This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft File: yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json) Hash identifier: h90kDj+XJRHR//TsJGgYiQpGPSajFEnjgGqlv3Nl1+Q= Subject key identifier: 47:EB:7A:85:BB:C6:CE:54:25:A6:E6:6D:9F:80:01:15:E6:47:B3:33 Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37 Certificate issuer: /CN=ca28265e0ab83327aa549234cabb13eb8ff66437 Certificate serial: 019B5A5178D5B75F53B60DA1253DF75ECB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft Manifest number: 10F8 Signing time: Fri 26 Dec 2025 11:00:47 +0000 Manifest this update: Fri 26 Dec 2025 11:00:47 +0000 Manifest next update: Sat 27 Dec 2025 11:00:47 +0000 Files and hashes: 1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: LriQhZ2JbiuhnbFVstM+iP5VQDzSKqex3aImL8Bf0TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:78:d5:b7:5f:53:b6:0d:a1:25:3d:f7:5e:cb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437 Validity Not Before: Dec 26 11:00:47 2025 GMT Not After : Dec 27 11:00:47 2025 GMT Subject: CN=47eb7a85bbc6ce5425a6e66d9f800115e647b333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:cf:58:79:bc:04:b2:fd:be:20:66:29:9d: 33:d9:84:bf:dc:6d:f0:76:d0:fc:ba:91:55:af:53: 13:e6:12:8d:2b:73:51:ae:1e:94:91:8d:86:5f:25: 41:2e:ee:dd:f5:b1:90:29:15:f9:87:25:94:91:40: c7:13:cd:b2:c3:63:69:c2:4d:fa:73:22:45:1a:cb: fd:4a:60:3f:fa:7c:b6:57:b5:1a:fc:00:cb:74:dc: 9b:0e:aa:59:75:94:95:40:46:8c:56:18:b5:bc:ae: 38:14:1e:56:99:6f:91:1f:15:a3:a2:a8:fe:06:d2: 3a:51:33:77:18:dc:fd:89:74:9e:e6:7e:ab:3e:3d: 96:82:ad:4d:64:16:74:ee:f7:1d:76:a1:6d:46:d2: 49:41:8a:34:87:6f:94:5a:6c:2b:e0:7a:2b:a1:dc: 64:2e:97:79:31:2b:08:c3:9c:f1:40:d0:cd:af:e5: 53:10:b1:3e:83:ac:cd:1f:a2:92:1b:09:50:2b:2c: c3:c6:b4:a7:75:93:e9:8b:33:06:a9:41:31:7e:ee: 3a:35:8c:fa:42:5e:00:10:ea:66:c0:00:c4:b9:b0: 86:58:db:b9:96:95:37:0c:2d:c6:af:13:b3:fd:6e: 8e:4c:23:53:70:50:a3:53:7f:dd:25:50:67:ea:b3: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EB:7A:85:BB:C6:CE:54:25:A6:E6:6D:9F:80:01:15:E6:47:B3:33 X509v3 Authority Key Identifier: keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d9:c9:0f:32:28:a5:50:d2:8c:0d:a1:8a:d4:72:73:ae:27: ae:23:11:0d:53:9a:2e:98:9b:f7:cb:ef:4a:64:ca:0c:7c:d6: e7:c0:0f:06:b6:0d:de:00:de:9e:80:92:ae:52:8e:55:12:35: 17:20:1d:2f:b6:4c:2d:39:ad:51:af:bf:73:1a:04:67:41:bc: c9:af:af:90:33:0f:68:52:03:ec:1f:19:80:37:d2:7a:a8:51: 2a:52:3b:26:47:4b:3a:77:62:c8:0d:40:2c:92:1f:2a:e8:cc: f3:1b:01:bb:79:fb:e2:76:16:42:d2:d5:68:e5:32:5d:72:28: d0:ae:eb:d4:85:8a:4b:f3:ca:e2:05:d4:61:11:e7:85:8c:81: cd:60:44:55:65:c6:e2:73:56:03:a1:c0:99:e1:4d:29:cf:74: 3a:e3:58:6b:51:0a:75:c4:14:7a:df:a7:43:88:55:14:f7:b8: 5d:47:9a:55:85:4e:b9:52:24:93:c0:d7:77:62:94:4e:bb:b3: 64:40:b9:01:d9:60:aa:1e:69:1b:06:e9:64:08:35:a4:62:97: 88:a2:78:dc:7b:d7:0c:51:c8:a6:0e:ab:ec:65:2f:4b:6a:22: 6f:1e:a4:6c:44:8a:48:ed:b7:93:92:ed:85:7b:bb:5d:40:81: fd:3c:2d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXjVt19Ttg2hJT33XssDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjgyNjVlMGFiODMzMjdhYTU0OTIzNGNhYmIxM2ViOGZm NjY0MzcwHhcNMjUxMjI2MTEwMDQ3WhcNMjUxMjI3MTEwMDQ3WjAzMTEwLwYDVQQD Eyg0N2ViN2E4NWJiYzZjZTU0MjVhNmU2NmQ5ZjgwMDExNWU2NDdiMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9bPWHm8BLL9viBmKZ0z2YS/3G3w dtD8upFVr1MT5hKNK3NRrh6UkY2GXyVBLu7d9bGQKRX5hyWUkUDHE82yw2Npwk36 cyJFGsv9SmA/+ny2V7Ua/ADLdNybDqpZdZSVQEaMVhi1vK44FB5WmW+RHxWjoqj+ BtI6UTN3GNz9iXSe5n6rPj2Wgq1NZBZ07vcddqFtRtJJQYo0h2+UWmwr4Horodxk Lpd5MSsIw5zxQNDNr+VTELE+g6zNH6KSGwlQKyzDxrSndZPpizMGqUExfu46NYz6 Ql4AEOpmwADEubCGWNu5lpU3DC3GrxOz/W6OTCNTcFCjU3/dJVBn6rMBSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfreoW7xs5UJabmbZ+AARXmR7MzMB8GA1UdIwQY MBaAFMooJl4KuDMnqlSSNMq7E+uP9mQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEt MTJkZmQ1ZTM5NWY5LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEtMTJkZmQ1ZTM5NWY5 LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNnJDzIo pVDSjA2hitRyc64nriMRDVOaLpib98vvSmTKDHzW58APBrYN3gDenoCSrlKOVRI1 FyAdL7ZMLTmtUa+/cxoEZ0G8ya+vkDMPaFID7B8ZgDfSeqhRKlI7JkdLOndiyA1A LJIfKujM8xsBu3n74nYWQtLVaOUyXXIo0K7r1IWKS/PK4gXUYRHnhYyBzWBEVWXG 4nNWA6HAmeFNKc90OuNYa1EKdcQUet+nQ4hVFPe4XUeaVYVOuVIkk8DXd2KUTruz ZEC5Adlgqh5pGwbpZAg1pGKXiKJ43HvXDFHIpg6r7GUvS2oibx6kbESKSO23k5Lt hXu7XUCB/TwtwQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:48 2025 by rpki-client