This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft File: PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json) Hash identifier: yFzmZurgBUnpG7SunuPt8L8PJ7ZWsIvwE1yN7Q53emQ= Subject key identifier: E1:80:7A:8E:3D:07:27:98:33:DD:BB:F8:D1:93:85:25:1A:F5:3D:14 Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65 Certificate issuer: /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65 Certificate serial: 019B650D1F8C55060F45BDF550D5307C3E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft Manifest number: 0D0A Signing time: Sun 28 Dec 2025 13:01:57 +0000 Manifest this update: Sun 28 Dec 2025 13:01:57 +0000 Manifest next update: Mon 29 Dec 2025 13:01:57 +0000 Files and hashes: 1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: K5YG9F4yBEkANI5587Dw7mUpKLh61XTAoghjVuGm56U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:1f:8c:55:06:0f:45:bd:f5:50:d5:30:7c:3e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65 Validity Not Before: Dec 28 13:01:57 2025 GMT Not After : Dec 29 13:01:57 2025 GMT Subject: CN=e1807a8e3d07279833ddbbf8d19385251af53d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:05:50:95:0a:c4:84:6d:b4:d9:92:84:b3:a0: 23:31:ba:85:98:50:26:a2:18:91:f0:df:e1:e0:3e: e8:c7:c4:f7:17:2e:49:e8:31:2a:d8:7c:fb:90:dc: cd:5d:83:1f:5e:2b:1b:8b:b8:0b:ff:70:cb:82:d5: f9:51:29:c0:42:8c:bb:21:c3:ae:c9:df:2d:ea:e0: 27:89:35:4e:13:4b:eb:7a:3b:87:81:d6:91:86:af: b5:5d:d7:b2:bb:47:f8:8b:90:c6:a3:0c:82:eb:4e: 6e:20:42:9d:be:fe:33:5c:14:ef:76:00:45:1d:8f: 92:2c:c3:53:7b:d3:ec:a0:6b:80:45:ef:f6:20:72: d1:2c:85:dd:f3:f9:ae:44:b4:81:29:49:c1:f1:b1: d1:4f:8f:fe:ad:ff:66:47:17:11:e1:07:2e:51:1b: ba:9d:48:0d:ed:52:00:b9:fc:ca:0d:57:d8:6d:29: 15:d2:ec:b5:fb:04:8c:42:f3:f7:de:6e:83:3e:fe: 6b:50:3e:15:00:45:1f:d8:09:03:70:20:2b:1a:41: 06:15:e0:c6:6e:87:95:4f:c9:7f:84:67:81:fe:8e: 20:86:7e:82:70:23:14:ca:8c:9c:c3:3b:c5:43:3c: d9:58:dd:66:a0:5a:27:bd:fd:69:11:e9:a7:ec:bd: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:80:7A:8E:3D:07:27:98:33:DD:BB:F8:D1:93:85:25:1A:F5:3D:14 X509v3 Authority Key Identifier: keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0a:97:d1:44:8b:e5:1e:35:23:e6:e0:b8:ab:07:34:6a:18: aa:30:a6:f0:6e:64:0a:db:1e:76:52:23:bd:d3:1c:e5:90:c6: a7:c6:e3:e1:02:5d:91:e0:c7:6e:21:ee:d9:65:9e:55:8e:53: 1d:3b:f5:34:02:c2:08:0e:e0:c8:02:aa:01:53:88:d6:5f:7c: 97:c9:5c:87:fe:d5:8b:be:18:4f:56:1d:3a:36:74:b2:9f:41: 81:68:50:04:d3:90:8b:c2:51:0d:ec:0f:68:23:a7:46:18:1e: 05:52:72:8c:de:28:5e:f8:79:3c:72:4d:27:21:4b:32:10:56: 42:c9:da:c3:a0:27:85:8d:ca:ab:ca:0f:a1:a2:a5:5e:97:4b: 0e:43:20:d3:29:60:13:fd:ae:8e:7a:d9:ff:9a:e1:a1:ab:21: a8:32:e1:86:43:c7:7c:78:46:74:59:58:e5:3a:f5:4e:4d:a5: 08:13:7e:3d:fa:06:29:13:d0:42:57:71:f6:e6:34:dd:5a:4a: 7d:4e:99:a6:9a:c0:2c:ec:2b:22:c8:57:10:0b:9c:a8:4b:e0: c4:f6:b8:29:4c:6a:bd:7f:17:14:25:6f:94:0f:dc:9e:05:6d: 82:ef:07:dd:a1:19:f1:ca:1b:4a:41:ab:95:cb:00:e7:20:03: 50:64:30:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDR+MVQYPRb31UNUwfD5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGNhOGZhZjNjZWUxYTVlNTFhNWM1Y2RiZjk0ODJhMDAw MjdiNjUwHhcNMjUxMjI4MTMwMTU3WhcNMjUxMjI5MTMwMTU3WjAzMTEwLwYDVQQD EyhlMTgwN2E4ZTNkMDcyNzk4MzNkZGJiZjhkMTkzODUyNTFhZjUzZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wVQlQrEhG202ZKEs6AjMbqFmFAm ohiR8N/h4D7ox8T3Fy5J6DEq2Hz7kNzNXYMfXisbi7gL/3DLgtX5USnAQoy7IcOu yd8t6uAniTVOE0vrejuHgdaRhq+1Xdeyu0f4i5DGowyC605uIEKdvv4zXBTvdgBF HY+SLMNTe9PsoGuARe/2IHLRLIXd8/muRLSBKUnB8bHRT4/+rf9mRxcR4QcuURu6 nUgN7VIAufzKDVfYbSkV0uy1+wSMQvP33m6DPv5rUD4VAEUf2AkDcCArGkEGFeDG boeVT8l/hGeB/o4ghn6CcCMUyoycwzvFQzzZWN1moFonvf1pEemn7L2qYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGAeo49ByeYM927+NGThSUa9T0UMB8GA1UdIwQY MBaAFD2MqPrzzuGl5RpcXNv5SCoAAntlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xMTIzN2QtYzY5ZC00MGQ0LWI0ZDct NGUxNWI4NGVlNzA2LzEvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xMTIzN2QtYzY5ZC00MGQ0LWI0ZDctNGUxNWI4NGVlNzA2 LzEvUFl5by12UE80YVhsR2x4YzJfbElLZ0FDZTJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwqX0USL 5R41I+bguKsHNGoYqjCm8G5kCtsedlIjvdMc5ZDGp8bj4QJdkeDHbiHu2WWeVY5T HTv1NALCCA7gyAKqAVOI1l98l8lch/7Vi74YT1YdOjZ0sp9BgWhQBNOQi8JRDewP aCOnRhgeBVJyjN4oXvh5PHJNJyFLMhBWQsnaw6AnhY3Kq8oPoaKlXpdLDkMg0ylg E/2ujnrZ/5rhoashqDLhhkPHfHhGdFlY5Tr1Tk2lCBN+PfoGKRPQQldx9uY03VpK fU6ZpprALOwrIshXEAucqEvgxPa4KUxqvX8XFCVvlA/cngVtgu8H3aEZ8cobSkGr lcsA5yADUGQwpQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:11:47 2025 by rpki-client