This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft File: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft (raw, json) Hash identifier: vx9alaA4fT5zD4qYPNOBYam6zJPKLa0ZCOQlYEZ5hXQ= Subject key identifier: 6C:FB:D5:08:31:8A:E6:3C:44:47:32:52:A5:6D:FA:BE:92:44:9D:49 Authority key identifier: C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81 Certificate issuer: /CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581 Certificate serial: 019B5A514B007D35EA10CD27138C1FFF4A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft Manifest number: 0F65 Signing time: Fri 26 Dec 2025 11:00:35 +0000 Manifest this update: Fri 26 Dec 2025 11:00:35 +0000 Manifest next update: Sat 27 Dec 2025 11:00:35 +0000 Files and hashes: 1: yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl (hash: retskK4+yTtUER0joL8RkuBMuFZakv13CSKnVGYrnmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:4b:00:7d:35:ea:10:cd:27:13:8c:1f:ff:4a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8da89fb152d43c63e3da2fd6a0b0dfb22a06581 Validity Not Before: Dec 26 11:00:35 2025 GMT Not After : Dec 27 11:00:35 2025 GMT Subject: CN=6cfbd508318ae63c44473252a56dfabe92449d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:1d:f6:7a:13:99:fa:72:54:6b:1d:d1:6b: 12:3e:a7:66:e4:13:b4:b4:12:56:9a:43:69:b9:43: 50:bd:b0:5d:f8:4f:9c:48:f4:17:4d:0b:a9:b8:0d: 6e:1d:02:b8:c0:d4:11:69:96:e1:30:6b:55:6b:13: 6a:2a:18:f8:67:f8:e9:28:ee:db:fd:96:66:4c:64: 4b:2f:1c:e4:7d:53:0d:02:4b:d0:89:2f:98:de:e8: 64:ea:ba:b9:83:49:5d:68:11:03:76:2d:66:b2:29: a8:74:e5:e1:9c:b3:97:ea:db:2a:17:98:3f:03:ae: 71:02:e4:a4:ee:1e:1d:df:17:d5:4f:b9:9d:f8:46: c4:ff:26:26:aa:fd:92:67:75:36:1a:08:2b:0d:6f: 25:00:70:11:84:90:4e:fb:23:63:bb:32:16:3c:b9: f7:c9:45:58:27:d0:af:60:ef:bf:f3:43:68:d8:0e: 66:59:d7:34:29:19:cd:ed:7d:3c:0e:4c:90:c3:79: 4b:cd:22:a1:1e:6b:67:d1:c9:28:6d:4a:ea:cb:43: 3a:9a:9b:ed:8f:86:85:c9:e5:1e:89:40:03:c0:16: 41:01:b4:7e:58:b0:9c:bf:63:2d:99:77:8e:44:5f: 63:e7:9b:af:f0:ba:87:28:40:2c:10:5d:03:7c:b9: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FB:D5:08:31:8A:E6:3C:44:47:32:52:A5:6D:FA:BE:92:44:9D:49 X509v3 Authority Key Identifier: keyid:C8:DA:89:FB:15:2D:43:C6:3E:3D:A2:FD:6A:0B:0D:FB:22:A0:65:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b55005-005d-4a64-be1a-dd2b061bd4f2/1/yNqJ-xUtQ8Y-PaL9agsN-yKgZYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9e:c1:23:62:53:63:70:d9:09:ca:2f:0a:39:99:f0:4c:3e: 