This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json) Hash identifier: 3aJ7eFpsLRne1mvZKfL0RXuNO5oB63sGBLeqhfoiIZA= Subject key identifier: A0:16:E2:46:AB:FE:74:9D:57:BC:78:E8:B8:92:3F:64:39:7A:C1:C6 Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56 Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956 Certificate serial: 019AF1D206016BE960D63A7CE06D154A59FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: /8ARyK8X3ggP2r4K4ehvXMWsRuydu1X0qohNa88ptHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:06:01:6b:e9:60:d6:3a:7c:e0:6d:15:4a:59:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=a016e246abfe749d57bc78e8b8923f64397ac1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:16:46:3f:d8:7b:0d:73:2a:c1:32:32:28: 4f:ba:3d:12:ec:45:1b:c4:63:4c:37:2d:23:55:80: c4:e0:95:8a:87:ee:af:87:e5:75:bf:3f:8b:51:73: 4a:8c:9f:5e:d9:b4:bb:7c:d1:39:81:bf:9b:63:d7: 15:63:f7:38:c9:d8:24:25:0c:a8:bc:52:5a:6e:6c: 19:99:b4:9f:14:8e:ff:ac:29:c9:6c:5c:49:f7:86: ea:a7:85:b3:2f:b9:d6:28:38:7b:94:fb:49:bb:7c: 4b:5b:f5:4f:44:70:89:bc:3c:5a:a0:c0:77:ab:cb: bc:b6:8b:b3:87:64:49:1d:6c:c6:26:e9:fb:bd:fc: 36:24:b3:f6:f1:84:7a:ea:56:a5:93:27:b0:e0:53: 47:d2:62:16:60:60:a9:c2:fc:8b:2b:eb:f8:7c:53: 5e:03:ec:0d:74:d0:17:0f:6b:6b:53:bb:5d:e7:f7: 8d:f9:ba:02:af:3d:b3:0a:0f:91:30:e1:fd:56:1e: 74:49:9c:df:5c:2a:b6:c2:36:7c:e5:03:ad:be:b3: 3a:f3:41:97:37:cc:14:b4:f0:ad:d6:a7:9f:45:7b: 5c:a1:78:21:99:d3:de:0b:b0:e0:c8:09:7f:0c:c7: 91:6c:73:2d:ba:7a:99:dc:1d:85:c9:ce:3c:ef:4a: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:16:E2:46:AB:FE:74:9D:57:BC:78:E8:B8:92:3F:64:39:7A:C1:C6 X509v3 Authority Key Identifier: keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:2c:7f:e1:62:e3:af:5e:77:c3:1d:88:71:f6:52:92:85: f9:cd:be:48:e9:54:52:e0:be:d5:0f:9d:33:5e:6e:8a:e5:f5: a2:32:bf:50:7b:c5:77:a2:03:c2:09:1b:d0:cf:99:b0:2d:ea: 29:76:26:87:b4:bb:ea:a8:4b:90:eb:d3:fd:54:f9:34:c5:d1: 6e:ab:f2:7b:f5:a1:70:61:4f:a6:f7:9d:1f:10:42:dd:8b:23: 3b:b1:f1:06:d3:02:35:96:31:67:64:c7:39:20:c9:71:19:ae: 44:c6:4b:9c:5c:b3:ec:89:1f:ef:8f:5b:0c:ec:ae:85:18:3e: a6:3c:13:1c:2c:3a:be:50:3d:bd:bf:01:15:ab:08:78:8a:b9: 3a:cf:99:b8:9b:64:fc:11:62:6a:e0:81:24:1b:4d:88:d4:b3: fb:ff:6f:54:ac:08:60:07:71:86:d9:8d:93:1e:d7:f9:c7:af: fa:80:df:6d:4d:c2:71:fa:cd:d8:9b:2d:8b:65:31:ce:8d:10: 53:03:83:53:1c:c4:4b:f2:28:92:66:df:9f:e8:83:2d:ba:42: a8:6a:c0:95:11:93:81:4f:13:20:51:32:c6:f8:a6:e9:07:b0: 49:99:16:d0:0a:e5:d8:e2:b2:ae:3c:79:e6:1b:dc:ef:b9:08: cc:02:5e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gYBa+lg1jp84G0VSln8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMDE2NWZiZmE4ZTI0NDg5YzU1NTNkMWI4NWVjNTAxN2Vm ZGY5NTYwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EyhhMDE2ZTI0NmFiZmU3NDlkNTdiYzc4ZThiODkyM2Y2NDM5N2FjMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW8WRj/Yew1zKsEyMihPuj0S7EUb xGNMNy0jVYDE4JWKh+6vh+V1vz+LUXNKjJ9e2bS7fNE5gb+bY9cVY/c4ydgkJQyo vFJabmwZmbSfFI7/rCnJbFxJ94bqp4WzL7nWKDh7lPtJu3xLW/VPRHCJvDxaoMB3 q8u8touzh2RJHWzGJun7vfw2JLP28YR66lalkyew4FNH0mIWYGCpwvyLK+v4fFNe A+wNdNAXD2trU7td5/eN+boCrz2zCg+RMOH9Vh50SZzfXCq2wjZ85QOtvrM680GX N8wUtPCt1qefRXtcoXghmdPeC7DgyAl/DMeRbHMtunqZ3B2Fyc4870ol/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAW4kar/nSdV7x46LiSP2Q5esHGMB8GA1UdIwQY MBaAFGIBZfv6jiRInFVT0bhexQF+/flWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEt OTJjMWIyZDEzNTkyLzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEtOTJjMWIyZDEzNTky LzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8Asf+Fi 469ed8MdiHH2UpKF+c2+SOlUUuC+1Q+dM15uiuX1ojK/UHvFd6IDwgkb0M+ZsC3q KXYmh7S76qhLkOvT/VT5NMXRbqvye/WhcGFPpvedHxBC3YsjO7HxBtMCNZYxZ2TH OSDJcRmuRMZLnFyz7Ikf749bDOyuhRg+pjwTHCw6vlA9vb8BFasIeIq5Os+ZuJtk /BFiauCBJBtNiNSz+/9vVKwIYAdxhtmNkx7X+cev+oDfbU3CcfrN2Jsti2Uxzo0Q UwODUxzES/Iokmbfn+iDLbpCqGrAlRGTgU8TIFEyxvim6QewSZkW0Arl2OKyrjx5 5hvc77kIzAJeHw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:46 2025 by rpki-client