This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft File: YV3bd8eSb1d7AKvNPVL0LJICec0.mft (raw, json) Hash identifier: mARN0Bt32uJIM8A151v6SqmoT7D1399T1Rus8YnYjjs= Subject key identifier: 49:41:80:A2:5A:C8:1E:E6:D6:0A:45:58:63:77:D8:EC:6F:B7:E8:4A Authority key identifier: 61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD Certificate issuer: /CN=615ddb77c7926f577b00abcd3d52f42c920279cd Certificate serial: 019AF12E3B659FE62E0BBFEF4094EE9F0814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: YV3bd8eSb1d7AKvNPVL0LJICec0.crl (hash: z8Up6WjfOaN7QehjsRJufXwTEBFtRBiFCNZrQC0Wcz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3b:65:9f:e6:2e:0b:bf:ef:40:94:ee:9f:08:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615ddb77c7926f577b00abcd3d52f42c920279cd Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=494180a25ac81ee6d60a45586377d8ec6fb7e84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:ad:be:1e:41:ed:7d:64:ac:be:a2:3d:47: d2:1c:b2:82:8c:73:93:75:19:73:da:d9:a6:68:14: 0a:34:d0:ad:51:cd:26:8e:a2:c6:08:9d:7a:ff:3a: 23:98:e2:2a:b7:03:fa:d1:6b:53:f2:88:88:b8:1b: eb:f2:15:1b:a1:40:f3:6d:fe:a9:fb:08:55:07:07: c3:57:de:33:65:a4:62:44:e6:70:10:90:c7:8d:b2: 55:58:77:a6:6e:7d:4b:b7:04:3b:98:e2:7d:9c:60: 67:bf:86:5b:de:f7:ce:e4:69:19:9e:27:db:1f:a6: 00:06:0b:91:5f:d3:05:a5:aa:90:2c:3d:cc:7c:d7: 34:c6:08:b9:15:14:8b:ef:a6:fb:c4:6f:45:4e:5c: 3b:28:55:a7:2d:c6:33:83:d5:c9:f7:f0:91:7f:51: 46:ac:86:30:1f:33:66:b0:92:d8:2a:9c:05:09:a0: ea:c5:f5:d1:9d:f3:fe:35:3b:78:e2:11:55:89:d9: 4a:3f:1d:36:db:60:da:ec:f3:ca:ca:99:88:f0:46: ac:68:8c:b3:06:a3:a6:89:84:e4:88:44:f2:4d:ce: bf:6a:af:7e:46:16:5f:51:5a:09:24:10:ea:05:ad: 8e:84:50:3b:01:7c:52:0c:14:fb:47:f5:a3:e5:e6: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:41:80:A2:5A:C8:1E:E6:D6:0A:45:58:63:77:D8:EC:6F:B7:E8:4A X509v3 Authority Key Identifier: keyid:61:5D:DB:77:C7:92:6F:57:7B:00:AB:CD:3D:52:F4:2C:92:02:79:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV3bd8eSb1d7AKvNPVL0LJICec0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/105b8a-3569-4e33-941f-b0dc2e2211eb/1/YV3bd8eSb1d7AKvNPVL0LJICec0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:86:d9:42:d2:30:a3:32:88:47:14:af:1a:45:e2:9c:57:89: 42:d0:f0:b6:e1:4b:7c:04:4f:62:07:fc:7b:da:a1:70:67:a7: b5:25:35:d2:2b:97:bf:88:03:ed:57:c9:17:a5:1e:e0:67:1c: 34:6f:4a:0c:13:06:22:8f:f2:5e:01:ea:e8:9d:b8:60:5e:a9: e1:10:26:1b:aa:92:f6:06:04:98:1f:be:d8:ae:1e:db:6e:81: df:3f:35:3a:9f:ed:4c:3e:ba:6b:4a:c9:2c:c8:c9:bb:86:50: b4:80:4b:3f:3c:51:28:ad:0e:df:64:41:85:50:99:69:aa:1f: 38:bd:0e:08:d6:5c:a8:0b:e1:33:90:e9:44:e4:39:16:e0:f4: 73:33:62:28:0f:e5:9b:2a:5d:34:87:de:b4:bc:a9:f0:d6:3b: 51:f1:2b:08:24:0d:b3:c4:1c:43:9f:a3:49:ff:f0:0f:70:27: f4:f7:58:a7:15:e6:d9:3b:ee:08:15:7e:13:e5:56:bd:09:c3: 73:3f:bb:c7:7c:6e:28:ad:87:9c:e5:ef:d3:b8:cc:54:48:86: cb:c8:b6:99:ec:ba:e7:55:6f:f3:e5:69:52:14:2c:5c:e4:16: 64:e5:69:46:b7:78:85:0b:cd:35:4b:5a:42:8d:99:5d:ef:de: b0:fe:2c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjtln+YuC7/vQJTunwgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNWRkYjc3Yzc5MjZmNTc3YjAwYWJjZDNkNTJmNDJjOTIw Mjc5Y2QwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg0OTQxODBhMjVhYzgxZWU2ZDYwYTQ1NTg2Mzc3ZDhlYzZmYjdlODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0etvh5B7X1krL6iPUfSHLKCjHOT dRlz2tmmaBQKNNCtUc0mjqLGCJ16/zojmOIqtwP60WtT8oiIuBvr8hUboUDzbf6p +whVBwfDV94zZaRiROZwEJDHjbJVWHembn1LtwQ7mOJ9nGBnv4Zb3vfO5GkZnifb H6YABguRX9MFpaqQLD3MfNc0xgi5FRSL76b7xG9FTlw7KFWnLcYzg9XJ9/CRf1FG rIYwHzNmsJLYKpwFCaDqxfXRnfP+NTt44hFVidlKPx0222Da7PPKypmI8EasaIyz BqOmiYTkiETyTc6/aq9+RhZfUVoJJBDqBa2OhFA7AXxSDBT7R/Wj5eZQ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElBgKJayB7m1gpFWGN32Oxvt+hKMB8GA1UdIwQY MBaAFGFd23fHkm9XewCrzT1S9CySAnnNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYt YjBkYzJlMjIxMWViLzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8xMDViOGEtMzU2OS00ZTMzLTk0MWYtYjBkYzJlMjIxMWVi LzEvWVYzYmQ4ZVNiMWQ3QUt2TlBWTDBMSklDZWMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYbZQtIw ozKIRxSvGkXinFeJQtDwtuFLfARPYgf8e9qhcGentSU10iuXv4gD7VfJF6Ue4Gcc NG9KDBMGIo/yXgHq6J24YF6p4RAmG6qS9gYEmB++2K4e226B3z81Op/tTD66a0rJ LMjJu4ZQtIBLPzxRKK0O32RBhVCZaaofOL0OCNZcqAvhM5DpROQ5FuD0czNiKA/l mypdNIfetLyp8NY7UfErCCQNs8QcQ5+jSf/wD3An9PdYpxXm2TvuCBV+E+VWvQnD cz+7x3xuKK2HnOXv07jMVEiGy8i2mey651Vv8+VpUhQsXOQWZOVpRrd4hQvNNUta Qo2ZXe/esP4sAw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:36 2025 by rpki-client