This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft File: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json) Hash identifier: tHmm3U5QdGHvy3wTf3ydqg3T9QKMh9HIbM3cfS3cqsI= Subject key identifier: F8:02:84:99:87:46:C2:CA:28:D3:13:E0:02:3A:53:AC:82:3E:1D:13 Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72 Certificate issuer: /CN=629d135a15c74ca97cdecfd2ff39a9f997694972 Certificate serial: 019B3C7EB48A7BD11250D51DEB01DF1EFFB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft Manifest number: 05CC Signing time: Sat 20 Dec 2025 16:01:35 +0000 Manifest this update: Sat 20 Dec 2025 16:01:35 +0000 Manifest next update: Sun 21 Dec 2025 16:01:35 +0000 Files and hashes: 1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: dkJ/1heOscZ6Cbvx/H97gvhRT1kgfI4IrfsP/oN8D6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:b4:8a:7b:d1:12:50:d5:1d:eb:01:df:1e:ff:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972 Validity Not Before: Dec 20 16:01:35 2025 GMT Not After : Dec 21 16:01:35 2025 GMT Subject: CN=f80284998746c2ca28d313e0023a53ac823e1d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:38:5f:31:fb:51:8e:94:50:e0:9e:c1:e6: 67:f2:af:9f:fa:a1:33:25:61:7e:8b:d5:54:a9:78: 18:fc:8f:d4:ec:81:c8:94:c3:69:52:61:69:14:ae: b4:6b:0a:fd:05:89:27:e3:3f:74:e4:8c:e7:c8:81: e5:63:aa:bb:12:02:3e:65:2a:09:a4:76:4a:27:28: 9a:e7:f3:80:61:5a:f9:d1:9f:0f:71:ad:40:14:a9: 72:27:cd:cc:36:38:2c:e6:8c:0e:09:de:9a:fb:8d: cf:c3:68:1e:36:e6:67:68:c1:fc:c9:c7:c4:6f:b1: 6b:44:20:02:08:e3:0c:f8:7a:2e:7f:30:0e:fe:50: c1:05:97:41:aa:81:5d:b7:4d:60:39:f5:19:71:d9: 37:15:98:6c:fd:ce:99:15:25:1b:85:e2:0b:29:11: 05:6b:13:de:1e:39:c3:bd:04:e5:c1:92:10:dd:3c: bb:35:26:97:c7:99:ad:e5:55:ce:ae:35:f6:02:04: 3c:6f:84:81:c8:cb:ac:74:16:00:a3:aa:de:c8:4a: ee:5e:c3:72:01:71:7b:47:46:42:5a:7a:00:c4:4b: a1:cf:97:9a:15:87:fa:ac:fd:fe:4c:33:c1:3e:7c: 5e:b2:2f:5e:4d:f2:3a:7c:5e:b1:7c:9c:6a:23:e3: 7a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:02:84:99:87:46:C2:CA:28:D3:13:E0:02:3A:53:AC:82:3E:1D:13 X509v3 Authority Key Identifier: keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a5:b2:62:e9:e3:18:dd:d3:41:47:c2:65:e5:71:88:f0:d2: f5:b2:a3:55:22:26:16:1c:3f:a5:a6:73:ee:0f:d1:05:74:96: 40:30:2f:86:6d:9e:34:b9:ab:32:59:5f:d3:a0:c6:6f:e0:22: c5:cb:7e:73:52:17:99:13:59:7c:b7:38:f5:d8:85:1e:9e:52: c4:18:f3:c9:16:e1:5b:4b:e7:57:f9:a0:a1:92:3b:93:de:e1: d4:b4:ab:17:21:a2:41:8a:8a:d5:87:03:42:98:67:cc:a5:d3: fe:a7:7b:ab:fd:6e:9d:e0:7b:e1:5f:2d:a3:50:b5:53:39:63: ae:6f:b9:81:8b:a5:7c:8f:d4:80:6c:ff:47:f5:ec:aa:a6:be: 60:b2:5c:6f:8b:82:a6:bd:39:41:90:9f:4a:ac:48:ca:43:b3: eb:4b:43:f8:a0:f6:12:fa:78:46:94:0b:4c:b7:9f:a7:83:d8: de:8f:72:e2:a4:a8:a0:78:a0:5f:08:ea:8a:fd:a1:00:8d:97: 12:6f:35:98:87:1c:a2:03:81:0e:79:9d:60:a2:18:61:ca:ff: f6:3d:c5:eb:d4:7c:ba:02:e7:7d:41:d5:2e:0d:e2:78:c4:9f: b3:6b:af:87:e0:2a:83:22:82:a6:55:db:36:a6:88:36:c5:4a: 97:a8:1f:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frSKe9ESUNUd6wHfHv+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyOWQxMzVhMTVjNzRjYTk3Y2RlY2ZkMmZmMzlhOWY5OTc2 OTQ5NzIwHhcNMjUxMjIwMTYwMTM1WhcNMjUxMjIxMTYwMTM1WjAzMTEwLwYDVQQD EyhmODAyODQ5OTg3NDZjMmNhMjhkMzEzZTAwMjNhNTNhYzgyM2UxZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvs4XzH7UY6UUOCeweZn8q+f+qEz JWF+i9VUqXgY/I/U7IHIlMNpUmFpFK60awr9BYkn4z905IznyIHlY6q7EgI+ZSoJ pHZKJyia5/OAYVr50Z8Pca1AFKlyJ83MNjgs5owOCd6a+43Pw2geNuZnaMH8ycfE b7FrRCACCOMM+HoufzAO/lDBBZdBqoFdt01gOfUZcdk3FZhs/c6ZFSUbheILKREF axPeHjnDvQTlwZIQ3Ty7NSaXx5mt5VXOrjX2AgQ8b4SByMusdBYAo6reyEruXsNy AXF7R0ZCWnoAxEuhz5eaFYf6rP3+TDPBPnxesi9eTfI6fF6xfJxqI+N62QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgChJmHRsLKKNMT4AI6U6yCPh0TMB8GA1UdIwQY MBaAFGKdE1oVx0ypfN7P0v85qfmXaUlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXAwVFdoWEhUS2w4M3NfU196bXAtWmRwU1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lODJmMjgtNzE4My00ZTM4LTk4YjEt NTA1YzZjYjNkNjgyLzEvWXAwVFdoWEhUS2w4M3NfU196bXAtWmRwU1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lODJmMjgtNzE4My00ZTM4LTk4YjEtNTA1YzZjYjNkNjgy LzEvWXAwVFdoWEhUS2w4M3NfU196bXAtWmRwU1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKWyYunj GN3TQUfCZeVxiPDS9bKjVSImFhw/paZz7g/RBXSWQDAvhm2eNLmrMllf06DGb+Ai xct+c1IXmRNZfLc49diFHp5SxBjzyRbhW0vnV/mgoZI7k97h1LSrFyGiQYqK1YcD QphnzKXT/qd7q/1uneB74V8to1C1Uzljrm+5gYulfI/UgGz/R/Xsqqa+YLJcb4uC pr05QZCfSqxIykOz60tD+KD2Evp4RpQLTLefp4PY3o9y4qSooHigXwjqiv2hAI2X Em81mIccogOBDnmdYKIYYcr/9j3F69R8ugLnfUHVLg3ieMSfs2uvh+AqgyKCplXb NqaINsVKl6gfkQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:11:34 2025 by rpki-client