This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json) Hash identifier: i//YFukkmbAh9OQTdKHp2sj1ylMj9NcldS/LkrwdcnQ= Subject key identifier: 26:DE:0C:61:C7:3E:1D:76:34:27:9E:17:31:A4:AB:88:28:60:C9:24 Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3 Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3 Certificate serial: 019B5F42628D55033C53F8A5E2F9AC735184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft Manifest number: 1796 Signing time: Sat 27 Dec 2025 10:02:24 +0000 Manifest this update: Sat 27 Dec 2025 10:02:24 +0000 Manifest next update: Sun 28 Dec 2025 10:02:24 +0000 Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: 1hY/62dniqGIUJAotgLEFWt66aRCYWkHpRLrfjX/FaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:62:8d:55:03:3c:53:f8:a5:e2:f9:ac:73:51:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3 Validity Not Before: Dec 27 10:02:24 2025 GMT Not After : Dec 28 10:02:24 2025 GMT Subject: CN=26de0c61c73e1d7634279e1731a4ab882860c924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:4e:25:f0:3d:bf:21:dc:98:4d:c2:d9:d0: 41:ed:92:b4:bf:c3:00:0f:78:89:5b:13:75:67:1c: 31:ee:c0:8e:39:0b:26:6f:76:38:74:f2:f4:a3:dd: 3d:85:a7:93:9a:24:ea:5b:cc:b5:80:86:ff:df:ee: 15:f3:6a:ef:51:2b:2a:85:ff:4e:70:a5:ba:ce:d4: 7d:1f:70:64:5e:07:fd:60:06:63:52:4d:bb:1d:3f: a4:0e:ed:93:34:b5:92:f9:b5:fe:22:77:5d:45:cd: d3:9b:ee:d7:3f:90:33:25:e2:76:cb:4d:c4:7c:ef: f9:9a:32:cc:ea:1a:1c:1f:83:1c:8c:0d:6f:15:6c: 6c:69:c6:9b:65:f8:99:ff:ad:ff:d8:b9:23:93:c7: 57:e6:90:a0:56:f7:ed:bc:5b:d0:43:e7:58:be:18: 0c:ca:24:a4:e6:06:fe:11:07:a8:95:9d:84:85:9e: 7a:e7:92:64:6d:85:98:c9:f9:ea:93:40:b2:17:fb: b1:cc:d7:3d:d9:48:a9:88:90:99:41:91:79:24:ce: 21:79:25:a6:35:0d:95:3a:60:4e:db:cb:7e:4b:fa: 1f:0d:12:3f:78:9e:0e:df:ba:46:f0:4e:5e:0e:3e: 48:18:50:86:f6:74:88:b9:01:90:68:c8:f9:05:d6: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:0C:61:C7:3E:1D:76:34:27:9E:17:31:A4:AB:88:28:60:C9:24 X509v3 Authority Key Identifier: keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9d:00:17:34:b6:e9:ed:51:52:06:16:41:33:a7:12:f8:11: a3:f4:89:e4:b7:1b:85:2e:8a:ef:e7:e3:17:0f:d0:14:89:16: 3a:dc:66:e3:5f:01:28:96:aa:bb:dd:e1:a8:26:9e:b6:bf:f4: 98:30:f0:09:81:34:50:78:5c:b7:73:00:a3:11:74:63:78:09: e3:9c:78:9c:a4:65:4d:c8:ce:9d:f7:b5:0b:e8:82:05:2a:a5: 8f:99:f7:30:e6:88:f2:f2:5b:4c:78:48:7f:36:71:69:3e:32: b7:07:35:04:4c:e8:1d:17:b3:6d:7d:c6:b3:01:f1:57:5f:1d: 0d:7d:b2:f2:25:bb:c9:2a:70:10:6e:c5:3d:47:53:0b:19:99: 92:5a:b8:04:e5:3f:2e:d8:ff:59:ca:12:39:4f:31:a0:44:b3: 05:1e:bd:39:3f:66:ce:db:2e:be:3f:84:1c:2d:bb:ca:8e:6b: 06:e0:d5:0c:57:3c:83:da:2b:8b:b6:6e:5d:44:75:d9:c1:7c: d9:7e:57:df:75:3b:74:a2:13:49:ad:96:a2:c5:bc:a4:f5:17: 43:64:16:72:eb:e6:1b:4a:b4:0c:48:41:d4:c1:40:c6:95:d1: 73:b1:e7:73:61:db:cc:88:91:40:e0:3f:44:e3:e6:7d:82:49: c7:cd:53:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQmKNVQM8U/il4vmsc1GEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZWQ0NDNmODVkMGVlYzY2MzY0Y2Q3NTM2ZjE4ODg4YWMx Zjk5ZTMwHhcNMjUxMjI3MTAwMjI0WhcNMjUxMjI4MTAwMjI0WjAzMTEwLwYDVQQD EygyNmRlMGM2MWM3M2UxZDc2MzQyNzllMTczMWE0YWI4ODI4NjBjOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtVOJfA9vyHcmE3C2dBB7ZK0v8MA D3iJWxN1Zxwx7sCOOQsmb3Y4dPL0o909haeTmiTqW8y1gIb/3+4V82rvUSsqhf9O cKW6ztR9H3BkXgf9YAZjUk27HT+kDu2TNLWS+bX+InddRc3Tm+7XP5AzJeJ2y03E fO/5mjLM6hocH4McjA1vFWxsacabZfiZ/63/2Lkjk8dX5pCgVvftvFvQQ+dYvhgM yiSk5gb+EQeolZ2EhZ5655JkbYWYyfnqk0CyF/uxzNc92UipiJCZQZF5JM4heSWm NQ2VOmBO28t+S/ofDRI/eJ4O37pG8E5eDj5IGFCG9nSIuQGQaMj5BdZHZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbeDGHHPh12NCeeFzGkq4goYMkkMB8GA1UdIwQY MBaAFMjtRD+F0O7GY2TNdTbxiIisH5njMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYt NmQwNDMxMGUzNDJiLzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hYzQ5ZWItYzQ3YS00YzVkLTgxYmYtNmQwNDMxMGUzNDJi LzEveU8xRVA0WFE3c1pqWk0xMU52R0lpS3dmbWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALp0AFzS2 6e1RUgYWQTOnEvgRo/SJ5LcbhS6K7+fjFw/QFIkWOtxm418BKJaqu93hqCaetr/0 mDDwCYE0UHhct3MAoxF0Y3gJ45x4nKRlTcjOnfe1C+iCBSqlj5n3MOaI8vJbTHhI fzZxaT4ytwc1BEzoHRezbX3GswHxV18dDX2y8iW7ySpwEG7FPUdTCxmZklq4BOU/ Ltj/WcoSOU8xoESzBR69OT9mztsuvj+EHC27yo5rBuDVDFc8g9ori7ZuXUR12cF8 2X5X33U7dKITSa2WosW8pPUXQ2QWcuvmG0q0DEhB1MFAxpXRc7Hnc2HbzIiRQOA/ ROPmfYJJx81T2g== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:43 2025 by rpki-client