This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft File: Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft (raw, json) Hash identifier: lMIIqwWPXcOpMSWY0/UGkX3qMBkPDI8OcmUrQTTM4hI= Subject key identifier: F7:D0:0B:55:97:C5:BA:C5:13:C2:98:23:A1:12:8D:2E:03:33:D7:8F Authority key identifier: 62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01 Certificate issuer: /CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01 Certificate serial: 019AF0BF91CF34CBE140C942BFCC2048184F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft Manifest number: EE Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl (hash: S2redYMI08thi2hB/5Br19NXzo+K9djxPqCTnSjW67o=) 2: ipcATIgjas4T7BZfo-TD2nEX73w.roa (hash: ZBUqGgdfAWnUdQLDLJSVqqEZc8Zkflrw7OQeA+w/zN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:91:cf:34:cb:e1:40:c9:42:bf:cc:20:48:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fce7e5a815616cb6a8ba03c48abc49429b7e01 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=f7d00b5597c5bac513c29823a1128d2e0333d78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:12:58:d3:89:6d:ac:08:cb:ed:aa:a9:0f: 5f:98:bd:c1:87:0d:81:61:4f:5a:e5:c5:d7:a1:67: b2:fd:db:8c:68:a3:2d:21:82:51:47:2e:ec:b8:6e: 3f:32:5c:dc:c2:e2:f3:61:7b:64:9f:f9:44:af:43: 9a:df:5f:98:8a:31:9c:5b:b7:b7:08:2d:47:70:aa: 91:6a:33:58:7d:d3:7b:ae:61:99:de:3b:0b:54:51: 14:15:61:0c:95:fb:59:81:8f:41:d7:1b:51:7a:9b: c8:59:2f:98:e4:a3:5e:ec:da:cb:e6:99:b0:5e:98: ff:69:27:a2:6a:a0:32:0c:9a:0c:eb:a7:4f:c7:59: 90:44:42:7f:95:3f:e2:31:82:de:58:cf:5d:d1:2c: 68:af:77:01:19:90:fc:b9:89:f3:b7:30:c6:8f:c2: d5:0b:d3:46:da:bb:25:c5:d1:61:5a:7a:0b:d2:b5: 99:4b:67:f6:62:e7:fc:c0:9b:bd:39:0a:9d:17:ff: 87:8a:be:10:50:7f:ad:c0:c7:90:5c:a7:91:d3:56: 31:ba:a5:3b:51:bc:91:b6:76:22:c6:cd:09:62:d1: 5b:4d:ea:7c:a0:52:d2:74:70:5a:4b:5a:99:fa:14: 9f:58:6a:aa:f6:55:bc:e4:81:f1:62:0f:09:19:77: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D0:0B:55:97:C5:BA:C5:13:C2:98:23:A1:12:8D:2E:03:33:D7:8F X509v3 Authority Key Identifier: keyid:62:FC:E7:E5:A8:15:61:6C:B6:A8:BA:03:C4:8A:BC:49:42:9B:7E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvzn5agVYWy2qLoDxIq8SUKbfgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f1af81-fa1f-4c7f-ada8-92b842a96495/1/Yvzn5agVYWy2qLoDxIq8SUKbfgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:47:08:fe:74:c7:19:10:4e:72:2e:c1:46:1f:50:36:3a:51: 1a:2b:88:9e:ac:b9:f9:94:0a:bf:11:12:31:80:8f:da:72:95: cd:e7:60:c8:f1:96:66:84:5b:12:82:cd:cb:5a:13:a6:9d:9e: c1:9a:47:bc:1a:f1:3b:af:ed:21:c9:b5:07:81:f6:a4:94:85: 91:5a:5c:2d:5f:b9:55:90:58:44:68:1d:31:c8:db:b5:2f:37: 17:aa:2f:e4:43:21:b3:72:a6:bd:b6:40:db:f6:a5:21:73:d1: 35:ec:f1:6a:43:67:23:ce:32:ab:58:b5:51:24:9c:80:42:07: ef:f5:b6:91:d8:1c:f9:b8:4e:93:8b:d6:84:2e:4f:9e:62:56: e4:da:8a:cf:1e:6f:8e:1d:6a:57:e3:fe:1e:98:ae:47:d0:bd: 8e:aa:33:c1:e8:a0:2c:17:8b:1d:c5:31:ee:84:19:ed:99:b4: 52:3c:25:52:71:6e:f6:13:bf:46:3a:43:9a:09:0f:2f:40:05: 1a:9f:be:35:e6:b2:37:8d:a6:07:20:6f:c0:f9:1f:71:5c:90: a8:a6:c6:93:62:06:f9:0f:8e:69:0e:1b:1d:fc:6a:75:db:73: 76:1b:7b:07:fa:13:50:86:70:8b:05:53:c7:fa:60:04:8c:b7: 39:ea:e7:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5HPNMvhQMlCv8wgSBhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmNlN2U1YTgxNTYxNmNiNmE4YmEwM2M0OGFiYzQ5NDI5 YjdlMDEwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD EyhmN2QwMGI1NTk3YzViYWM1MTNjMjk4MjNhMTEyOGQyZTAzMzNkNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApikSWNOJbawIy+2qqQ9fmL3Bhw2B YU9a5cXXoWey/duMaKMtIYJRRy7suG4/MlzcwuLzYXtkn/lEr0Oa31+YijGcW7e3 CC1HcKqRajNYfdN7rmGZ3jsLVFEUFWEMlftZgY9B1xtRepvIWS+Y5KNe7NrL5pmw Xpj/aSeiaqAyDJoM66dPx1mQREJ/lT/iMYLeWM9d0Sxor3cBGZD8uYnztzDGj8LV C9NG2rslxdFhWnoL0rWZS2f2Yuf8wJu9OQqdF/+Hir4QUH+twMeQXKeR01YxuqU7 UbyRtnYixs0JYtFbTep8oFLSdHBaS1qZ+hSfWGqq9lW85IHxYg8JGXc/qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfQC1WXxbrFE8KYI6ESjS4DM9ePMB8GA1UdIwQY MBaAFGL85+WoFWFstqi6A8SKvElCm34BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgt OTJiODQyYTk2NDk1LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mMWFmODEtZmExZi00YzdmLWFkYTgtOTJiODQyYTk2NDk1 LzEvWXZ6bjVhZ1ZZV3kycUxvRHhJcThTVUtiZmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0cI/nTH GRBOci7BRh9QNjpRGiuInqy5+ZQKvxESMYCP2nKVzedgyPGWZoRbEoLNy1oTpp2e wZpHvBrxO6/tIcm1B4H2pJSFkVpcLV+5VZBYRGgdMcjbtS83F6ov5EMhs3KmvbZA 2/alIXPRNezxakNnI84yq1i1USScgEIH7/W2kdgc+bhOk4vWhC5PnmJW5NqKzx5v jh1qV+P+HpiuR9C9jqozweigLBeLHcUx7oQZ7Zm0UjwlUnFu9hO/RjpDmgkPL0AF Gp++NeayN42mByBvwPkfcVyQqKbGk2IG+Q+OaQ4bHfxqddtzdht7B/oTUIZwiwVT x/pgBIy3Oern7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:27 2025 by rpki-client