This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft File: yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json) Hash identifier: WXP/x1Z1a1hbhOCYP9h98HMGltVaKRcVToZBWdyb7AA= Subject key identifier: FD:7A:4F:DD:08:6D:7B:25:6C:5D:9E:2B:27:9E:A3:BE:08:96:D5:FC Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42 Certificate issuer: /CN=c89b5b29699e2dd418040c0edf750085d8720442 Certificate serial: 019B6DA11C23B71D725C4F7B3A8B5154ABEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft Manifest number: 0E73 Signing time: Tue 30 Dec 2025 05:00:33 +0000 Manifest this update: Tue 30 Dec 2025 05:00:33 +0000 Manifest next update: Wed 31 Dec 2025 05:00:33 +0000 Files and hashes: 1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: S9H0jM5JJrPuI8DM7WT7x9EZsYjBKW1J1zp2IX374+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:1c:23:b7:1d:72:5c:4f:7b:3a:8b:51:54:ab:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442 Validity Not Before: Dec 30 05:00:33 2025 GMT Not After : Dec 31 05:00:33 2025 GMT Subject: CN=fd7a4fdd086d7b256c5d9e2b279ea3be0896d5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:3c:f8:88:2c:37:46:d1:42:f4:c1:6d:ae: 0a:80:c9:e1:05:ed:e3:a5:12:11:80:c6:d2:c4:c2: a3:96:cd:f5:0e:36:15:89:13:8a:5d:fc:ae:ec:2e: 6a:f0:64:7d:1c:4a:55:fa:4b:01:e8:57:30:60:9c: ce:3e:4d:50:45:8c:b1:0c:1a:88:f9:fd:22:9e:c6: 29:98:16:30:66:0c:e0:c2:5a:9e:c4:bf:6d:9d:b4: ad:72:da:3d:61:be:bf:fc:f8:12:c3:16:13:6d:f7: 11:a6:6c:39:da:96:2d:2c:5c:f3:d3:69:be:9a:b5: bf:b0:0f:54:52:b0:96:94:5e:72:40:b8:cb:3f:74: 86:39:95:92:b2:79:1f:fd:e8:aa:c5:0f:76:0a:9c: f1:23:57:61:b9:f1:02:fb:7e:79:c9:86:71:f1:23: ec:44:7f:16:c9:99:a1:26:fc:63:66:4e:f0:27:3b: 40:a8:0a:ea:77:a1:cb:d5:70:bd:b0:e6:0b:fd:a3: 32:7a:62:39:fe:46:aa:e4:71:15:93:6d:ef:61:f1: 3d:fd:00:3a:12:fa:97:20:f7:2f:d3:80:cc:de:ac: ba:a6:ec:08:d1:64:39:9d:39:85:99:83:c8:34:8f: ef:b3:e6:24:73:6e:ca:ed:0e:d0:57:f7:ab:ac:90: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7A:4F:DD:08:6D:7B:25:6C:5D:9E:2B:27:9E:A3:BE:08:96:D5:FC X509v3 Authority Key Identifier: keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4f:61:e2:c2:53:54:20:14:8f:0e:f3:df:5d:62:15:c3:0d: 72:df:02:fa:3c:26:43:95:39:c2:c8:27:16:cd:96:df:89:50: 04:35:37:ee:65:ef:67:9b:d6:d7:c2:40:2c:8b:95:98:0c:27: eb:19:0b:fa:1e:e0:2b:75:48:9a:88:2a:1f:57:7d:a2:71:09: 8f:ce:d7:f4:a2:13:5d:f4:19:c5:00:f2:f8:6e:c1:46:f3:e4: d2:9a:b2:a6:80:4b:dd:e1:37:db:a7:22:ad:0c:e6:74:e3:72: 9c:d4:fd:25:62:0b:c1:00:c0:4b:64:d3:d9:63:a4:62:f1:3e: f7:28:81:c3:f2:34:b7:76:1a:0b:b8:84:3b:ea:ec:d2:a5:0d: 62:b4:5d:58:7f:a6:94:fe:f2:df:61:11:1b:f0:23:5b:64:a1: f4:d9:d9:9f:68:83:fb:ae:b3:fc:26:00:18:61:e4:bf:92:ec: 19:e7:a5:53:e2:0f:e3:3d:16:ed:fb:9b:fe:71:39:bb:65:20: be:1b:cd:45:54:f7:a5:ee:0d:34:3e:2c:cc:ba:f0:a1:f5:e4: c9:bc:92:9a:12:d9:f3:e0:0e:1c:8f:91:87:b5:cb:c9:cf:a8: f5:55:5c:71:2d:1a:0a:cb:e7:aa:76:6a:e5:6e:39:eb:c6:76: 6f:4d:a4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoRwjtx1yXE97OotRVKvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWI1YjI5Njk5ZTJkZDQxODA0MGMwZWRmNzUwMDg1ZDg3 MjA0NDIwHhcNMjUxMjMwMDUwMDMzWhcNMjUxMjMxMDUwMDMzWjAzMTEwLwYDVQQD EyhmZDdhNGZkZDA4NmQ3YjI1NmM1ZDllMmIyNzllYTNiZTA4OTZkNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPs8+IgsN0bRQvTBba4KgMnhBe3j pRIRgMbSxMKjls31DjYViROKXfyu7C5q8GR9HEpV+ksB6FcwYJzOPk1QRYyxDBqI +f0insYpmBYwZgzgwlqexL9tnbStcto9Yb6//PgSwxYTbfcRpmw52pYtLFzz02m+ mrW/sA9UUrCWlF5yQLjLP3SGOZWSsnkf/eiqxQ92CpzxI1dhufEC+355yYZx8SPs RH8WyZmhJvxjZk7wJztAqArqd6HL1XC9sOYL/aMyemI5/kaq5HEVk23vYfE9/QA6 EvqXIPcv04DM3qy6puwI0WQ5nTmFmYPINI/vs+Ykc27K7Q7QV/errJAg8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP16T90IbXslbF2eKyeeo74IltX8MB8GA1UdIwQY MBaAFMibWylpni3UGAQMDt91AIXYcgRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEt Njc1NzU5YTNiMGI3LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEtNjc1NzU5YTNiMGI3 LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn09h4sJT VCAUjw7z311iFcMNct8C+jwmQ5U5wsgnFs2W34lQBDU37mXvZ5vW18JALIuVmAwn 6xkL+h7gK3VImogqH1d9onEJj87X9KITXfQZxQDy+G7BRvPk0pqypoBL3eE326ci rQzmdONynNT9JWILwQDAS2TT2WOkYvE+9yiBw/I0t3YaC7iEO+rs0qUNYrRdWH+m lP7y32ERG/AjW2Sh9NnZn2iD+66z/CYAGGHkv5LsGeelU+IP4z0W7fub/nE5u2Ug vhvNRVT3pe4NND4szLrwofXkybySmhLZ8+AOHI+Rh7XLyc+o9VVccS0aCsvnqnZq 5W4568Z2b02kkQ== -----END CERTIFICATE-----Generated at Tue Dec 30 12:30:32 2025 by rpki-client