This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft File: yfcvcKzNptLmEzWoFzDm9u5RPMU.mft (raw, json) Hash identifier: A8fdHiFpH72L3Vr8tpWsKpQxrbj3S0mqRc+QtkEKpTI= Subject key identifier: D8:49:CB:F7:7E:94:ED:23:FC:75:BE:9C:2D:74:B5:CC:CD:4B:E7:C0 Authority key identifier: C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5 Certificate issuer: /CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5 Certificate serial: 019B32D6BF9A649BA616FF1CA97734056B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:01:33 +0000 Manifest this update: Thu 18 Dec 2025 19:01:33 +0000 Manifest next update: Fri 19 Dec 2025 19:01:33 +0000 Files and hashes: 1: yfcvcKzNptLmEzWoFzDm9u5RPMU.crl (hash: MSJb4WAgD6LlpPjpikzSnZHtKSBSRfrza/ThsPcmt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:bf:9a:64:9b:a6:16:ff:1c:a9:77:34:05:6b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f72f70accda6d2e61335a81730e6f6ee513cc5 Validity Not Before: Dec 18 19:01:33 2025 GMT Not After : Dec 19 19:01:33 2025 GMT Subject: CN=d849cbf77e94ed23fc75be9c2d74b5cccd4be7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:21:4c:3a:1d:a9:99:f6:f5:b7:ff:8b:a4:6c: 50:72:28:8e:f9:85:6c:e8:cb:67:66:d4:fe:ab:20: 32:21:df:c5:c6:08:32:6a:59:42:fe:67:f8:59:80: 37:5f:7c:96:8e:42:a9:34:2c:89:5f:1f:5f:5a:d1: 92:c7:ab:f3:10:24:03:a2:65:45:fd:5c:66:a1:11: e8:33:82:1b:3f:93:f6:4e:bc:33:07:9f:0c:11:1b: 34:a6:87:d9:78:5c:e0:76:08:1d:c1:96:c4:e5:72: f8:04:1e:b3:ad:7f:a6:f4:20:ae:b7:7d:25:50:6f: f9:e1:4e:c8:07:b4:af:b8:29:f4:8a:3c:b7:95:e8: 7c:8f:59:0b:09:b4:ad:94:f2:e3:b9:cf:b3:41:65: 9c:8c:77:a0:7f:dc:ed:fe:ce:ec:a8:dc:b0:6d:a7: 05:02:f6:ce:f0:1c:03:2c:17:4a:09:36:70:e9:c8: 0b:d5:79:89:6a:fc:e9:54:3c:74:23:a5:7f:45:2c: d9:b3:38:7d:a4:5f:ec:fe:97:06:01:98:2e:a4:6d: ea:34:21:ad:10:44:32:10:b8:cd:c0:32:6a:8d:16: cf:91:f7:95:a4:44:4d:91:d0:f1:ed:37:df:11:cc: cd:62:80:0f:d9:ff:af:53:02:44:66:64:a8:92:c3: 79:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:49:CB:F7:7E:94:ED:23:FC:75:BE:9C:2D:74:B5:CC:CD:4B:E7:C0 X509v3 Authority Key Identifier: keyid:C9:F7:2F:70:AC:CD:A6:D2:E6:13:35:A8:17:30:E6:F6:EE:51:3C:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfcvcKzNptLmEzWoFzDm9u5RPMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a7b265-5476-49f4-bd4a-2f9f81e93298/1/yfcvcKzNptLmEzWoFzDm9u5RPMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a5:03:08:9b:85:e8:62:aa:a2:5c:81:18:b7:1a:30:4a:7f: