This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json) Hash identifier: 6hfTyiUdwm9cSOkuAGCZOqu15bBq031IcAJB54JoYS0= Subject key identifier: CC:A8:5F:F2:A0:1C:CB:04:0A:3E:A1:0E:C1:35:10:03:92:3A:F1:35 Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Certificate serial: 019B593EC9B4B7852C89E79BDF86822E3831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 06:00:45 +0000 Manifest this update: Fri 26 Dec 2025 06:00:45 +0000 Manifest next update: Sat 27 Dec 2025 06:00:45 +0000 Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: Esl0To1PW4nVQvi0FeloFOv/1Q178fapC2g749NyEkk=) 2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=) 3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=) 4: x85xaclh_I5fag7LOhEkjo3jhMw.asa (hash: SZArydHLaUzTTdXtg5nAF/HF99OnEgr16Dnn25uMEJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c9:b4:b7:85:2c:89:e7:9b:df:86:82:2e:38:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Validity Not Before: Dec 26 06:00:45 2025 GMT Not After : Dec 27 06:00:45 2025 GMT Subject: CN=cca85ff2a01ccb040a3ea10ec1351003923af135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:f1:84:a7:c3:95:12:1b:3b:a4:73:78:36: e0:9e:a9:18:7d:61:c3:6b:c8:36:05:5e:4b:30:e9: 3e:2b:78:8e:c1:fd:b7:ad:7b:28:20:7c:82:16:6e: ca:a6:96:03:68:44:00:5c:50:05:ef:43:fd:d9:e5: 2c:23:6f:fe:78:44:48:04:54:1d:fb:80:17:ec:d3: a2:6f:48:c8:5b:10:17:6a:26:de:00:35:56:c4:dd: 4c:67:d0:64:c7:7b:47:18:b5:23:34:a9:de:f9:9b: fe:e6:d8:83:bc:36:2d:84:61:76:d6:31:36:ec:6a: b6:9f:63:ee:dc:2e:de:29:98:7b:0b:98:46:a6:08: d2:51:e9:7c:35:97:11:23:08:ed:fc:1a:70:48:52: 3c:34:da:c0:b0:cd:27:99:af:29:a5:a9:06:a7:f8: 0c:47:7e:9e:3e:1b:2d:56:72:fe:bf:75:20:6d:c5: 85:e5:d9:e8:f1:cb:6e:45:88:09:37:65:e8:39:19: a3:af:33:38:ca:c5:91:01:58:c2:ef:2e:5e:15:9f: 0e:58:7b:fa:aa:d7:1d:24:e7:bc:f3:df:4e:6f:bc: 87:54:26:9b:13:64:5f:a0:85:07:c8:5a:6b:fe:07: 54:45:cd:e2:ee:f7:c7:a8:60:02:61:cd:2a:d6:c0: e7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A8:5F:F2:A0:1C:CB:04:0A:3E:A1:0E:C1:35:10:03:92:3A:F1:35 X509v3 Authority Key Identifier: keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3c:a5:c0:b9:e1:ec:9c:1f:4a:f4:44:f5:b1:78:10:24:bd: 2f:d4:4f:c6:58:bf:61:4d:34:46:6b:79:c0:04:16:4e:46:32: ed:80:8e:b3:ba:aa:88:4a:53:73:0d:2d:ac:65:13:55:48:e8: ae:67:01:7d:93:57:ba:15:64:9b:fb:98:02:1a:ed:be:34:51: 13:67:ef:01:18:0f:cb:0e:1e:d2:3f:a9:1c:0d:af:45:b4:6a: 8e:90:22:23:c2:01:ee:84:3f:f8:e7:c4:88:40:c7:55:b7:b1: fc:9d:d8:b9:b4:5b:6b:d3:c2:54:6a:4e:66:50:aa:1e:2d:97: 51:e7:ea:48:70:31:f1:f1:5b:43:7d:cb:46:1f:d8:68:82:3d: 05:ae:0d:ae:34:1d:dd:22:5b:60:b9:b6:41:c2:1a:9c:5b:ee: bc:f8:9b:1e:e9:ab:82:95:c2:27:2b:1d:da:9e:5b:7c:f7:95: fa:47:da:7f:e3:cc:3d:18:7d:e7:2b:59:a0:4b:2c:ee:98:c3: 47:c9:3d:59:1f:c9:41:2f:3e:cd:0d:95:ca:d6:f0:cf:6b:2a: 00:30:e9:b1:f4:34:51:f7:a0:0f:90:5e:07:d3:d2:91:a4:ae: dd:b7:54:91:bc:dd:32:e4:15:1e:67:61:09:5b:69:86:32:24: a6:10:29:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsm0t4Usieeb34aCLjgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5 ZjBhOTMwHhcNMjUxMjI2MDYwMDQ1WhcNMjUxMjI3MDYwMDQ1WjAzMTEwLwYDVQQD EyhjY2E4NWZmMmEwMWNjYjA0MGEzZWExMGVjMTM1MTAwMzkyM2FmMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRTxhKfDlRIbO6RzeDbgnqkYfWHD a8g2BV5LMOk+K3iOwf23rXsoIHyCFm7KppYDaEQAXFAF70P92eUsI2/+eERIBFQd +4AX7NOib0jIWxAXaibeADVWxN1MZ9Bkx3tHGLUjNKne+Zv+5tiDvDYthGF21jE2 7Gq2n2Pu3C7eKZh7C5hGpgjSUel8NZcRIwjt/BpwSFI8NNrAsM0nma8ppakGp/gM R36ePhstVnL+v3UgbcWF5dno8ctuRYgJN2XoORmjrzM4ysWRAVjC7y5eFZ8OWHv6 qtcdJOe8899Ob7yHVCabE2RfoIUHyFpr/gdURc3i7vfHqGACYc0q1sDnNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyoX/KgHMsECj6hDsE1EAOSOvE1MB8GA1UdIwQY MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTylwLnh 7JwfSvRE9bF4ECS9L9RPxli/YU00Rmt5wAQWTkYy7YCOs7qqiEpTcw0trGUTVUjo rmcBfZNXuhVkm/uYAhrtvjRRE2fvARgPyw4e0j+pHA2vRbRqjpAiI8IB7oQ/+OfE iEDHVbex/J3YubRba9PCVGpOZlCqHi2XUefqSHAx8fFbQ33LRh/YaII9Ba4NrjQd 3SJbYLm2QcIanFvuvPibHumrgpXCJysd2p5bfPeV+kfaf+PMPRh95ytZoEss7pjD R8k9WR/JQS8+zQ2Vytbwz2sqADDpsfQ0UfegD5BeB9PSkaSu3bdUkbzdMuQVHmdh CVtphjIkphApzw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:02 2025 by rpki-client