This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json) Hash identifier: p6nir2VEU5Y015GeNcqc4c6RQYwVdm/XbyLvco0dyjY= Subject key identifier: F8:70:2D:B9:24:12:2C:E9:87:72:9F:18:D7:15:11:1D:5C:57:0E:10 Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb Certificate serial: 019B19BB09012BC5767184E6F60A36A9236A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft Manifest number: 022A Signing time: Sat 13 Dec 2025 22:00:46 +0000 Manifest this update: Sat 13 Dec 2025 22:00:46 +0000 Manifest next update: Sun 14 Dec 2025 22:00:46 +0000 Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: uNjMWmBqpn6ev4RG7v2NVk6jvjpJsxJOn4kTWwWqcj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:09:01:2b:c5:76:71:84:e6:f6:0a:36:a9:23:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb Validity Not Before: Dec 13 22:00:46 2025 GMT Not After : Dec 14 22:00:46 2025 GMT Subject: CN=f8702db924122ce987729f18d715111d5c570e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:e1:ef:e1:bb:40:c5:03:a6:a4:8a:c5:67: 0c:0a:54:d7:6e:2f:46:4b:9c:8e:29:5e:80:be:d6: 46:36:25:3a:c0:04:2c:1b:5b:aa:30:ed:4a:d9:69: 62:5e:0b:a9:a3:8a:46:f9:15:d0:4b:46:f3:86:76: 30:18:35:69:b0:c2:b5:64:4a:c3:88:7c:94:6e:b5: 93:0a:9b:6b:af:60:43:37:b7:48:d4:c6:d2:84:1a: 71:a6:be:83:de:31:1d:ba:52:84:59:a4:81:d6:86: a2:6a:04:f9:a3:ab:de:d8:4c:73:53:19:be:78:9a: 00:05:c0:e1:e9:5d:9e:7a:ed:47:84:31:63:2b:e2: b8:ba:e8:0a:ca:5d:63:d9:c3:de:77:d3:1d:7c:aa: 8c:6c:2e:93:b8:07:f9:5e:56:70:14:fa:9b:96:32: 46:23:f2:f1:bd:9b:e8:17:64:eb:21:b7:e4:03:b7: ea:76:0b:51:af:88:f3:9d:9f:82:cc:a6:9c:02:e6: 8f:f1:fa:b0:f4:c9:e5:fc:07:f5:5a:44:c4:46:ff: b1:7f:f2:5a:c4:4c:8a:e3:08:c7:c8:d0:1c:4b:7e: b4:99:b9:da:96:50:05:1c:03:08:df:48:4c:80:5f: 2f:eb:d6:20:45:12:95:1b:40:1e:19:c2:c9:7d:d2: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:2D:B9:24:12:2C:E9:87:72:9F:18:D7:15:11:1D:5C:57:0E:10 X509v3 Authority Key Identifier: keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1a:04:6b:59:7e:bc:26:cb:68:ca:a9:0d:7e:ca:1a:cf:ac: ab:c6:ff:cf:92:1d:00:35:3b:af:49:91:44:c1:64:eb:d8:da: f5:ae:6b:c7:80:78:ec:f8:05:a8:74:bb:a3:68:0f:e9:9c:51: ba:bf:86:58:78:f1:6f:86:5f:ba:6a:de:6f:0b:f2:b6:80:73: 40:4e:e2:57:4f:3d:54:22:55:d1:d2:02:ca:e8:a3:8f:1c:c6: 0a:c6:5b:a9:d2:ba:23:87:51:e5:91:d7:25:49:0b:46:22:70: e1:e0:9b:8d:4e:f6:84:98:02:c1:bc:7c:53:53:2b:e2:49:97: 09:ea:03:5c:71:2a:96:b6:ed:05:aa:65:ab:72:2c:1a:b2:72: 7b:e8:72:c4:6e:49:1a:43:80:0d:45:a3:75:01:86:31:be:70: 7c:d5:3f:32:80:49:26:04:c5:bb:13:77:e0:77:cb:6c:43:bc: a8:b0:8d:ce:e0:5f:66:cd:b4:db:f8:ba:36:4a:0c:27:3d:71: d3:b0:1c:5b:7f:bb:c6:37:da:42:4c:5d:83:0f:e6:3b:fb:1e: f5:9c:eb:11:15:e2:e8:a3:9d:55:25:7b:dc:84:f7:3a:d0:ec: 2d:07:86:dd:dc:03:b2:20:d9:25:34:2a:01:a4:51:8f:28:72: dc:c0:cf:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuwkBK8V2cYTm9go2qSNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MmM5NTI5NmE4Y2E4MTE5Mjg3ZTIxNmE0Njk1M2MyM2Ez MDliZWIwHhcNMjUxMjEzMjIwMDQ2WhcNMjUxMjE0MjIwMDQ2WjAzMTEwLwYDVQQD EyhmODcwMmRiOTI0MTIyY2U5ODc3MjlmMThkNzE1MTExZDVjNTcwZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwvh7+G7QMUDpqSKxWcMClTXbi9G S5yOKV6AvtZGNiU6wAQsG1uqMO1K2WliXgupo4pG+RXQS0bzhnYwGDVpsMK1ZErD iHyUbrWTCptrr2BDN7dI1MbShBpxpr6D3jEdulKEWaSB1oaiagT5o6ve2ExzUxm+ eJoABcDh6V2eeu1HhDFjK+K4uugKyl1j2cPed9MdfKqMbC6TuAf5XlZwFPqbljJG I/LxvZvoF2TrIbfkA7fqdgtRr4jznZ+CzKacAuaP8fqw9Mnl/Af1WkTERv+xf/Ja xEyK4wjHyNAcS360mbnallAFHAMI30hMgF8v69YgRRKVG0AeGcLJfdI61QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhwLbkkEizph3KfGNcVER1cVw4QMB8GA1UdIwQY MBaAFMkslSlqjKgRkofiFqRpU8I6MJvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iOWIzYjQtY2M5ZS00MDAzLTk3MmQt ZjE1MDQ4ZWUwZjIyLzEveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9iOWIzYjQtY2M5ZS00MDAzLTk3MmQtZjE1MDQ4ZWUwZjIy LzEveVN5VktXcU1xQkdTaC1JV3BHbFR3am93bS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBoEa1l+ vCbLaMqpDX7KGs+sq8b/z5IdADU7r0mRRMFk69ja9a5rx4B47PgFqHS7o2gP6ZxR ur+GWHjxb4ZfumrebwvytoBzQE7iV089VCJV0dICyuijjxzGCsZbqdK6I4dR5ZHX JUkLRiJw4eCbjU72hJgCwbx8U1Mr4kmXCeoDXHEqlrbtBaplq3IsGrJye+hyxG5J GkOADUWjdQGGMb5wfNU/MoBJJgTFuxN34HfLbEO8qLCNzuBfZs202/i6NkoMJz1x 07AcW3+7xjfaQkxdgw/mO/se9ZzrERXi6KOdVSV73IT3OtDsLQeG3dwDsiDZJTQq AaRRjyhy3MDPGw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:33:40 2025 by rpki-client