This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json) Hash identifier: 28OsuF1yaikcLb7MmSryxKUWzS99v6v5FOKnsR+4q18= Subject key identifier: BC:58:F1:59:04:03:1A:DC:E9:2A:EF:CC:9F:AA:DA:F0:96:95:73:3E Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38 Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438 Certificate serial: 019B32684C2F3BC1D1A279590E3CAA4D1DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft Manifest number: 1094 Signing time: Thu 18 Dec 2025 17:00:54 +0000 Manifest this update: Thu 18 Dec 2025 17:00:54 +0000 Manifest next update: Fri 19 Dec 2025 17:00:54 +0000 Files and hashes: 1: mFdOLgpY75BCI6HwFdhbm64m2HU.roa (hash: dTVNpH8dt8wvAbtnwcqlrtySsedQZdW+bUyu+40b16A=) 2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: DFbzfqN761YRVpxx+rJ3hHaSh+KuTxqAXa3ULEEqAn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:4c:2f:3b:c1:d1:a2:79:59:0e:3c:aa:4d:1d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438 Validity Not Before: Dec 18 17:00:54 2025 GMT Not After : Dec 19 17:00:54 2025 GMT Subject: CN=bc58f15904031adce92aefcc9faadaf09695733e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:b3:21:52:d9:6f:c1:1d:df:83:ce:b8:ff: 96:06:0e:24:7b:e4:4f:5a:4a:b6:f3:3a:78:0f:87: e5:42:39:36:a9:96:c1:e8:07:77:41:8e:6f:d9:bd: e4:fc:bc:53:0f:3d:64:65:ea:d9:51:2f:68:83:30: 50:ef:e3:31:50:e2:d8:29:ce:26:32:f3:b4:82:a3: 91:12:90:78:56:89:29:c0:c8:dd:a5:f1:e7:fe:04: 16:dd:0d:98:fd:47:f7:b2:bc:76:e0:23:3a:f3:c0: 30:ef:da:2d:60:dd:85:77:53:81:53:51:98:d3:40: dc:a7:7e:97:9b:d3:68:db:b5:66:2a:32:c5:54:28: 3c:50:09:07:94:a6:4e:49:58:b0:61:ef:be:dc:56: 7d:59:68:17:86:f7:d0:31:72:80:78:bf:18:77:3b: 83:3e:d6:72:a8:7d:fd:a9:22:06:d3:20:76:e2:ef: b1:bf:dc:b2:bc:26:f4:72:26:c2:c8:d9:d4:56:c9: 4f:35:9c:ed:b5:42:46:b1:6f:be:e3:32:2c:98:f3: 55:81:c3:be:f8:10:81:d9:3b:e6:cd:58:9b:5c:76: 65:8e:74:dc:2b:46:96:10:cc:36:d7:3c:fc:01:80: 78:c3:bf:50:ba:52:c2:15:11:2c:d0:f2:74:f8:51: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:58:F1:59:04:03:1A:DC:E9:2A:EF:CC:9F:AA:DA:F0:96:95:73:3E X509v3 Authority Key Identifier: keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:57:22:0a:14:e5:1d:e5:75:3c:09:f9:c0:b1:53:cc:5a:87: b1:bd:17:9b:cc:7f:c4:02:e8:97:95:d8:0f:90:cb:f4:92:77: 87:65:7e:51:d5:18:58:3e:1b:d7:45:43:1d:71:95:24:91:99: a3:77:e1:5a:9f:09:72:40:66:54:7d:b9:ee:55:c2:29:a2:3f: e5:3f:89:5a:8d:36:9f:96:df:d4:01:27:f9:cd:e8:a6:17:6d: e2:9a:ea:4a:8d:98:78:b2:0a:80:15:de:30:3f:b1:40:66:e9: 36:aa:87:5f:4f:68:fd:f1:db:c8:81:12:40:80:57:0a:f4:15: 8e:5c:fd:a1:4a:0d:19:e1:9a:b4:97:e9:4c:92:64:d9:76:71: 03:dc:dc:03:4c:28:d0:0e:71:94:d5:2e:8d:0b:21:98:af:56: 3c:12:95:b3:c8:a6:e5:d1:79:c0:db:7c:1a:52:f8:cc:60:a9: c4:64:9f:b6:9e:ee:b2:e9:b5:63:91:a6:ad:14:15:2b:b5:d1: 59:dd:a3:05:91:78:b4:3d:ab:92:2e:25:fa:8d:d4:64:44:c5: 1d:fa:29:95:68:38:d6:11:cb:e2:a3:2d:49:3d:4b:f0:9c:cc: 25:f2:ad:eb:76:da:13:4a:c7:3c:78:31:e1:a6:b9:51:b3:22: c6:a7:a4:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaEwvO8HRonlZDjyqTR3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTAyNDNmOTg2MzZmYWEwZmI2YzVhZTZiYWQ5YjBhYmFk MjM0MzgwHhcNMjUxMjE4MTcwMDU0WhcNMjUxMjE5MTcwMDU0WjAzMTEwLwYDVQQD EyhiYzU4ZjE1OTA0MDMxYWRjZTkyYWVmY2M5ZmFhZGFmMDk2OTU3MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5yzIVLZb8Ed34POuP+WBg4ke+RP Wkq28zp4D4flQjk2qZbB6Ad3QY5v2b3k/LxTDz1kZerZUS9ogzBQ7+MxUOLYKc4m MvO0gqOREpB4VokpwMjdpfHn/gQW3Q2Y/Uf3srx24CM688Aw79otYN2Fd1OBU1GY 00Dcp36Xm9No27VmKjLFVCg8UAkHlKZOSViwYe++3FZ9WWgXhvfQMXKAeL8YdzuD PtZyqH39qSIG0yB24u+xv9yyvCb0cibCyNnUVslPNZzttUJGsW++4zIsmPNVgcO+ +BCB2TvmzVibXHZljnTcK0aWEMw21zz8AYB4w79QulLCFREs0PJ0+FEBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxY8VkEAxrc6SrvzJ+q2vCWlXM+MB8GA1UdIwQY MBaAFMsQJD+YY2+qD7bFrmutmwq60jQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAt NDhmMTUxYjUyMzFmLzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAtNDhmMTUxYjUyMzFm LzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1ciChTl HeV1PAn5wLFTzFqHsb0Xm8x/xALol5XYD5DL9JJ3h2V+UdUYWD4b10VDHXGVJJGZ o3fhWp8JckBmVH257lXCKaI/5T+JWo02n5bf1AEn+c3ophdt4prqSo2YeLIKgBXe MD+xQGbpNqqHX09o/fHbyIESQIBXCvQVjlz9oUoNGeGatJfpTJJk2XZxA9zcA0wo 0A5xlNUujQshmK9WPBKVs8im5dF5wNt8GlL4zGCpxGSftp7usum1Y5GmrRQVK7XR Wd2jBZF4tD2rki4l+o3UZETFHfoplWg41hHL4qMtST1L8JzMJfKt63baE0rHPHgx 4aa5UbMixqek4g== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:18 2025 by rpki-client