This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft File: YDe79svKAic6peIbuIjj4exnZ98.mft (raw, json) Hash identifier: WC+w+dLPks/GJXGl1auZfAmYBywYW9IE6Zigm2EIDXc= Subject key identifier: 0B:BA:3E:37:85:2B:F7:F2:F8:C3:DF:28:82:C5:AD:50:AC:25:7C:CA Authority key identifier: 60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF Certificate issuer: /CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df Certificate serial: 019AF5099D6721C26CB30ADC69ADF6E9B289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft Manifest number: 0C84 Signing time: Sat 06 Dec 2025 19:00:39 +0000 Manifest this update: Sat 06 Dec 2025 19:00:39 +0000 Manifest next update: Sun 07 Dec 2025 19:00:39 +0000 Files and hashes: 1: YDe79svKAic6peIbuIjj4exnZ98.crl (hash: zK32SK0W7qG9Nx+FcaAsOQsAnqvRVCB2/u2CSRySy58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:9d:67:21:c2:6c:b3:0a:dc:69:ad:f6:e9:b2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6037bbf6cbca02273aa5e21bb888e3e1ec6767df Validity Not Before: Dec 6 19:00:39 2025 GMT Not After : Dec 7 19:00:39 2025 GMT Subject: CN=0bba3e37852bf7f2f8c3df2882c5ad50ac257cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:19:33:b8:1b:ec:14:7f:d5:ac:07:7c:33: f1:6b:8e:cc:d9:18:8c:8c:bc:7b:dc:7f:97:ab:e6: 29:3b:58:bc:36:c1:09:d8:09:a0:85:2b:63:a1:04: 8a:0a:60:4d:14:9f:d3:6c:c8:cc:34:55:d1:2a:40: 69:08:88:b5:40:88:0f:c0:ea:bf:a2:65:02:49:25: 13:52:0d:1b:cd:7d:6b:c7:8c:cc:6b:1a:43:5b:40: 90:12:a9:71:a4:09:ab:c1:9f:29:43:ea:08:f3:fa: 42:e6:b7:1c:a5:2f:bb:ad:ad:18:66:dc:1b:ce:2a: ea:85:39:5f:fb:4a:6e:30:08:c3:97:ad:42:ce:4e: 21:94:40:23:21:8f:1f:45:25:9c:aa:89:00:f9:b0: 5d:60:e3:b1:18:68:0a:ce:16:7f:6b:be:bc:fa:b9: 98:c8:1e:6d:6d:f6:9e:ac:59:b2:3c:ca:34:30:27: cf:12:00:7d:c2:91:33:b4:f3:5e:90:fe:e8:90:b4: 2a:23:a7:ce:39:2a:35:d2:99:3f:d7:93:85:9f:2c: 85:48:ad:53:2c:96:c6:47:8f:39:3e:a0:a6:72:11: 8f:28:55:13:6f:c1:df:53:4c:dc:56:a4:78:27:35: 94:db:be:a0:47:7e:2a:54:01:e1:84:77:1e:fd:80: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:3E:37:85:2B:F7:F2:F8:C3:DF:28:82:C5:AD:50:AC:25:7C:CA X509v3 Authority Key Identifier: keyid:60:37:BB:F6:CB:CA:02:27:3A:A5:E2:1B:B8:88:E3:E1:EC:67:67:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDe79svKAic6peIbuIjj4exnZ98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/64e20c-8f61-4351-8077-fc3b3e11161d/1/YDe79svKAic6peIbuIjj4exnZ98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:26:03:60:1c:1c:ad:43:af:45:a8:5d:bf:a5:75:27:d8:70: 