This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft File: YgFl-_qOJEicVVPRuF7FAX79-VY.mft (raw, json) Hash identifier: ic+X1Gi7plABybBRpDfvoDxjJU7d543pQq9YdQigD3s= Subject key identifier: A7:DC:7A:36:DC:D0:9F:E5:B9:8A:C8:66:CE:43:DF:B8:D2:69:7A:9B Authority key identifier: 62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56 Certificate issuer: /CN=620165fbfa8e24489c5553d1b85ec5017efdf956 Certificate serial: 019B44DCE9FB83DCE2AA9E3C8A806130CA5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft Manifest number: 141E Signing time: Mon 22 Dec 2025 07:01:27 +0000 Manifest this update: Mon 22 Dec 2025 07:01:27 +0000 Manifest next update: Tue 23 Dec 2025 07:01:27 +0000 Files and hashes: 1: YgFl-_qOJEicVVPRuF7FAX79-VY.crl (hash: vOlgECnFN1kEyvEYCJ98kUeRdBGoC6xDBdc8yHu5BYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:e9:fb:83:dc:e2:aa:9e:3c:8a:80:61:30:ca:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=620165fbfa8e24489c5553d1b85ec5017efdf956 Validity Not Before: Dec 22 07:01:27 2025 GMT Not After : Dec 23 07:01:27 2025 GMT Subject: CN=a7dc7a36dcd09fe5b98ac866ce43dfb8d2697a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:17:57:47:26:65:89:d6:69:b2:d3:31:1e: d3:e6:0d:ff:d2:28:7b:d7:1c:7e:b3:e1:60:a3:d6: d2:59:57:41:5d:f5:2b:32:d6:b7:79:ac:48:17:56: cb:cf:e0:6f:6c:18:6b:3a:9b:0e:59:cf:2e:09:2e: bd:99:70:07:7e:24:ba:b4:d6:bf:d6:2e:4b:70:00: 02:e3:4e:44:96:d9:8b:b9:1b:24:fb:07:8c:e2:be: 24:f5:63:fd:2e:95:b6:29:d0:78:e3:44:7a:8a:0a: 4c:36:d5:4d:81:7f:01:89:7d:48:81:7c:0d:aa:d7: 4b:94:67:7b:11:87:c3:38:0a:a9:a4:ae:2d:53:fb: c8:80:e7:43:5b:61:c9:56:2b:fd:a7:8d:fc:fe:09: 90:15:6a:49:9a:70:63:32:c9:f1:e0:83:4a:df:f6: 08:3a:23:c7:fb:20:60:fe:7a:19:61:b7:6e:f8:0c: b4:32:a9:0b:36:d7:dc:5f:1d:e5:c5:2d:70:33:16: 08:5e:2b:41:46:5f:66:bd:b0:31:4a:a7:75:b3:8e: b6:01:aa:27:0e:40:7b:69:ca:18:fd:f1:4f:43:fe: ae:2e:40:b4:0e:cd:fb:03:93:41:9d:4f:8d:d9:58: fe:eb:71:25:4d:b7:07:db:32:68:30:3e:02:11:55: cd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DC:7A:36:DC:D0:9F:E5:B9:8A:C8:66:CE:43:DF:B8:D2:69:7A:9B X509v3 Authority Key Identifier: keyid:62:01:65:FB:FA:8E:24:48:9C:55:53:D1:B8:5E:C5:01:7E:FD:F9:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgFl-_qOJEicVVPRuF7FAX79-VY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5b28ee-0492-486f-942a-92c1b2d13592/1/YgFl-_qOJEicVVPRuF7FAX79-VY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ed:c7:f2:ba:0a:93:3a:e5:0f:ab:cf:69:d3:0e:5d:69:12: 