This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft File: yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft (raw, json) Hash identifier: FUYXAnG66yG63Ef1FtkMQOd5S+JJJMWInZ5F+dCu1ic= Subject key identifier: 08:C3:A0:82:13:5F:DF:A6:61:AB:3E:3B:2D:5A:CC:7D:B6:AF:1B:00 Authority key identifier: C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6 Certificate issuer: /CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6 Certificate serial: 019AF27689164A5CE6FE2E821A7D19D6C0F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft Manifest number: 0E1A Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl (hash: twlMuy0jea+Uzw6yzEYA8m1e6OQyA77uW/YinE9+rz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:89:16:4a:5c:e6:fe:2e:82:1a:7d:19:d6:c0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8676ffde317f2ec1b8100d2d9d44a3e7d8f78d6 Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=08c3a082135fdfa661ab3e3b2d5acc7db6af1b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d8:dd:dd:17:a9:c5:ec:ae:7c:97:00:8a:f7: 9c:32:18:a3:a7:00:a1:89:6d:6a:1c:e0:79:d7:a2: ad:c3:d2:a8:7a:74:cc:b2:cc:ac:71:ad:f6:00:ef: 0a:0f:be:04:9c:49:49:09:ad:eb:c4:6f:a6:cf:b5: 95:b8:e6:c2:63:63:e7:30:c2:00:5c:92:00:50:be: 80:69:86:ef:93:a2:e4:49:99:2e:1b:a9:28:66:18: f3:47:b3:e5:40:f2:06:ec:8f:8d:3c:0f:2d:6c:4c: 08:98:4d:4d:95:68:d1:58:1e:cb:48:d2:b0:c8:02: bb:c9:77:e2:9c:89:35:82:89:05:ea:5a:2c:e6:eb: e7:0e:f4:9c:b4:c1:1a:da:b8:df:c8:92:41:02:31: c1:52:a5:9e:2a:78:f4:67:17:5b:b4:31:79:0e:61: 95:fc:c3:93:5d:f7:07:85:b7:0a:b4:df:ef:29:1c: 74:19:27:33:ab:57:0b:a6:01:f9:c5:c7:f4:52:96: 5d:1e:fd:9f:3b:4a:65:6b:cd:6a:10:ac:be:60:4a: b0:68:2b:6c:15:c6:47:18:2f:b8:12:04:e2:7c:32: f6:f5:01:43:8b:c6:d9:19:fb:83:c2:86:8e:ea:c9: fc:9e:3f:88:8c:69:8c:78:bc:65:3c:57:9e:c9:23: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C3:A0:82:13:5F:DF:A6:61:AB:3E:3B:2D:5A:CC:7D:B6:AF:1B:00 X509v3 Authority Key Identifier: keyid:C8:67:6F:FD:E3:17:F2:EC:1B:81:00:D2:D9:D4:4A:3E:7D:8F:78:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGdv_eMX8uwbgQDS2dRKPn2PeNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/49b307-fdca-4c57-afdf-709793cd0123/1/yGdv_eMX8uwbgQDS2dRKPn2PeNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:05:b7:17:c0:b1:a3:bb:6e:f8:9d:22:81:78:df:3e:42:00: 45:62:19:cc:64:8c:8e:2d:15:be:5e:1d:36:67:c6:bc:c6:b9: fe:eb:d8:e7:d2:1c:9f:40:66:5e:6b:69:6a:a1:e4:84:a9:ae: aa:01:91:3e:e9:a5:48:3a:69:72:9d:f0:e6:74:5e:7f:81:9a: 10:35:7c:51:85:3d:29:99:12:06:cc:72:71:62:7e:f2:e6:2c: 1d:77:a6:41:27:e3:6e:27:eb:71:60:dd:57:c8:d3:0f:c2:79: 87:c8:21:c7:c6:5e:a3:04:5d:82:7e:a4:bc:99:0a:95:65:b8: 05:59:8e:11:a7:cb:db:ac:54:98:77:79:78:e0:b0:27:7c:62: ac:f5:3e:f5:68:a3:af:7c:82:a5:b6:93:47:85:12:0b:77:e6: 78:45:6f:6e:e6:a8:a2:d2:c2:c4:83:7e:b5:f8:8f:f5:83:29: ab:bf:0a:67:f6:f8:89:da:b3:5e:f3:bd:2c:9d:24:48:2d:44: 2d:bb:09:82:4d:37:97:a7:41:b9:04:c8:b5:67:64:0d:0a:b8: d4:cd:6a:d4:c1:1e:1b:ef:75:6f:e1:a2:40:fd:c3:b6:22:a9: 3c:a2:0c:58:1f:92:ed:47:bc:77:a9:82:31:7d:01:d0:3c:83: cb:33:79:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydokWSlzm/i6CGn0Z1sD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Njc2ZmZkZTMxN2YyZWMxYjgxMDBkMmQ5ZDQ0YTNlN2Q4 Zjc4ZDYwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD EygwOGMzYTA4MjEzNWZkZmE2NjFhYjNlM2IyZDVhY2M3ZGI2YWYxYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9jd3RepxeyufJcAivecMhijpwCh iW1qHOB516Ktw9KoenTMssysca32AO8KD74EnElJCa3rxG+mz7WVuObCY2PnMMIA XJIAUL6AaYbvk6LkSZkuG6koZhjzR7PlQPIG7I+NPA8tbEwImE1NlWjRWB7LSNKw yAK7yXfinIk1gokF6los5uvnDvSctMEa2rjfyJJBAjHBUqWeKnj0ZxdbtDF5DmGV /MOTXfcHhbcKtN/vKRx0GSczq1cLpgH5xcf0UpZdHv2fO0pla81qEKy+YEqwaCts FcZHGC+4EgTifDL29QFDi8bZGfuDwoaO6sn8nj+IjGmMeLxlPFeeySP1fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjDoIITX9+mYas+Oy1azH22rxsAMB8GA1UdIwQY MBaAFMhnb/3jF/LsG4EA0tnUSj59j3jWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80OWIzMDctZmRjYS00YzU3LWFmZGYt NzA5NzkzY2QwMTIzLzEveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS80OWIzMDctZmRjYS00YzU3LWFmZGYtNzA5NzkzY2QwMTIz LzEveUdkdl9lTVg4dXdiZ1FEUzJkUktQbjJQZU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQW3F8Cx o7tu+J0igXjfPkIARWIZzGSMji0Vvl4dNmfGvMa5/uvY59Icn0BmXmtpaqHkhKmu qgGRPumlSDppcp3w5nRef4GaEDV8UYU9KZkSBsxycWJ+8uYsHXemQSfjbifrcWDd V8jTD8J5h8ghx8ZeowRdgn6kvJkKlWW4BVmOEafL26xUmHd5eOCwJ3xirPU+9Wij r3yCpbaTR4USC3fmeEVvbuaootLCxIN+tfiP9YMpq78KZ/b4idqzXvO9LJ0kSC1E LbsJgk03l6dBuQTItWdkDQq41M1q1MEeG+91b+GiQP3DtiKpPKIMWB+S7Ue8d6mC MX0B0DyDyzN5lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:33 2025 by rpki-client