80:15:52:97:25:ee:20:89:ba:1b:c0:eb:8e:f5:ac:08:73:ae: 9f:03:53:a0:f2:d1:50:5b:dd:e7:6e:15:89:fe:61:ce:85:dc: 30:80:5a:a2:ff:df:6b:ef:2b:75:45:74:a2:2a:5e:21:be:3c: e5:da:2f:7b:74:29:19:ee:61:54:73:b9:52:15:93:4c:51:9e: 75:53:51:b5:71:9e:ba:50:a2:b8:87:50:51:98:ae:73:39:4a: 6d:39:ab:57:8a:68:51:a6:c4:dc:32:60:a4:66:be:cf:10:96: f7:18:bd:1d:4a:ef:ef:84:78:c8:f5:15:68:e1:e1:20:d7:ab: a9:74:84:05:77:93:85:b6:be:09:f7:53:95:86:2e:28:8b:71: fc:5a:33:54:ef:93:00:e2:e4:df:50:1f:ed:e5:22:f4:07:09: d7:06:a3:e9:c5:d9:e1:66:09:69:0f:07:08:cd:ed:88:c5:3e: 66:c7:d0:85:63:c7:4c:a7:13:a4:b6:80:14:bf:1e:37:27:17: 1e:ca:c2:6c:e0:eb:10:ff:1e:8e:f9:1e:ec:50:54:e1:08:ed: eb:84:a4:af:a5:ed:6e:57:78:5d:87:b6:a7:1b:06:b2:62:b4: bb:c8:ea:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUsAfTXqEM0nE4wf/0prMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZGE4OWZiMTUyZDQzYzYzZTNkYTJmZDZhMGIwZGZiMjJh MDY1ODEwHhcNMjUxMjI2MTEwMDM1WhcNMjUxMjI3MTEwMDM1WjAzMTEwLwYDVQQD Eyg2Y2ZiZDUwODMxOGFlNjNjNDQ0NzMyNTJhNTZkZmFiZTkyNDQ5ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45Ed9noTmfpyVGsd0WsSPqdm5BO0 tBJWmkNpuUNQvbBd+E+cSPQXTQupuA1uHQK4wNQRaZbhMGtVaxNqKhj4Z/jpKO7b /ZZmTGRLLxzkfVMNAkvQiS+Y3uhk6rq5g0ldaBEDdi1msimodOXhnLOX6tsqF5g/ A65xAuSk7h4d3xfVT7md+EbE/yYmqv2SZ3U2GggrDW8lAHARhJBO+yNjuzIWPLn3 yUVYJ9CvYO+/80No2A5mWdc0KRnN7X08DkyQw3lLzSKhHmtn0ckobUrqy0M6mpvt j4aFyeUeiUADwBZBAbR+WLCcv2MtmXeORF9j55uv8LqHKEAsEF0DfLmz+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz71QgxiuY8REcyUqVt+r6SRJ1JMB8GA1UdIwQY MBaAFMjaifsVLUPGPj2i/WoLDfsioGWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveU5xSi14VXRROFktUGFMOWFnc04teUtnWllFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTUwMDUtMDA1ZC00YTY0LWJlMWEt ZGQyYjA2MWJkNGYyLzEveU5xSi14VXRROFktUGFMOWFnc04teUtnWllFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNTUwMDUtMDA1ZC00YTY0LWJlMWEtZGQyYjA2MWJkNGYy LzEveU5xSi14VXRROFktUGFMOWFnc04teUtnWllFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ7BI2JT Y3DZCcovCjmZ8Ew+gBVSlyXuIIm6G8DrjvWsCHOunwNToPLRUFvd524Vif5hzoXc MIBaov/fa+8rdUV0oipeIb485dove3QpGe5hVHO5UhWTTFGedVNRtXGeulCiuIdQ UZiuczlKbTmrV4poUabE3DJgpGa+zxCW9xi9HUrv74R4yPUVaOHhINerqXSEBXeT hba+CfdTlYYuKItx/FozVO+TAOLk31Af7eUi9AcJ1waj6cXZ4WYJaQ8HCM3tiMU+ ZsfQhWPHTKcTpLaAFL8eNycXHsrCbODrEP8ejvke7FBU4Qjt64Skr6Xtbld4XYe2 pxsGsmK0u8jq7w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:19 2025 by rpki-client