This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft File: ypO97sfEJpjfaskM3cbAGzp_LEk.mft (raw, json) Hash identifier: 6L7DEZ0CWB1vvUrUgcE57U6Onw3rnxy3iBvK12Ddntk= Subject key identifier: FB:6D:68:BA:1D:AD:BF:86:07:3A:7E:28:83:ED:93:46:6D:68:52:B1 Authority key identifier: CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 Certificate issuer: /CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Certificate serial: 019B70A2CC38D65C8EB1447501160CAA4933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft Manifest number: 179F Signing time: Tue 30 Dec 2025 19:01:15 +0000 Manifest this update: Tue 30 Dec 2025 19:01:15 +0000 Manifest next update: Wed 31 Dec 2025 19:01:15 +0000 Files and hashes: 1: ypO97sfEJpjfaskM3cbAGzp_LEk.crl (hash: WA2PhjI51GgHRCbsaH5Tg8w32ici1z+Zel1GYKuVveQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:cc:38:d6:5c:8e:b1:44:75:01:16:0c:aa:49:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca93bdeec7c42698df6ac90cddc6c01b3a7f2c49 Validity Not Before: Dec 30 19:01:15 2025 GMT Not After : Dec 31 19:01:15 2025 GMT Subject: CN=fb6d68ba1dadbf86073a7e2883ed93466d6852b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:6a:34:99:ad:df:e2:66:01:ef:2c:ee:4b: 28:99:da:49:c9:29:00:26:ac:94:f8:e4:44:dd:02: 5a:e8:be:40:a3:34:b5:38:64:29:26:82:d3:5b:53: 2e:32:36:14:5a:8b:ff:41:ea:aa:4e:4b:a2:e0:75: 8c:f3:40:d0:b3:c3:c6:9a:b9:4a:75:9c:9c:4c:f5: 1f:0c:32:cc:02:36:eb:c0:f5:95:75:18:61:6e:0d: 99:3a:12:41:24:fe:1f:8c:d4:18:4b:0e:50:5e:7f: 2d:5b:7e:43:6a:a7:20:99:a1:57:e7:11:60:37:cc: 5c:59:10:78:dd:fe:4c:f5:67:27:00:a1:ed:6a:33: 64:fe:02:aa:5b:73:1a:0d:bc:e3:04:f1:c6:d4:d1: 3b:20:78:bf:1e:d9:4a:2a:4f:cb:49:64:70:76:74: a7:43:be:6c:6c:b5:da:b2:4d:72:18:11:62:c1:ed: 90:22:d8:25:2b:8c:88:eb:b0:e3:0e:13:70:86:a6: a5:ef:c2:ca:a3:69:4c:c1:ca:05:fa:69:01:5a:4c: ef:98:43:ec:f1:6e:e7:e2:30:a5:9a:9f:fd:a0:0d: 36:40:be:bc:96:dc:b6:23:34:c0:06:5b:fb:1d:8c: 3c:93:40:62:25:b3:da:91:33:92:c8:93:5f:c0:41: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6D:68:BA:1D:AD:BF:86:07:3A:7E:28:83:ED:93:46:6D:68:52:B1 X509v3 Authority Key Identifier: keyid:CA:93:BD:EE:C7:C4:26:98:DF:6A:C9:0C:DD:C6:C0:1B:3A:7F:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypO97sfEJpjfaskM3cbAGzp_LEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/704746-c1c1-4cb8-83f1-fafe2d2063ca/1/ypO97sfEJpjfaskM3cbAGzp_LEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:d9:4f:1f:73:79:7a:ca:41:1e:7b:cb:53:83:1b:83:6a:60: 13:46:ba:fb:39:22:67:f5:92:62:66:9a:db:52:50:fe:3a:69: 29:46:80:c5:19:3e:76:37:20:ab:79:09:d5:9e:33:f1:ee:41: 97:f5:14:e2:71:e0:30:4c:02:a6:68:e3:a2:83:a9:ea:7b:48: 44:bf:d9:f8:ad:c0:a4:d2:4a:6b:24:18:ca:7e:16:48:87:0d: ab:a4:81:4b:ec:53:b5:a0:23:60:b9:21:e8:84:65:3f:95:47: f7:37:f1:7b:3a:56:b1:b9:05:03:c7:11:b1:12:52:40:11:27: bb:66:c1:d5:82:9f:b2:e8:a7:10:09:25:1a:19:3d:9c:e3:b9: 28:9e:9b:12:03:82:93:e0:2a:80:0e:db:e3:46:f5:cf:49:fa: 33:14:62:20:81:fb:d9:77:9a:5e:76:92:92:26:ca:05:0f:e7: d9:8c:ca:f9:aa:67:e5:ed:8b:3e:1c:3e:51:87:91:23:d9:1d: 90:2b:73:88:c8:72:a6:7f:cc:a9:de:a7:9f:71:83:63:74:12: 83:86:7b:73:fb:ec:5b:de:60:0e:7b:a1:0c:5e:98:21:12:cb: f7:bd:95:8f:d1:96:83:04:16:8d:50:ab:97:b9:bb:ce:6d:c4: 07:2a:bb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwosw41lyOsUR1ARYMqkkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTNiZGVlYzdjNDI2OThkZjZhYzkwY2RkYzZjMDFiM2E3 ZjJjNDkwHhcNMjUxMjMwMTkwMTE1WhcNMjUxMjMxMTkwMTE1WjAzMTEwLwYDVQQD EyhmYjZkNjhiYTFkYWRiZjg2MDczYTdlMjg4M2VkOTM0NjZkNjg1MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JxqNJmt3+JmAe8s7ksomdpJySkA JqyU+ORE3QJa6L5AozS1OGQpJoLTW1MuMjYUWov/QeqqTkui4HWM80DQs8PGmrlK dZycTPUfDDLMAjbrwPWVdRhhbg2ZOhJBJP4fjNQYSw5QXn8tW35DaqcgmaFX5xFg N8xcWRB43f5M9WcnAKHtajNk/gKqW3MaDbzjBPHG1NE7IHi/HtlKKk/LSWRwdnSn Q75sbLXask1yGBFiwe2QItglK4yI67DjDhNwhqal78LKo2lMwcoF+mkBWkzvmEPs 8W7n4jClmp/9oA02QL68lty2IzTABlv7HYw8k0BiJbPakTOSyJNfwEFyWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPttaLodrb+GBzp+KIPtk0ZtaFKxMB8GA1UdIwQY MBaAFMqTve7HxCaY32rJDN3GwBs6fyxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEt ZmFmZTJkMjA2M2NhLzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MDQ3NDYtYzFjMS00Y2I4LTgzZjEtZmFmZTJkMjA2M2Nh LzEveXBPOTdzZkVKcGpmYXNrTTNjYkFHenBfTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdlPH3N5 espBHnvLU4Mbg2pgE0a6+zkiZ/WSYmaa21JQ/jppKUaAxRk+djcgq3kJ1Z4z8e5B l/UU4nHgMEwCpmjjooOp6ntIRL/Z+K3ApNJKayQYyn4WSIcNq6SBS+xTtaAjYLkh 6IRlP5VH9zfxezpWsbkFA8cRsRJSQBEnu2bB1YKfsuinEAklGhk9nOO5KJ6bEgOC k+AqgA7b40b1z0n6MxRiIIH72XeaXnaSkibKBQ/n2YzK+apn5e2LPhw+UYeRI9kd kCtziMhypn/Mqd6nn3GDY3QSg4Z7c/vsW95gDnuhDF6YIRLL972Vj9GWgwQWjVCr l7m7zm3EByq7SQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:58 2025 by rpki-client