This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft File: yEg4FrQ75KdvYGCDK-xJkvpamM4.mft (raw, json) Hash identifier: WWsoGMNePUljGTkOgp69Xx2AEpaGade0Vdu0ufqRRlo= Subject key identifier: 63:2A:C5:16:C7:EC:09:BC:7C:D3:AE:06:8C:E9:D3:D0:27:3B:3B:BD Authority key identifier: C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE Certificate issuer: /CN=c8483816b43be4a76f6060832bec4992fa5a98ce Certificate serial: 019B59AC901AA048521EBD003E704C5D9402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft Manifest number: 07BB Signing time: Fri 26 Dec 2025 08:00:39 +0000 Manifest this update: Fri 26 Dec 2025 08:00:39 +0000 Manifest next update: Sat 27 Dec 2025 08:00:39 +0000 Files and hashes: 1: yEg4FrQ75KdvYGCDK-xJkvpamM4.crl (hash: EIh12aH7S8I1tyvwTh3794sZK9sKs/+4rJhEiaT78r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:90:1a:a0:48:52:1e:bd:00:3e:70:4c:5d:94:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8483816b43be4a76f6060832bec4992fa5a98ce Validity Not Before: Dec 26 08:00:39 2025 GMT Not After : Dec 27 08:00:39 2025 GMT Subject: CN=632ac516c7ec09bc7cd3ae068ce9d3d0273b3bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:67:db:75:70:ce:30:52:26:eb:97:3f:fa: d8:3d:e4:04:c0:60:59:c9:7e:a3:de:c0:43:26:ba: 7d:55:0f:7b:2b:7d:03:f3:79:02:d4:9f:d5:02:e2: 87:ad:c9:b0:8c:05:de:84:8f:e4:7f:51:12:d7:58: cd:ff:db:22:37:bf:0c:81:14:af:23:c2:47:47:85: af:e9:5e:2e:b4:97:a0:4b:b8:b7:f6:dd:14:4c:09: 82:2d:c9:fe:39:62:ee:23:94:f4:93:35:3b:9d:c2: c6:56:35:94:32:cc:47:fa:ca:ec:31:b0:47:51:b9: 34:8a:64:81:62:f8:31:11:f0:e6:ba:51:c8:4c:07: 16:01:32:45:db:e0:62:d5:20:a2:14:4f:ec:ec:23: 86:26:fd:76:3c:25:7a:e4:86:41:ce:73:d3:18:6d: 3e:22:75:cc:10:65:6f:ab:a2:c8:6b:d9:bd:c8:db: f8:f0:d5:78:a7:92:1d:07:44:e5:fa:05:9f:d8:2d: 33:20:28:d9:7f:e8:9a:87:bd:5d:37:6a:29:6d:aa: 5a:6d:77:1a:18:98:d8:91:f2:0c:9c:5d:c3:68:df: 8c:03:15:09:cd:0a:54:24:04:0d:34:01:48:a9:bc: 9d:2b:8a:76:22:28:02:01:52:31:be:0d:7f:be:b1: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2A:C5:16:C7:EC:09:BC:7C:D3:AE:06:8C:E9:D3:D0:27:3B:3B:BD X509v3 Authority Key Identifier: keyid:C8:48:38:16:B4:3B:E4:A7:6F:60:60:83:2B:EC:49:92:FA:5A:98:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEg4FrQ75KdvYGCDK-xJkvpamM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1d2c58-a07b-449d-84ad-2a20a608f631/1/yEg4FrQ75KdvYGCDK-xJkvpamM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f3:35:90:57:d9:cc:94:ac:f3:df:28:e8:83:a3:61:c6:1b: