This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft File: YPhMundKnCGimGbUjl3PB1nNSqk.mft (raw, json) Hash identifier: BK4HEZOpohK/CpxVhUSwvezv7lnYb8dSyVQqS2lQjog= Subject key identifier: 5E:66:85:61:78:9C:59:7D:DB:50:61:D8:CA:84:09:75:3B:DA:AE:D2 Authority key identifier: 60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9 Certificate issuer: /CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9 Certificate serial: 019AF31CE39532857312BF0A63632B15DF2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft Manifest number: 11A2 Signing time: Sat 06 Dec 2025 10:02:27 +0000 Manifest this update: Sat 06 Dec 2025 10:02:27 +0000 Manifest next update: Sun 07 Dec 2025 10:02:27 +0000 Files and hashes: 1: YPhMundKnCGimGbUjl3PB1nNSqk.crl (hash: gi7GfsJ3FtvkrnOJM+N7Tj/O0PqD4+PAvixk/QiV288=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e3:95:32:85:73:12:bf:0a:63:63:2b:15:df:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f84cba774a9c21a29866d48e5dcf0759cd4aa9 Validity Not Before: Dec 6 10:02:27 2025 GMT Not After : Dec 7 10:02:27 2025 GMT Subject: CN=5e668561789c597ddb5061d8ca8409753bdaaed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:52:5e:50:2f:9f:a1:72:b8:10:ed:2c:85: 86:4e:40:de:fe:de:0a:87:e5:37:df:21:c3:b6:2d: 1b:4f:ab:33:a7:82:22:1c:e7:f5:bf:2b:9c:dc:13: 7e:1c:ef:01:9d:0f:18:8b:2b:0e:34:21:31:a6:c9: 3e:8d:28:85:ac:49:4a:cc:11:ed:8f:10:99:46:94: 89:fa:18:d9:94:23:ae:4d:66:82:66:b4:db:9c:59: ac:58:38:b1:d9:1e:04:fc:5c:f3:fb:36:10:c1:39: df:b6:19:37:91:92:eb:2e:22:3f:99:2f:94:df:7d: 64:d2:d1:db:fc:ba:5c:d8:0a:35:70:b3:18:66:e0: 8f:3e:58:04:3f:70:e0:4b:c0:a7:00:34:e9:63:95: 99:36:27:9b:91:c4:ee:49:a9:94:ab:02:a5:27:66: 04:33:69:81:9c:ff:c7:41:d9:6c:67:06:43:78:77: 35:6a:cc:d9:c9:aa:b6:12:92:fb:2e:db:e2:76:78: 7a:24:f4:98:61:b4:b5:e1:58:73:00:08:8d:63:46: c2:57:5c:ef:89:69:08:52:7b:8a:73:ec:9d:07:f7: 46:f4:13:46:e9:62:ad:64:44:f5:38:2b:15:2f:26: b6:ea:5a:7c:72:90:f3:56:ab:98:cd:4e:a6:58:72: c9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:66:85:61:78:9C:59:7D:DB:50:61:D8:CA:84:09:75:3B:DA:AE:D2 X509v3 Authority Key Identifier: keyid:60:F8:4C:BA:77:4A:9C:21:A2:98:66:D4:8E:5D:CF:07:59:CD:4A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPhMundKnCGimGbUjl3PB1nNSqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0003f7-b14a-488e-8a0f-eb7aa62f356b/1/YPhMundKnCGimGbUjl3PB1nNSqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:11:cf:7d:be:7a:3e:82:fb:24:74:e2:61:40:eb:cf:0b:b2: 63:d0:42:56:b3:08:42:48:84:2a:c0:76:90:c2:ec:3a:97:f9: 69:f7:e7:78:fd:a9:c2:86:8f:ac:53:1d:87:9c:c5:61:d6:a4: c0:9e:ad:4e:aa:e8:6c:48:72:9e:b5:44:31:9b:61:f0:72:9b: 26:c7:be:81:fe:8e:8f:bd:0f:35:14:f0:b3:a7:a6:a0:a1:33: 8f:a1:87:77:d9:97:61:06:3a:68:af:3c:56:1c:87:81:ee:3c: 44:2c:27:0b:66:e6:7e:0e:c1:22:82:4c:88:e9:72:79:b6:c8: a2:d4:16:6a:38:1d:1d:21:a4:c8:66:8c:63:b7:6b:6c:97:38: 0d:e8:6d:5e:a4:d9:cd:b1:dc:ac:a1:6b:07:6e:b1:64:90:02: 52:35:d7:94:45:1b:93:55:76:a1:90:a4:7a:46:24:16:0d:1f: cc:d9:70:14:c7:10:7c:01:d2:ca:02:0b:b2:23:cd:98:ee:aa: 5e:cf:d9:dd:cf:a4:49:39:a6:74:7b:83:a8:95:46:f8:7e:69: e6:c1:f7:79:82:21:b2:80:aa:1e:fc:15:50:82:a5:c2:76:57: 79:e2:38:3b:95:89:5d:af:ef:77:69:18:c6:98:c9:fd:f8:dc: 7e:a0:ac:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOOVMoVzEr8KY2MrFd8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZjg0Y2JhNzc0YTljMjFhMjk4NjZkNDhlNWRjZjA3NTlj ZDRhYTkwHhcNMjUxMjA2MTAwMjI3WhcNMjUxMjA3MTAwMjI3WjAzMTEwLwYDVQQD Eyg1ZTY2ODU2MTc4OWM1OTdkZGI1MDYxZDhjYTg0MDk3NTNiZGFhZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfBSXlAvn6FyuBDtLIWGTkDe/t4K h+U33yHDti0bT6szp4IiHOf1vyuc3BN+HO8BnQ8YiysONCExpsk+jSiFrElKzBHt jxCZRpSJ+hjZlCOuTWaCZrTbnFmsWDix2R4E/Fzz+zYQwTnfthk3kZLrLiI/mS+U 331k0tHb/Lpc2Ao1cLMYZuCPPlgEP3DgS8CnADTpY5WZNiebkcTuSamUqwKlJ2YE M2mBnP/HQdlsZwZDeHc1aszZyaq2EpL7Ltvidnh6JPSYYbS14VhzAAiNY0bCV1zv iWkIUnuKc+ydB/dG9BNG6WKtZET1OCsVLya26lp8cpDzVquYzU6mWHLJiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5mhWF4nFl921Bh2MqECXU72q7SMB8GA1UdIwQY MBaAFGD4TLp3Spwhophm1I5dzwdZzUqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYt ZWI3YWE2MmYzNTZiLzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wMDAzZjctYjE0YS00ODhlLThhMGYtZWI3YWE2MmYzNTZi LzEvWVBoTXVuZEtuQ0dpbUdiVWpsM1BCMW5OU3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRHPfb56 PoL7JHTiYUDrzwuyY9BCVrMIQkiEKsB2kMLsOpf5affneP2pwoaPrFMdh5zFYdak wJ6tTqrobEhynrVEMZth8HKbJse+gf6Oj70PNRTws6emoKEzj6GHd9mXYQY6aK88 VhyHge48RCwnC2bmfg7BIoJMiOlyebbIotQWajgdHSGkyGaMY7drbJc4DehtXqTZ zbHcrKFrB26xZJACUjXXlEUbk1V2oZCkekYkFg0fzNlwFMcQfAHSygILsiPNmO6q Xs/Z3c+kSTmmdHuDqJVG+H5p5sH3eYIhsoCqHvwVUIKlwnZXeeI4O5WJXa/vd2kY xpjJ/fjcfqCsTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:32:29 2025 by rpki-client