This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft File: _ypds7oz42wW2_UmCy_idK5_siI.mft (raw, json) Hash identifier: 5E21TfGHsUXn2wp4RWzvOczjWRDInMVdo00CN/Xvelg= Subject key identifier: 24:DC:D3:71:D8:5E:FA:C5:56:5D:79:33:A2:F8:28:B0:E4:AC:95:39 Authority key identifier: FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22 Certificate issuer: /CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222 Certificate serial: 019AF2767DD28BD08708B0CAC6E3F065FCE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: _ypds7oz42wW2_UmCy_idK5_siI.crl (hash: DYqEIlhvowoHv9z7ehoRIvmXghk6aMhb5dloJTcmqos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7d:d2:8b:d0:87:08:b0:ca:c6:e3:f0:65:fc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff2a5db3ba33e36c16dbf5260b2fe274ae7fb222 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=24dcd371d85efac5565d7933a2f828b0e4ac9539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:1f:7c:1d:36:a0:c9:60:0b:53:69:3b:18: 3a:a1:89:46:f6:5d:b9:fb:a1:e9:df:b1:42:96:26: db:3f:79:78:50:51:ce:cb:5d:49:ff:0f:10:aa:38: 52:25:07:47:71:94:3a:ac:ff:3b:ce:83:75:0a:fd: 25:85:f5:f2:92:88:10:91:96:92:3f:fa:f9:91:e0: 8a:f8:27:2c:ba:dc:02:34:f9:25:30:d9:db:83:43: 1a:24:77:32:b7:11:95:b3:5b:6b:ad:29:fc:e8:55: 49:a8:eb:7d:d9:e2:d7:14:8f:d6:0b:e5:1a:73:94: e0:03:41:f9:74:0f:cc:3f:bf:a6:4f:a5:8d:64:ad: be:fa:e9:55:d9:f5:4c:8b:92:9a:30:c0:08:f6:a6: 7a:fb:ff:77:1b:e7:60:e1:19:36:da:22:ab:4c:a3: 6e:8c:08:4f:41:13:b3:49:84:1c:10:dd:5c:9b:55: c4:2e:d4:b7:15:11:72:b1:8c:1b:94:66:20:51:a0: 26:6b:47:72:92:ed:d5:a8:a7:e4:4c:98:5c:08:b0: f3:c9:38:54:e5:33:fb:b2:9c:13:1b:59:e1:dd:25: 12:cb:b9:81:69:09:b4:09:3e:1d:82:c8:63:eb:01: 86:3f:ae:18:da:5f:db:27:65:06:47:a8:f7:94:d5: 51:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:D3:71:D8:5E:FA:C5:56:5D:79:33:A2:F8:28:B0:E4:AC:95:39 X509v3 Authority Key Identifier: keyid:FF:2A:5D:B3:BA:33:E3:6C:16:DB:F5:26:0B:2F:E2:74:AE:7F:B2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ypds7oz42wW2_UmCy_idK5_siI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5df710-df86-42c0-8aa2-5260cd5c24c3/1/_ypds7oz42wW2_UmCy_idK5_siI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:51:36:bd:71:29:be:7a:38:fe:b7:8e:f2:87:cb:10:53: 1b:fc:67:28:8e:c7:36:dc:c5:22:0c:5c:49:b5:03:71:9f:6d: 5a:41:c8:96:84:10:a6:44:ef:22:3e:7b:af:50:60:35:b9:2b: 77:e5:06:76:ab:6f:f0:0f:d3:04:9e:a3:c4:8d:71:42:60:c3: 63:d0:20:ad:23:e5:7a:c1:21:e6:bf:93:85:9c:f3:69:87:c7: 1b:64:ee:bf:e8:81:50:b1:b6:9e:2d:a3:b2:1c:31:c2:94:dd: d9:25:7a:26:6a:a9:f1:cb:d6:7b:b2:10:d7:ae:74:f2:06:dd: 2c:ce:9c:10:a0:32:45:11:87:fa:0d:df:3e:1b:ed:a2:e0:d7: ba:eb:f8:f5:6a:f6:c0:76:d7:e6:03:36:d2:ec:23:e9:72:61: 0b:f5:db:78:9c:ba:2f:98:00:2e:43:7a:2b:2a:2b:53:fc:75: b0:29:4d:f2:05:69:9f:12:58:33:8a:b2:50:e6:57:11:01:ef: ea:d9:a8:01:89:f2:e3:4b:38:78:0c:0f:ab:4b:99:da:24:cb: 90:87:49:69:ce:21:a1:16:b8:dc:f5:30:89:21:ce:0e:87:35: ef:50:0b:be:59:93:e0:5b:48:d7:d1:a0:1d:92:f1:2d:ac:a0: f6:7f:c0:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydn3Si9CHCLDKxuPwZfzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMmE1ZGIzYmEzM2UzNmMxNmRiZjUyNjBiMmZlMjc0YWU3 ZmIyMjIwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EygyNGRjZDM3MWQ4NWVmYWM1NTY1ZDc5MzNhMmY4MjhiMGU0YWM5NTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNkffB02oMlgC1NpOxg6oYlG9l25 +6Hp37FClibbP3l4UFHOy11J/w8QqjhSJQdHcZQ6rP87zoN1Cv0lhfXykogQkZaS P/r5keCK+CcsutwCNPklMNnbg0MaJHcytxGVs1trrSn86FVJqOt92eLXFI/WC+Ua c5TgA0H5dA/MP7+mT6WNZK2++ulV2fVMi5KaMMAI9qZ6+/93G+dg4Rk22iKrTKNu jAhPQROzSYQcEN1cm1XELtS3FRFysYwblGYgUaAma0dyku3VqKfkTJhcCLDzyThU 5TP7spwTG1nh3SUSy7mBaQm0CT4dgshj6wGGP64Y2l/bJ2UGR6j3lNVREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTc03HYXvrFVl15M6L4KLDkrJU5MB8GA1UdIwQY MBaAFP8qXbO6M+NsFtv1Jgsv4nSuf7IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTIt NTI2MGNkNWMyNGMzLzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81ZGY3MTAtZGY4Ni00MmMwLThhYTItNTI2MGNkNWMyNGMz LzEvX3lwZHM3b3o0MndXMl9VbUN5X2lkSzVfc2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr1RNr1x Kb56OP63jvKHyxBTG/xnKI7HNtzFIgxcSbUDcZ9tWkHIloQQpkTvIj57r1BgNbkr d+UGdqtv8A/TBJ6jxI1xQmDDY9AgrSPlesEh5r+ThZzzaYfHG2Tuv+iBULG2ni2j shwxwpTd2SV6Jmqp8cvWe7IQ16508gbdLM6cEKAyRRGH+g3fPhvtouDXuuv49Wr2 wHbX5gM20uwj6XJhC/XbeJy6L5gALkN6KyorU/x1sClN8gVpnxJYM4qyUOZXEQHv 6tmoAYny40s4eAwPq0uZ2iTLkIdJac4hoRa43PUwiSHODoc171ALvlmT4FtI19Gg HZLxLayg9n/AkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:29 2025 by rpki-client