This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft File: YsD62Il-olgvlTB3ng5o6gjM5kM.mft (raw, json) Hash identifier: bcvmfPgCYa+zxexyHVu+TbE1JxFCMMoI/L0ie5V8rNI= Subject key identifier: 63:C0:50:8F:CC:0B:58:17:9C:A3:DC:AA:F4:EB:77:B7:8A:77:E5:C3 Authority key identifier: 62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43 Certificate issuer: /CN=62c0fad8897ea2582f9530779e0e68ea08cce643 Certificate serial: 019B48147298DFE04BFE0C748DBAC0041686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft Manifest number: 0872 Signing time: Mon 22 Dec 2025 22:00:58 +0000 Manifest this update: Mon 22 Dec 2025 22:00:58 +0000 Manifest next update: Tue 23 Dec 2025 22:00:58 +0000 Files and hashes: 1: YsD62Il-olgvlTB3ng5o6gjM5kM.crl (hash: dmnAVuaB75rWU1lu2XMDBQ4DfeYRFE4kmRMyAO76RAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:72:98:df:e0:4b:fe:0c:74:8d:ba:c0:04:16:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62c0fad8897ea2582f9530779e0e68ea08cce643 Validity Not Before: Dec 22 22:00:58 2025 GMT Not After : Dec 23 22:00:58 2025 GMT Subject: CN=63c0508fcc0b58179ca3dcaaf4eb77b78a77e5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:a1:00:3f:b0:f8:90:e8:5b:7b:ee:2f:49: 34:03:1e:19:21:d2:70:38:46:0e:b2:db:ae:93:e5: 5d:18:b4:e0:ea:b2:56:62:d0:07:3b:9e:41:d8:f5: 01:eb:86:53:b9:26:be:ac:8f:7f:63:e0:70:43:70: d0:12:a0:6b:b6:ba:bf:25:a3:0c:59:05:d7:8f:27: 01:ae:53:e6:64:dc:da:f9:17:aa:4c:f2:8c:98:5f: 5c:98:0a:63:d4:0b:e2:ef:00:fe:a0:35:4b:2f:83: 36:1a:05:ed:75:90:60:a1:55:af:cd:c6:58:65:28: cb:bb:02:2b:ff:08:23:a6:7b:98:62:3e:f8:19:6e: f2:25:e9:85:7b:0a:3b:b7:a0:9e:c8:d7:2f:d9:66: 3c:8d:a1:3e:2b:e3:07:5a:28:ca:11:5d:0d:61:0c: 72:ce:2a:35:2c:a2:fc:b8:f9:12:21:35:2f:92:16: 2b:da:da:ca:20:3f:51:97:7e:73:1c:f3:fe:39:3c: 4b:18:b1:a9:36:6f:c4:f0:1c:24:bb:20:98:60:ec: 0c:37:d9:3e:cf:fc:72:93:35:4c:a1:93:86:50:53: a6:b9:91:83:f4:12:1d:9a:6c:c5:01:e2:77:4f:eb: f7:5a:9e:2a:13:87:57:85:5b:c7:90:16:2c:1a:66: d2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:50:8F:CC:0B:58:17:9C:A3:DC:AA:F4:EB:77:B7:8A:77:E5:C3 X509v3 Authority Key Identifier: keyid:62:C0:FA:D8:89:7E:A2:58:2F:95:30:77:9E:0E:68:EA:08:CC:E6:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsD62Il-olgvlTB3ng5o6gjM5kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/51d04f-246e-41f1-9412-cee1b1d1ec06/1/YsD62Il-olgvlTB3ng5o6gjM5kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d2:fa:aa:7e:b4:99:14:61:d5:33:da:7e:2b:e2:7f:cc:66: 