This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft File: yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json) Hash identifier: koLJK1pNw2q82g42hlgw4elKjpUYUYoZ5/m60fjK9SU= Subject key identifier: BC:EE:73:BA:67:5B:02:07:3D:02:8D:86:7F:95:40:AD:9A:22:7B:F8 Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E Certificate issuer: /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e Certificate serial: 019B36B40623BE4EC7CCD4E9E826964811B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft Manifest number: 0C8B Signing time: Fri 19 Dec 2025 13:02:06 +0000 Manifest this update: Fri 19 Dec 2025 13:02:06 +0000 Manifest next update: Sat 20 Dec 2025 13:02:06 +0000 Files and hashes: 1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: dgggDf2vLL++6S+3PttxKhxVpS9YlCpVc9CzZUzjBe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:06:23:be:4e:c7:cc:d4:e9:e8:26:96:48:11:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e Validity Not Before: Dec 19 13:02:06 2025 GMT Not After : Dec 20 13:02:06 2025 GMT Subject: CN=bcee73ba675b02073d028d867f9540ad9a227bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:79:19:47:5a:46:92:af:cb:34:c7:fc:dc: f7:e0:d3:e5:7d:3b:48:cb:24:d7:dd:98:c4:14:63: a1:c8:10:74:30:e3:5a:72:f1:59:67:91:85:14:ba: f4:e4:8b:1d:d3:8a:53:54:77:69:f4:be:f4:c0:2a: 78:7b:95:b7:05:e4:c5:8d:ea:4e:86:a5:29:ed:20: bb:c6:a0:a3:bc:8b:5c:ee:14:ed:7f:d1:7d:02:d5: 98:de:f6:61:2c:6f:e2:42:ff:49:90:09:c6:c9:c5: f9:b6:bd:bc:08:83:5d:53:de:04:b7:7a:9e:3d:6b: 14:6c:90:ea:9c:84:43:f0:e5:4a:80:2b:06:d3:83: 69:44:de:a2:46:fa:a2:ab:be:11:bf:20:e2:62:bf: fc:27:89:db:f9:d1:d8:7c:56:c3:78:09:82:f3:51: 24:fa:57:ea:31:e5:ac:70:ae:da:31:21:c7:f4:5a: bb:f9:58:1b:ac:fb:77:01:4a:75:35:1c:78:c7:a4: bb:f0:7a:1d:8b:02:d5:5a:3c:f6:44:83:2b:2e:1f: 16:d0:b1:e0:83:f2:cb:54:3c:d5:e9:34:f3:83:b7: e8:e0:83:b6:95:3d:4e:44:53:37:e6:dd:40:59:cb: f4:8e:98:8c:7b:19:40:0b:23:0d:e4:8c:27:80:d6: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EE:73:BA:67:5B:02:07:3D:02:8D:86:7F:95:40:AD:9A:22:7B:F8 X509v3 Authority Key Identifier: keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b3:d2:28:ad:84:53:70:ff:06:08:52:66:a7:03:35:75:e5: 98:9e:79:0e:cb:4f:24:72:0e:ae:2d:88:d2:17:fd:b6:f8:3d: 80:38:bf:4f:ba:e3:40:5e:5e:7f:f7:c8:23:5f:2c:a3:42:de: dc:c1:e1:70:71:1e:72:8a:40:90:a6:87:58:a8:3b:eb:c4:4b: a0:03:56:c5:2c:10:01:53:f6:c4:90:86:ee:aa:3d:d6:d6:fd: 0e:e4:e5:ae:8d:ee:f7:f9:26:7a:b0:50:95:89:a8:e3:75:9f: c6:bf:d5:19:2a:38:51:5a:7a:76:1e:c3:61:b4:c3:0c:66:ba: f5:8f:8f:3f:aa:9e:08:6e:45:84:c1:95:6f:9a:f3:7c:70:fe: 2e:45:d3:15:1b:10:e2:57:6d:59:b3:53:ac:e8:88:23:57:1f: c6:15:95:51:85:37:63:53:fd:33:81:b7:d7:ca:d8:c9:92:13: 3d:5d:eb:a8:9e:2a:e0:4c:2e:81:67:ab:ba:a0:b8:56:ae:20: 60:59:c5:a9:98:70:ed:d2:26:87:7f:90:77:94:65:8d:dc:12: af:e3:08:8f:ab:01:e7:5c:77:bd:49:8d:94:b8:fb:dd:48:42: f2:16:d9:1a:33:c7:00:c8:57:75:3d:31:8f:3f:72:24:78:7d: 4e:a4:56:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tAYjvk7HzNTp6CaWSBGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTI2YWEyZWZjNzAzZTkyNzkwMDcxZjgyZTZlZTUyOWI5 NWViMWUwHhcNMjUxMjE5MTMwMjA2WhcNMjUxMjIwMTMwMjA2WjAzMTEwLwYDVQQD EyhiY2VlNzNiYTY3NWIwMjA3M2QwMjhkODY3Zjk1NDBhZDlhMjI3YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD95GUdaRpKvyzTH/Nz34NPlfTtI yyTX3ZjEFGOhyBB0MONacvFZZ5GFFLr05Isd04pTVHdp9L70wCp4e5W3BeTFjepO hqUp7SC7xqCjvItc7hTtf9F9AtWY3vZhLG/iQv9JkAnGycX5tr28CINdU94Et3qe PWsUbJDqnIRD8OVKgCsG04NpRN6iRvqiq74RvyDiYr/8J4nb+dHYfFbDeAmC81Ek +lfqMeWscK7aMSHH9Fq7+VgbrPt3AUp1NRx4x6S78HodiwLVWjz2RIMrLh8W0LHg g/LLVDzV6TTzg7fo4IO2lT1ORFM35t1AWcv0jpiMexlACyMN5IwngNaSNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzuc7pnWwIHPQKNhn+VQK2aInv4MB8GA1UdIwQY MBaAFMlSaqLvxwPpJ5AHH4Lm7lKbleseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Y2YzYjMtNjE2Zi00NGVlLWEyMTQt ZjdmNjkwYzBhZjU3LzEveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83Y2YzYjMtNjE2Zi00NGVlLWEyMTQtZjdmNjkwYzBhZjU3 LzEveVZKcW91X0hBLWtua0FjZmd1YnVVcHVWNng0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7PSKK2E U3D/BghSZqcDNXXlmJ55DstPJHIOri2I0hf9tvg9gDi/T7rjQF5ef/fII18so0Le 3MHhcHEecopAkKaHWKg768RLoANWxSwQAVP2xJCG7qo91tb9DuTlro3u9/kmerBQ lYmo43Wfxr/VGSo4UVp6dh7DYbTDDGa69Y+PP6qeCG5FhMGVb5rzfHD+LkXTFRsQ 4ldtWbNTrOiII1cfxhWVUYU3Y1P9M4G318rYyZITPV3rqJ4q4EwugWeruqC4Vq4g YFnFqZhw7dImh3+Qd5RljdwSr+MIj6sB51x3vUmNlLj73UhC8hbZGjPHAMhXdT0x jz9yJHh9TqRWFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:57 2025 by rpki-client