This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft File: yFiMcrJRDxd7g18gHjNl7PnkWh0.mft (raw, json) Hash identifier: GTOOD9t3SDNUweR/jFmAZFCD9RI5iRd33fEOWe6GkHQ= Subject key identifier: 3D:80:3F:17:6F:31:C7:40:29:34:9B:64:7A:CD:F8:F0:22:04:30:2A Authority key identifier: C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D Certificate issuer: /CN=c8588c72b2510f177b835f201e3365ecf9e45a1d Certificate serial: 019B563D89D29DC5FB915C875FA132A41440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft Manifest number: 1146 Signing time: Thu 25 Dec 2025 16:00:32 +0000 Manifest this update: Thu 25 Dec 2025 16:00:32 +0000 Manifest next update: Fri 26 Dec 2025 16:00:32 +0000 Files and hashes: 1: yFiMcrJRDxd7g18gHjNl7PnkWh0.crl (hash: da59iXziMESOlgI3QOGwKsKlYwqV2Tbvqw6Uk7JpiBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:89:d2:9d:c5:fb:91:5c:87:5f:a1:32:a4:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8588c72b2510f177b835f201e3365ecf9e45a1d Validity Not Before: Dec 25 16:00:32 2025 GMT Not After : Dec 26 16:00:32 2025 GMT Subject: CN=3d803f176f31c74029349b647acdf8f02204302a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:db:b4:34:eb:bf:ed:c9:a3:54:cc:42:30: ce:82:14:74:50:b1:c8:a5:82:2f:00:7f:c1:fa:44: a7:20:91:ef:43:b2:04:49:08:3a:1b:db:8a:5d:a2: 6d:d2:8b:34:2d:30:51:42:bb:f4:91:a0:42:b9:b2: 65:80:6a:4f:40:a9:fa:86:39:11:e1:a5:e1:8c:36: be:9d:c1:e0:03:19:60:1b:a5:90:4b:6b:5f:90:83: bc:ff:e3:f3:f5:4c:37:fd:cf:34:fb:79:dd:50:0d: 05:aa:95:68:8d:80:8a:19:fe:7e:52:98:5c:1b:0b: c3:13:ed:f7:1c:7f:50:b3:9e:0d:0a:13:3a:ef:0e: e2:bc:19:38:71:68:d4:5a:a7:b5:c8:af:0b:04:fa: fe:d5:3a:59:b6:6c:01:9d:dd:9e:14:d6:a4:88:dd: 35:a7:73:54:99:a2:ad:e3:be:c7:02:47:e2:91:49: 4c:c8:bf:34:bd:69:d6:f4:f8:35:2a:24:63:97:1a: 6e:15:b3:30:2b:47:6e:17:0a:7a:4a:84:65:bc:c7: 92:96:ff:9a:c6:8c:ca:f1:a7:b8:b1:ca:fd:31:54: 72:08:dc:43:7e:dd:73:b3:60:1d:8f:ae:ed:d3:f3: 09:a7:d8:11:26:f8:0a:a3:7c:ae:fc:83:ad:b8:ec: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:3F:17:6F:31:C7:40:29:34:9B:64:7A:CD:F8:F0:22:04:30:2A X509v3 Authority Key Identifier: keyid:C8:58:8C:72:B2:51:0F:17:7B:83:5F:20:1E:33:65:EC:F9:E4:5A:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFiMcrJRDxd7g18gHjNl7PnkWh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/93b38e-6400-4e6d-a0eb-049cc1fce37e/1/yFiMcrJRDxd7g18gHjNl7PnkWh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:66:93:6e:4f:8c:44:3c:c9:97:4b:6c:8c:63:9f:ca:87:64: