This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json) Hash identifier: hlVIU7Xd3wtpcZHrAZOwVnbx24vdZb1cxdae6h0NyT8= Subject key identifier: 10:05:BD:3F:5B:33:5E:38:E4:D3:2E:21:B1:82:04:96:1C:F4:A5:E7 Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55 Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55 Certificate serial: 019AF1D17E401B02A3014E6EACD3A1C7FA42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft Manifest number: 78 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: /HbJmFgc6w99EjpP4wr16CTe4FTTxYgMAjgeG/xuI4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7e:40:1b:02:a3:01:4e:6e:ac:d3:a1:c7:fa:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55 Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=1005bd3f5b335e38e4d32e21b18204961cf4a5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:9b:2f:ad:56:b3:95:06:33:24:02:02:dc:ad: e5:91:ce:e2:eb:11:9a:42:d6:c3:4d:aa:2e:4c:35: 11:11:e9:4c:77:9a:28:02:b0:46:a0:17:d0:af:89: 73:4c:0c:b3:49:24:b6:85:d6:b3:75:a6:0b:96:ce: 46:3e:02:d8:2c:18:59:48:d2:c5:ad:ec:97:5e:25: 3f:ab:18:11:46:4d:08:27:44:ae:2d:7b:72:75:33: d6:48:b2:d7:34:71:36:70:9b:42:df:49:ac:59:c8: ab:e5:f0:cb:be:d8:38:6b:76:70:1f:e4:14:3c:08: 84:80:15:04:3f:6e:21:aa:09:b4:9f:2a:63:14:7f: cf:f2:87:a5:02:69:e2:3f:3f:a1:8f:a7:db:d5:4c: d3:17:6e:a1:12:25:fd:20:d8:50:2e:12:3a:fe:aa: 97:a5:1d:01:84:d1:d1:b2:0c:e6:da:bc:f3:ca:11: 53:03:86:dc:84:92:4e:75:09:4d:09:cc:30:9e:23: 50:28:c0:1f:b3:4e:4e:e5:10:0e:7b:93:43:f5:20: 2e:45:f8:9b:b0:13:f3:63:fe:49:d4:24:a4:cd:33: 88:9c:db:b9:4d:10:bd:67:4e:85:92:c1:89:92:87: f8:38:73:4a:87:66:ec:0c:9d:d0:24:26:25:d3:8a: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:05:BD:3F:5B:33:5E:38:E4:D3:2E:21:B1:82:04:96:1C:F4:A5:E7 X509v3 Authority Key Identifier: keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a5:93:6c:df:1d:94:cb:17:d4:8b:d8:a7:e4:d0:20:3a:3b: 11:46:a6:59:e9:6a:e0:42:d1:27:49:cf:ce:c1:a1:0a:e5:e7: b9:c2:ce:d6:ed:43:8a:a3:62:82:a7:61:e5:40:ce:b2:38:f3: 8e:e0:d4:7c:78:c1:0e:58:08:c3:63:ae:d8:21:3d:ee:32:8b: 16:9a:97:11:30:7c:ae:cb:22:ac:79:46:e9:0b:a0:91:92:85: a8:fc:eb:fd:93:e6:58:d7:02:0f:6a:c3:78:83:de:f3:85:61: e9:5a:fc:ef:d2:4e:12:12:77:d5:35:e7:9b:89:fc:99:6d:6e: fc:90:a1:0d:c5:df:c7:08:f8:4c:0e:c5:0f:d3:c1:94:8a:c7: 9b:57:66:c8:d0:d8:12:12:44:21:f2:05:04:14:61:b5:5d:18: 8f:84:b0:e7:ea:b0:f7:12:49:67:0c:0b:41:49:96:a9:5a:e7: 9e:58:87:d5:6e:a3:f5:c5:bc:61:c6:3d:88:1a:ec:49:10:da: db:6b:36:1e:4d:48:90:11:1b:4b:ab:72:b6:8d:da:ce:e3:13: 58:ba:e5:8c:f3:51:10:db:a1:7c:c5:80:fb:c0:88:85:9f:7a: 46:dc:57:00:3c:ac:cc:7d:94:00:b3:d4:ee:a4:4b:4f:21:30: d6:6f:f6:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X5AGwKjAU5urNOhx/pCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNzE5YzZkOGI5OTUwMzc4YTc0ODkzMTVmYjA3ODExMWEx OGFkNTUwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD EygxMDA1YmQzZjViMzM1ZTM4ZTRkMzJlMjFiMTgyMDQ5NjFjZjRhNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZsvrVazlQYzJAIC3K3lkc7i6xGa QtbDTaouTDUREelMd5ooArBGoBfQr4lzTAyzSSS2hdazdaYLls5GPgLYLBhZSNLF reyXXiU/qxgRRk0IJ0SuLXtydTPWSLLXNHE2cJtC30msWcir5fDLvtg4a3ZwH+QU PAiEgBUEP24hqgm0nypjFH/P8oelAmniPz+hj6fb1UzTF26hEiX9INhQLhI6/qqX pR0BhNHRsgzm2rzzyhFTA4bchJJOdQlNCcwwniNQKMAfs05O5RAOe5ND9SAuRfib sBPzY/5J1CSkzTOInNu5TRC9Z06FksGJkof4OHNKh2bsDJ3QJCYl04p2lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAFvT9bM1445NMuIbGCBJYc9KXnMB8GA1UdIwQY MBaAFGJxnG2LmVA3inSJMV+weBEaGK1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNzJmNjgtODEzZC00YmE3LWI0OWQt NzVmYTI5NTQxMWY1LzEvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wNzJmNjgtODEzZC00YmE3LWI0OWQtNzVmYTI5NTQxMWY1 LzEvWW5HY2JZdVpVRGVLZElreFg3QjRFUm9ZclZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqWTbN8d lMsX1IvYp+TQIDo7EUamWelq4ELRJ0nPzsGhCuXnucLO1u1DiqNigqdh5UDOsjjz juDUfHjBDlgIw2Ou2CE97jKLFpqXETB8rssirHlG6QugkZKFqPzr/ZPmWNcCD2rD eIPe84Vh6Vr879JOEhJ31TXnm4n8mW1u/JChDcXfxwj4TA7FD9PBlIrHm1dmyNDY EhJEIfIFBBRhtV0Yj4Sw5+qw9xJJZwwLQUmWqVrnnliH1W6j9cW8YcY9iBrsSRDa 22s2Hk1IkBEbS6tyto3azuMTWLrljPNRENuhfMWA+8CIhZ96RtxXADyszH2UALPU 7qRLTyEw1m/25Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:30 2025 by rpki-client