71:14:f4:c3:4b:19:8f:47:20:6c:00:f5:bf:b1:85:77:49:c8: 24:78:99:89:f6:a8:04:55:4d:6a:7c:dd:91:43:c2:09:d1:1e: b1:71:8e:dc:bd:9a:aa:8a:30:88:f5:88:cc:a6:18:38:db:00: 41:48:60:dc:5c:8b:3c:fa:30:87:5f:ef:17:17:93:1b:35:70: a0:91:9f:01:67:ad:84:49:18:13:8b:d8:31:ef:70:ce:4a:ba: c4:37:6e:8a:a0:98:e4:22:7a:4d:d4:01:99:b1:28:ca:d9:9d: 30:59:fa:5c:21:b6:b5:d2:3d:c1:95:d8:c9:ec:3b:cf:6b:17: 79:e8:1b:f4:63:8d:1e:9b:a3:5a:74:c5:26:e4:7b:1e:05:7c: 09:19:90:86:27:f5:94:2e:02:62:c6:a8:6c:e8:6d:e8:70:51: 11:18:c7:f4:c1:52:81:00:8e:cb:87:86:77:33:a0:eb:1b:bf: 9c:21:cf:32:57:bd:f5:5b:22:cb:6b:27:cb:df:50:58:1e:ee: 99:66:82:60:47:2f:56:47:98:02:6e:13:d1:57:48:12:89:bb: 0f:c5:3a:fe:93:7a:c5:fa:83:ed:47:18:58:73:c9:cd:3f:c8: 11:ac:20:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3On7g9ziqp48ioBhMMpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMDE2NWZiZmE4ZTI0NDg5YzU1NTNkMWI4NWVjNTAxN2Vm ZGY5NTYwHhcNMjUxMjIyMDcwMTI3WhcNMjUxMjIzMDcwMTI3WjAzMTEwLwYDVQQD EyhhN2RjN2EzNmRjZDA5ZmU1Yjk4YWM4NjZjZTQzZGZiOGQyNjk3YTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeAXV0cmZYnWabLTMR7T5g3/0ih7 1xx+s+Fgo9bSWVdBXfUrMta3eaxIF1bLz+BvbBhrOpsOWc8uCS69mXAHfiS6tNa/ 1i5LcAAC405EltmLuRsk+weM4r4k9WP9LpW2KdB440R6igpMNtVNgX8BiX1IgXwN qtdLlGd7EYfDOAqppK4tU/vIgOdDW2HJViv9p438/gmQFWpJmnBjMsnx4INK3/YI OiPH+yBg/noZYbdu+Ay0MqkLNtfcXx3lxS1wMxYIXitBRl9mvbAxSqd1s462Aaon DkB7acoY/fFPQ/6uLkC0Ds37A5NBnU+N2Vj+63ElTbcH2zJoMD4CEVXNbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfcejbc0J/luYrIZs5D37jSaXqbMB8GA1UdIwQY MBaAFGIBZfv6jiRInFVT0bhexQF+/flWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEt OTJjMWIyZDEzNTkyLzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81YjI4ZWUtMDQ5Mi00ODZmLTk0MmEtOTJjMWIyZDEzNTky LzEvWWdGbC1fcU9KRWljVlZQUnVGN0ZBWDc5LVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+3H8roK kzrlD6vPadMOXWkScRT0w0sZj0cgbAD1v7GFd0nIJHiZifaoBFVNanzdkUPCCdEe sXGO3L2aqoowiPWIzKYYONsAQUhg3FyLPPowh1/vFxeTGzVwoJGfAWethEkYE4vY Me9wzkq6xDduiqCY5CJ6TdQBmbEoytmdMFn6XCG2tdI9wZXYyew7z2sXeegb9GON HpujWnTFJuR7HgV8CRmQhif1lC4CYsaobOht6HBRERjH9MFSgQCOy4eGdzOg6xu/ nCHPMle99Vsiy2sny99QWB7umWaCYEcvVkeYAm4T0VdIEom7D8U6/pN6xfqD7UcY WHPJzT/IEawgrw== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:18 2025 by rpki-client