This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft File: yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json) Hash identifier: POdD1XVTsKgTn8d6eaSErf/++bkWPnRFPQ2A6TL69cU= Subject key identifier: C5:4E:A2:7A:77:6B:FB:9B:66:4F:75:6B:27:FE:DB:1A:D4:DD:49:7E Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5 Certificate issuer: /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5 Certificate serial: 019B5ABF7B5B759CA121773AE5C546AB3134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft Manifest number: 04B3 Signing time: Fri 26 Dec 2025 13:00:56 +0000 Manifest this update: Fri 26 Dec 2025 13:00:56 +0000 Manifest next update: Sat 27 Dec 2025 13:00:56 +0000 Files and hashes: 1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: K/sbUL+lp0a1AIH3MV2D1m+inF+Q06+isKN/5WrDv70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:7b:5b:75:9c:a1:21:77:3a:e5:c5:46:ab:31:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5 Validity Not Before: Dec 26 13:00:56 2025 GMT Not After : Dec 27 13:00:56 2025 GMT Subject: CN=c54ea27a776bfb9b664f756b27fedb1ad4dd497e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5d:72:a6:05:1b:b0:d6:da:ed:d5:6c:e9:81: 87:e5:48:4a:55:bf:a3:61:50:57:bd:79:16:7c:e6: 3d:ad:a3:51:8b:8e:b8:d8:52:06:1b:f9:ae:93:5a: ee:23:8e:cf:d1:a1:e0:6b:6d:0c:6e:ac:61:74:7f: 3e:a4:0a:1a:b3:04:ed:7d:43:f6:f2:53:fe:b8:fb: 82:4c:78:81:5a:8c:da:8a:5e:45:0d:2f:2f:44:43: 79:08:54:af:5b:c6:df:a0:1b:9c:3e:2a:fb:06:06: 55:9f:3a:a9:dd:ec:6f:53:2e:f8:ee:53:f0:fe:af: 9b:b0:1f:3f:76:a0:6c:a2:5c:9d:80:65:56:74:57: 23:a5:21:14:59:c6:63:a8:c6:a0:cb:58:0f:df:78: dd:34:2c:7b:c9:e1:a8:74:43:14:17:0c:24:f4:b5: 08:bd:40:5d:40:27:44:1f:6d:8a:09:6b:22:1b:5e: 02:e3:e8:d5:b5:05:8e:0e:0e:9a:40:3f:e7:b1:a6: b4:8a:05:d0:7d:e1:0d:1b:b9:d7:12:0d:0e:76:4c: fa:b0:78:72:7d:6b:ef:b2:5c:2f:bd:52:0b:a4:d2: 66:c7:9a:10:fc:2e:b8:de:7a:e9:8f:d7:ad:5b:84: 60:69:c3:81:90:6c:14:e6:80:bf:9f:5c:2d:9c:2d: ef:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4E:A2:7A:77:6B:FB:9B:66:4F:75:6B:27:FE:DB:1A:D4:DD:49:7E X509v3 Authority Key Identifier: keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:cf:ca:2c:49:b8:07:00:49:4d:2c:25:0f:a3:fc:bb:8b:3f: 8e:1e:b6:64:dd:d2:df:a1:48:21:ac:87:81:17:2a:a7:45:35: 21:a5:58:ce:a8:d5:d5:20:75:4d:55:d6:67:c5:d7:a1:fb:59: 13:90:e4:4e:88:72:5e:5e:91:7f:2d:b4:95:8f:31:23:f1:90: 48:10:c6:e1:50:22:54:a9:42:cc:a4:00:09:f2:eb:90:e0:c3: 90:ec:b4:bc:04:bf:7d:c8:81:5d:af:39:cf:8b:dd:46:79:50: 11:15:07:2e:f3:44:89:1f:da:d4:5d:77:c6:45:1d:a9:c0:18: 6e:c1:b6:6d:3c:d6:8f:c6:e4:e5:a9:12:2f:72:0b:33:03:08: b4:3a:17:bc:55:02:9e:eb:9a:d2:3f:13:6b:53:32:6b:48:9a: 76:f6:5f:58:03:37:e3:e0:1b:14:8b:c0:7a:75:e0:f6:8c:7f: 06:2a:5c:83:c9:a3:54:d7:24:13:35:24:11:57:57:f6:bd:ef: 2d:c4:8d:f9:97:19:e7:90:4b:0e:b1:2f:c4:8d:cb:c0:ad:70: b5:01:fa:18:f1:4c:7f:f3:25:9a:83:b0:28:04:61:b3:a2:37: b9:2a:82:5c:dd:05:8b:27:ca:15:f7:a1:34:e2:96:27:7c:77: 4c:1b:95:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3tbdZyhIXc65cVGqzE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NDUwMzM2N2UwMWM2YzBjNGNmMDk1N2EwZmMxYzM2YmUw ZDJiYzUwHhcNMjUxMjI2MTMwMDU2WhcNMjUxMjI3MTMwMDU2WjAzMTEwLwYDVQQD EyhjNTRlYTI3YTc3NmJmYjliNjY0Zjc1NmIyN2ZlZGIxYWQ0ZGQ0OTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA311ypgUbsNba7dVs6YGH5UhKVb+j YVBXvXkWfOY9raNRi4642FIGG/muk1ruI47P0aHga20MbqxhdH8+pAoaswTtfUP2 8lP+uPuCTHiBWozail5FDS8vREN5CFSvW8bfoBucPir7BgZVnzqp3exvUy747lPw /q+bsB8/dqBsolydgGVWdFcjpSEUWcZjqMagy1gP33jdNCx7yeGodEMUFwwk9LUI vUBdQCdEH22KCWsiG14C4+jVtQWODg6aQD/nsaa0igXQfeENG7nXEg0Odkz6sHhy fWvvslwvvVILpNJmx5oQ/C643nrpj9etW4RgacOBkGwU5oC/n1wtnC3vOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVOonp3a/ubZk91ayf+2xrU3Ul+MB8GA1UdIwQY MBaAFMhFAzZ+AcbAxM8JV6D8HDa+DSvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZGI5MjEtMmMwZi00MDRlLWFhYmQt ZTM1OTI4YjBhOTdhLzEveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kZGI5MjEtMmMwZi00MDRlLWFhYmQtZTM1OTI4YjBhOTdh LzEveUVVRE5uNEJ4c0RFendsWG9Qd2NOcjROSzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8/KLEm4 BwBJTSwlD6P8u4s/jh62ZN3S36FIIayHgRcqp0U1IaVYzqjV1SB1TVXWZ8XXoftZ E5DkTohyXl6Rfy20lY8xI/GQSBDG4VAiVKlCzKQACfLrkODDkOy0vAS/fciBXa85 z4vdRnlQERUHLvNEiR/a1F13xkUdqcAYbsG2bTzWj8bk5akSL3ILMwMItDoXvFUC nuua0j8Ta1Mya0iadvZfWAM34+AbFIvAenXg9ox/Bipcg8mjVNckEzUkEVdX9r3v LcSN+ZcZ55BLDrEvxI3LwK1wtQH6GPFMf/MlmoOwKARhs6I3uSqCXN0FiyfKFfeh NOKWJ3x3TBuV+w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:21 2025 by rpki-client