This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json) Hash identifier: xJbCtheEv3FQRIRbD99a4PMa4CjjKFSmAt1tV4YQLNE= Subject key identifier: 07:11:63:05:B7:B1:6A:0A:43:FE:12:7A:C5:80:01:61:FB:A2:14:C1 Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8 Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8 Certificate serial: 019B416DE8D3119D76FE10D3F597179F6E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft Manifest number: 0FA9 Signing time: Sun 21 Dec 2025 15:01:20 +0000 Manifest this update: Sun 21 Dec 2025 15:01:20 +0000 Manifest next update: Mon 22 Dec 2025 15:01:20 +0000 Files and hashes: 1: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: 6yvK/Zn5k6eXvk6dkFPKOzHMmkFbd1bjozDMB/Xsf0k=) 2: sx-UCsH84Fo5bc2WmQwkmwlKLoA.roa (hash: Q4Kop0+uG17slbImIq2AZoEMlOj+HfQwg/st4yakPBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:e8:d3:11:9d:76:fe:10:d3:f5:97:17:9f:6e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8 Validity Not Before: Dec 21 15:01:20 2025 GMT Not After : Dec 22 15:01:20 2025 GMT Subject: CN=07116305b7b16a0a43fe127ac5800161fba214c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:e9:4a:14:ca:f9:a7:9d:7a:97:e6:1a:a6: 42:1c:4e:b8:92:53:fb:37:12:88:01:73:77:77:16: 34:29:f0:12:ec:57:3c:b1:00:73:e1:e8:ea:9f:66: 20:e8:a8:42:40:59:1b:dd:b5:46:dc:e6:dd:e3:93: 70:02:1e:23:0b:f5:ea:67:f9:6e:ae:d8:d1:01:c5: 26:c6:c8:d1:9c:9e:ca:41:00:e9:b1:1b:e5:8e:89: 79:05:68:3d:74:2a:95:1e:12:54:07:73:0b:5d:29: 9a:db:4a:57:01:4d:41:63:15:95:f8:38:e9:f8:2b: d4:e8:a7:dd:9d:4c:d4:7b:2e:be:7d:9e:b7:9e:72: 6c:04:a6:7f:00:48:54:04:f0:e4:3b:f2:76:b2:7e: 00:b6:37:31:ed:b9:b3:0c:3f:d5:4c:ea:2d:fd:28: 07:0f:92:be:cb:82:db:4d:c8:40:dc:e0:e9:fa:af: 60:60:10:c2:f1:ac:48:a5:47:51:25:23:2a:54:8b: 5c:e6:6a:63:6b:54:88:8d:04:5b:56:25:12:bd:75: 61:f9:6b:d3:d6:46:5c:15:ae:e5:e7:01:4c:b9:11: c6:50:0e:44:c9:cb:dc:2e:82:ad:0d:38:db:59:ca: f4:51:fb:6a:73:27:d7:97:9e:4e:dd:98:26:3f:1b: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:11:63:05:B7:B1:6A:0A:43:FE:12:7A:C5:80:01:61:FB:A2:14:C1 X509v3 Authority Key Identifier: keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7d:03:be:3b:46:04:32:db:6c:75:8c:ec:5c:15:dc:e6:0c: 16:62:a9:a8:e9:c8:cf:94:eb:df:14:3f:e5:b2:77:fe:72:fb: 4b:59:9b:83:d1:2e:e9:fa:b8:0a:bb:9c:b5:27:3c:53:5a:e3: b7:c5:19:ff:f6:57:94:e9:1c:f1:3e:e3:8e:fe:6b:33:25:c2: 16:6f:45:62:28:8b:2f:bb:2d:0a:2e:1a:52:ac:98:02:22:b2: a4:d5:7a:7a:b9:ca:1f:5c:cf:0b:e3:a0:e4:85:20:3c:44:64: 1b:8b:55:c8:55:7c:98:28:16:42:b7:2b:9a:6b:bb:3d:d6:c6: 49:a8:34:3c:ab:4b:a6:f9:cb:c9:f7:38:f5:16:a7:59:52:40: 63:6f:c5:29:91:60:04:46:3c:74:36:8f:3b:fc:05:c6:a9:d5: 69:26:c4:3e:1a:f5:91:be:96:42:b3:c5:27:3b:2e:ec:96:1b: d7:10:86:bb:3d:6b:06:ff:63:3f:ee:0d:18:58:17:58:ab:19: 43:72:6f:8a:64:ee:2d:17:4d:6f:40:be:d3:22:a4:95:40:30: b1:e3:0b:64:7a:e1:61:b8:97:37:23:9b:94:10:d0:63:af:6f: c2:74:c0:83:16:16:93:35:4a:1e:b4:c4:bd:79:9f:29:07:f4: b5:2e:78:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbejTEZ12/hDT9ZcXn24RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOGEwOGUyOGIzMWJiZTVjMTgxMmZkYTkwZTdlOGM4YTQ4 MzM1ZTgwHhcNMjUxMjIxMTUwMTIwWhcNMjUxMjIyMTUwMTIwWjAzMTEwLwYDVQQD EygwNzExNjMwNWI3YjE2YTBhNDNmZTEyN2FjNTgwMDE2MWZiYTIxNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFfpShTK+aedepfmGqZCHE64klP7 NxKIAXN3dxY0KfAS7Fc8sQBz4ejqn2Yg6KhCQFkb3bVG3Obd45NwAh4jC/XqZ/lu rtjRAcUmxsjRnJ7KQQDpsRvljol5BWg9dCqVHhJUB3MLXSma20pXAU1BYxWV+Djp +CvU6KfdnUzUey6+fZ63nnJsBKZ/AEhUBPDkO/J2sn4Atjcx7bmzDD/VTOot/SgH D5K+y4LbTchA3ODp+q9gYBDC8axIpUdRJSMqVItc5mpja1SIjQRbViUSvXVh+WvT 1kZcFa7l5wFMuRHGUA5EycvcLoKtDTjbWcr0UftqcyfXl55O3ZgmPxviswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcRYwW3sWoKQ/4SesWAAWH7ohTBMB8GA1UdIwQY MBaAFGKKCOKLMbvlwYEv2pDn6MikgzXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt MGExZDRjMDIyZTUxLzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx LzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC30DvjtG BDLbbHWM7FwV3OYMFmKpqOnIz5Tr3xQ/5bJ3/nL7S1mbg9Eu6fq4CructSc8U1rj t8UZ//ZXlOkc8T7jjv5rMyXCFm9FYiiLL7stCi4aUqyYAiKypNV6ernKH1zPC+Og 5IUgPERkG4tVyFV8mCgWQrcrmmu7PdbGSag0PKtLpvnLyfc49RanWVJAY2/FKZFg BEY8dDaPO/wFxqnVaSbEPhr1kb6WQrPFJzsu7JYb1xCGuz1rBv9jP+4NGFgXWKsZ Q3JvimTuLRdNb0C+0yKklUAwseMLZHrhYbiXNyOblBDQY69vwnTAgxYWkzVKHrTE vXmfKQf0tS54bg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:52:13 2025 by rpki-client