MDMwMTUyWjAzMTEwLwYDVQQD EyhmNTY1MDcwODk3ZmEzOGM5MzhmOTI5OWU4NTcwMDc2NzY4NDUwYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkOlvTkL06FCTirHbS6EEe/7kPat fvqrPR5fQLzoHqmCRKEFevhx/tgC8ekCV9XdMWGWeNsWUoziOIAf3Fidx2bmqEwl qh7L6fhZW6I3tcqmS6lzuxuDZGw8gMQDK4P0b/hYGEO0FlQJItkoxKO0X6iTEMgJ 8bcVX4BBdik0r1OtOr65y2KQbtI/SvGug7k1QyZbkRQ5hb/tSGEAAS49e/YRVqzp wjLycMr2bpryZ+A5j2/aHV2oJHd3uO4Apzn9Xmr1QkclWLQPKzLMoSET+5H6I+ds EnEaPMGNSPj7cuCLFvoPYPYyAoo8we6jr4jqLkYlr1B+jNy+j81dorD2JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVlBwiX+jjJOPkpnoVwB2doRQyaMB8GA1UdIwQY MBaAFEWHpoiompiZSUFqgZzEqA3qRUydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAt MmY3MjU5NTYxNDhmLzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82MWQyYjMtNzlkYi00ODk5LThiODAtMmY3MjU5NTYxNDhm LzEvUlllbWlLaWFtSmxKUVdxQm5NU29EZXBGVEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbc4WV5Nv n7Y86XsRk20ph3QqqujYMXd07HlosWEkeYCtfo03lz4hvew+uKcU5et6mVIXsq3w iY7j9rSIL76NKEN0ryVcVTGr6OnNfdk+4SPmzhcxRSI3q8Dml3Qoevc8yx1sk6TZ 17fVO8E7YBbSpVgdT883b4l8Q87vSg8dwpCBFyv8kea2QtA3kKY5NzCGLayJdlvb nmSR16AM+qzjx7GpmV1iDvAX4TkJdjvriz1G+10kvy7UxHG/LHbkr7VCC4cB6daw rMX499HXRF2kWcm0eGtATdar+cEGJx6HUywFpZbtJqzNuF8PhSUyFMcYeETgcpvl su3Dd/pvR+NXkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:40 2025 by rpki-client