This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft File: ypfglEx3smswKXwtScO-ausnNxE.mft (raw, json) Hash identifier: Cd3pux1hiEDdbvAyfPqoCgkHpJDjOAluIxGlT4tK76w= Subject key identifier: 74:AA:4B:F2:D8:32:FD:03:48:DB:B6:A3:78:05:85:24:CE:A2:31:12 Authority key identifier: CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11 Certificate issuer: /CN=ca97e0944c77b26b30297c2d49c3be6aeb273711 Certificate serial: 019AF12DFCBD24584EB3D0788BC55E2CFC8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft Manifest number: 0476 Signing time: Sat 06 Dec 2025 01:01:54 +0000 Manifest this update: Sat 06 Dec 2025 01:01:54 +0000 Manifest next update: Sun 07 Dec 2025 01:01:54 +0000 Files and hashes: 1: ypfglEx3smswKXwtScO-ausnNxE.crl (hash: pnLLs+KeeIuLPELerrioBOluo/nm3NDtOuM4/VcO9fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fc:bd:24:58:4e:b3:d0:78:8b:c5:5e:2c:fc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca97e0944c77b26b30297c2d49c3be6aeb273711 Validity Not Before: Dec 6 01:01:54 2025 GMT Not After : Dec 7 01:01:54 2025 GMT Subject: CN=74aa4bf2d832fd0348dbb6a378058524cea23112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:0b:8c:12:ec:b1:05:31:93:c3:38:d1:43: 63:19:ca:fd:c0:0b:1d:ad:c7:b5:4c:74:dd:99:10: 51:33:8e:0d:55:07:9e:59:ec:d9:d8:eb:74:8c:3a: dc:57:bf:02:21:68:f4:95:c4:38:82:7a:2a:21:e4: ab:ed:7c:07:17:a4:07:31:64:0d:14:59:aa:95:43: 94:8e:d8:a9:dd:bd:69:42:38:90:f0:56:29:40:14: a8:b5:4f:9c:0b:db:ce:a8:67:07:60:7f:1d:f0:20: d0:4c:5c:1f:46:81:80:9c:85:05:6b:68:f5:4e:a3: d3:0c:c6:75:7f:ac:9b:f2:bd:88:e0:38:63:2e:5d: 79:28:33:91:c1:40:8d:f4:38:77:e8:6a:12:c2:42: b6:c8:8b:2e:4f:37:4f:f5:21:8b:bf:bf:3a:65:c2: c6:1c:51:fc:ef:a3:bc:98:e3:15:31:09:d8:bb:e5: 69:28:ff:ec:b7:60:e0:e3:85:95:da:57:f4:81:42: 6a:d4:ef:4a:2b:67:25:42:1e:c1:78:54:d2:81:4b: 35:04:9c:ef:09:28:1a:ed:76:d7:af:d1:dd:f2:67: 8e:a2:a9:76:af:60:ea:de:43:fc:b4:56:8e:41:c8: 53:ae:99:e5:c6:4e:08:5f:a6:1e:d5:14:14:03:6a: 0e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:4B:F2:D8:32:FD:03:48:DB:B6:A3:78:05:85:24:CE:A2:31:12 X509v3 Authority Key Identifier: keyid:CA:97:E0:94:4C:77:B2:6B:30:29:7C:2D:49:C3:BE:6A:EB:27:37:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypfglEx3smswKXwtScO-ausnNxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c0e385-cbe5-47f3-808d-e68767c18f02/1/ypfglEx3smswKXwtScO-ausnNxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:ab:bc:92:04:4b:e0:11:ed:d9:3e:61:26:bf:54:81:4f: 