This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft File: YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft (raw, json) Hash identifier: tQ/khZ/MpvodkbMliciHRmFkT+UvUKttdPW7m1lhEeA= Subject key identifier: B8:EE:BB:38:31:6F:72:30:EB:86:6D:37:5C:CA:A3:E7:0F:5A:81:ED Authority key identifier: 60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C Certificate issuer: /CN=60024324c31a2817923e0f6c53790426e142c24c Certificate serial: 019AF31D54311349F72A1C0455F9FDD15B27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft Manifest number: 1214 Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl (hash: HVsmUe6Rt3m+D/vxfnLUkWrUdTHdp/UEl0xQthchyqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:54:31:13:49:f7:2a:1c:04:55:f9:fd:d1:5b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60024324c31a2817923e0f6c53790426e142c24c Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=b8eebb38316f7230eb866d375ccaa3e70f5a81ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:bb:f6:c5:22:34:d2:12:c3:14:2e:cd:44: 2f:b1:25:86:30:83:67:ba:c7:cc:64:02:a7:bf:ba: 0d:7f:00:a3:27:5b:5a:61:8d:fa:20:af:94:10:65: 98:a1:82:98:66:6d:a0:28:82:8f:c6:e7:ad:97:10: 1b:11:85:cd:47:13:1c:ac:aa:35:e2:3b:98:62:70: 15:64:ac:a0:48:15:b2:2a:24:e7:e3:55:3c:bd:b8: 57:0d:4e:96:29:ec:30:47:9a:e4:4c:4c:df:4b:71: 6c:21:82:97:3c:a7:b4:fd:d5:78:91:99:4c:9d:96: a3:de:1b:7b:7a:c0:f4:da:fb:6f:d6:9a:61:bb:8c: 05:f6:6f:a4:04:ab:a9:30:b8:9c:b5:42:b5:05:9b: df:96:54:9e:8a:40:ca:5d:84:5c:8b:26:fc:12:58: 3d:1a:15:16:26:96:d5:74:38:eb:b1:32:49:bb:1b: ba:89:80:25:37:fe:c2:69:f2:e5:79:50:72:58:49: 09:6d:eb:47:22:4c:ad:70:a9:97:3c:0d:77:bd:77: e6:1c:82:ee:87:bc:49:a5:27:49:4b:4a:5a:76:9f: fa:9b:c0:c6:05:91:c6:ff:d5:00:1e:2e:a6:03:cc: 3b:c3:1e:3b:9a:7c:f0:bc:13:03:d8:92:94:0e:7e: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EE:BB:38:31:6F:72:30:EB:86:6D:37:5C:CA:A3:E7:0F:5A:81:ED X509v3 Authority Key Identifier: keyid:60:02:43:24:C3:1A:28:17:92:3E:0F:6C:53:79:04:26:E1:42:C2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJDJMMaKBeSPg9sU3kEJuFCwkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c49709-e4f0-4d0e-b3dd-65ea5d3a8088/1/YAJDJMMaKBeSPg9sU3kEJuFCwkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:07:bb:52:d6:d6:24:89:78:50:5a:4f:a0:69:9e:3a:5e:19: e5:4e:43:0c:a2:df:86:14:8b:a3:ec:94:1f:0d:f2:03:f1:aa: 48:20:84:d7:91:2b:eb:55:43:4d:12:28:55:0c:e4:76:42:55: 41:7d:d0:af:1f:cb:50:ad:cd:76:d7:6b:69:c7:4b:b9:4f:f2: 4f:f2:ea:8f:87:df:ba:cf:96:f1:98:0f:64:ec:00:99:17:11: 95:18:47:e0:7f:5f:5c:24:5a:82:0d:dd:a6:e2:84:8a:a1:94: 4f:13:c3:97:d5:24:7d:63:51:d8:b0:6e:71:35:47:e0:62:93: cd:2f:c3:15:79:d3:2f:ae:38:43:81:68:62:f5:20:90:43:c3: b2:13:bf:e9:1b:3f:f2:4f:06:ce:67:dd:9c:79:4f:fb:49:3d: 62:f1:80:ef:34:36:ab:29:f7:1c:21:2b:74:3d:9a:2c:db:6b: a5:97:43:bc:69:f5:5c:2d:9c:55:ce:81:8c:d4:a8:db:58:77: 2f:3f:29:a2:c3:6e:ea:2a:99:8f:19:61:2b:92:fe:88:4b:25: ca:f3:c3:14:c3:b1:fe:bc:fd:23:35:9f:b9:1e:11:dc:02:d4: 5c:46:07:f5:3e:b6:6d:36:1a:d5:72:df:12:37:ce:c8:64:b9: 92:38:a2:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVQxE0n3KhwEVfn90VsnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwMDI0MzI0YzMxYTI4MTc5MjNlMGY2YzUzNzkwNDI2ZTE0 MmMyNGMwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD EyhiOGVlYmIzODMxNmY3MjMwZWI4NjZkMzc1Y2NhYTNlNzBmNWE4MWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9S79sUiNNISwxQuzUQvsSWGMINn usfMZAKnv7oNfwCjJ1taYY36IK+UEGWYoYKYZm2gKIKPxuetlxAbEYXNRxMcrKo1 4juYYnAVZKygSBWyKiTn41U8vbhXDU6WKewwR5rkTEzfS3FsIYKXPKe0/dV4kZlM nZaj3ht7esD02vtv1pphu4wF9m+kBKupMLictUK1BZvfllSeikDKXYRciyb8Elg9 GhUWJpbVdDjrsTJJuxu6iYAlN/7CafLleVByWEkJbetHIkytcKmXPA13vXfmHILu h7xJpSdJS0padp/6m8DGBZHG/9UAHi6mA8w7wx47mnzwvBMD2JKUDn4hFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjuuzgxb3Iw64ZtN1zKo+cPWoHtMB8GA1UdIwQY MBaAFGACQyTDGigXkj4PbFN5BCbhQsJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUFKREpNTWFLQmVTUGc5c1Uza0VKdUZDd2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDk3MDktZTRmMC00ZDBlLWIzZGQt NjVlYTVkM2E4MDg4LzEvWUFKREpNTWFLQmVTUGc5c1Uza0VKdUZDd2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNDk3MDktZTRmMC00ZDBlLWIzZGQtNjVlYTVkM2E4MDg4 LzEvWUFKREpNTWFLQmVTUGc5c1Uza0VKdUZDd2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAe7UtbW JIl4UFpPoGmeOl4Z5U5DDKLfhhSLo+yUHw3yA/GqSCCE15Er61VDTRIoVQzkdkJV QX3Qrx/LUK3NdtdracdLuU/yT/Lqj4ffus+W8ZgPZOwAmRcRlRhH4H9fXCRagg3d puKEiqGUTxPDl9UkfWNR2LBucTVH4GKTzS/DFXnTL644Q4FoYvUgkEPDshO/6Rs/ 8k8GzmfdnHlP+0k9YvGA7zQ2qyn3HCErdD2aLNtrpZdDvGn1XC2cVc6BjNSo21h3 Lz8posNu6iqZjxlhK5L+iEslyvPDFMOx/rz9IzWfuR4R3ALUXEYH9T62bTYa1XLf EjfOyGS5kjiiuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:57 2025 by rpki-client