This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json) Hash identifier: kpsqdXhcMa5lmR0Q5JHmNbE0yRUlVKjVKVyovUaIEZg= Subject key identifier: A0:49:82:44:0C:63:FB:A3:1F:AD:18:DC:E1:07:A7:AE:65:DB:C6:03 Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11 Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11 Certificate serial: 019AF12DA420050F899D6884C869CDEDA817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft Manifest number: 13B9 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: Bmj0amyH7elk4eh2PF40bhwDwmm8ow41jl4GVxbAk84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a4:20:05:0f:89:9d:68:84:c8:69:cd:ed:a8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11 Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=a04982440c63fba31fad18dce107a7ae65dbc603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:1e:7d:59:ff:66:25:a7:17:55:cc:21:2a: a6:6b:27:8c:e3:95:9f:aa:88:a5:75:a6:52:43:a5: e7:5f:ec:26:7d:17:59:bc:00:f0:cd:1d:e3:44:1d: 13:26:3b:d2:d8:9f:02:2b:e9:1f:df:98:a8:24:92: ef:96:c8:94:15:8e:95:78:7b:e0:62:7b:d7:cc:6e: a6:88:da:e3:30:58:38:37:bc:2e:91:dd:a5:33:1b: 9c:21:7b:c4:60:72:a3:1b:e2:7f:1a:c2:6a:ac:0f: 11:79:b6:06:01:47:3b:89:84:0a:3f:95:91:e3:c9: b8:ed:2f:09:ba:75:a2:14:f7:19:0f:bd:63:5d:80: 1a:db:6f:ee:52:8b:56:29:7c:dd:11:0b:ff:49:ce: b3:85:56:58:bf:4e:0d:0a:ad:6d:84:c0:6d:31:56: ca:99:d8:07:a1:1c:9f:1e:8d:b9:1c:5f:c6:00:83: 5e:f5:8a:6d:0b:6b:63:34:7b:a7:da:ad:56:58:5a: 72:fb:3c:50:b6:eb:d0:c0:aa:49:2f:e9:22:23:97: 8e:d7:cf:aa:08:34:3d:45:4b:c7:60:4a:a4:a0:64: 8a:fd:ba:52:c3:cc:13:4f:34:10:90:e0:e2:ee:91: c6:7c:0f:12:eb:9c:3e:7f:10:46:d2:76:1d:f1:ca: 36:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:49:82:44:0C:63:FB:A3:1F:AD:18:DC:E1:07:A7:AE:65:DB:C6:03 X509v3 Authority Key Identifier: keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1e:ee:43:45:09:8c:43:7d:bb:0e:31:b8:e4:fd:5a:34:50: d5:32:13:b0:90:de:1a:a9:54:59:01:92:a0:39:71:aa:2a:39: ac:af:5a:18:06:de:5e:09:c2:2a:c3:c3:32:47:20:a7:70:5a: a2:41:9d:6b:6a:d0:9d:ac:45:a4:46:09:32:03:f9:e9:12:31: 07:8e:89:b9:d5:02:68:87:45:c1:28:b7:b6:86:35:15:89:6e: c9:70:2f:79:8a:9f:a3:07:b6:40:29:9a:6b:8f:15:9d:e9:2b: 5a:c3:16:3c:2c:09:56:c0:74:fd:13:96:95:e6:f0:45:01:86: 78:a1:e4:6d:57:db:c0:15:27:ee:5f:89:63:13:04:e7:74:81: d6:e9:d5:11:cc:b1:ef:e9:fc:ba:50:b1:02:19:26:60:76:b7: df:78:9e:b6:1a:af:dd:9d:11:fe:d8:bd:59:5a:9d:eb:32:82: 3c:1f:1c:0f:12:aa:f4:36:5f:ea:57:5b:59:77:6b:5c:40:7a: df:a3:97:97:e8:70:2f:fe:eb:fa:da:84:69:f6:78:24:1d:bb: 2c:f6:1d:ec:23:ef:82:3e:d4:f2:7a:fd:fc:8c:a2:ca:ca:77: 0d:08:13:0b:86:5b:3a:6a:ef:00:1a:15:33:1b:f2:bd:a8:6e: a2:a3:9e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaQgBQ+JnWiEyGnN7agXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5 ZjhiMTEwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD EyhhMDQ5ODI0NDBjNjNmYmEzMWZhZDE4ZGNlMTA3YTdhZTY1ZGJjNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0efVn/ZiWnF1XMISqmayeM45Wf qoildaZSQ6XnX+wmfRdZvADwzR3jRB0TJjvS2J8CK+kf35ioJJLvlsiUFY6VeHvg YnvXzG6miNrjMFg4N7wukd2lMxucIXvEYHKjG+J/GsJqrA8RebYGAUc7iYQKP5WR 48m47S8JunWiFPcZD71jXYAa22/uUotWKXzdEQv/Sc6zhVZYv04NCq1thMBtMVbK mdgHoRyfHo25HF/GAINe9YptC2tjNHun2q1WWFpy+zxQtuvQwKpJL+kiI5eO18+q CDQ9RUvHYEqkoGSK/bpSw8wTTzQQkODi7pHGfA8S65w+fxBG0nYd8co2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBJgkQMY/ujH60Y3OEHp65l28YDMB8GA1UdIwQY MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4 LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAex7uQ0UJ jEN9uw4xuOT9WjRQ1TITsJDeGqlUWQGSoDlxqio5rK9aGAbeXgnCKsPDMkcgp3Ba okGda2rQnaxFpEYJMgP56RIxB46JudUCaIdFwSi3toY1FYluyXAveYqfowe2QCma a48VnekrWsMWPCwJVsB0/ROWlebwRQGGeKHkbVfbwBUn7l+JYxME53SB1unVEcyx 7+n8ulCxAhkmYHa333iethqv3Z0R/ti9WVqd6zKCPB8cDxKq9DZf6ldbWXdrXEB6 36OXl+hwL/7r+tqEafZ4JB27LPYd7CPvgj7U8nr9/Iyiysp3DQgTC4ZbOmrvABoV MxvyvahuoqOenQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:55 2025 by rpki-client