This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json) Hash identifier: 9ORkEpkm6KBw/xwF/3kfX5rC6N4hduzwI0/ZLoTipkI= Subject key identifier: FA:F7:31:D7:D9:47:8F:EF:27:5E:18:56:AA:30:B4:B1:EC:5D:1F:FB Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Certificate serial: 019AF12D16D108E28179368865FAE1B318B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: 1jrmS1dCKkJUQv/TJbQycJZLlz27wz25gTjDHVs+/ZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:16:d1:08:e2:81:79:36:88:65:fa:e1:b3:18:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=faf731d7d9478fef275e1856aa30b4b1ec5d1ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:b5:65:31:29:0e:18:b7:a4:a2:c6:ef:c6: f8:75:19:0f:f8:fd:76:aa:30:71:c3:1b:5c:ea:c4: 76:6a:0b:52:4e:65:5d:02:a8:19:9f:5e:db:bf:14: 86:0c:bf:8c:a4:d7:35:d3:33:c1:83:6b:09:ab:3a: aa:be:4e:77:9f:b1:6d:20:9c:67:48:7f:cc:a2:bc: 08:d2:d9:75:ec:56:d4:26:7a:d6:31:0d:3d:86:58: 9b:d9:ad:c4:c4:11:89:9f:58:f7:bf:e1:97:e5:49: bd:90:0d:7f:ef:c3:f7:ca:f2:27:1e:08:27:01:cf: 8c:23:18:0a:c8:0e:1e:45:e1:04:a3:3d:91:0d:c4: 04:7e:4f:18:e7:b0:1f:88:a9:d7:6a:35:37:dd:54: 41:be:e4:05:33:cb:ac:ec:4d:6b:37:f6:bb:2c:16: e6:0a:27:a3:8a:c6:c5:36:39:d9:30:8a:89:86:17: ae:61:87:f8:41:85:01:04:eb:37:68:09:ea:a3:96: 69:3b:82:b9:47:4b:f9:fc:45:20:8e:39:da:19:00: 30:79:92:f3:5f:ef:25:05:69:e0:da:38:6a:f2:57: a3:99:0c:84:89:63:12:27:c6:4f:be:18:33:32:e0: a7:0a:f9:95:2d:da:94:60:39:01:03:5b:36:f4:e5: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F7:31:D7:D9:47:8F:EF:27:5E:18:56:AA:30:B4:B1:EC:5D:1F:FB X509v3 Authority Key Identifier: keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:22:af:d3:89:6b:dd:eb:fa:0a:7b:30:5d:71:e9:a9:39:59: c4:73:90:35:81:1c:0f:8c:c3:db:01:c5:b0:18:7e:18:05:2d: a2:44:cc:92:4a:96:dc:0f:32:46:74:5e:61:fd:bd:0f:7c:77: 76:66:97:86:4c:e1:f5:46:79:e4:81:e8:98:bd:a4:ca:ee:1a: 44:b4:21:0a:5c:28:b6:f2:2a:6c:b3:48:5d:e2:ca:c7:b5:19: c9:95:18:9f:db:79:0b:6a:50:2a:59:47:c1:da:0d:7d:8f:58: 3e:db:dd:d1:40:3f:29:3c:c2:f3:f7:a3:44:d4:e4:3c:89:6b: fa:56:8f:bd:77:68:2f:d2:66:e8:68:c9:34:c1:bd:2f:c3:48: 43:5c:7c:bf:3e:2a:0f:98:8f:48:81:60:a2:cf:42:14:6b:49: ee:83:d6:3f:30:75:67:a1:33:de:e1:da:c0:b0:39:47:25:a3: 04:9c:f1:f4:9d:b8:4e:16:89:88:07:cf:44:23:4b:f9:20:9e: f7:0e:0e:3e:aa:1a:78:26:12:6b:01:e1:b1:42:59:bd:f1:6e: fd:ee:60:0c:a2:3c:be:a0:62:63:64:04:cb:51:fb:89:e9:36: 81:da:39:59:cb:0b:2c:f6:f0:43:ca:48:3d:da:43:9c:90:a8: 60:41:d6:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRbRCOKBeTaIZfrhsxizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTNiZGVlYzdjNDI2OThkZjZhYzkwY2RkYzZjMDFiM2E3 ZjJjNDkwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD EyhmYWY3MzFkN2Q5NDc4ZmVmMjc1ZTE4NTZhYTMwYjRiMWVjNWQxZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXq1ZTEpDhi3pKLG78b4dRkP+P12 qjBxwxtc6sR2agtSTmVdAqgZn17bvxSGDL+MpNc10zPBg2sJqzqqvk53n7FtIJxn SH/MorwI0tl17FbUJnrWMQ09hlib2a3ExBGJn1j3v+GX5Um9kA1/78P3yvInHggn Ac+MIxgKyA4eReEEoz2RDcQEfk8Y57AfiKnXajU33VRBvuQFM8us7E1rN/a7LBbm CiejisbFNjnZMIqJhheuYYf4QYUBBOs3aAnqo5ZpO4K5R0v5/EUgjjnaGQAweZLz X+8lBWng2jhq8lejmQyEiWMSJ8ZPvhgzMuCnCvmVLdqUYDkBA1s29OXRTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPr3MdfZR4/vJ14YVqowtLHsXR/7MB8GA1UdIwQY MBaAFMqTve7HxCaY32rJDN3GwBs6fyxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEt ZmFmZTJkMjA2M2NhLzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEtZmFmZTJkMjA2M2Nh LzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCKv04lr 3ev6CnswXXHpqTlZxHOQNYEcD4zD2wHFsBh+GAUtokTMkkqW3A8yRnReYf29D3x3 dmaXhkzh9UZ55IHomL2kyu4aRLQhClwotvIqbLNIXeLKx7UZyZUYn9t5C2pQKllH wdoNfY9YPtvd0UA/KTzC8/ejRNTkPIlr+laPvXdoL9Jm6GjJNMG9L8NIQ1x8vz4q D5iPSIFgos9CFGtJ7oPWPzB1Z6Ez3uHawLA5RyWjBJzx9J24ThaJiAfPRCNL+SCe 9w4OPqoaeCYSawHhsUJZvfFu/e5gDKI8vqBiY2QEy1H7iek2gdo5WcsLLPbwQ8pI PdpDnJCoYEHWeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:37 2025 by rpki-client