This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json) Hash identifier: 0yauTUt4F21UhOQf8PDJvzGi1hTuRviWh/cmaj6Kj74= Subject key identifier: FA:57:B1:A0:85:13:A1:94:53:0C:70:CB:46:97:07:35:22:07:B6:73 Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86 Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86 Certificate serial: 019B435BE6D6232808CDE52FA47B2AD6C85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft Manifest number: 0736 Signing time: Mon 22 Dec 2025 00:00:54 +0000 Manifest this update: Mon 22 Dec 2025 00:00:54 +0000 Manifest next update: Tue 23 Dec 2025 00:00:54 +0000 Files and hashes: 1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=) 2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: 7ZWRIFA3KujQBLxBOinPP3fhs4spDcwm/4jE1/IM48U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:e6:d6:23:28:08:cd:e5:2f:a4:7b:2a:d6:c8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86 Validity Not Before: Dec 22 00:00:54 2025 GMT Not After : Dec 23 00:00:54 2025 GMT Subject: CN=fa57b1a08513a194530c70cb469707352207b673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:e2:00:7a:25:af:5c:64:85:50:31:85:ab: a8:9c:f8:a2:bc:dc:89:b1:a3:9e:b8:f4:a5:6d:c6: 72:b6:1e:6f:28:28:b1:0b:59:fb:48:99:f8:c1:57: 0a:aa:c0:7e:28:7b:34:e6:09:7a:53:42:16:b9:04: 3e:28:03:2c:6e:b7:0c:f9:0f:d5:82:5d:14:b1:ab: 8f:92:f1:82:a7:0b:20:79:be:21:e0:e4:d6:fe:6c: 2f:f3:da:de:62:7d:38:7b:f0:df:5d:39:53:d9:59: 5a:3a:ca:e2:35:df:e6:a5:a3:43:89:48:3d:00:a9: f2:0e:07:c1:84:b6:5d:46:c8:a0:be:41:2b:2a:91: 25:6a:7e:01:be:ec:55:a2:00:5c:82:96:34:4a:f8: 2f:ba:26:a6:f7:72:13:26:94:29:f5:c0:fc:b5:fc: c3:14:97:e7:06:26:86:d4:be:1a:25:50:07:ae:8c: fc:66:54:4e:f8:d1:db:83:4b:41:a1:da:1f:f1:e5: d4:dc:d4:e8:69:62:ad:41:43:79:37:1b:97:49:e7: 3d:bc:26:6a:fc:ac:8c:bf:dc:1f:60:ff:80:18:af: 30:8b:11:64:0d:db:c5:55:47:86:3b:46:c5:4f:b5: c9:7d:49:93:42:77:3c:d2:77:ae:e3:c4:d1:99:10: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:57:B1:A0:85:13:A1:94:53:0C:70:CB:46:97:07:35:22:07:B6:73 X509v3 Authority Key Identifier: keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c9:ee:29:28:36:85:0e:62:ea:53:43:f6:7f:26:d2:ba:24: 17:26:0a:af:7a:02:58:ad:f3:07:2e:1a:c6:59:74:58:16:fa: ae:e7:ba:5e:7d:cd:38:08:98:a0:98:8a:79:97:b7:81:df:98: 7f:ba:14:bc:47:e0:e3:58:34:fa:34:4d:00:a5:45:aa:4c:4d: a5:7f:9c:61:bc:d0:42:28:12:ce:ee:5e:67:89:4d:8a:c3:4a: 8b:de:80:92:ba:7d:4c:32:22:2c:08:95:48:2a:73:20:f5:02: eb:fe:6b:12:70:c0:df:0f:0d:1e:03:67:d3:c6:05:49:24:ed: d9:2c:5c:8d:1a:fc:15:a5:9c:a9:ae:28:f4:4d:38:25:9a:92: e5:e6:12:fb:ac:8f:7f:05:54:d7:9a:ce:e0:d0:80:92:6e:f3: 5c:a2:5d:16:40:01:19:10:25:9b:1d:c2:d5:e6:5f:7c:76:91: 3d:fa:c7:20:f4:c1:92:63:1a:01:59:4a:3d:42:f6:c7:e3:11: f4:90:4d:fa:f9:c7:80:fb:39:05:14:98:37:64:f6:96:96:97: 1b:42:d0:77:06:e7:19:6f:8c:f2:46:13:f8:8f:5c:c9:23:02: 52:b1:68:4e:20:c2:f9:1e:cb:2a:2d:51:8b:6f:31:90:94:96: 25:5e:9a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW+bWIygIzeUvpHsq1shdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTkyOTVkM2FkYTdlNmViMzI5ODQ0OTYxY2FhMTAwMmNh YTRkODYwHhcNMjUxMjIyMDAwMDU0WhcNMjUxMjIzMDAwMDU0WjAzMTEwLwYDVQQD EyhmYTU3YjFhMDg1MTNhMTk0NTMwYzcwY2I0Njk3MDczNTIyMDdiNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXbiAHolr1xkhVAxhauonPiivNyJ saOeuPSlbcZyth5vKCixC1n7SJn4wVcKqsB+KHs05gl6U0IWuQQ+KAMsbrcM+Q/V gl0UsauPkvGCpwsgeb4h4OTW/mwv89reYn04e/DfXTlT2VlaOsriNd/mpaNDiUg9 AKnyDgfBhLZdRsigvkErKpElan4BvuxVogBcgpY0Svgvuiam93ITJpQp9cD8tfzD FJfnBiaG1L4aJVAHroz8ZlRO+NHbg0tBodof8eXU3NToaWKtQUN5NxuXSec9vCZq /KyMv9wfYP+AGK8wixFkDdvFVUeGO0bFT7XJfUmTQnc80neu48TRmRAyywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpXsaCFE6GUUwxwy0aXBzUiB7ZzMB8GA1UdIwQY MBaAFGMZKV062n5usymESWHKoQAsqk2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2Et N2U0ZTJmOGI1YjE2LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yNmNjOTItOGJmNy00OGUwLTkzN2EtN2U0ZTJmOGI1YjE2 LzEvWXhrcFhUcmFmbTZ6S1lSSlljcWhBQ3lxVFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8nuKSg2 hQ5i6lND9n8m0rokFyYKr3oCWK3zBy4axll0WBb6rue6Xn3NOAiYoJiKeZe3gd+Y f7oUvEfg41g0+jRNAKVFqkxNpX+cYbzQQigSzu5eZ4lNisNKi96Akrp9TDIiLAiV SCpzIPUC6/5rEnDA3w8NHgNn08YFSSTt2SxcjRr8FaWcqa4o9E04JZqS5eYS+6yP fwVU15rO4NCAkm7zXKJdFkABGRAlmx3C1eZffHaRPfrHIPTBkmMaAVlKPUL2x+MR 9JBN+vnHgPs5BRSYN2T2lpaXG0LQdwbnGW+M8kYT+I9cySMCUrFoTiDC+R7LKi1R i28xkJSWJV6asg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:57 2025 by rpki-client