6b:15:ec:d9:e2:e4:5b:b5:55:41:ea:ec:55:d2:60:d5:4d:9f: 0b:6f:a2:3d:29:6f:ac:76:37:05:7a:73:a6:8e:ef:a3:07:83: e8:ec:b2:82:b2:dd:05:6e:f8:c8:8b:e8:13:84:88:da:b5:52: 78:d2:b3:e1:2c:a8:86:48:19:0c:6d:83:40:be:ad:8c:77:cf: ea:1f:c1:4f:9c:bf:56:0c:d4:eb:43:8f:69:79:45:80:81:b7: 81:ff:e2:7a:0a:d7:8a:4d:94:9d:a3:3a:e1:3c:27:c7:bd:65: 3f:bb:29:e9:6d:40:2b:c3:62:51:87:f6:6b:62:9e:39:7b:bb: 56:4c:3f:a8:ec:97:0f:08:87:e6:b5:fd:80:e8:d2:8a:ac:9f: 17:cf:15:e0:95:79:38:75:7d:8e:a6:5f:b2:46:3e:fd:bb:f1: 3c:af:7c:3d:91:90:3b:a6:45:dd:94:7b:14:25:16:17:81:d8: 65:e8:be:86:bd:c1:aa:f9:f4:5f:04:68:81:7c:f2:e2:96:52: 82:b7:76:ac:04:d3:ca:fd:e4:98:d1:f7:05:d5:29:bc:23:6f: 63:34:0d:d8:2a:b0:32:57:cb:c9:50:6c:4b:7b:3e:36:77:df: 20:82:ee:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFHKY3+BL/gx0jbrABBaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYzBmYWQ4ODk3ZWEyNTgyZjk1MzA3NzllMGU2OGVhMDhj Y2U2NDMwHhcNMjUxMjIyMjIwMDU4WhcNMjUxMjIzMjIwMDU4WjAzMTEwLwYDVQQD Eyg2M2MwNTA4ZmNjMGI1ODE3OWNhM2RjYWFmNGViNzdiNzhhNzdlNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDyhAD+w+JDoW3vuL0k0Ax4ZIdJw OEYOstuuk+VdGLTg6rJWYtAHO55B2PUB64ZTuSa+rI9/Y+BwQ3DQEqBrtrq/JaMM WQXXjycBrlPmZNza+ReqTPKMmF9cmApj1Avi7wD+oDVLL4M2GgXtdZBgoVWvzcZY ZSjLuwIr/wgjpnuYYj74GW7yJemFewo7t6CeyNcv2WY8jaE+K+MHWijKEV0NYQxy zio1LKL8uPkSITUvkhYr2trKID9Rl35zHPP+OTxLGLGpNm/E8BwkuyCYYOwMN9k+ z/xykzVMoZOGUFOmuZGD9BIdmmzFAeJ3T+v3Wp4qE4dXhVvHkBYsGmbS4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPAUI/MC1gXnKPcqvTrd7eKd+XDMB8GA1UdIwQY MBaAFGLA+tiJfqJYL5Uwd54OaOoIzOZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTIt Y2VlMWIxZDFlYzA2LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81MWQwNGYtMjQ2ZS00MWYxLTk0MTItY2VlMWIxZDFlYzA2 LzEvWXNENjJJbC1vbGd2bFRCM25nNW82Z2pNNWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9L6qn60 mRRh1TPafivif8xmaxXs2eLkW7VVQersVdJg1U2fC2+iPSlvrHY3BXpzpo7voweD 6OyygrLdBW74yIvoE4SI2rVSeNKz4SyohkgZDG2DQL6tjHfP6h/BT5y/VgzU60OP aXlFgIG3gf/iegrXik2UnaM64Twnx71lP7sp6W1AK8NiUYf2a2KeOXu7Vkw/qOyX DwiH5rX9gOjSiqyfF88V4JV5OHV9jqZfskY+/bvxPK98PZGQO6ZF3ZR7FCUWF4HY Zei+hr3Bqvn0XwRogXzy4pZSgrd2rATTyv3kmNH3BdUpvCNvYzQN2CqwMlfLyVBs S3s+NnffIILuRw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:53:55 2025 by rpki-client