This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json) Hash identifier: juKTxqiKadLO1NoD3ImjVJ8yvgr+ldiw82vLmJ1oDVk= Subject key identifier: 1D:36:F7:08:1E:3E:5F:BB:51:07:C0:82:76:B4:39:A2:05:70:5D:AF Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f Certificate serial: 019AF19B33F9B2EF677C97BA4B196B22E541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft Manifest number: 01D6 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: 9duiMsdeUZNKxTt8JiUWxeH5IuPQ39lgyPx9MFFzyZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:f9:b2:ef:67:7c:97:ba:4b:19:6b:22:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=1d36f7081e3e5fbb5107c08276b439a205705daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:6e:6b:0b:3f:6d:74:d4:de:cb:04:b3:72: e8:07:b2:da:5d:16:78:1e:72:36:04:09:dd:ec:51: 1f:c4:b3:e7:f6:ac:bd:37:19:a8:1a:41:8b:39:b3: 6c:77:fe:4f:b1:65:15:ae:c2:bf:ad:69:89:86:ad: 56:17:d5:d6:f1:4c:0d:d3:5a:06:ac:d4:83:5b:cb: df:d6:f2:66:a9:a6:1e:ec:eb:95:a1:50:32:7e:d3: 0c:dd:92:42:97:2d:ef:5f:47:2b:30:e4:f2:da:40: ec:b5:eb:45:2c:1d:bd:28:8b:78:a1:90:64:03:22: 39:d0:fc:c8:4b:d8:ed:dc:05:d0:09:99:c7:35:04: 49:da:88:f7:ad:36:39:7c:28:41:58:b3:00:5a:96: c1:29:ca:9f:62:bd:b2:bb:39:e2:d8:81:79:7e:4b: 51:ff:b6:9e:b2:21:09:26:72:28:5c:9f:83:7e:56: 7b:20:53:ba:96:d3:cf:45:9e:3b:99:bc:81:1c:83: 89:82:2e:d1:55:7d:34:f7:94:85:31:81:df:c6:21: 5f:06:f8:fb:20:e5:ef:06:45:e8:4f:61:b7:2f:67: 62:56:04:5e:2a:4b:2b:2f:ff:8f:6d:9d:6c:02:13: 49:02:ed:4b:31:00:20:2f:13:f5:1a:ca:30:85:f8: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:36:F7:08:1E:3E:5F:BB:51:07:C0:82:76:B4:39:A2:05:70:5D:AF X509v3 Authority Key Identifier: keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d6:37:30:c3:c9:1a:29:25:79:60:c7:0b:9a:06:51:eb:f3: d1:a2:b5:47:8c:11:6c:d2:1d:0b:57:4f:04:14:16:38:cb:ac: 6a:58:a8:69:cf:66:c9:fe:41:80:5e:91:27:e6:b2:96:e7:f9: b9:8c:5b:d5:f2:02:3d:34:ba:e8:1b:aa:7a:80:ac:33:64:6d: 52:c2:be:f0:64:46:f9:75:92:e5:85:fc:e0:32:98:c3:0b:d2: 41:87:7b:be:1d:66:58:a1:1f:a8:8a:54:b2:61:b2:84:8d:58: 69:9f:9e:37:82:0c:e9:7b:a0:ed:10:a6:f4:c3:73:68:35:4a: 81:62:7e:84:73:4b:80:7f:00:87:03:3f:ea:b4:e1:31:fe:d5: 8b:97:b2:b1:f7:94:2e:e3:1d:df:33:22:85:74:a0:5a:99:ca: a0:75:6d:eb:b4:c2:6d:89:69:6b:ab:8d:d6:10:ec:46:ac:58: 59:6b:44:af:c2:be:5e:1c:c3:d3:6e:1b:0a:79:dd:41:df:79: b7:5f:b9:b4:3f:87:c0:65:69:44:b4:53:2c:29:84:e9:9e:b3: 95:a3:f2:4e:8b:aa:9b:aa:d7:ad:e7:ea:13:9c:7f:5b:e5:36: 07:a3:e5:e3:e8:f9:94:ef:62:8a:15:2f:bc:4e:6f:a3:83:67: 0d:26:2d:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzP5su9nfJe6SxlrIuVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YjZlYTUzZDg3MjUxNzBlYjVmNDJhYTUwZGRiOGQ2MDVj NTM4MWYwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EygxZDM2ZjcwODFlM2U1ZmJiNTEwN2MwODI3NmI0MzlhMjA1NzA1ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcNuaws/bXTU3ssEs3LoB7LaXRZ4 HnI2BAnd7FEfxLPn9qy9NxmoGkGLObNsd/5PsWUVrsK/rWmJhq1WF9XW8UwN01oG rNSDW8vf1vJmqaYe7OuVoVAyftMM3ZJCly3vX0crMOTy2kDstetFLB29KIt4oZBk AyI50PzIS9jt3AXQCZnHNQRJ2oj3rTY5fChBWLMAWpbBKcqfYr2yuzni2IF5fktR /7aesiEJJnIoXJ+DflZ7IFO6ltPPRZ47mbyBHIOJgi7RVX0095SFMYHfxiFfBvj7 IOXvBkXoT2G3L2diVgReKksrL/+PbZ1sAhNJAu1LMQAgLxP1GsowhfhLFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB029wgePl+7UQfAgna0OaIFcF2vMB8GA1UdIwQY MBaAFMi26lPYclFw619CqlDduNYFxTgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgt OTM5YWMzZmU0Yjg5LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOWJiMWYtZTNkMC00YjA2LWFlNjgtOTM5YWMzZmU0Yjg5 LzEveUxicVU5aHlVWERyWDBLcVVOMjQxZ1hGT0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtY3MMPJ GikleWDHC5oGUevz0aK1R4wRbNIdC1dPBBQWOMusalioac9myf5BgF6RJ+ayluf5 uYxb1fICPTS66BuqeoCsM2RtUsK+8GRG+XWS5YX84DKYwwvSQYd7vh1mWKEfqIpU smGyhI1YaZ+eN4IM6Xug7RCm9MNzaDVKgWJ+hHNLgH8AhwM/6rThMf7Vi5eysfeU LuMd3zMihXSgWpnKoHVt67TCbYlpa6uN1hDsRqxYWWtEr8K+XhzD024bCnndQd95 t1+5tD+HwGVpRLRTLCmE6Z6zlaPyTouqm6rXrefqE5x/W+U2B6Pl4+j5lO9iihUv vE5vo4NnDSYt4g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:46 2025 by rpki-client