This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft (raw, json) Hash identifier: tLIHybgzZkTJtRhxVd1ta7/z5zi3zid6rFKDOhRi8/k= Subject key identifier: 62:4D:03:3A:B1:E1:84:59:D8:49:2D:84:16:1E:26:61:BC:48:8B:66 Authority key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94 Certificate issuer: /CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194 Certificate serial: 019B5863BA55AF973D41ED13A3C2D7E9C42B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft Manifest number: 1725 Signing time: Fri 26 Dec 2025 02:01:29 +0000 Manifest this update: Fri 26 Dec 2025 02:01:29 +0000 Manifest next update: Sat 27 Dec 2025 02:01:29 +0000 Files and hashes: 1: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl (hash: +9zveECudc/g/7qccE/HgaZEkadVWcAyp8gaq5+haiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:63:ba:55:af:97:3d:41:ed:13:a3:c2:d7:e9:c4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194 Validity Not Before: Dec 26 02:01:29 2025 GMT Not After : Dec 27 02:01:29 2025 GMT Subject: CN=624d033ab1e18459d8492d84161e2661bc488b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:74:52:b8:da:52:23:d6:e6:60:1d:f0:82: ae:17:0d:a5:08:2d:d8:1a:6a:11:19:d2:73:47:d6: 3a:e1:1c:91:db:4e:33:a2:9d:99:c5:e3:7f:f8:61: 5b:9d:99:b4:d1:c0:ef:02:87:c7:43:60:98:33:9b: 05:13:37:8a:68:4a:0a:91:e9:18:a0:9e:6b:60:6e: 0b:be:82:05:bd:dd:06:5b:84:29:97:b7:d7:ae:2e: 05:97:32:3b:9c:cc:ca:7d:3f:5b:46:bc:0d:28:1f: 31:5f:ae:8e:f0:15:72:88:90:9d:c6:85:17:6c:29: 9b:b3:2b:69:a4:e1:4b:16:14:de:65:d3:15:51:18: 04:db:1c:68:d4:25:ac:e4:51:54:49:08:46:c8:50: 8d:b6:26:ce:86:95:ef:ad:b2:e0:8a:24:ab:6a:b7: 83:86:1f:00:79:12:10:9f:5e:0e:f4:7a:6e:b8:7b: d8:b0:78:cf:40:91:df:94:fe:4c:11:e3:6b:68:f1: fa:a5:71:9a:27:fd:d3:e9:11:8d:4d:2a:7b:11:4d: af:cb:0c:a5:8b:f3:4f:fe:07:ec:d8:52:db:20:25: a5:5b:cd:90:41:b4:5f:08:0c:5b:37:d2:43:e2:aa: 38:d5:3f:77:82:e4:95:f4:e9:81:29:5c:0d:90:d7: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4D:03:3A:B1:E1:84:59:D8:49:2D:84:16:1E:26:61:BC:48:8B:66 X509v3 Authority Key Identifier: keyid:CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8f:14:fa:d0:bb:f3:fa:aa:44:34:0f:8a:4f:1e:c3:70:10: 86:10:e4:0a:6b:bd:55:11:df:aa:74:e9:56:05:02:27:2b:09: ad:46:1f:d0:8b:98:28:82:26:c8:47:19:f4:b9:69:9d:21:93: 6a:c0:f0:83:15:88:d8:5b:37:ec:17:48:9f:a1:c8:78:70:b5: d3:15:29:5a:e4:df:e4:14:bc:54:4b:e4:5b:c9:2a:c3:a9:b7: 19:a2:bf:95:39:03:e5:ba:cf:80:c6:ab:17:41:eb:7c:3b:49: 69:7e:b7:8f:c7:ef:81:29:4d:71:bd:cf:2e:b8:ce:eb:d2:15: b0:5d:9c:cf:06:7e:87:a5:05:eb:b0:08:b6:4a:21:8b:65:19: 2b:23:22:f1:19:36:ff:85:45:d0:f4:8c:6a:8b:2b:b4:b7:61: 8b:1a:57:fe:e4:13:18:0d:3d:d3:00:ec:60:86:8f:f7:62:dd: a3:1d:d8:45:00:38:2d:f1:a9:da:9c:5e:6a:b6:82:7d:f7:92: ba:48:b5:64:b6:95:b5:3c:56:80:d5:35:e1:40:25:6c:f2:ac: a1:d6:08:6e:e8:15:59:3c:04:dd:83:8f:45:6f:be:0a:50:8b: a1:d1:f8:df:63:68:cb:56:0f:ec:a0:ba:7c:f3:ed:54:16:ad: 6a:03:2b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYY7pVr5c9Qe0To8LX6cQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMTgzYTY2OTEzMDlhNzlkNmU2NjA1YjBkNWMxMWUzZmY3 ZTkxOTQwHhcNMjUxMjI2MDIwMTI5WhcNMjUxMjI3MDIwMTI5WjAzMTEwLwYDVQQD Eyg2MjRkMDMzYWIxZTE4NDU5ZDg0OTJkODQxNjFlMjY2MWJjNDg4YjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu050UrjaUiPW5mAd8IKuFw2lCC3Y GmoRGdJzR9Y64RyR204zop2ZxeN/+GFbnZm00cDvAofHQ2CYM5sFEzeKaEoKkekY oJ5rYG4LvoIFvd0GW4Qpl7fXri4FlzI7nMzKfT9bRrwNKB8xX66O8BVyiJCdxoUX bCmbsytppOFLFhTeZdMVURgE2xxo1CWs5FFUSQhGyFCNtibOhpXvrbLgiiSrareD hh8AeRIQn14O9HpuuHvYsHjPQJHflP5MEeNraPH6pXGaJ/3T6RGNTSp7EU2vywyl i/NP/gfs2FLbICWlW82QQbRfCAxbN9JD4qo41T93guSV9OmBKVwNkNeFnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJNAzqx4YRZ2EkthBYeJmG8SItmMB8GA1UdIwQY MBaAFMoYOmaRMJp51uZgWw1cEeP/fpGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEt MTllNzA4NDY5Y2VlLzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wNzc0YmItM2IwYi00ZjQ3LWIxNTEtMTllNzA4NDY5Y2Vl LzEveWhnNlpwRXdtbm5XNW1CYkRWd1I0Xzkta1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFI8U+tC7 8/qqRDQPik8ew3AQhhDkCmu9VRHfqnTpVgUCJysJrUYf0IuYKIImyEcZ9LlpnSGT asDwgxWI2Fs37BdIn6HIeHC10xUpWuTf5BS8VEvkW8kqw6m3GaK/lTkD5brPgMar F0HrfDtJaX63j8fvgSlNcb3PLrjO69IVsF2czwZ+h6UF67AItkohi2UZKyMi8Rk2 /4VF0PSMaosrtLdhixpX/uQTGA090wDsYIaP92Ldox3YRQA4LfGp2pxearaCffeS uki1ZLaVtTxWgNU14UAlbPKsodYIbugVWTwE3YOPRW++ClCLodH432Noy1YP7KC6 fPPtVBatagMrHg== -----END CERTIFICATE-----Generated at Fri Dec 26 09:37:49 2025 by rpki-client