This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft File: YsuMEjOwFrHwSBCJc9asPnYvY-0.mft (raw, json) Hash identifier: 106y/GVzkP9gBdWUGJ7Js1HqpifU/AZZAmc36yt1B8Q= Subject key identifier: 61:F1:B4:74:CA:16:44:08:7F:C1:57:A2:F4:81:4A:33:4D:80:C6:09 Authority key identifier: 62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED Certificate issuer: /CN=62cb8c1233b016b1f048108973d6ac3e762f63ed Certificate serial: 019B6D33111D18FBBD9449382258763F8DA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft Manifest number: 1349 Signing time: Tue 30 Dec 2025 03:00:21 +0000 Manifest this update: Tue 30 Dec 2025 03:00:21 +0000 Manifest next update: Wed 31 Dec 2025 03:00:21 +0000 Files and hashes: 1: YsuMEjOwFrHwSBCJc9asPnYvY-0.crl (hash: HMiQ1qVUYWrisJZbowwpQz7zJkF4ozU/vQVFSEYzF8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 03:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:11:1d:18:fb:bd:94:49:38:22:58:76:3f:8d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62cb8c1233b016b1f048108973d6ac3e762f63ed Validity Not Before: Dec 30 03:00:21 2025 GMT Not After : Dec 31 03:00:21 2025 GMT Subject: CN=61f1b474ca1644087fc157a2f4814a334d80c609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:be:af:04:b8:07:f8:16:61:66:ba:bb:a3: ad:62:72:c2:94:37:6c:33:4c:b8:46:34:16:c5:31: 4e:04:9a:86:eb:67:f5:7a:a8:2f:92:95:af:37:64: 0f:04:34:5b:99:2e:05:aa:e4:1d:c7:aa:89:69:ad: d2:b1:85:e9:3b:76:6b:40:5e:9f:42:5d:0d:93:19: cd:eb:a1:85:e4:d7:bb:37:8e:69:50:7a:c6:8a:b5: cd:7a:e4:e0:16:d9:af:97:1d:3c:8b:f5:43:fe:00: a7:01:3d:98:cc:1e:1c:1a:3f:cc:33:ff:9d:b0:78: 02:8f:41:ed:cb:8c:34:31:bb:1f:68:8e:0f:be:bb: 0f:52:4f:6f:df:41:29:ef:db:d9:84:1a:c6:55:03: a2:04:28:c3:de:86:29:8c:59:52:2e:3a:87:a3:63: 8f:b9:a0:bb:23:ba:b9:53:0a:f2:14:57:ce:e4:1a: ff:a9:6f:9b:d4:17:70:c0:ea:4f:41:6f:81:c4:6d: d8:2a:0e:aa:50:e1:13:3d:63:c4:aa:87:18:35:9d: 82:1d:1f:5b:53:7b:8e:38:38:b3:e5:9c:4b:94:82: ed:68:4d:ed:8c:f0:06:96:78:27:60:f7:18:dc:bd: 3d:a4:48:06:13:3c:a9:cf:42:09:41:c2:8c:c2:c5: 6b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F1:B4:74:CA:16:44:08:7F:C1:57:A2:F4:81:4A:33:4D:80:C6:09 X509v3 Authority Key Identifier: keyid:62:CB:8C:12:33:B0:16:B1:F0:48:10:89:73:D6:AC:3E:76:2F:63:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsuMEjOwFrHwSBCJc9asPnYvY-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/402eea-4814-4877-8d7a-3ca2f796b596/1/YsuMEjOwFrHwSBCJc9asPnYvY-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:94:47:2f:e8:b1:eb:03:58:7c:30:93:04:a3:3e:59:0c:00: 