This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json) Hash identifier: dz4inqyNFveo1eY+fGZN/1zOR+rB1jgmHsZ0IRbxidE= Subject key identifier: 46:7F:9B:9D:36:27:48:F1:D7:79:37:C6:86:B0:6A:22:2F:58:38:11 Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55 Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55 Certificate serial: 019AF12D475E1DBFAF812E650DF93BD2B85E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft Manifest number: 0CE5 Signing time: Sat 06 Dec 2025 01:01:07 +0000 Manifest this update: Sat 06 Dec 2025 01:01:07 +0000 Manifest next update: Sun 07 Dec 2025 01:01:07 +0000 Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: 0s1ZHenKOXtAIWoTpIDrpd415S4vdPNI1BbpP0Str6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:47:5e:1d:bf:af:81:2e:65:0d:f9:3b:d2:b8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55 Validity Not Before: Dec 6 01:01:07 2025 GMT Not After : Dec 7 01:01:07 2025 GMT Subject: CN=467f9b9d362748f1d77937c686b06a222f583811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0f:26:d0:8e:89:08:a1:8f:76:13:a8:28:b2: 3d:cd:cd:e1:54:f7:ea:d3:08:ce:f5:b2:7a:c4:90: 6c:26:c1:36:b6:a6:9c:72:63:6b:a2:52:46:ed:68: d8:75:37:ab:d8:08:dc:95:7f:46:4f:aa:ce:8d:d8: 37:39:86:13:d1:e9:2b:07:11:78:8b:a9:68:06:1d: e1:2f:fc:03:ae:13:d1:ef:f1:4a:82:5e:e2:d8:9b: 8a:95:92:62:ee:9e:ad:20:48:a6:11:64:c2:f8:33: 2a:f9:b1:e8:43:f5:98:95:2e:4d:a5:1d:22:bc:e9: 48:45:70:47:2d:a5:79:df:e9:e7:39:01:59:81:f1: bf:70:a8:b0:03:23:76:06:61:6c:1b:48:cc:7f:2e: e0:78:16:38:ad:62:ba:13:6f:80:d3:6e:a6:88:e0: 9e:fe:c1:f0:77:e0:85:6d:ae:30:de:bd:90:d9:60: e4:f1:90:20:a7:13:f1:49:76:1d:45:ef:87:32:88: 26:fc:7b:84:b2:c9:32:8a:0c:a8:92:e6:d3:5b:ce: 08:78:95:b1:ab:ba:2b:19:65:1b:e3:9d:8d:a8:a0: b3:c0:04:27:b4:e5:02:84:45:36:e6:49:79:db:16: d0:25:6b:c4:90:12:e3:d6:ed:01:fa:b4:3c:1e:f7: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7F:9B:9D:36:27:48:F1:D7:79:37:C6:86:B0:6A:22:2F:58:38:11 X509v3 Authority Key Identifier: keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1d:44:dd:0c:96:7c:0e:68:86:26:18:ac:e4:aa:00:5b:78: ec:bd:6f:5d:6d:69:39:c7:d1:01:ef:d6:8b:e5:b7:f2:f6:5b: 9b:c9:87:1d:76:2d:00:af:56:75:9b:71:48:66:63:a1:1d:8a: 2e:d4:ce:3d:ed:01:6d:07:68:60:87:6d:70:09:cb:b6:44:40: d1:5a:cf:10:c1:da:8f:f2:67:ed:3b:19:e1:f2:9b:6a:35:21: 7d:36:88:03:8f:bf:c2:ef:db:b2:28:bb:fa:ea:56:29:32:60: 87:27:f9:76:08:6d:fd:0c:09:9b:8a:c1:74:9a:9d:2f:1a:8f: 65:8c:a6:0f:a5:1b:08:7f:c8:8a:27:95:48:9e:a5:16:71:8f: 46:7f:dd:42:2c:54:d8:61:be:51:0e:71:f1:b3:e9:4c:26:66: e1:ca:2d:05:3d:40:44:cc:73:ce:08:b6:a5:c4:03:f1:67:72: d5:97:0f:fc:88:be:59:3c:6d:d1:c7:e6:4b:c6:80:d3:2f:c8: ac:fb:b2:10:0e:54:31:06:31:ca:e0:e3:8d:93:9d:2e:ef:86: d4:b4:33:8a:e4:45:45:93:b8:cc:70:35:e7:34:7d:40:e7:12: d0:83:c2:97:44:d2:24:5c:c3:7d:6e:a7:bc:d3:66:96:4a:63: 59:12:ca:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUdeHb+vgS5lDfk70rheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy N2FlNTUwHhcNMjUxMjA2MDEwMTA3WhcNMjUxMjA3MDEwMTA3WjAzMTEwLwYDVQQD Eyg0NjdmOWI5ZDM2Mjc0OGYxZDc3OTM3YzY4NmIwNmEyMjJmNTgzODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g8m0I6JCKGPdhOoKLI9zc3hVPfq 0wjO9bJ6xJBsJsE2tqaccmNrolJG7WjYdTer2AjclX9GT6rOjdg3OYYT0ekrBxF4 i6loBh3hL/wDrhPR7/FKgl7i2JuKlZJi7p6tIEimEWTC+DMq+bHoQ/WYlS5NpR0i vOlIRXBHLaV53+nnOQFZgfG/cKiwAyN2BmFsG0jMfy7geBY4rWK6E2+A026miOCe /sHwd+CFba4w3r2Q2WDk8ZAgpxPxSXYdRe+HMogm/HuEsskyigyokubTW84IeJWx q7orGWUb452NqKCzwAQntOUChEU25kl52xbQJWvEkBLj1u0B+rQ8HvfFCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ/m502J0jx13k3xoawaiIvWDgRMB8GA1UdIwQY MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHh1E3QyW fA5ohiYYrOSqAFt47L1vXW1pOcfRAe/Wi+W38vZbm8mHHXYtAK9WdZtxSGZjoR2K LtTOPe0BbQdoYIdtcAnLtkRA0VrPEMHaj/Jn7TsZ4fKbajUhfTaIA4+/wu/bsii7 +upWKTJghyf5dght/QwJm4rBdJqdLxqPZYymD6UbCH/IiieVSJ6lFnGPRn/dQixU 2GG+UQ5x8bPpTCZm4cotBT1ARMxzzgi2pcQD8Wdy1ZcP/Ii+WTxt0cfmS8aA0y/I rPuyEA5UMQYxyuDjjZOdLu+G1LQziuRFRZO4zHA15zR9QOcS0IPCl0TSJFzDfW6n vNNmlkpjWRLKNA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:27 2025 by rpki-client