This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft File: YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json) Hash identifier: cDS6JPV3Z3U3rGM4os3UTNs4SfcmjRBlVt/eAHr47Tc= Subject key identifier: 72:61:ED:71:30:96:23:9B:48:81:CB:26:A3:41:56:C4:83:90:06:FF Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF Certificate issuer: /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef Certificate serial: 019B337B457C2E33499BA6D709805B885A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 22:01:15 +0000 Manifest this update: Thu 18 Dec 2025 22:01:15 +0000 Manifest next update: Fri 19 Dec 2025 22:01:15 +0000 Files and hashes: 1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: 9dEDpoEho2JuOeqxmX0wCCgyuzvnr4ynfTmeYzFNPgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:45:7c:2e:33:49:9b:a6:d7:09:80:5b:88:5a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef Validity Not Before: Dec 18 22:01:15 2025 GMT Not After : Dec 19 22:01:15 2025 GMT Subject: CN=7261ed713096239b4881cb26a34156c4839006ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:bd:ed:40:31:0d:58:77:63:92:ba:a3:9c: 82:0d:2a:48:48:be:a3:2e:6c:01:bb:d1:43:aa:08: 4a:22:0e:4b:21:ec:da:79:0b:f2:db:f7:a4:1f:45: fc:f4:91:ee:ba:05:68:83:a3:42:e0:e6:a2:1d:e3: 6c:ac:d5:66:a0:91:ae:62:1f:6c:df:84:58:41:a5: 15:14:96:03:ee:4f:c5:50:c7:66:4a:48:2f:42:a3: 4c:29:5c:64:06:3a:b4:2e:09:bc:4d:cf:ae:99:9a: d2:9f:c5:56:0b:b1:3a:b7:7c:8e:9e:8c:26:28:28: 43:52:d4:49:29:73:b3:42:cc:2e:57:29:84:6a:b5: 40:3d:14:fb:e2:ac:c5:14:64:4c:db:da:50:37:d9: 50:71:0f:28:80:5c:98:a1:8a:00:f0:98:ea:6c:df: 27:42:b4:64:29:db:d2:6c:91:81:ec:e6:72:ab:5f: 9d:82:07:00:39:3a:6a:24:fa:be:2d:15:3c:b5:47: 43:04:62:c6:a7:7a:56:58:d0:36:9f:7e:fb:8f:c8: bc:ef:b6:76:5f:84:4c:f1:11:77:2a:4e:8d:f9:5e: 5f:da:c2:0a:ff:7e:7a:1d:56:22:a1:d8:ed:c0:c8: 92:ea:bb:5d:b7:24:0b:5a:1e:77:2e:8a:f1:a5:a4: 73:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:61:ED:71:30:96:23:9B:48:81:CB:26:A3:41:56:C4:83:90:06:FF X509v3 Authority Key Identifier: keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:02:bf:ac:40:54:0d:ce:1f:2c:fa:34:86:ff:b0:6b:0a:82: 85:13:6a:bb:83:c6:9c:b3:e5:57:05:e5:7e:2b:17:75:19:3f: e5:aa:e9:38:16:be:ed:b1:81:cb:56:6d:31:21:fc:bb:a2:7e: b6:ca:f3:b1:3f:af:4e:cb:64:21:f1:1f:e3:86:cf:47:18:4e: 99:06:f4:09:97:a2:ea:e8:6e:99:65:13:0f:22:ba:0c:0a:1b: ed:a9:b7:40:54:a1:47:c4:cb:0a:4e:fb:20:de:ab:78:f6:da: 76:92:52:64:52:9a:5d:ff:ef:2d:98:2c:8d:7e:25:38:9d:b3: ae:77:6f:18:de:81:01:ab:c8:c9:0f:01:9a:eb:29:64:55:7b: f9:07:7a:8c:6d:27:89:5e:20:24:57:ff:72:1e:fe:7f:d4:21: 74:f0:bd:f4:32:f0:cc:fb:3d:7c:30:2f:e6:9e:a7:ea:4e:1d: 68:2b:17:12:3a:2c:03:45:54:ae:e1:bc:a7:a9:28:f7:eb:a4: c3:6c:cc:fc:a0:20:50:6e:de:f6:f0:ea:7b:42:a0:6d:b9:bd: 7b:4c:5f:0e:2d:3d:1e:ae:88:a5:a6:b4:14:0c:f7:28:0d:8e: 27:93:d5:56:bd:a9:cf:de:35:3e:80:1f:39:d8:fb:a3:d5:e0: 12:96:f6:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0V8LjNJm6bXCYBbiFpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNmYwYWVjOWZjOTFmNGNjNjA0OWNmMmQ5NTQyZWJkODI1 MTVhZWYwHhcNMjUxMjE4MjIwMTE1WhcNMjUxMjE5MjIwMTE1WjAzMTEwLwYDVQQD Eyg3MjYxZWQ3MTMwOTYyMzliNDg4MWNiMjZhMzQxNTZjNDgzOTAwNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCm97UAxDVh3Y5K6o5yCDSpISL6j LmwBu9FDqghKIg5LIezaeQvy2/ekH0X89JHuugVog6NC4OaiHeNsrNVmoJGuYh9s 34RYQaUVFJYD7k/FUMdmSkgvQqNMKVxkBjq0Lgm8Tc+umZrSn8VWC7E6t3yOnowm KChDUtRJKXOzQswuVymEarVAPRT74qzFFGRM29pQN9lQcQ8ogFyYoYoA8JjqbN8n QrRkKdvSbJGB7OZyq1+dggcAOTpqJPq+LRU8tUdDBGLGp3pWWNA2n377j8i877Z2 X4RM8RF3Kk6N+V5f2sIK/356HVYiodjtwMiS6rtdtyQLWh53LorxpaRzOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJh7XEwliObSIHLJqNBVsSDkAb/MB8GA1UdIwQY MBaAFGBvCuyfyR9MxgSc8tlULr2CUVrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAt ZDk5NDdhZjJmY2E3LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAtZDk5NDdhZjJmY2E3 LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgK/rEBU Dc4fLPo0hv+wawqChRNqu4PGnLPlVwXlfisXdRk/5arpOBa+7bGBy1ZtMSH8u6J+ tsrzsT+vTstkIfEf44bPRxhOmQb0CZei6uhumWUTDyK6DAob7am3QFShR8TLCk77 IN6rePbadpJSZFKaXf/vLZgsjX4lOJ2zrndvGN6BAavIyQ8BmuspZFV7+Qd6jG0n iV4gJFf/ch7+f9QhdPC99DLwzPs9fDAv5p6n6k4daCsXEjosA0VUruG8p6ko9+uk w2zM/KAgUG7e9vDqe0Kgbbm9e0xfDi09Hq6Ipaa0FAz3KA2OJ5PVVr2pz941PoAf Odj7o9XgEpb2cA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:12 2025 by rpki-client