37:ff:b6:7e:0d:15:fc:ad:45:f6:2f:2c:33:6e:22:33:4a:4b: 31:23:cc:0e:df:88:31:bd:16:1c:15:32:2d:e4:c8:f0:b9:69: c1:90:95:d1:9f:46:b5:be:61:e6:f6:c9:57:a7:2d:05:ab:a1: 64:1c:1a:52:d2:a7:cd:22:b9:9f:bc:b9:2e:e4:1d:a1:96:bf: aa:b6:98:32:ee:53:f3:39:16:1a:bb:f9:1f:42:ce:14:ba:cb: 8f:12:74:31:b8:93:5f:c8:98:8b:4f:81:e8:11:fc:9c:7f:8b: fe:45:7f:1e:37:bf:2a:74:fb:df:59:bf:13:d9:9b:04:44:23: 5b:28:1d:68:24:04:32:77:11:06:e9:60:e8:b8:47:bc:8d:aa: 1e:30:41:3a:80:82:0e:8a:ce:40:7b:88:86:ff:9f:fc:d7:ea: 24:2a:05:01:a1:17:43:fa:da:6d:3b:b8:73:dc:6d:90:b0:fd: 60:81:20:ef:62:da:08:b4:c5:16:37:82:cc:a9:b7:1a:af:80: 44:79:39:ce:4e:f4:96:4a:19:fc:18:95:c6:19:fd:a1:7e:97: 68:80:3e:90:a8:2c:fc:89:17:90:7b:39:21:06:10:a3:e8:7a: f1:81:57:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfy9JFhOs9B4i8VeLPyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTdlMDk0NGM3N2IyNmIzMDI5N2MyZDQ5YzNiZTZhZWIy NzM3MTEwHhcNMjUxMjA2MDEwMTU0WhcNMjUxMjA3MDEwMTU0WjAzMTEwLwYDVQQD Eyg3NGFhNGJmMmQ4MzJmZDAzNDhkYmI2YTM3ODA1ODUyNGNlYTIzMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1psLjBLssQUxk8M40UNjGcr9wAsd rce1THTdmRBRM44NVQeeWezZ2Ot0jDrcV78CIWj0lcQ4gnoqIeSr7XwHF6QHMWQN FFmqlUOUjtip3b1pQjiQ8FYpQBSotU+cC9vOqGcHYH8d8CDQTFwfRoGAnIUFa2j1 TqPTDMZ1f6yb8r2I4DhjLl15KDORwUCN9Dh36GoSwkK2yIsuTzdP9SGLv786ZcLG HFH876O8mOMVMQnYu+VpKP/st2Dg44WV2lf0gUJq1O9KK2clQh7BeFTSgUs1BJzv CSga7XbXr9Hd8meOoql2r2Dq3kP8tFaOQchTrpnlxk4IX6Ye1RQUA2oOMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSqS/LYMv0DSNu2o3gFhSTOojESMB8GA1UdIwQY MBaAFMqX4JRMd7JrMCl8LUnDvmrrJzcRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMGUzODUtY2JlNS00N2YzLTgwOGQt ZTY4NzY3YzE4ZjAyLzEveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9jMGUzODUtY2JlNS00N2YzLTgwOGQtZTY4NzY3YzE4ZjAy LzEveXBmZ2xFeDNzbXN3S1h3dFNjTy1hdXNuTnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrGrvJIE S+AR7dk+YSa/VIFPN/+2fg0V/K1F9i8sM24iM0pLMSPMDt+IMb0WHBUyLeTI8Llp wZCV0Z9Gtb5h5vbJV6ctBauhZBwaUtKnzSK5n7y5LuQdoZa/qraYMu5T8zkWGrv5 H0LOFLrLjxJ0MbiTX8iYi0+B6BH8nH+L/kV/Hje/KnT731m/E9mbBEQjWygdaCQE MncRBulg6LhHvI2qHjBBOoCCDorOQHuIhv+f/NfqJCoFAaEXQ/rabTu4c9xtkLD9 YIEg72LaCLTFFjeCzKm3Gq+ARHk5zk70lkoZ/BiVxhn9oX6XaIA+kKgs/IkXkHs5 IQYQo+h68YFXXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:52 2025 by rpki-client