a1:41:d5:4a:1b:a2:b0:69:d8:de:92:43:c8:a0:46:38:c7:c1: 02:82:3f:81:8d:02:fc:b3:45:9c:00:01:e9:fe:a1:48:86:38: 55:65:bd:f5:f8:cb:d1:e8:8c:30:6b:7d:33:23:ad:f0:e7:55: f2:d2:ab:e8:63:f4:e4:9a:ac:20:8c:59:06:9b:1b:11:e8:16: 7a:1d:e2:4c:1a:08:7d:2c:e7:30:1b:f0:ba:07:f4:dc:fd:97: f1:3a:20:48:b6:ad:b0:49:d1:1d:fe:cc:e2:78:3d:ef:10:99: b6:ca:4a:5c:3e:b2:6b:ab:2b:ac:e2:1c:25:b4:6f:af:f0:57: 1e:10:3b:d4:f5:1b:9d:ad:62:36:a6:4c:82:a2:76:4e:a2:2a: 07:a2:d8:4e:00:3c:19:48:22:3a:c7:a5:6e:31:b5:88:04:9b: dd:96:11:0d:01:19:af:78:ab:b0:ec:d2:2b:00:b9:13:23:e4: 94:3a:80:a4:28:44:39:25:b5:4c:93:06:cd:d1:c4:de:c1:6a: ac:55:87:5b:86:0b:2b:cb:56:fc:fe:b9:32:5b:0b:62:28:e9: c6:c4:be:e0:56:af:48:72:95:c9:ed:7d:b3:74:36:67:49:f0: 7c:c7:ea:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJAaoEhSHr0APnBMXZQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NDgzODE2YjQzYmU0YTc2ZjYwNjA4MzJiZWM0OTkyZmE1 YTk4Y2UwHhcNMjUxMjI2MDgwMDM5WhcNMjUxMjI3MDgwMDM5WjAzMTEwLwYDVQQD Eyg2MzJhYzUxNmM3ZWMwOWJjN2NkM2FlMDY4Y2U5ZDNkMDI3M2IzYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjln23VwzjBSJuuXP/rYPeQEwGBZ yX6j3sBDJrp9VQ97K30D83kC1J/VAuKHrcmwjAXehI/kf1ES11jN/9siN78MgRSv I8JHR4Wv6V4utJegS7i39t0UTAmCLcn+OWLuI5T0kzU7ncLGVjWUMsxH+srsMbBH Ubk0imSBYvgxEfDmulHITAcWATJF2+Bi1SCiFE/s7COGJv12PCV65IZBznPTGG0+ InXMEGVvq6LIa9m9yNv48NV4p5IdB0Tl+gWf2C0zICjZf+iah71dN2opbapabXca GJjYkfIMnF3DaN+MAxUJzQpUJAQNNAFIqbydK4p2IigCAVIxvg1/vrE/XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMqxRbH7Am8fNOuBozp09AnOzu9MB8GA1UdIwQY MBaAFMhIOBa0O+Snb2BggyvsSZL6WpjOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUVnNEZyUTc1S2R2WUdDREsteEprdnBhbU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8xZDJjNTgtYTA3Yi00NDlkLTg0YWQt MmEyMGE2MDhmNjMxLzEveUVnNEZyUTc1S2R2WUdDREsteEprdnBhbU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8xZDJjNTgtYTA3Yi00NDlkLTg0YWQtMmEyMGE2MDhmNjMx LzEveUVnNEZyUTc1S2R2WUdDREsteEprdnBhbU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfM1kFfZ zJSs898o6IOjYcYboUHVShuisGnY3pJDyKBGOMfBAoI/gY0C/LNFnAAB6f6hSIY4 VWW99fjL0eiMMGt9MyOt8OdV8tKr6GP05JqsIIxZBpsbEegWeh3iTBoIfSznMBvw ugf03P2X8TogSLatsEnRHf7M4ng97xCZtspKXD6ya6srrOIcJbRvr/BXHhA71PUb na1iNqZMgqJ2TqIqB6LYTgA8GUgiOselbjG1iASb3ZYRDQEZr3irsOzSKwC5EyPk lDqApChEOSW1TJMGzdHE3sFqrFWHW4YLK8tW/P65MlsLYijpxsS+4FavSHKVye19 s3Q2Z0nwfMfqJg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:02 2025 by rpki-client