This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft File: yVcXmb2ok6GGC0phbFYnivXsksU.mft (raw, json) Hash identifier: k7IBIcz6Gjg4fvPpsNixyFz7tgBr2NPFzUNa9dmJkbA= Subject key identifier: 8B:CF:20:4B:6D:F0:EB:2D:5B:FA:FB:CE:EB:6F:E5:F7:09:A8:9C:5F Authority key identifier: C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5 Certificate issuer: /CN=c9571799bda893a1860b4a616c56278af5ec92c5 Certificate serial: 019AF27686E758CBBA73F70BE8AC295B85DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft Manifest number: 0C66 Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: yVcXmb2ok6GGC0phbFYnivXsksU.crl (hash: atnnbgZWOngKivEadXSUorqaQcEGQKklA+BKAVGkt8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:86:e7:58:cb:ba:73:f7:0b:e8:ac:29:5b:85:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9571799bda893a1860b4a616c56278af5ec92c5 Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=8bcf204b6df0eb2d5bfafbceeb6fe5f709a89c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:fb:4b:2f:ad:5c:8b:80:b5:a3:75:40:2a: 7f:23:6d:ee:2f:49:d2:71:6e:29:0f:7a:04:ee:62: 2a:b4:75:5d:58:53:a6:94:9c:2a:94:e6:b5:8e:54: 11:03:eb:03:a6:48:da:c8:41:0a:9c:64:03:1c:c9: 7b:22:31:f6:46:62:18:8f:84:e7:f9:59:85:d9:15: 50:ba:20:09:f6:da:fe:1b:50:b2:a0:23:71:df:a6: bb:51:3d:a6:9b:f4:24:94:a4:3e:77:f0:93:ec:43: 7c:e0:10:51:f1:c6:e3:2a:c0:5a:74:79:83:6a:e4: 51:01:8b:1e:c0:c5:bb:83:ac:62:5b:e9:86:ae:b8: 0a:80:31:5c:0f:1f:8a:7d:ab:66:87:21:1a:60:49: 1f:b1:82:01:38:d7:12:10:2a:fd:41:76:b4:8e:70: 7a:10:99:85:70:f4:d2:63:fd:f5:50:1c:56:20:0c: 45:2e:b8:d8:43:e6:72:1d:d8:82:b9:45:15:37:80: 9c:dd:aa:fa:1f:62:a8:7d:99:eb:c1:57:c0:fd:4a: 30:a2:41:b2:25:55:6a:63:96:ad:1e:b3:14:5d:fa: ff:e8:a6:6f:9b:4c:85:43:5e:43:9a:06:11:d0:21: 9b:5e:64:e2:21:20:df:3b:55:eb:9f:ed:f4:d1:a4: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:20:4B:6D:F0:EB:2D:5B:FA:FB:CE:EB:6F:E5:F7:09:A8:9C:5F X509v3 Authority Key Identifier: keyid:C9:57:17:99:BD:A8:93:A1:86:0B:4A:61:6C:56:27:8A:F5:EC:92:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVcXmb2ok6GGC0phbFYnivXsksU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/08ef87-cf55-4b5d-9821-03746d7bd294/1/yVcXmb2ok6GGC0phbFYnivXsksU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d4:cc:43:cf:69:0d:e9:e1:78:bf:7f:4f:37:09:f5:55:0f: 8b:67:f9:e8:c5:18:90:47:94:30:f5:4a:b0:c5:f9:04:bb:0e: b3:c2:e9:69:cb:f9:8d:20:4e:ea:c0:f2:29:07:a0:82:bc:8e: 4d:56:8d:9d:e8:d9:3f:d9:06:9a:45:cb:2a:36:fa:c4:9c:cc: 41:90:f2:81:78:14:60:d3:a5:ff:82:bd:e7:ef:05:c5:1e:36: 0c:b6:ca:de:97:ec:33:47:06:58:7a:71:ee:3f:e5:7c:68:b1: 18:9d:58:a7:4e:0f:90:a2:7b:3b:bf:5e:14:4d:e8:37:fa:45: 08:2b:1e:fe:28:a8:6c:af:f6:44:c9:e1:ff:1c:d5:b6:a1:1c: 9a:a7:98:4e:7e:a3:54:34:25:17:77:79:e9:49:e6:76:48:d8: ae:92:e1:71:45:6e:65:e0:4f:60:48:82:31:fd:b2:76:a7:1b: 3c:60:41:fe:4b:e4:91:3a:02:f0:76:ec:24:a3:d5:2b:51:b6: 8f:04:a7:09:99:10:48:88:bb:c3:78:c9:75:7a:64:ff:4d:97: 5b:52:c2:ab:dd:14:56:a9:0e:17:b2:23:9a:0f:ea:3c:ef:90: 00:14:c6:df:a4:6b:94:93:7d:76:97:f0:82:33:12:0b:e2:1e: 8c:28:28:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydobnWMu6c/cL6KwpW4XdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTcxNzk5YmRhODkzYTE4NjBiNGE2MTZjNTYyNzhhZjVl YzkyYzUwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD Eyg4YmNmMjA0YjZkZjBlYjJkNWJmYWZiY2VlYjZmZTVmNzA5YTg5YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8f7Sy+tXIuAtaN1QCp/I23uL0nS cW4pD3oE7mIqtHVdWFOmlJwqlOa1jlQRA+sDpkjayEEKnGQDHMl7IjH2RmIYj4Tn +VmF2RVQuiAJ9tr+G1CyoCNx36a7UT2mm/QklKQ+d/CT7EN84BBR8cbjKsBadHmD auRRAYsewMW7g6xiW+mGrrgKgDFcDx+KfatmhyEaYEkfsYIBONcSECr9QXa0jnB6 EJmFcPTSY/31UBxWIAxFLrjYQ+ZyHdiCuUUVN4Cc3ar6H2KofZnrwVfA/UowokGy JVVqY5atHrMUXfr/6KZvm0yFQ15DmgYR0CGbXmTiISDfO1Xrn+300aQQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvPIEtt8OstW/r7zutv5fcJqJxfMB8GA1UdIwQY MBaAFMlXF5m9qJOhhgtKYWxWJ4r17JLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEt MDM3NDZkN2JkMjk0LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wOGVmODctY2Y1NS00YjVkLTk4MjEtMDM3NDZkN2JkMjk0 LzEveVZjWG1iMm9rNkdHQzBwaGJGWW5pdlhza3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNTMQ89p DenheL9/TzcJ9VUPi2f56MUYkEeUMPVKsMX5BLsOs8Lpacv5jSBO6sDyKQeggryO TVaNnejZP9kGmkXLKjb6xJzMQZDygXgUYNOl/4K95+8FxR42DLbK3pfsM0cGWHpx 7j/lfGixGJ1Yp04PkKJ7O79eFE3oN/pFCCse/iiobK/2RMnh/xzVtqEcmqeYTn6j VDQlF3d56UnmdkjYrpLhcUVuZeBPYEiCMf2ydqcbPGBB/kvkkToC8HbsJKPVK1G2 jwSnCZkQSIi7w3jJdXpk/02XW1LCq90UVqkOF7Ijmg/qPO+QABTG36RrlJN9dpfw gjMSC+IejCgoVA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:01 2025 by rpki-client