92:f2:98:a2:01:ef:4f:73:6e:97:93:c0:cf:71:02:d1:65:1d: b1:a6:79:e8:34:d3:a8:30:78:00:7c:1f:23:11:14:cf:0e:ca: 87:9a:a0:77:16:4b:f3:b2:32:74:29:d6:3e:b7:25:7f:0d:0b: ae:9b:90:6e:8b:ec:40:a0:2d:c3:9d:97:da:5f:2d:bc:b2:6d: 02:c2:75:cf:56:c6:04:27:c6:ca:e8:8b:29:78:e9:c8:de:79: cc:39:ca:89:34:e6:1c:25:f5:8e:b4:68:68:50:84:b6:30:a9: a7:de:2f:32:ec:b4:26:ba:3d:ab:94:b4:5b:06:9e:08:29:d9: ef:fd:be:64:a0:88:af:ca:d8:fa:d5:31:2f:15:1f:ba:24:13: b6:1d:10:ee:72:a5:9f:ed:a7:ab:67:c9:8a:fc:04:9a:f5:e5: 69:bb:dc:13:f1:f6:8c:f4:88:68:ea:58:7e:3e:d1:b5:f3:86: c8:a4:98:4a:d9:04:d8:85:3d:ba:08:09:47:f0:e5:9d:0a:e0: ba:b3:09:b8:7c:62:c5:10:f8:19:3d:27:85:75:5a:f0:2f:f7: c1:f1:a2:7b:9e:3c:bb:c3:e0:2a:36:8e:5f:29:86:0c:2e:1e: 43:24:ca:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMxEdGPu9lEk4Ilh2P42kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyY2I4YzEyMzNiMDE2YjFmMDQ4MTA4OTczZDZhYzNlNzYy ZjYzZWQwHhcNMjUxMjMwMDMwMDIxWhcNMjUxMjMxMDMwMDIxWjAzMTEwLwYDVQQD Eyg2MWYxYjQ3NGNhMTY0NDA4N2ZjMTU3YTJmNDgxNGEzMzRkODBjNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLG+rwS4B/gWYWa6u6OtYnLClDds M0y4RjQWxTFOBJqG62f1eqgvkpWvN2QPBDRbmS4FquQdx6qJaa3SsYXpO3ZrQF6f Ql0NkxnN66GF5Ne7N45pUHrGirXNeuTgFtmvlx08i/VD/gCnAT2YzB4cGj/MM/+d sHgCj0Hty4w0MbsfaI4PvrsPUk9v30Ep79vZhBrGVQOiBCjD3oYpjFlSLjqHo2OP uaC7I7q5UwryFFfO5Br/qW+b1BdwwOpPQW+BxG3YKg6qUOETPWPEqocYNZ2CHR9b U3uOODiz5ZxLlILtaE3tjPAGlngnYPcY3L09pEgGEzypz0IJQcKMwsVrhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHxtHTKFkQIf8FXovSBSjNNgMYJMB8GA1UdIwQY MBaAFGLLjBIzsBax8EgQiXPWrD52L2PtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2Et M2NhMmY3OTZiNTk2LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC80MDJlZWEtNDgxNC00ODc3LThkN2EtM2NhMmY3OTZiNTk2 LzEvWXN1TUVqT3dGckh3U0JDSmM5YXNQbll2WS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZRHL+ix 6wNYfDCTBKM+WQwAkvKYogHvT3Nul5PAz3EC0WUdsaZ56DTTqDB4AHwfIxEUzw7K h5qgdxZL87IydCnWPrclfw0LrpuQbovsQKAtw52X2l8tvLJtAsJ1z1bGBCfGyuiL KXjpyN55zDnKiTTmHCX1jrRoaFCEtjCpp94vMuy0Jro9q5S0WwaeCCnZ7/2+ZKCI r8rY+tUxLxUfuiQTth0Q7nKln+2nq2fJivwEmvXlabvcE/H2jPSIaOpYfj7RtfOG yKSYStkE2IU9uggJR/DlnQrgurMJuHxixRD4GT0nhXVa8C/3wfGie548u8PgKjaO XymGDC4eQyTKgg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:12:58 2025 by rpki-client