This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft File: yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json) Hash identifier: NRfYzthrkrImAKUMzgzusKwOlmyu9NUN0+BW7L0g8XA= Subject key identifier: BC:91:BC:49:AA:58:C0:56:FC:9C:31:53:16:93:8A:47:8F:03:63:37 Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D Certificate issuer: /CN=c980d19c3bfcc4047156776f02a349898e46b90d Certificate serial: 019AF31C47E68981C9AC4DDE81EDC46B71C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft Manifest number: 0A7D Signing time: Sat 06 Dec 2025 10:01:47 +0000 Manifest this update: Sat 06 Dec 2025 10:01:47 +0000 Manifest next update: Sun 07 Dec 2025 10:01:47 +0000 Files and hashes: 1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: kVfMcCXfInyGmuHNNN3qimSsW14XCVCLef9lIch8PlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:47:e6:89:81:c9:ac:4d:de:81:ed:c4:6b:71:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d Validity Not Before: Dec 6 10:01:47 2025 GMT Not After : Dec 7 10:01:47 2025 GMT Subject: CN=bc91bc49aa58c056fc9c315316938a478f036337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:1a:cf:ba:d6:6d:0c:04:4d:e6:55:6c:0b: 18:96:fa:cb:d6:c1:cf:a9:40:f1:46:0e:41:9b:f4: fa:85:43:5f:8d:71:5a:88:46:32:f8:13:d1:d6:8d: 61:5b:b2:7c:3a:11:df:54:e8:cf:f1:af:fc:91:b5: e9:3b:b6:bf:51:6d:ca:b7:1c:5e:92:96:5c:0d:88: cf:0d:9a:77:66:b7:97:70:17:53:94:07:84:e9:60: 82:5e:a8:96:68:de:9f:92:e4:3e:fc:ca:69:06:f6: 8d:a5:7a:59:d2:4f:97:4f:c5:92:17:3f:52:38:39: 01:5a:26:6f:91:ac:37:72:99:a3:b7:30:4e:58:72: 4d:4d:39:8e:ad:cb:9c:69:ec:7a:50:14:73:5a:c4: 43:78:cd:4a:3c:ea:58:f9:ca:5a:79:69:a3:a7:bc: 16:7a:66:ab:f2:7d:79:ac:8b:10:7f:6b:b7:d3:9c: 9e:d8:33:99:8e:6e:cc:c4:67:de:d7:c6:25:77:99: e4:54:8e:9a:a9:ab:de:f7:0d:7a:d4:ca:0d:03:70: f8:cf:37:bb:3f:9c:22:0f:e3:b4:db:cc:56:61:c4: 57:e1:8c:d2:57:30:7b:3e:28:c3:19:a8:6f:2a:80: 1a:87:00:3d:e5:97:57:15:9e:bc:82:21:9e:8a:66: 43:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:91:BC:49:AA:58:C0:56:FC:9C:31:53:16:93:8A:47:8F:03:63:37 X509v3 Authority Key Identifier: keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:99:b3:5d:75:83:26:ed:55:69:25:03:fc:b2:d8:d1:4b:0a: 09:46:5b:25:71:c0:86:21:87:15:32:8a:e9:e8:78:5a:a4:18: 76:d4:8d:df:c7:f2:e1:8b:18:ce:b4:61:1a:5a:39:0e:8a:9f: b5:c6:9f:c8:ed:a6:67:ce:aa:f8:7b:da:c0:de:27:5a:e8:11: c9:6d:72:14:98:09:77:46:6d:75:d5:ea:b8:1f:06:0a:b5:6a: bb:aa:56:ac:74:9b:c2:08:16:61:13:e7:3f:e3:42:ba:99:fe: 37:63:0a:a5:3d:5d:33:4a:d1:29:bf:17:cf:de:27:e4:fd:b0: e8:8c:eb:5d:b6:1c:7b:99:f3:48:a3:f9:25:39:c6:b5:65:14: 0e:79:2f:65:87:93:d2:0f:0f:30:da:c7:f8:1b:30:88:52:b3: 75:4b:22:c7:ef:94:d8:f1:1e:13:64:0e:95:0c:b2:38:ff:fa: 51:4a:8a:1b:0c:5c:fa:31:a6:87:85:7f:80:27:03:39:07:d6: ff:9d:43:12:11:b0:7f:4c:69:87:d8:7e:b9:12:6c:eb:d8:08: 2c:1b:9d:2a:54:7e:36:61:88:6c:d4:50:58:4e:9f:e8:7a:d6: 4c:f1:b7:dc:00:eb:85:87:7b:46:aa:20:a5:91:b4:ab:e3:54: 74:b9:91:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEfmiYHJrE3ege3Ea3HBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ODBkMTljM2JmY2M0MDQ3MTU2Nzc2ZjAyYTM0OTg5OGU0 NmI5MGQwHhcNMjUxMjA2MTAwMTQ3WhcNMjUxMjA3MTAwMTQ3WjAzMTEwLwYDVQQD EyhiYzkxYmM0OWFhNThjMDU2ZmM5YzMxNTMxNjkzOGE0NzhmMDM2MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa4az7rWbQwETeZVbAsYlvrL1sHP qUDxRg5Bm/T6hUNfjXFaiEYy+BPR1o1hW7J8OhHfVOjP8a/8kbXpO7a/UW3Ktxxe kpZcDYjPDZp3ZreXcBdTlAeE6WCCXqiWaN6fkuQ+/MppBvaNpXpZ0k+XT8WSFz9S ODkBWiZvkaw3cpmjtzBOWHJNTTmOrcucaex6UBRzWsRDeM1KPOpY+cpaeWmjp7wW emar8n15rIsQf2u305ye2DOZjm7MxGfe18Yld5nkVI6aqave9w161MoNA3D4zze7 P5wiD+O028xWYcRX4YzSVzB7PijDGahvKoAahwA95ZdXFZ68giGeimZDuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyRvEmqWMBW/JwxUxaTikePA2M3MB8GA1UdIwQY MBaAFMmA0Zw7/MQEcVZ3bwKjSYmORrkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82OGMwNjMtNDAwYS00ZWQxLTlmYmYt Yjg2NjE5NzUyMDM5LzEveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82OGMwNjMtNDAwYS00ZWQxLTlmYmYtYjg2NjE5NzUyMDM5 LzEveVlEUm5Edjh4QVJ4Vm5kdkFxTkppWTVHdVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5mzXXWD Ju1VaSUD/LLY0UsKCUZbJXHAhiGHFTKK6eh4WqQYdtSN38fy4YsYzrRhGlo5Doqf tcafyO2mZ86q+HvawN4nWugRyW1yFJgJd0ZtddXquB8GCrVqu6pWrHSbwggWYRPn P+NCupn+N2MKpT1dM0rRKb8Xz94n5P2w6IzrXbYce5nzSKP5JTnGtWUUDnkvZYeT 0g8PMNrH+BswiFKzdUsix++U2PEeE2QOlQyyOP/6UUqKGwxc+jGmh4V/gCcDOQfW /51DEhGwf0xph9h+uRJs69gILBudKlR+NmGIbNRQWE6f6HrWTPG33ADrhYd7Rqog pZG0q+NUdLmRRg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:55 2025 by rpki-client