This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft File: YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft (raw, json) Hash identifier: rfXuhDD7um84pfjUU+SO5QSLXuCzMq7vytm8TMYP9Zw= Subject key identifier: 3C:24:8E:DF:A3:AE:51:C1:E5:44:9B:98:1D:7D:44:6D:A7:8F:D3:C0 Authority key identifier: 61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB Certificate issuer: /CN=619a7941e0c2c861322f831ed06f07fb7085a3bb Certificate serial: 019B19161CE0DFC4FB035AF45EAFEF6A9B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft Manifest number: 1390 Signing time: Sat 13 Dec 2025 19:00:38 +0000 Manifest this update: Sat 13 Dec 2025 19:00:38 +0000 Manifest next update: Sun 14 Dec 2025 19:00:38 +0000 Files and hashes: 1: YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl (hash: a4tH7gzp5jbUsQenx0hX5gDNtDmMmF96d6s72PY/CQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:1c:e0:df:c4:fb:03:5a:f4:5e:af:ef:6a:9b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=619a7941e0c2c861322f831ed06f07fb7085a3bb Validity Not Before: Dec 13 19:00:38 2025 GMT Not After : Dec 14 19:00:38 2025 GMT Subject: CN=3c248edfa3ae51c1e5449b981d7d446da78fd3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:a8:96:d8:cc:77:bc:37:8b:ce:ff:05:b8: 32:50:72:b0:d2:1d:39:56:5f:c8:b4:fb:93:9c:35: 37:06:48:b5:51:9c:98:c2:dc:6e:ff:7b:b0:9a:c8: fb:4a:7c:79:8a:23:e5:c9:91:07:f7:7a:81:13:9b: 8c:3e:fd:25:2e:1b:58:4f:22:4a:dc:dc:79:b0:8e: 65:32:68:ab:a2:b3:6c:15:d3:1b:8f:28:48:26:4a: e2:6b:2f:c1:fd:dd:bd:e5:da:fd:5c:4e:a6:a4:ac: 44:3c:63:43:37:15:df:7d:97:bf:5c:ee:1c:f0:09: a5:4b:29:65:d9:a1:f6:28:aa:e0:0d:10:f6:68:36: c7:0e:ac:45:5c:89:94:3e:d5:af:f9:06:14:1b:f0: 31:44:86:32:a4:f4:1c:5e:ba:a7:51:3a:e1:32:9a: 8e:63:1f:4c:e5:95:64:97:bf:ba:95:19:fa:76:7c: 89:5f:ad:a5:b1:aa:e5:7a:0f:92:f7:eb:69:d2:73: d7:6e:f6:9c:53:5d:7f:8d:63:5d:81:63:75:c9:7a: 1d:28:92:28:89:22:6f:fd:7d:31:df:32:9d:7b:08: c3:12:c1:5c:49:50:81:5f:3a:9e:d8:11:ca:f7:24: b1:ea:1c:d0:2c:64:39:c7:59:96:5f:dd:c3:bb:04: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:24:8E:DF:A3:AE:51:C1:E5:44:9B:98:1D:7D:44:6D:A7:8F:D3:C0 X509v3 Authority Key Identifier: keyid:61:9A:79:41:E0:C2:C8:61:32:2F:83:1E:D0:6F:07:FB:70:85:A3:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZp5QeDCyGEyL4Me0G8H-3CFo7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b09fec-d85d-4b64-a612-11eeca266d6c/1/YZp5QeDCyGEyL4Me0G8H-3CFo7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:84:0d:da:7e:ba:0e:8e:27:ad:02:62:f4:66:00:82:cc:5e: