This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft File: y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft (raw, json) Hash identifier: LSVYrCUGhjWRQLj1Duq2NGqhaDKlakWyqH0Z016d5f8= Subject key identifier: 8F:C9:DC:4A:B2:92:9D:EA:65:4D:73:DC:95:71:50:72:44:A7:27:9F Authority key identifier: CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06 Certificate issuer: /CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06 Certificate serial: 019B1A29AD2A669F18A8A2D9CB6FAF48BCAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft Manifest number: 048E Signing time: Sun 14 Dec 2025 00:01:37 +0000 Manifest this update: Sun 14 Dec 2025 00:01:37 +0000 Manifest next update: Mon 15 Dec 2025 00:01:37 +0000 Files and hashes: 1: y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl (hash: 6IzeXrLVrEjwFxk2bXdfCwp71kB+UFKRqkU/WB3SPZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:ad:2a:66:9f:18:a8:a2:d9:cb:6f:af:48:bc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9a1cb80fb63732e530047a1ec5529f8c8b1a06 Validity Not Before: Dec 14 00:01:37 2025 GMT Not After : Dec 15 00:01:37 2025 GMT Subject: CN=8fc9dc4ab2929dea654d73dc9571507244a7279f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:06:16:c2:22:ef:79:cf:63:2a:e8:22:74: 27:94:ca:5e:2c:5f:49:73:80:f1:a6:62:46:df:30: 24:6d:69:d3:4f:d9:ff:9a:54:05:09:b0:08:82:96: 22:70:38:45:29:6b:2d:94:88:8c:c3:76:fe:75:93: 37:a5:68:98:c8:07:a3:ee:d5:07:35:89:b8:65:84: 40:71:95:c4:05:52:a3:af:f6:53:69:88:2a:29:47: b5:2b:f6:86:ea:30:e2:4e:ea:8b:48:2c:05:97:6f: 8d:b5:9d:e1:29:e2:ea:44:7f:8f:88:1a:e9:e0:c0: 31:cb:7e:b3:e6:1f:98:5a:c7:1e:10:a5:1c:6c:b6: 31:6d:02:3a:b1:31:25:39:35:97:fe:50:c2:c9:17: ab:5d:5b:62:dc:b6:2e:a6:6f:f5:94:af:47:75:65: c5:02:a2:84:59:1c:56:d7:a9:77:b1:62:4c:8f:10: 82:56:33:76:a1:cc:d2:60:5d:c9:e8:8e:7c:91:e1: 87:4e:18:f8:62:ba:c6:63:7b:9f:22:ba:7f:3c:cc: ed:3e:2b:aa:da:89:89:9e:67:ee:05:44:a6:99:c4: 6d:b9:63:79:9b:d5:6a:de:86:b8:de:95:03:63:88: b0:4a:b2:e1:bb:97:98:a7:63:ff:17:46:af:53:4b: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C9:DC:4A:B2:92:9D:EA:65:4D:73:DC:95:71:50:72:44:A7:27:9F X509v3 Authority Key Identifier: keyid:CB:9A:1C:B8:0F:B6:37:32:E5:30:04:7A:1E:C5:52:9F:8C:8B:1A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5ocuA-2NzLlMAR6HsVSn4yLGgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/05bb43-4ae8-4b6d-b46c-113ede3aff79/1/y5ocuA-2NzLlMAR6HsVSn4yLGgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:f0:a4:fc:a0:5f:85:d4:6d:b5:2e:32:a2:84:c4:68:51: da:b2:4f:cd:a7:17:ac:49:da:f7:c7:90:36:f3:b5:60:fe:68: f0:44:4e:4f:da:48:eb:b0:5c:1a:14:3d:be:8b:05:a7:59:e6: f2:75:a7:9a:b4:8b:7f:d7:e4:78:9c:0d:c1:43:77:54:ac:8c: b4:61:93:b5:97:24:9a:dd:d0:92:e5:97:18:de:3e:a8:5b:47: db:a7:71:01:a4:6f:44:da:8a:45:03:84:5e:b8:f0:13:02:a1: ba:8f:5c:91:2c:3a:1a:f8:9a:ce:42:0c:64:48:51:5d:01:c1: 0f:e9:d6:8c:e4:2a:8e:9d:08:a1:94:77:ec:27:3b:64:bf:d2: 43:9b:90:e4:8b:de:ef:d5:4c:fd:ce:09:36:0e:0c:ed:36:16: 1d:78:4b:cc:35:95:4a:6f:9c:b0:7b:76:38:50:23:32:be:e0: 2e:96:0d:39:9d:d0:90:6e:dd:1f:10:b0:c3:42:0b:f3:30:86: 52:61:e1:bd:7c:1b:1d:e8:aa:58:de:88:af:7c:04:85:c6:ae: e4:9c:57:76:28:40:a2:8d:96:a9:48:e6:1a:24:3a:3b:01:c2: fc:d4:c5:09:ea:c5:de:b6:08:6d:17:f2:b9:81:ca:d9:cd:bb: 49:f8:69:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKa0qZp8YqKLZy2+vSLyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOWExY2I4MGZiNjM3MzJlNTMwMDQ3YTFlYzU1MjlmOGM4 YjFhMDYwHhcNMjUxMjE0MDAwMTM3WhcNMjUxMjE1MDAwMTM3WjAzMTEwLwYDVQQD Eyg4ZmM5ZGM0YWIyOTI5ZGVhNjU0ZDczZGM5NTcxNTA3MjQ0YTcyNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCAGFsIi73nPYyroInQnlMpeLF9J c4DxpmJG3zAkbWnTT9n/mlQFCbAIgpYicDhFKWstlIiMw3b+dZM3pWiYyAej7tUH NYm4ZYRAcZXEBVKjr/ZTaYgqKUe1K/aG6jDiTuqLSCwFl2+NtZ3hKeLqRH+PiBrp 4MAxy36z5h+YWsceEKUcbLYxbQI6sTElOTWX/lDCyRerXVti3LYupm/1lK9HdWXF AqKEWRxW16l3sWJMjxCCVjN2oczSYF3J6I58keGHThj4YrrGY3ufIrp/PMztPiuq 2omJnmfuBUSmmcRtuWN5m9Vq3oa43pUDY4iwSrLhu5eYp2P/F0avU0vPYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/J3Eqykp3qZU1z3JVxUHJEpyefMB8GA1UdIwQY MBaAFMuaHLgPtjcy5TAEeh7FUp+MixoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wNWJiNDMtNGFlOC00YjZkLWI0NmMt MTEzZWRlM2FmZjc5LzEveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wNWJiNDMtNGFlOC00YjZkLWI0NmMtMTEzZWRlM2FmZjc5 LzEveTVvY3VBLTJOekxsTUFSNkhzVlNuNHlMR2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovXwpPyg X4XUbbUuMqKExGhR2rJPzacXrEna98eQNvO1YP5o8EROT9pI67BcGhQ9vosFp1nm 8nWnmrSLf9fkeJwNwUN3VKyMtGGTtZckmt3QkuWXGN4+qFtH26dxAaRvRNqKRQOE XrjwEwKhuo9ckSw6GviazkIMZEhRXQHBD+nWjOQqjp0IoZR37Cc7ZL/SQ5uQ5Ive 79VM/c4JNg4M7TYWHXhLzDWVSm+csHt2OFAjMr7gLpYNOZ3QkG7dHxCww0IL8zCG UmHhvXwbHeiqWN6Ir3wEhcau5JxXdihAoo2WqUjmGiQ6OwHC/NTFCerF3rYIbRfy uYHK2c27SfhpIA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:55:03 2025 by rpki-client