This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft File: Yv8lPFoTQ6JWma4I51dnrya52-U.mft (raw, json) Hash identifier: IE4y+tIyqP/1nBCoiTukg7uqT+WnLyhoCEQz24eo8K4= Subject key identifier: 8C:2F:B5:AB:0E:D9:5C:69:4C:B7:7C:DA:B9:6E:AF:A9:05:17:CA:BC Authority key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5 Certificate issuer: /CN=62ff253c5a1343a25699ae08e75767af26b9dbe5 Certificate serial: 019AF27659F7D8410E7431085723A34E8C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: Yv8lPFoTQ6JWma4I51dnrya52-U.crl (hash: ooQrJgS1GfEk2Bqk6KkdhZuRXHA3FbfwQZ+VT/80fts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:59:f7:d8:41:0e:74:31:08:57:23:a3:4e:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=8c2fb5ab0ed95c694cb77cdab96eafa90517cabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:91:9a:11:2e:70:26:81:94:4e:86:87:fb: cd:63:aa:e7:12:d0:03:8b:05:db:57:d4:a6:72:2c: 1f:dd:10:fa:69:21:5f:8f:02:c7:c5:1c:90:a7:80: f8:f5:ca:e3:cc:28:f5:62:1d:a3:62:16:89:8b:c3: 51:7d:f1:32:27:82:c4:22:42:4e:1d:e5:79:6f:83: 46:61:82:5f:b2:c3:b7:23:83:b3:23:91:13:f6:d4: e3:2a:41:99:5b:59:21:02:b7:d4:55:3c:aa:1c:f5: 5b:1f:ef:97:bd:81:cb:43:b6:1e:ad:f2:2d:00:de: b7:1c:01:f2:2b:06:8f:b1:ad:50:40:2f:34:7f:2b: 2e:2c:12:3a:fc:08:df:71:2e:6e:2c:de:49:8b:40: 17:66:0c:b5:4c:3b:c9:84:26:1a:f1:ff:21:b1:16: 54:94:58:fb:2b:59:50:aa:b2:3c:36:a2:24:e3:d9: 3b:2c:9a:80:9f:a2:fd:7d:d2:5a:6d:33:64:45:20: cf:be:c5:f7:08:e7:05:42:19:ac:5c:fc:2e:37:14: 76:f6:7e:7d:5d:d8:82:5b:5e:20:8a:e3:60:ff:93: b7:7e:b2:54:65:b7:25:32:35:fb:a4:84:c7:bb:29: ec:62:d1:e8:de:83:95:47:47:d0:7e:c8:4b:5a:08: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2F:B5:AB:0E:D9:5C:69:4C:B7:7C:DA:B9:6E:AF:A9:05:17:CA:BC X509v3 Authority Key Identifier: keyid:62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:33:f0:4c:a7:f6:38:41:4a:b6:7b:16:97:8e:c6:d1:99:a7: e6:a4:26:c4:5e:94:22:33:75:97:fc:6d:49:49:e3:8e:7d:ce: d5:89:e4:0d:2f:92:e4:7a:75:cb:a4:f7:b3:ff:f8:c8:5b:10: 2f:25:5d:78:4a:2f:69:45:bd:53:5f:a8:b5:75:d6:e2:4e:3c: 54:23:a9:23:02:67:d2:66:97:2e:50:c6:18:a1:2f:6c:4a:e7: 1b:fd:e4:4b:71:f6:a5:67:bb:2b:56:92:38:c6:20:9f:16:21: c6:6c:2c:28:bc:c6:db:bc:a4:0c:56:0c:7c:8e:77:b8:ce:a9: a4:89:48:d7:9a:3b:38:8d:54:be:fc:6d:4a:91:13:ca:8c:62: 08:03:2d:56:e9:0e:a1:2a:52:18:27:9d:b6:3d:e2:65:2d:8f: 53:f5:fd:d1:44:5b:8f:70:bf:a1:99:14:59:5b:b7:c5:64:b4: a3:b9:fd:dd:0b:5f:c8:f1:9e:ae:ef:96:68:77:09:3c:3e:fa: 16:a0:2d:ee:bf:cd:cc:5c:4c:da:02:9f:63:7a:31:4a:c9:cb: 57:ba:9d:81:15:58:7f:b0:55:dd:b0:70:3e:14:d2:cb:6d:18: c8:5e:4a:f3:8f:c3:ec:14:ea:07:f7:03:2d:f9:48:36:42:d9: 34:b2:9b:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydln32EEOdDEIVyOjToxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmYyNTNjNWExMzQzYTI1Njk5YWUwOGU3NTc2N2FmMjZi OWRiZTUwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD Eyg4YzJmYjVhYjBlZDk1YzY5NGNiNzdjZGFiOTZlYWZhOTA1MTdjYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvqRmhEucCaBlE6Gh/vNY6rnEtAD iwXbV9Smciwf3RD6aSFfjwLHxRyQp4D49crjzCj1Yh2jYhaJi8NRffEyJ4LEIkJO HeV5b4NGYYJfssO3I4OzI5ET9tTjKkGZW1khArfUVTyqHPVbH++XvYHLQ7YerfIt AN63HAHyKwaPsa1QQC80fysuLBI6/AjfcS5uLN5Ji0AXZgy1TDvJhCYa8f8hsRZU lFj7K1lQqrI8NqIk49k7LJqAn6L9fdJabTNkRSDPvsX3COcFQhmsXPwuNxR29n59 XdiCW14giuNg/5O3frJUZbclMjX7pITHuynsYtHo3oOVR0fQfshLWgjpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwvtasO2VxpTLd82rlur6kFF8q8MB8GA1UdIwQY MBaAFGL/JTxaE0OiVpmuCOdXZ68mudvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXY4bFBGb1RRNkpXbWE0STUxZG5yeWE1Mi1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mNzZhOGUtMTg4NC00MWJiLTgxMTMt ZjhkNzU1YjNkMmE3LzEvWXY4bFBGb1RRNkpXbWE0STUxZG5yeWE1Mi1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mNzZhOGUtMTg4NC00MWJiLTgxMTMtZjhkNzU1YjNkMmE3 LzEvWXY4bFBGb1RRNkpXbWE0STUxZG5yeWE1Mi1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzPwTKf2 OEFKtnsWl47G0Zmn5qQmxF6UIjN1l/xtSUnjjn3O1YnkDS+S5Hp1y6T3s//4yFsQ LyVdeEovaUW9U1+otXXW4k48VCOpIwJn0maXLlDGGKEvbErnG/3kS3H2pWe7K1aS OMYgnxYhxmwsKLzG27ykDFYMfI53uM6ppIlI15o7OI1UvvxtSpETyoxiCAMtVukO oSpSGCedtj3iZS2PU/X90URbj3C/oZkUWVu3xWS0o7n93QtfyPGeru+WaHcJPD76 FqAt7r/NzFxM2gKfY3oxSsnLV7qdgRVYf7BV3bBwPhTSy20YyF5K84/D7BTqB/cD LflINkLZNLKbPg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:44 2025 by rpki-client