This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft File: yHfSSx1xwCFHafEZ33KY_wz4l7A.mft (raw, json) Hash identifier: WMvXqDUDCedT/U5jLB78pa0+m/NrYlMXfJ7i74kVk7o= Subject key identifier: AE:CC:F6:BA:B8:51:71:65:77:DA:D7:7B:48:D3:A5:8E:AC:AA:05:3E Authority key identifier: C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0 Certificate issuer: /CN=c877d24b1d71c0214769f119df7298ff0cf897b0 Certificate serial: 019AF208D81728BBBE81AC32F5862C21FF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft Manifest number: 0BCB Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: yHfSSx1xwCFHafEZ33KY_wz4l7A.crl (hash: JbPrwAduWIE0xCfSh3li1cNCg+9iuobkczcM0GhllrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d8:17:28:bb:be:81:ac:32:f5:86:2c:21:ff:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c877d24b1d71c0214769f119df7298ff0cf897b0 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=aeccf6bab851716577dad77b48d3a58eacaa053e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b2:c5:ed:b5:1b:1d:20:6a:81:8c:7b:0f:87: c1:fb:bc:76:d4:fb:c9:60:df:e6:d7:71:fd:3d:88: b0:ff:f5:cc:9f:58:a0:19:16:5d:28:c1:fb:ef:76: b8:81:5e:03:73:21:b0:b0:bb:08:92:e8:56:9d:0e: 64:61:01:cf:9a:8f:6d:7a:a7:d1:11:b6:98:d4:fc: 1a:ce:ed:d4:00:6c:f6:bf:15:97:e4:be:9f:a4:3e: 1d:f4:1d:bd:66:6b:c9:35:94:eb:93:53:9b:6e:01: 30:3e:62:fc:14:90:6a:1d:4f:13:92:17:27:72:7f: f5:08:b3:30:db:31:15:35:19:05:5b:ad:1c:f7:bf: 11:8c:c8:58:c2:6f:fc:d2:8a:7d:0d:29:25:93:14: be:b0:b8:1a:e2:bc:e1:ad:14:c2:44:41:7f:e9:ce: 07:85:fe:b6:d7:47:ce:24:5b:d3:fb:87:05:9d:f7: c8:1a:87:fa:69:66:c3:e4:8e:5d:f6:f0:2d:6e:52: 91:bd:cc:4e:dd:22:71:0c:a6:c8:0c:be:c5:06:38: 8c:68:d0:ed:4c:35:e8:8b:f5:27:6b:06:97:11:61: ed:c0:e0:58:4a:e0:d1:e7:36:0d:fc:c8:ef:4e:e4: 6e:df:ff:00:49:be:e1:e7:c7:db:a6:d0:99:aa:2c: 9d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CC:F6:BA:B8:51:71:65:77:DA:D7:7B:48:D3:A5:8E:AC:AA:05:3E X509v3 Authority Key Identifier: keyid:C8:77:D2:4B:1D:71:C0:21:47:69:F1:19:DF:72:98:FF:0C:F8:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHfSSx1xwCFHafEZ33KY_wz4l7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89234b-20c5-4f5b-b806-9ec28ae65745/1/yHfSSx1xwCFHafEZ33KY_wz4l7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c5:2b:bf:59:89:01:31:65:4a:7d:01:ce:0b:7e:97:00:f2: 74:af:79:7d:a6:f8:93:d2:ef:cb:08:66:0c:b5:24:3a:12:c1: ff:16:f4:30:d2:e4:0b:cc:37:bd:cf:fc:08:80:b5:26:70:71: 0d:11:c0:28:82:08:5a:ca:5a:a3:cf:f5:60:b5:44:ae:d1:ff: cb:81:01:5e:49:93:39:a8:6f:fa:38:45:56:c2:4c:9f:b9:76: 9f:cd:9c:d4:ca:d0:21:31:31:cc:e3:63:92:db:b3:9a:08:0c: c6:4f:fb:ee:24:88:5c:16:25:df:ba:66:e7:28:3d:71:56:93: e0:8b:c8:f8:13:fd:db:15:08:77:f0:03:ec:68:11:f5:4e:f9: a4:7a:b9:dc:ab:bb:25:3d:e3:e3:a8:7d:3d:e6:7a:db:73:b8: c7:60:83:18:ed:31:18:34:1e:f6:a2:3d:90:d2:8a:ca:4f:2e: f5:da:c0:cc:43:5f:52:b2:89:00:67:33:90:dd:e7:53:39:f1: c4:f7:56:06:12:1f:a3:70:04:9f:d5:d4:ef:cc:e7:a2:86:78: be:f5:ae:a8:87:d1:b2:87:04:96:fb:03:60:27:08:17:bb:47: a8:54:3b:64:5b:2d:d3:2f:cf:d3:3c:36:fd:53:ad:c1:99:b8: ff:83:59:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNgXKLu+gawy9YYsIf8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzdkMjRiMWQ3MWMwMjE0NzY5ZjExOWRmNzI5OGZmMGNm ODk3YjAwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhhZWNjZjZiYWI4NTE3MTY1NzdkYWQ3N2I0OGQzYTU4ZWFjYWEwNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57LF7bUbHSBqgYx7D4fB+7x21PvJ YN/m13H9PYiw//XMn1igGRZdKMH773a4gV4DcyGwsLsIkuhWnQ5kYQHPmo9teqfR EbaY1Pwazu3UAGz2vxWX5L6fpD4d9B29ZmvJNZTrk1ObbgEwPmL8FJBqHU8Tkhcn cn/1CLMw2zEVNRkFW60c978RjMhYwm/80op9DSklkxS+sLga4rzhrRTCREF/6c4H hf6210fOJFvT+4cFnffIGof6aWbD5I5d9vAtblKRvcxO3SJxDKbIDL7FBjiMaNDt TDXoi/UnawaXEWHtwOBYSuDR5zYN/MjvTuRu3/8ASb7h58fbptCZqiydpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7M9rq4UXFld9rXe0jTpY6sqgU+MB8GA1UdIwQY MBaAFMh30ksdccAhR2nxGd9ymP8M+JewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTIzNGItMjBjNS00ZjViLWI4MDYt OWVjMjhhZTY1NzQ1LzEveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84OTIzNGItMjBjNS00ZjViLWI4MDYtOWVjMjhhZTY1NzQ1 LzEveUhmU1N4MXh3Q0ZIYWZFWjMzS1lfd3o0bDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsUrv1mJ ATFlSn0Bzgt+lwDydK95fab4k9LvywhmDLUkOhLB/xb0MNLkC8w3vc/8CIC1JnBx DRHAKIIIWspao8/1YLVErtH/y4EBXkmTOahv+jhFVsJMn7l2n82c1MrQITExzONj ktuzmggMxk/77iSIXBYl37pm5yg9cVaT4IvI+BP92xUId/AD7GgR9U75pHq53Ku7 JT3j46h9PeZ623O4x2CDGO0xGDQe9qI9kNKKyk8u9drAzENfUrKJAGczkN3nUznx xPdWBhIfo3AEn9XU78znooZ4vvWuqIfRsocElvsDYCcIF7tHqFQ7ZFst0y/P0zw2 /VOtwZm4/4NZ4w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:36 2025 by rpki-client