88:02:50:a2:69:99:cb:9d:a1:c8:90:f4:c3:b8:a5:2c:0c:71: 40:3d:27:9c:84:4b:66:06:3d:18:88:3e:66:2e:7f:95:9d:a8: 90:ca:6c:6b:46:0e:cb:f0:b0:83:7c:e9:d8:38:6a:4b:5b:91: 08:3d:7b:30:34:8d:a3:67:4a:c0:b7:2d:db:af:b0:65:4a:c6: 4c:e2:03:f0:08:d0:e7:13:21:26:cb:40:3e:99:20:e2:67:a7: 3d:09:0e:4e:08:8b:21:3a:90:3a:3a:91:02:9f:45:d3:40:8f: ab:33:f2:a9:07:ab:45:da:de:c6:77:86:45:5e:61:d7:6e:38: dd:47:cb:2a:e3:2e:0b:9c:cd:e2:00:9c:12:b4:9b:94:68:29: 05:3f:db:36:80:91:85:6f:05:f2:1b:c8:e8:49:09:63:58:f7: 1e:20:8b:d6:78:31:ac:5c:2b:c6:01:77:a2:98:28:28:5a:90: ca:eb:e6:d9:5b:3f:60:ea:db:2b:1f:89:2c:3c:ad:7d:44:fd: 46:06:15:0f:35:a6:dc:cc:d2:e0:63:0e:54:33:c6:31:91:f8: 88:5a:ff:0d:8a:2c:29:1f:f4:bb:f9:b4:75:78:45:da:e3:fa: 52:a8:f0:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZ1nIcJsswrcaa326bKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMzdiYmY2Y2JjYTAyMjczYWE1ZTIxYmI4ODhlM2UxZWM2 NzY3ZGYwHhcNMjUxMjA2MTkwMDM5WhcNMjUxMjA3MTkwMDM5WjAzMTEwLwYDVQQD EygwYmJhM2UzNzg1MmJmN2YyZjhjM2RmMjg4MmM1YWQ1MGFjMjU3Y2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YYZM7gb7BR/1awHfDPxa47M2RiM jLx73H+Xq+YpO1i8NsEJ2AmghStjoQSKCmBNFJ/TbMjMNFXRKkBpCIi1QIgPwOq/ omUCSSUTUg0bzX1rx4zMaxpDW0CQEqlxpAmrwZ8pQ+oI8/pC5rccpS+7ra0YZtwb zirqhTlf+0puMAjDl61Czk4hlEAjIY8fRSWcqokA+bBdYOOxGGgKzhZ/a768+rmY yB5tbfaerFmyPMo0MCfPEgB9wpEztPNekP7okLQqI6fOOSo10pk/15OFnyyFSK1T LJbGR485PqCmchGPKFUTb8HfU0zcVqR4JzWU276gR34qVAHhhHce/YADvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAu6PjeFK/fy+MPfKILFrVCsJXzKMB8GA1UdIwQY MBaAFGA3u/bLygInOqXiG7iI4+HsZ2ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWURlNzlzdktBaWM2cGVJYnVJamo0ZXhuWjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82NGUyMGMtOGY2MS00MzUxLTgwNzct ZmMzYjNlMTExNjFkLzEvWURlNzlzdktBaWM2cGVJYnVJamo0ZXhuWjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82NGUyMGMtOGY2MS00MzUxLTgwNzctZmMzYjNlMTExNjFk LzEvWURlNzlzdktBaWM2cGVJYnVJamo0ZXhuWjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSYDYBwc rUOvRahdv6V1J9hwiAJQommZy52hyJD0w7ilLAxxQD0nnIRLZgY9GIg+Zi5/lZ2o kMpsa0YOy/Cwg3zp2DhqS1uRCD17MDSNo2dKwLct26+wZUrGTOID8AjQ5xMhJstA Ppkg4menPQkOTgiLITqQOjqRAp9F00CPqzPyqQerRdrexneGRV5h12443UfLKuMu C5zN4gCcErSblGgpBT/bNoCRhW8F8hvI6EkJY1j3HiCL1ngxrFwrxgF3opgoKFqQ yuvm2Vs/YOrbKx+JLDytfUT9RgYVDzWm3MzS4GMOVDPGMZH4iFr/DYosKR/0u/m0 dXhF2uP6UqjwGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:24 2025 by rpki-client