b2:7f:10:54:c4:e1:79:d7:37:3d:b0:a6:08:03:f0:c9:17:23: 64:08:bc:24:92:61:8e:8e:66:c1:25:12:c1:75:b8:0e:b7:c7: 84:4f:47:a3:6c:e9:7e:c4:8b:bd:d0:ad:53:2a:5d:79:95:98: a7:0d:fd:c2:98:59:62:93:23:e1:bd:1e:fb:86:2e:99:83:c1: 33:b0:88:34:3c:d1:27:b1:bd:52:81:c3:dc:76:a2:90:d4:89: 33:4c:93:4c:d2:cf:d3:bb:6d:a6:b8:c1:d8:24:08:f2:0c:ba: ec:f7:32:92:2f:16:eb:1a:14:df:41:6d:c6:e4:44:1a:81:ea: 56:1e:7b:33:ee:de:9f:bd:fd:4c:d1:06:f5:29:44:bd:b3:14: 7a:07:6b:da:2d:8a:cf:91:1a:56:ae:14:e9:45:27:77:c6:61: af:7d:0f:55:98:73:e2:21:08:00:30:6d:f5:58:90:46:8d:5e: 06:64:f1:08:92:ee:4d:ad:33:89:a4:eb:ec:cd:c8:1e:e4:d4: 7e:ce:99:fc:fb:34:fd:c3:ea:e9:d8:70:5b:22:a0:48:a1:ed: f8:1b:61:2a:7f:be:b2:5a:e9:e2:40:38:5b:a1:51:e6:6f:f4: df:b5:38:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1r+aZJumFv8cqXc0BWuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZjcyZjcwYWNjZGE2ZDJlNjEzMzVhODE3MzBlNmY2ZWU1 MTNjYzUwHhcNMjUxMjE4MTkwMTMzWhcNMjUxMjE5MTkwMTMzWjAzMTEwLwYDVQQD EyhkODQ5Y2JmNzdlOTRlZDIzZmM3NWJlOWMyZDc0YjVjY2NkNGJlN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iFMOh2pmfb1t/+LpGxQciiO+YVs 6MtnZtT+qyAyId/FxggyallC/mf4WYA3X3yWjkKpNCyJXx9fWtGSx6vzECQDomVF /VxmoRHoM4IbP5P2TrwzB58MERs0pofZeFzgdggdwZbE5XL4BB6zrX+m9CCut30l UG/54U7IB7SvuCn0ijy3leh8j1kLCbStlPLjuc+zQWWcjHegf9zt/s7sqNywbacF AvbO8BwDLBdKCTZw6cgL1XmJavzpVDx0I6V/RSzZszh9pF/s/pcGAZgupG3qNCGt EEQyELjNwDJqjRbPkfeVpERNkdDx7TffEczNYoAP2f+vUwJEZmSoksN5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhJy/d+lO0j/HW+nC10tczNS+fAMB8GA1UdIwQY MBaAFMn3L3CszabS5hM1qBcw5vbuUTzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hN2IyNjUtNTQ3Ni00OWY0LWJkNGEt MmY5ZjgxZTkzMjk4LzEveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hN2IyNjUtNTQ3Ni00OWY0LWJkNGEtMmY5ZjgxZTkzMjk4 LzEveWZjdmNLek5wdExtRXpXb0Z6RG05dTVSUE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKUDCJuF 6GKqolyBGLcaMEp/sn8QVMThedc3PbCmCAPwyRcjZAi8JJJhjo5mwSUSwXW4DrfH hE9Ho2zpfsSLvdCtUypdeZWYpw39wphZYpMj4b0e+4YumYPBM7CINDzRJ7G9UoHD 3HaikNSJM0yTTNLP07ttprjB2CQI8gy67Pcyki8W6xoU30FtxuREGoHqVh57M+7e n739TNEG9SlEvbMUegdr2i2Kz5EaVq4U6UUnd8Zhr30PVZhz4iEIADBt9ViQRo1e BmTxCJLuTa0ziaTr7M3IHuTUfs6Z/Ps0/cPq6dhwWyKgSKHt+BthKn++slrp4kA4 W6FR5m/037U46w== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:52 2025 by rpki-client