This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft File: JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json) Hash identifier: 8BKa45sYhp/5Jsu52VgZ3IGKaoqAcKcA1ssAj/kzXzE= Subject key identifier: CE:D8:57:28:3B:B8:00:6F:5D:B4:03:51:73:A9:B5:34:AA:E6:D9:24 Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A Certificate issuer: /CN=271b98a60a926820a48cb43a4af308c88ff2721a Certificate serial: 019AF0883B4CC8DADE2F7FF5383F829C208C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft Manifest number: 1025 Signing time: Fri 05 Dec 2025 22:00:51 +0000 Manifest this update: Fri 05 Dec 2025 22:00:51 +0000 Manifest next update: Sat 06 Dec 2025 22:00:51 +0000 Files and hashes: 1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: EyVgOosRbDqWMsi3meY2/CE8Uri3D3rWwhKY5gqGxnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:3b:4c:c8:da:de:2f:7f:f5:38:3f:82:9c:20:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a Validity Not Before: Dec 5 22:00:51 2025 GMT Not After : Dec 6 22:00:51 2025 GMT Subject: CN=ced857283bb8006f5db4035173a9b534aae6d924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:57:80:79:b4:de:4f:f5:a1:8a:bb:c3:88: 76:6c:ba:ba:86:21:4f:75:b2:a2:90:96:23:44:65: 47:b9:24:4f:e7:99:38:9a:84:66:75:2a:d2:cc:7a: 73:ab:cb:a1:76:29:ec:8c:03:a7:5f:d2:19:14:b1: 94:8b:d1:2a:4f:7a:28:f7:25:cf:be:de:ad:61:7d: cf:d0:68:0d:6f:59:6d:48:73:c7:6a:e4:68:8b:1a: 5f:d1:31:2f:80:91:80:c7:dd:63:46:b5:e6:0e:dd: e5:d7:ab:6f:6e:b8:1a:ac:9b:f1:42:ca:3b:64:5a: 14:74:5f:10:11:ad:67:94:ea:5c:d9:4a:11:90:2a: fb:b7:98:67:37:42:c2:89:08:d4:d9:c5:40:14:ec: df:88:55:40:21:95:af:c2:d0:1e:cc:f7:85:32:a6: a1:83:8b:c1:d8:5a:20:9c:28:43:7e:1a:50:3b:a3: 6e:be:aa:64:f5:ca:e4:26:bc:5b:7d:12:34:40:fb: 11:a9:0c:c4:d1:53:da:0c:8b:12:fe:a4:0b:a6:3c: 84:7f:d7:55:75:d3:b2:b6:ab:c5:1f:cd:44:d0:f0: d0:2c:45:19:7c:7b:6e:43:6f:06:07:ba:30:e2:26: 83:2b:c2:e9:72:88:20:ca:20:74:6e:77:f3:c7:a0: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:57:28:3B:B8:00:6F:5D:B4:03:51:73:A9:B5:34:AA:E6:D9:24 X509v3 Authority Key Identifier: keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a3:8d:d2:27:7f:a9:9d:df:02:14:6d:31:5f:e5:fc:e5:e7: 52:6a:54:30:6f:8e:87:c0:3b:b3:00:09:07:62:ff:5c:58:7e: 8e:98:9c:bb:19:84:d6:e3:1d:94:35:dd:54:2f:2f:d5:b5:f1: 68:c8:a2:fd:67:76:e0:d3:3a:e4:d3:7e:d3:b2:c9:b9:72:45: c9:d4:a0:7c:e0:f9:31:67:7c:48:35:8e:eb:75:fe:9f:c2:db: 1c:88:80:25:7b:91:04:1a:98:f7:01:f0:d1:dd:1b:36:35:66: b9:87:6c:ff:ab:80:6c:b1:c5:45:fd:fb:36:df:2d:57:7b:4c: be:b1:ee:ee:a9:58:c6:b8:c0:74:dc:c1:5d:5c:29:48:c3:9e: e9:d6:d7:90:9b:03:5b:74:52:a9:f3:81:40:f3:29:27:ea:1c: cb:8c:c9:3c:b2:68:5f:48:8d:c3:5f:1d:4b:9d:c4:84:56:9e: 87:b9:2d:5f:7e:5c:20:2e:5d:5b:12:26:dc:d1:c9:59:a8:09: 32:d5:5d:4a:e1:ba:6a:de:16:74:a4:2f:0f:6e:8e:2b:db:1d: 1b:29:81:4d:0d:ab:3f:fb:4a:58:89:13:9a:46:f7:34:28:93: ec:c3:cc:f9:84:5f:01:75:ba:f0:61:01:fd:d5:bd:40:70:d4: d8:67:e5:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDtMyNreL3/1OD+CnCCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWI5OGE2MGE5MjY4MjBhNDhjYjQzYTRhZjMwOGM4OGZm MjcyMWEwHhcNMjUxMjA1MjIwMDUxWhcNMjUxMjA2MjIwMDUxWjAzMTEwLwYDVQQD EyhjZWQ4NTcyODNiYjgwMDZmNWRiNDAzNTE3M2E5YjUzNGFhZTZkOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ENXgHm03k/1oYq7w4h2bLq6hiFP dbKikJYjRGVHuSRP55k4moRmdSrSzHpzq8uhdinsjAOnX9IZFLGUi9EqT3oo9yXP vt6tYX3P0GgNb1ltSHPHauRoixpf0TEvgJGAx91jRrXmDt3l16tvbrgarJvxQso7 ZFoUdF8QEa1nlOpc2UoRkCr7t5hnN0LCiQjU2cVAFOzfiFVAIZWvwtAezPeFMqah g4vB2FognChDfhpQO6Nuvqpk9crkJrxbfRI0QPsRqQzE0VPaDIsS/qQLpjyEf9dV ddOytqvFH81E0PDQLEUZfHtuQ28GB7ow4iaDK8LpcoggyiB0bnfzx6DM0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7YVyg7uABvXbQDUXOptTSq5tkkMB8GA1UdIwQY MBaAFCcbmKYKkmggpIy0OkrzCMiP8nIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzRkODAtZDM5NC00OTYyLWE2YTMt Y2U0ZDg0NTU1NGZkLzEvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NzRkODAtZDM5NC00OTYyLWE2YTMtY2U0ZDg0NTU1NGZk LzEvSnh1WXBncVNhQ0NrakxRNlN2TUl5SV95Y2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaON0id/ qZ3fAhRtMV/l/OXnUmpUMG+Oh8A7swAJB2L/XFh+jpicuxmE1uMdlDXdVC8v1bXx aMii/Wd24NM65NN+07LJuXJFydSgfOD5MWd8SDWO63X+n8LbHIiAJXuRBBqY9wHw 0d0bNjVmuYds/6uAbLHFRf37Nt8tV3tMvrHu7qlYxrjAdNzBXVwpSMOe6dbXkJsD W3RSqfOBQPMpJ+ocy4zJPLJoX0iNw18dS53EhFaeh7ktX35cIC5dWxIm3NHJWagJ MtVdSuG6at4WdKQvD26OK9sdGymBTQ2rP/tKWIkTmkb3NCiT7MPM+YRfAXW68GEB /dW9QHDU2GflkA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:58 2025 by rpki-client