This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json) Hash identifier: ZLYXrRUF/20mkghS6bME6wgViakKCvvZ3qKnQU2DELU= Subject key identifier: B4:67:D1:23:07:94:85:A4:8E:3F:7D:E1:BF:E3:45:5A:79:C0:02:EF Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56 Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956 Certificate serial: 019B5A1AC161CCD4DD3C4116061940815CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft Manifest number: 1429 Signing time: Fri 26 Dec 2025 10:01:01 +0000 Manifest this update: Fri 26 Dec 2025 10:01:01 +0000 Manifest next update: Sat 27 Dec 2025 10:01:01 +0000 Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: UHzD7llFvT6NBIsYLopWXF3hVDGaPVKUyiOSJZAaB/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c1:61:cc:d4:dd:3c:41:16:06:19:40:81:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956 Validity Not Before: Dec 26 10:01:01 2025 GMT Not After : Dec 27 10:01:01 2025 GMT Subject: CN=b467d123079485a48e3f7de1bfe3455a79c002ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:c5:27:9e:37:72:4f:12:2a:93:84:9f:f9: 3b:92:55:57:75:37:b8:c7:0c:b8:16:f1:9d:e8:81: 9e:ff:6c:11:d1:71:63:72:3d:11:a6:bc:a3:56:a1: 8f:f4:c4:6a:00:50:8a:44:68:14:a0:f9:16:ed:a3: cd:5d:13:cc:a3:e8:b5:46:c2:6e:43:21:81:12:30: 81:37:84:56:3b:ff:9b:4f:98:14:6c:9c:b8:83:36: 12:42:7a:90:17:6c:17:d2:c5:37:29:6a:a3:0c:6f: f1:e4:10:4f:4b:c4:44:d8:16:e0:10:6e:20:45:67: 0f:37:73:1f:f3:1b:ed:20:2f:35:5a:54:48:64:40: 5e:86:4e:06:2b:ff:07:e9:d7:2b:49:05:e9:28:ed: aa:40:5c:a8:90:b6:05:ae:19:42:79:a8:71:21:a7: 11:ca:4f:70:f4:3d:f5:3b:2f:66:38:97:49:12:6a: c2:55:c5:57:10:a3:a0:be:0d:2c:a3:58:30:a4:2d: 44:ab:53:49:f2:3e:f0:ee:e4:eb:2f:b8:41:43:9c: 9e:fc:8c:1e:84:a0:91:90:67:80:c8:0f:c0:73:6d: 4f:ef:8a:15:79:8a:d1:9a:76:e8:de:9a:85:2a:ed: df:d2:e9:22:f6:a3:14:ea:96:6f:d5:33:aa:cf:49: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:67:D1:23:07:94:85:A4:8E:3F:7D:E1:BF:E3:45:5A:79:C0:02:EF X509v3 Authority Key Identifier: keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:93:2f:6a:f9:68:6a:44:31:9c:af:97:64:13:0a:d8:d3:7b: c4:f7:57:e8:72:af:77:0e:dd:fd:4c:2c:3c:2c:88:5a:2d:5c: 69:b3:1e:47:37:1d:02:10:e2:eb:01:68:a5:9c:cb:bf:5e:f7: b3:7b:ab:f1:cd:46:ff:fc:09:72:f3:a3:b5:11:27:6d:c1:44: 6a:a3:5a:06:29:cb:25:52:02:fb:0c:b7:40:3a:dd:89:fc:2b: 83:ab:48:42:63:6a:48:6f:ba:91:49:f4:5e:cb:0a:18:eb:98: 07:e8:5f:85:4d:b5:cf:d5:02:b9:19:e6:4b:9f:3d:e0:65:77: a7:57:bf:6e:87:1f:55:30:b9:df:06:b8:0b:f5:a3:70:cb:5b: 07:4e:35:5e:f4:e7:5b:7f:7b:c4:f2:02:24:a5:83:3b:d5:4b: af:8f:17:14:c9:83:40:e1:8a:92:d2:07:fd:eb:f2:e9:7c:81: d8:c1:ab:a1:ec:26:10:c3:cb:a0:9a:64:11:4d:b8:c5:b6:87: f5:74:7a:ab:2f:0b:d3:50:34:c2:31:8d:48:56:87:dd:ac:10: bf:91:04:9d:5d:e3:27:a1:be:18:96:ed:f5:96:84:81:26:14: a9:63:10:e0:65:c5:2b:6a:28:d5:91:74:4c:19:6b:23:78:1f: 3f:88:86:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsFhzNTdPEEWBhlAgVzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMDE2NWZiZmE4ZTI0NDg5YzU1NTNkMWI4NWVjNTAxN2Vm ZGY5NTYwHhcNMjUxMjI2MTAwMTAxWhcNMjUxMjI3MTAwMTAxWjAzMTEwLwYDVQQD EyhiNDY3ZDEyMzA3OTQ4NWE0OGUzZjdkZTFiZmUzNDU1YTc5YzAwMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh/FJ543ck8SKpOEn/k7klVXdTe4 xwy4FvGd6IGe/2wR0XFjcj0RpryjVqGP9MRqAFCKRGgUoPkW7aPNXRPMo+i1RsJu QyGBEjCBN4RWO/+bT5gUbJy4gzYSQnqQF2wX0sU3KWqjDG/x5BBPS8RE2BbgEG4g RWcPN3Mf8xvtIC81WlRIZEBehk4GK/8H6dcrSQXpKO2qQFyokLYFrhlCeahxIacR yk9w9D31Oy9mOJdJEmrCVcVXEKOgvg0so1gwpC1Eq1NJ8j7w7uTrL7hBQ5ye/Iwe hKCRkGeAyA/Ac21P74oVeYrRmnbo3pqFKu3f0uki9qMU6pZv1TOqz0kf/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRn0SMHlIWkjj994b/jRVp5wALvMB8GA1UdIwQY MBaAFGIBZfv6jiRInFVT0bhexQF+/flWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEt OTJjMWIyZDEzNTkyLzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEtOTJjMWIyZDEzNTky LzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJMvavlo akQxnK+XZBMK2NN7xPdX6HKvdw7d/UwsPCyIWi1cabMeRzcdAhDi6wFopZzLv173 s3ur8c1G//wJcvOjtREnbcFEaqNaBinLJVIC+wy3QDrdifwrg6tIQmNqSG+6kUn0 XssKGOuYB+hfhU21z9UCuRnmS5894GV3p1e/bocfVTC53wa4C/WjcMtbB041XvTn W397xPICJKWDO9VLr48XFMmDQOGKktIH/evy6XyB2MGroewmEMPLoJpkEU24xbaH 9XR6qy8L01A0wjGNSFaH3awQv5EEnV3jJ6G+GJbt9ZaEgSYUqWMQ4GXFK2oo1ZF0 TBlrI3gfP4iGIA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:22 2025 by rpki-client