This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json) Hash identifier: /jF48ATWWDWPBocE4zV5Y2pWtIJE52iilzokEqkazeU= Subject key identifier: 15:99:03:0C:78:59:1A:1E:C6:EC:2B:1D:B5:19:71:97:E1:24:ED:ED Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11 Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11 Certificate serial: 019B2D0BF52F90DC4405D6325F4B43402084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft Manifest number: 13D8 Signing time: Wed 17 Dec 2025 16:01:56 +0000 Manifest this update: Wed 17 Dec 2025 16:01:56 +0000 Manifest next update: Thu 18 Dec 2025 16:01:56 +0000 Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: gj95AsYVtoooDv/lQj42xdQ63SZUjgDZIs+im9Iy8zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:f5:2f:90:dc:44:05:d6:32:5f:4b:43:40:20:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11 Validity Not Before: Dec 17 16:01:56 2025 GMT Not After : Dec 18 16:01:56 2025 GMT Subject: CN=1599030c78591a1ec6ec2b1db5197197e124eded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a2:58:ce:ed:b1:70:88:e4:58:65:ac:28:fc: be:00:01:89:57:f1:92:47:7a:7c:92:4f:72:73:f2: 30:66:a8:87:60:29:55:02:b3:f5:79:13:e2:2d:fa: 39:c8:7c:0d:61:22:ad:cf:f5:6d:cc:78:56:df:aa: 31:19:fc:2a:b0:80:ce:77:c6:0c:f6:68:f0:48:79: 1a:f6:c0:9c:e5:50:dc:ce:2a:79:47:96:bb:df:5b: a5:b1:bb:c7:46:7e:9f:f3:d5:c5:c8:31:17:c7:bb: c9:3b:af:f2:62:98:29:49:f3:a4:26:98:b4:8a:2e: 8b:01:34:1d:5b:61:3f:7d:8a:f3:b0:7e:c3:8a:61: 3e:99:1c:ee:8d:45:20:88:11:bc:a8:78:c2:cb:bd: f9:fc:73:4a:c0:ce:5f:c8:54:3c:51:3b:fe:a8:55: a2:1e:e6:1d:4e:e3:5a:23:c9:7b:1d:7e:9e:94:3a: 49:5e:ee:b4:1b:0f:2b:83:40:24:76:60:f9:0c:52: 12:db:e7:1d:7b:31:66:35:d9:71:2f:f1:40:9a:1e: 93:72:d5:4d:c5:3d:5a:db:dc:20:bb:87:47:9b:0c: 8a:af:0e:b5:4d:82:84:60:0c:52:9f:df:d5:88:e2: d4:9a:36:f8:b3:bb:b0:99:d3:e3:05:44:03:01:eb: 1b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:99:03:0C:78:59:1A:1E:C6:EC:2B:1D:B5:19:71:97:E1:24:ED:ED X509v3 Authority Key Identifier: keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f3:b2:d5:10:3c:2f:a7:2e:e4:d4:15:f7:c5:6a:3e:a4:44: e7:9a:09:ca:c4:e9:03:bc:07:0b:96:28:c9:71:5f:54:ea:44: 66:ad:6a:0f:62:46:e6:2c:75:2f:c0:ee:f5:05:61:73:b6:8c: b7:e4:c7:fb:33:ca:3e:1d:0f:93:36:99:52:f8:6a:16:98:5a: de:e8:9d:3f:5d:46:66:50:41:49:7e:0d:c8:24:0d:48:90:dc: a8:62:2e:68:95:a2:22:eb:b2:77:2d:f4:b1:9a:7a:93:e6:c1: 9d:bc:5e:9c:da:e7:f3:2a:59:1e:89:d1:c6:d0:44:a3:09:05: 50:e1:25:c3:a0:93:95:63:56:96:4e:1c:c1:80:a0:71:69:d3: b4:b3:53:4c:e2:44:6c:31:64:6c:de:de:6b:40:57:ad:7a:c3: a2:a8:4a:d6:5a:23:17:91:d9:e6:71:81:b8:bc:5f:0c:08:59: e7:e8:2a:0e:02:9a:14:61:94:e4:50:94:e3:c8:67:9a:05:70: d6:12:ac:4f:d7:ec:b2:ef:5a:e2:05:f7:54:59:12:7d:9c:18: 9c:b5:a9:7d:bb:73:7e:aa:5a:f0:85:71:a7:f4:83:a6:91:21: 15:ab:92:bf:1c:fa:19:de:3e:93:95:67:f0:5a:0a:31:fa:45: 68:b9:dd:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC/UvkNxEBdYyX0tDQCCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5 ZjhiMTEwHhcNMjUxMjE3MTYwMTU2WhcNMjUxMjE4MTYwMTU2WjAzMTEwLwYDVQQD EygxNTk5MDMwYzc4NTkxYTFlYzZlYzJiMWRiNTE5NzE5N2UxMjRlZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66JYzu2xcIjkWGWsKPy+AAGJV/GS R3p8kk9yc/IwZqiHYClVArP1eRPiLfo5yHwNYSKtz/VtzHhW36oxGfwqsIDOd8YM 9mjwSHka9sCc5VDczip5R5a731ulsbvHRn6f89XFyDEXx7vJO6/yYpgpSfOkJpi0 ii6LATQdW2E/fYrzsH7DimE+mRzujUUgiBG8qHjCy735/HNKwM5fyFQ8UTv+qFWi HuYdTuNaI8l7HX6elDpJXu60Gw8rg0AkdmD5DFIS2+cdezFmNdlxL/FAmh6TctVN xT1a29wgu4dHmwyKrw61TYKEYAxSn9/ViOLUmjb4s7uwmdPjBUQDAesbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWZAwx4WRoexuwrHbUZcZfhJO3tMB8GA1UdIwQY MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4 LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/Oy1RA8 L6cu5NQV98VqPqRE55oJysTpA7wHC5YoyXFfVOpEZq1qD2JG5ix1L8Du9QVhc7aM t+TH+zPKPh0PkzaZUvhqFpha3uidP11GZlBBSX4NyCQNSJDcqGIuaJWiIuuydy30 sZp6k+bBnbxenNrn8ypZHonRxtBEowkFUOElw6CTlWNWlk4cwYCgcWnTtLNTTOJE bDFkbN7ea0BXrXrDoqhK1lojF5HZ5nGBuLxfDAhZ5+gqDgKaFGGU5FCU48hnmgVw 1hKsT9fssu9a4gX3VFkSfZwYnLWpfbtzfqpa8IVxp/SDppEhFauSvxz6Gd4+k5Vn 8FoKMfpFaLndNg== -----END CERTIFICATE-----Generated at Wed Dec 17 22:04:03 2025 by rpki-client