d7:7d:38:3f:26:a6:46:8f:24:0b:1f:97:bc:18:91:c3:af:5d: 76:6e:19:1b:93:4f:80:2a:cb:2c:b2:ab:02:8b:38:d2:8d:b3: 7f:8b:3f:b1:f9:a2:28:33:ad:b1:8c:46:c0:ef:3c:01:e8:1b: f6:3f:5a:6c:2d:ce:18:3b:4a:c7:3c:7b:6e:9b:d9:52:75:04: fa:04:39:73:b2:19:7f:76:86:0c:62:81:44:ce:d3:b2:d1:98: 50:98:c0:cc:19:1d:27:b6:24:a8:b3:10:ec:15:e9:cc:3c:55: d1:43:99:c9:98:58:39:73:d8:2f:95:0b:a6:86:84:4a:73:2e: 54:9d:12:89:4d:f7:db:47:d4:3c:a1:84:a4:4d:2b:ea:52:5d: f6:2c:71:c2:0a:ed:7d:ed:9b:3e:0a:33:dd:aa:67:bf:c0:45: 31:19:91:b3:4e:24:f8:9e:63:40:3d:41:68:4e:e2:53:7d:80: b3:3f:b1:32:77:c0:03:6c:23:2d:06:a0:9c:3c:cc:7a:8c:d8: 21:24:ba:91:f3:20:11:f5:4f:f4:41:ea:ec:96:27:a7:f9:06: d4:f4:0f:60:c8:fe:45:2a:dc:25:f5:65:9c:9e:d2:0b:2e:45: 7a:21:3e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPYnSncX7kVyHX6EypBRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NTg4YzcyYjI1MTBmMTc3YjgzNWYyMDFlMzM2NWVjZjll NDVhMWQwHhcNMjUxMjI1MTYwMDMyWhcNMjUxMjI2MTYwMDMyWjAzMTEwLwYDVQQD EygzZDgwM2YxNzZmMzFjNzQwMjkzNDliNjQ3YWNkZjhmMDIyMDQzMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HXbtDTrv+3Jo1TMQjDOghR0ULHI pYIvAH/B+kSnIJHvQ7IESQg6G9uKXaJt0os0LTBRQrv0kaBCubJlgGpPQKn6hjkR 4aXhjDa+ncHgAxlgG6WQS2tfkIO8/+Pz9Uw3/c80+3ndUA0FqpVojYCKGf5+Uphc GwvDE+33HH9Qs54NChM67w7ivBk4cWjUWqe1yK8LBPr+1TpZtmwBnd2eFNakiN01 p3NUmaKt477HAkfikUlMyL80vWnW9Pg1KiRjlxpuFbMwK0duFwp6SoRlvMeSlv+a xozK8ae4scr9MVRyCNxDft1zs2Adj67t0/MJp9gRJvgKo3yu/IOtuOxWnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2APxdvMcdAKTSbZHrN+PAiBDAqMB8GA1UdIwQY MBaAFMhYjHKyUQ8Xe4NfIB4zZez55FodMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUZpTWNySlJEeGQ3ZzE4Z0hqTmw3UG5rV2gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85M2IzOGUtNjQwMC00ZTZkLWEwZWIt MDQ5Y2MxZmNlMzdlLzEveUZpTWNySlJEeGQ3ZzE4Z0hqTmw3UG5rV2gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85M2IzOGUtNjQwMC00ZTZkLWEwZWItMDQ5Y2MxZmNlMzdl LzEveUZpTWNySlJEeGQ3ZzE4Z0hqTmw3UG5rV2gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGaTbk+M RDzJl0tsjGOfyodk1304PyamRo8kCx+XvBiRw69ddm4ZG5NPgCrLLLKrAos40o2z f4s/sfmiKDOtsYxGwO88Aegb9j9abC3OGDtKxzx7bpvZUnUE+gQ5c7IZf3aGDGKB RM7TstGYUJjAzBkdJ7YkqLMQ7BXpzDxV0UOZyZhYOXPYL5ULpoaESnMuVJ0SiU33 20fUPKGEpE0r6lJd9ixxwgrtfe2bPgoz3apnv8BFMRmRs04k+J5jQD1BaE7iU32A sz+xMnfAA2wjLQagnDzMeozYISS6kfMgEfVP9EHq7JYnp/kG1PQPYMj+RSrcJfVl nJ7SCy5FeiE+sA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:46 2025 by rpki-client