This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft File: yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json) Hash identifier: uT7KaY5UBo778C5s7RD/jGXUZJ6QR03WnGHHAEzOjPw= Subject key identifier: E5:6D:32:ED:B8:9B:7C:89:79:96:D2:10:8D:21:0B:51:49:28:E0:BC Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41 Certificate issuer: /CN=c80a7e8ec47cadd865372de503f8790ef62c7141 Certificate serial: 019AF1D20C334E1AA376F553A0C905B721B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft Manifest number: 0E55 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: ONK1NyMkxgCOjLLu/i90G/RLmOji1ASR1D2LJ8gF8N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0c:33:4e:1a:a3:76:f5:53:a0:c9:05:b7:21:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=e56d32edb89b7c897996d2108d210b514928e0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:70:bc:56:06:a0:fc:a6:c9:26:df:31:0e: 98:0a:21:cf:69:c8:51:22:e4:93:c9:91:c7:36:14: f6:2e:25:dd:55:b1:bd:f5:a2:5b:13:d6:7c:4b:d4: 5c:8c:5b:1c:86:b7:42:ec:40:0e:08:f7:73:12:79: c7:68:dc:dd:fb:f4:c3:bb:5e:08:7f:b2:17:ac:26: b1:35:01:72:66:ac:fd:ea:f6:87:5a:93:2c:fb:65: c6:74:ae:1a:9c:b4:eb:bd:b1:fa:ea:5d:1f:bd:de: 9a:73:82:84:f5:44:89:a2:02:03:7d:31:a6:53:c6: f6:8b:9a:96:59:7b:bb:df:4b:55:f6:e7:ad:88:e1: b7:aa:01:f6:df:03:d3:09:bb:95:0c:a1:70:52:0b: 63:96:89:9c:ab:38:15:06:73:3d:61:f5:34:c0:39: 35:1e:df:c4:10:b0:c7:8c:ec:83:d0:40:c2:72:31: f0:07:21:b6:c4:16:97:12:f1:58:37:c3:c6:7e:ee: f4:1e:d2:09:d5:3c:c5:b6:25:e2:05:96:22:fa:28: de:b7:92:7a:75:e3:e5:da:6e:2b:de:36:12:c2:34: 9b:fd:89:19:66:8a:9e:f1:33:0d:01:e8:b2:29:b2: dc:69:b5:fc:35:cc:0c:da:76:2c:3e:75:52:60:57: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:32:ED:B8:9B:7C:89:79:96:D2:10:8D:21:0B:51:49:28:E0:BC X509v3 Authority Key Identifier: keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fd:57:6a:de:be:83:60:43:ae:41:ec:ae:70:a4:05:57:fb: ec:dc:c8:af:13:9d:83:98:9f:dd:b2:9e:a7:9d:1e:ad:7c:70: b5:a2:07:ee:c7:f8:4e:5d:bd:a5:1e:51:0a:77:75:25:8f:d4: 74:65:95:86:35:e7:10:2a:9c:a2:78:e8:50:58:9e:96:d5:f0: 33:a7:c3:17:d9:26:69:36:fb:7a:fb:07:ec:13:2e:c3:5c:e2: 40:8c:e6:38:f3:d5:0d:d3:6c:32:c5:5f:ba:f3:ba:17:e9:46: a8:60:4b:6a:08:54:b5:56:4c:cc:a0:65:6a:b0:1d:38:80:4c: 4e:4f:1c:5d:92:7e:fb:ae:17:e8:f6:6a:81:ce:6e:f9:4e:58: 2a:6b:6e:eb:33:bd:07:1d:01:7e:65:84:42:23:b8:c6:cb:89: d3:23:67:e7:d6:7c:dd:bd:04:5b:ce:51:a1:46:21:1c:58:e4: 0b:fa:2f:be:7c:99:4d:b1:14:d0:42:91:bd:86:1c:a4:51:3c: 87:49:58:02:ab:72:05:63:64:50:64:35:6f:f5:0c:f5:01:e2: 70:3b:73:0e:b9:7f:d9:d4:02:86:f8:1d:a1:6b:cf:b9:dd:76: d9:af:08:82:89:67:d2:41:f5:f6:29:5a:35:ca:6f:d8:2e:95: ec:e3:f9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gwzThqjdvVToMkFtyG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MGE3ZThlYzQ3Y2FkZDg2NTM3MmRlNTAzZjg3OTBlZjYy YzcxNDEwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EyhlNTZkMzJlZGI4OWI3Yzg5Nzk5NmQyMTA4ZDIxMGI1MTQ5MjhlMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMxwvFYGoPymySbfMQ6YCiHPachR IuSTyZHHNhT2LiXdVbG99aJbE9Z8S9RcjFschrdC7EAOCPdzEnnHaNzd+/TDu14I f7IXrCaxNQFyZqz96vaHWpMs+2XGdK4anLTrvbH66l0fvd6ac4KE9USJogIDfTGm U8b2i5qWWXu730tV9uetiOG3qgH23wPTCbuVDKFwUgtjlomcqzgVBnM9YfU0wDk1 Ht/EELDHjOyD0EDCcjHwByG2xBaXEvFYN8PGfu70HtIJ1TzFtiXiBZYi+ijet5J6 dePl2m4r3jYSwjSb/YkZZoqe8TMNAeiyKbLcabX8NcwM2nYsPnVSYFd2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVtMu24m3yJeZbSEI0hC1FJKOC8MB8GA1UdIwQY MBaAFMgKfo7EfK3YZTct5QP4eQ72LHFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYt ZTEyZmFiMTg1NTQwLzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jYjViZWYtN2U4YS00MzkyLWE5YzYtZTEyZmFiMTg1NTQw LzEveUFwLWpzUjhyZGhsTnkzbEFfaDVEdllzY1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACP1Xat6+ g2BDrkHsrnCkBVf77NzIrxOdg5if3bKep50erXxwtaIH7sf4Tl29pR5RCnd1JY/U dGWVhjXnECqconjoUFieltXwM6fDF9kmaTb7evsH7BMuw1ziQIzmOPPVDdNsMsVf uvO6F+lGqGBLaghUtVZMzKBlarAdOIBMTk8cXZJ++64X6PZqgc5u+U5YKmtu6zO9 Bx0BfmWEQiO4xsuJ0yNn59Z83b0EW85RoUYhHFjkC/ovvnyZTbEU0EKRvYYcpFE8 h0lYAqtyBWNkUGQ1b/UM9QHicDtzDrl/2dQChvgdoWvPud122a8Igoln0kH19ila Ncpv2C6V7OP54g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:11 2025 by rpki-client