This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft (raw, json) Hash identifier: uWBi8HRda/FylGcOC6XfRf2PfgGVMxJHTNxFSdyDhgY= Subject key identifier: 80:F1:1C:63:89:17:62:EE:D0:E9:E4:6C:96:54:56:D2:B1:8E:8B:89 Authority key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95 Certificate issuer: /CN=628fe2d2343cf28e227b54f804b2ce032d3d1895 Certificate serial: 019AF61C6C0E2E108485E41AEDF8664172CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft Manifest number: 01BA Signing time: Sun 07 Dec 2025 00:00:49 +0000 Manifest this update: Sun 07 Dec 2025 00:00:49 +0000 Manifest next update: Mon 08 Dec 2025 00:00:49 +0000 Files and hashes: 1: Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl (hash: yqk4XmPZXFZ7W4FvtEeNu6ErSQM5cN9Y9ZGIHaYw00Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:6c:0e:2e:10:84:85:e4:1a:ed:f8:66:41:72:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895 Validity Not Before: Dec 7 00:00:49 2025 GMT Not After : Dec 8 00:00:49 2025 GMT Subject: CN=80f11c63891762eed0e9e46c965456d2b18e8b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:fb:84:a4:22:cc:6c:4e:c9:06:b4:a4:fd: 0e:d9:60:7d:39:19:90:99:70:17:22:9e:a1:f5:e2: 34:51:98:71:40:d0:de:91:a5:7f:5c:21:a7:05:af: 65:bb:f9:21:6b:90:09:57:68:9f:4f:6f:ed:f2:64: a0:4b:71:81:ab:65:4d:bc:d0:12:df:e2:c0:53:a9: c6:27:ef:97:fb:bb:f5:0c:d3:5c:b3:f0:77:15:46: bb:86:55:4c:90:5c:8e:c3:b5:27:7a:b2:51:1a:8d: 22:3d:59:f8:0a:05:c8:39:93:8d:f6:30:74:90:f4: 44:fc:77:39:b7:d6:d3:a1:11:c9:f6:a4:2e:0a:0d: b7:be:2b:c1:8c:8d:ec:60:6e:91:68:bd:45:69:0e: 20:5a:df:55:d4:c7:37:28:d4:f7:49:d6:92:68:d8: 97:a7:f0:08:8f:d5:86:a2:f5:e9:2d:63:1a:da:0a: 21:14:96:20:17:11:5d:f8:a0:13:6a:16:78:36:1b: ca:9e:e1:5e:71:66:69:4d:48:c4:6b:db:ce:d6:39: 6c:ef:aa:76:b0:50:a0:80:d3:e3:b1:06:2a:43:31: ed:4c:f8:1e:9b:15:b1:2c:ae:1f:de:b2:2b:c1:2f: 3f:e1:a5:34:68:e8:16:f2:a5:32:0f:dd:51:dd:c6: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F1:1C:63:89:17:62:EE:D0:E9:E4:6C:96:54:56:D2:B1:8E:8B:89 X509v3 Authority Key Identifier: keyid:62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:18:41:4a:f8:0c:cb:82:95:cc:fd:82:fe:9d:e9:a9:19:dc: ff:e1:b7:41:01:2d:50:58:8e:81:93:9c:cf:d0:99:5d:8f:ed: 38:95:95:33:6b:09:a8:96:be:1f:fb:23:57:ad:83:04:46:24: 06:5f:ee:8c:85:f5:f9:59:68:c4:24:0b:e3:df:9b:c4:a5:49: da:4a:38:e4:cf:98:dd:db:17:10:55:6f:8b:4c:bf:dd:28:00: eb:8e:3e:35:d7:cc:53:b1:69:4b:7c:7f:af:ec:6d:86:6f:41: 44:54:d3:06:33:a1:80:ac:48:32:ae:aa:20:54:f4:da:51:5c: 72:10:b7:d3:a7:36:25:f5:45:3e:9a:b9:be:02:23:47:07:ef: fc:21:7d:15:42:d0:be:1b:fd:19:c8:e2:69:71:73:5f:59:69: e5:57:47:c8:b5:97:db:d2:26:e1:71:70:0a:3f:69:9f:61:95: 8e:fa:24:7c:42:5e:a3:f4:67:9f:ea:46:85:fc:77:d7:05:84: 60:06:4b:54:c6:56:ae:01:b4:85:2e:82:31:54:b5:b9:ac:c9: 1d:57:d8:3d:7f:18:b6:82:f2:7d:f6:49:b0:6b:c5:47:c9:ef: 67:4f:c3:aa:6c:43:a1:ce:1b:1c:5e:fb:bf:b8:3a:6a:c9:4c: 0c:07:4a:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGwOLhCEheQa7fhmQXLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOGZlMmQyMzQzY2YyOGUyMjdiNTRmODA0YjJjZTAzMmQz ZDE4OTUwHhcNMjUxMjA3MDAwMDQ5WhcNMjUxMjA4MDAwMDQ5WjAzMTEwLwYDVQQD Eyg4MGYxMWM2Mzg5MTc2MmVlZDBlOWU0NmM5NjU0NTZkMmIxOGU4Yjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsr7hKQizGxOyQa0pP0O2WB9ORmQ mXAXIp6h9eI0UZhxQNDekaV/XCGnBa9lu/kha5AJV2ifT2/t8mSgS3GBq2VNvNAS 3+LAU6nGJ++X+7v1DNNcs/B3FUa7hlVMkFyOw7UnerJRGo0iPVn4CgXIOZON9jB0 kPRE/Hc5t9bToRHJ9qQuCg23vivBjI3sYG6RaL1FaQ4gWt9V1Mc3KNT3SdaSaNiX p/AIj9WGovXpLWMa2gohFJYgFxFd+KATahZ4NhvKnuFecWZpTUjEa9vO1jls76p2 sFCggNPjsQYqQzHtTPgemxWxLK4f3rIrwS8/4aU0aOgW8qUyD91R3cbzNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDxHGOJF2Lu0OnkbJZUVtKxjouJMB8GA1UdIwQY MBaAFGKP4tI0PPKOIntU+ASyzgMtPRiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW9faTBqUTg4bzRpZTFUNEJMTE9BeTA5R0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85YWRiZTQtMzM2My00NTIzLTkyNzgt MmY4MTIxYTI4YmYwLzEvWW9faTBqUTg4bzRpZTFUNEJMTE9BeTA5R0pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85YWRiZTQtMzM2My00NTIzLTkyNzgtMmY4MTIxYTI4YmYw LzEvWW9faTBqUTg4bzRpZTFUNEJMTE9BeTA5R0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxhBSvgM y4KVzP2C/p3pqRnc/+G3QQEtUFiOgZOcz9CZXY/tOJWVM2sJqJa+H/sjV62DBEYk Bl/ujIX1+VloxCQL49+bxKVJ2ko45M+Y3dsXEFVvi0y/3SgA644+NdfMU7FpS3x/ r+xthm9BRFTTBjOhgKxIMq6qIFT02lFcchC306c2JfVFPpq5vgIjRwfv/CF9FULQ vhv9GcjiaXFzX1lp5VdHyLWX29Im4XFwCj9pn2GVjvokfEJeo/Rnn+pGhfx31wWE YAZLVMZWrgG0hS6CMVS1uazJHVfYPX8YtoLyffZJsGvFR8nvZ0/DqmxDoc4bHF77 v7g6aslMDAdKBw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:15 2025 by rpki-client