This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json) Hash identifier: SyPqeEbf/kQRYj+XPrGmBdhlAyk9h3ny9kAjcFV5rkI= Subject key identifier: EF:B8:10:07:17:59:F0:85:77:22:09:AC:57:5E:CD:4D:52:E9:D6:32 Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5 Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5 Certificate serial: 019B59E398DDA5A7257E8803F9004CDFDF61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft Manifest number: 02F1 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: b0XH92DAlEVozjXwHnICOBkQacfpTm+Z/ZhPDy30t5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:98:dd:a5:a7:25:7e:88:03:f9:00:4c:df:df:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=efb810071759f085772209ac575ecd4d52e9d632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:a4:25:07:94:89:05:ad:f3:fd:1b:7b:5f: 31:7b:8f:3c:6c:ae:a5:33:e7:58:0f:f2:70:31:fb: 8d:6f:7c:c4:b6:d3:12:ae:61:7b:98:39:23:19:38: 75:f2:9e:f3:38:61:8e:29:16:a9:09:f3:25:20:48: c3:a0:1a:93:43:0c:51:c4:65:3c:f7:be:c5:2f:75: ee:f1:c4:7b:8f:70:b1:7d:20:5b:fb:14:02:79:cb: 6d:4e:1b:a8:9a:d7:7d:84:b4:b2:7e:5e:dc:ab:38: 18:d9:fe:a4:cd:da:43:2c:0f:8b:ce:03:41:e3:72: d3:6b:87:5e:92:b1:8a:3e:e5:38:cd:f0:d7:ef:7a: bc:48:51:71:bf:5e:53:21:f3:f5:48:0a:80:12:4b: e0:18:d6:87:09:56:2d:dd:b3:50:f0:80:9d:b8:26: 34:6e:b9:31:0e:6d:6d:44:f9:bb:29:75:55:e3:fd: db:35:61:66:3c:c6:ca:b0:ea:1b:e6:04:b3:c3:97: 5a:78:c9:e8:8c:1f:24:f7:3d:53:95:42:e3:ee:b1: ff:80:37:ea:c1:3e:0b:f6:42:6e:0d:d6:86:98:b0: 5f:2f:0f:c1:e5:b7:2a:c7:02:a0:a9:c8:45:8a:be: c3:66:a4:59:ed:dc:39:32:a8:e9:85:10:5d:b2:58: 67:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B8:10:07:17:59:F0:85:77:22:09:AC:57:5E:CD:4D:52:E9:D6:32 X509v3 Authority Key Identifier: keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c5:f8:ad:c7:70:35:dd:9e:d6:34:76:35:ea:c9:9e:c8:9a: 52:19:ec:91:dc:20:62:b4:0b:a1:ae:35:b3:ea:17:76:29:4c: 2d:98:5f:b2:81:89:cd:5c:cd:d5:85:d2:8e:63:ec:a0:04:56: 3b:cf:54:15:0e:d7:ca:a3:e9:cb:1d:4e:f3:b0:30:3e:8d:c8: 5b:3e:d3:85:27:bf:bc:7d:f8:76:f2:60:2f:c2:08:f9:a3:3a: a9:be:9d:91:cb:dd:f3:92:96:65:58:15:91:7b:03:ac:4b:04: 91:60:86:02:40:67:b3:64:c4:75:0f:d2:61:b6:9a:00:56:2e: fa:3b:f4:dd:26:fa:3e:92:d7:7d:ff:5d:88:ba:7e:a3:4a:50: cd:f5:ba:32:5d:6c:71:7f:34:0f:45:2d:16:7b:ee:a9:97:f1: 35:47:6a:88:81:86:7a:6c:4e:3f:d4:a2:e5:ff:90:17:74:ce: cd:a8:23:22:b5:39:eb:42:47:98:4f:d7:c8:bc:50:5b:83:2f: 91:55:0c:d9:ee:ca:bd:55:e1:09:d2:56:22:14:00:10:a0:8d: c9:50:82:bb:56:12:65:ba:40:05:73:4b:81:8f:38:ab:e3:75: 3c:c6:28:9e:d4:b0:4d:a0:4a:84:c3:06:75:b1:62:f6:e1:d9: b6:60:bb:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45jdpaclfogD+QBM399hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTVmMjVmY2Q0NTgxMWNlNGY5YTFlZjk0Yjk4YWU4MmQy M2M4ZTUwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD EyhlZmI4MTAwNzE3NTlmMDg1NzcyMjA5YWM1NzVlY2Q0ZDUyZTlkNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu02kJQeUiQWt8/0be18xe488bK6l M+dYD/JwMfuNb3zEttMSrmF7mDkjGTh18p7zOGGOKRapCfMlIEjDoBqTQwxRxGU8 977FL3Xu8cR7j3CxfSBb+xQCecttThuomtd9hLSyfl7cqzgY2f6kzdpDLA+LzgNB 43LTa4dekrGKPuU4zfDX73q8SFFxv15TIfP1SAqAEkvgGNaHCVYt3bNQ8ICduCY0 brkxDm1tRPm7KXVV4/3bNWFmPMbKsOob5gSzw5daeMnojB8k9z1TlULj7rH/gDfq wT4L9kJuDdaGmLBfLw/B5bcqxwKgqchFir7DZqRZ7dw5MqjphRBdslhnXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+4EAcXWfCFdyIJrFdezU1S6dYyMB8GA1UdIwQY MBaAFGEV8l/NRYEc5Pmh75S5iugtI8jlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83MDIxZWItYjAzNy00N2ZlLTgyMjEt ZTAyNjBmYWM3NGI5LzEvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83MDIxZWItYjAzNy00N2ZlLTgyMjEtZTAyNjBmYWM3NGI5 LzEvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMX4rcdw Nd2e1jR2NerJnsiaUhnskdwgYrQLoa41s+oXdilMLZhfsoGJzVzN1YXSjmPsoARW O89UFQ7XyqPpyx1O87AwPo3IWz7ThSe/vH34dvJgL8II+aM6qb6dkcvd85KWZVgV kXsDrEsEkWCGAkBns2TEdQ/SYbaaAFYu+jv03Sb6PpLXff9diLp+o0pQzfW6Ml1s cX80D0UtFnvuqZfxNUdqiIGGemxOP9Si5f+QF3TOzagjIrU560JHmE/XyLxQW4Mv kVUM2e7KvVXhCdJWIhQAEKCNyVCCu1YSZbpABXNLgY84q+N1PMYontSwTaBKhMMG dbFi9uHZtmC7wg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:57 2025 by rpki-client