bd:09:d1:bf:ce:d6:59:23:9e:5b:66:f8:76:4d:9c:5c:17:8a: b1:be:2e:d5:7b:c0:63:09:ca:f1:9b:4c:cf:33:d8:76:d9:e3: c8:69:eb:ed:0f:41:56:29:7a:0d:81:b7:57:3a:73:c5:0f:aa: 32:2a:51:2b:b1:57:62:00:86:bf:e2:d6:b3:86:f1:81:8b:6f: c7:fc:27:41:67:26:35:46:e9:d4:7e:50:11:47:21:98:94:65: dd:7e:44:74:b9:df:56:bf:fa:89:f0:02:49:2e:13:78:44:34: ad:98:6a:b2:ce:39:46:64:e1:c0:a0:0b:da:46:9d:31:dc:90: ea:da:40:f9:7a:29:bb:6b:11:36:0d:70:8d:e6:d7:38:a9:24: 5a:84:6c:f0:87:59:9e:7b:81:04:df:e0:66:35:69:41:60:a8: e5:12:23:49:aa:97:5f:97:2c:2e:21:64:5f:b0:c8:47:b6:b6: b1:1e:44:fd:9b:2b:7a:53:cb:42:4e:eb:2c:15:81:59:c0:ef: f4:c5:88:d8:30:47:96:38:34:b3:08:34:df:49:af:a6:2e:8f: 7a:63:53:76:99:d6:6e:fb:9b:8c:e1:ae:01:46:7f:fc:62:8d: f6:a4:74:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFhzg38T7A1r0Xq/vapttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxOWE3OTQxZTBjMmM4NjEzMjJmODMxZWQwNmYwN2ZiNzA4 NWEzYmIwHhcNMjUxMjEzMTkwMDM4WhcNMjUxMjE0MTkwMDM4WjAzMTEwLwYDVQQD EygzYzI0OGVkZmEzYWU1MWMxZTU0NDliOTgxZDdkNDQ2ZGE3OGZkM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww2oltjMd7w3i87/BbgyUHKw0h05 Vl/ItPuTnDU3Bki1UZyYwtxu/3uwmsj7Snx5iiPlyZEH93qBE5uMPv0lLhtYTyJK 3Nx5sI5lMmirorNsFdMbjyhIJkriay/B/d295dr9XE6mpKxEPGNDNxXffZe/XO4c 8AmlSyll2aH2KKrgDRD2aDbHDqxFXImUPtWv+QYUG/AxRIYypPQcXrqnUTrhMpqO Yx9M5ZVkl7+6lRn6dnyJX62lsarleg+S9+tp0nPXbvacU11/jWNdgWN1yXodKJIo iSJv/X0x3zKdewjDEsFcSVCBXzqe2BHK9ySx6hzQLGQ5x1mWX93DuwQdVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwkjt+jrlHB5USbmB19RG2nj9PAMB8GA1UdIwQY MBaAFGGaeUHgwshhMi+DHtBvB/twhaO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMDlmZWMtZDg1ZC00YjY0LWE2MTIt MTFlZWNhMjY2ZDZjLzEvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMDlmZWMtZDg1ZC00YjY0LWE2MTItMTFlZWNhMjY2ZDZj LzEvWVpwNVFlREN5R0V5TDRNZTBHOEgtM0NGbzdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4QN2n66 Do4nrQJi9GYAgsxevQnRv87WWSOeW2b4dk2cXBeKsb4u1XvAYwnK8ZtMzzPYdtnj yGnr7Q9BVil6DYG3VzpzxQ+qMipRK7FXYgCGv+LWs4bxgYtvx/wnQWcmNUbp1H5Q EUchmJRl3X5EdLnfVr/6ifACSS4TeEQ0rZhqss45RmThwKAL2kadMdyQ6tpA+Xop u2sRNg1wjebXOKkkWoRs8IdZnnuBBN/gZjVpQWCo5RIjSaqXX5csLiFkX7DIR7a2 sR5E/ZsrelPLQk7rLBWBWcDv9MWI2DBHljg0swg030mvpi6PemNTdpnWbvubjOGu AUZ//GKN9qR0fQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:47 2025 by rpki-client