This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json) Hash identifier: cuTAvH+nFfl+P02/LqHwlDbKVAGt62Zg2KoJ9TrSelE= Subject key identifier: 55:23:D2:91:B9:20:F7:37:CF:B9:7F:61:D0:10:A9:22:BF:86:E6:7C Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Certificate serial: 019B0E266E78403E4016ED755FDFFFE48789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft Manifest number: 0681 Signing time: Thu 11 Dec 2025 16:02:38 +0000 Manifest this update: Thu 11 Dec 2025 16:02:38 +0000 Manifest next update: Fri 12 Dec 2025 16:02:38 +0000 Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=) 2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=) 3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: l0Kktf7Oyszqyo9OF0P8O9OC/4qYoHjTeEwoyIbcFSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:6e:78:40:3e:40:16:ed:75:5f:df:ff:e4:87:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Validity Not Before: Dec 11 16:02:38 2025 GMT Not After : Dec 12 16:02:38 2025 GMT Subject: CN=5523d291b920f737cfb97f61d010a922bf86e67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:79:b7:09:b8:ae:c7:e5:07:65:db:bc:48: 89:02:00:ac:b8:ca:cf:d0:37:0a:4e:7b:ee:77:b2: 03:8b:d0:4f:ce:0f:16:42:e9:8b:3b:64:f8:e1:82: 48:2b:b0:97:7f:75:48:0e:25:61:d9:27:fb:df:33: 35:79:41:68:43:5f:f7:ea:60:13:e1:fc:51:14:85: 5c:4c:d7:2f:05:86:3e:24:77:79:db:fa:ab:ff:7b: ac:51:90:39:61:53:53:e9:e9:18:61:a5:bc:01:87: 48:00:dd:e9:9a:9e:9c:f1:a7:99:c8:78:14:14:6e: fb:9e:bc:60:a2:a5:06:04:91:9e:5c:cd:df:8c:d6: b6:04:a6:7a:62:77:0d:ef:b1:72:d1:f4:35:7f:35: 20:80:c6:5f:2d:3c:91:55:2c:e5:74:db:00:a6:15: 53:c2:66:aa:95:6f:b3:39:01:14:2c:0a:f4:48:d7: 6a:72:6e:54:41:a3:e3:1c:2c:14:71:33:f2:ea:ee: 7c:ab:4e:18:a6:89:0d:a5:e2:bc:88:e2:ec:6f:66: 79:9f:90:1e:ba:4e:67:a0:8f:f5:a2:5b:fe:40:8d: 73:0d:78:01:7f:dc:e0:d2:3e:3d:14:a7:2b:23:56: 18:d4:89:0f:ae:73:71:30:7c:23:d0:d8:1f:d2:dd: 77:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:23:D2:91:B9:20:F7:37:CF:B9:7F:61:D0:10:A9:22:BF:86:E6:7C X509v3 Authority Key Identifier: keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:da:6c:59:51:6b:62:d4:a0:90:bf:1b:83:33:3d:a6:a3:44: 3a:12:be:52:9a:2e:81:f0:bf:b2:77:49:eb:aa:c0:1a:2d:e8: ea:5d:c1:43:19:a3:21:11:61:91:48:b3:89:7a:a9:69:01:02: 35:a7:eb:5c:ec:c6:ee:b3:d6:cd:20:2b:9b:42:fa:e2:2b:b4: 20:a8:0b:4c:82:81:19:9f:0d:be:e4:24:f6:07:37:bc:3e:5d: cf:91:46:cc:6d:19:8a:c3:5c:bc:a5:38:8d:72:64:9c:94:d1: 7a:7a:96:f6:14:27:8f:ad:91:8f:dc:a5:79:e0:ba:22:0f:a9: 59:65:a3:ea:c3:62:2e:a3:ee:96:98:46:ba:e8:e3:a0:c9:b2: 19:23:23:49:20:43:d9:47:23:5f:85:6d:43:40:71:ef:bc:5f: 17:60:d9:b9:83:02:4c:78:94:eb:b7:13:ab:3a:d8:71:11:7d: 80:15:38:b9:13:75:34:12:a8:39:c6:3b:29:4b:71:01:a0:98: d7:34:4d:c6:f4:3c:c0:43:5f:69:cb:75:fa:38:e3:f4:d0:0a: 51:f2:22:dd:5f:43:94:dd:11:34:4a:10:f3:b9:bf:64:77:a4: aa:b9:12:0b:0a:9a:ef:ff:6f:60:e9:21:e6:15:fd:ba:1b:2f: 8f:75:e0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJm54QD5AFu11X9//5IeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3 MjgwOTcwHhcNMjUxMjExMTYwMjM4WhcNMjUxMjEyMTYwMjM4WjAzMTEwLwYDVQQD Eyg1NTIzZDI5MWI5MjBmNzM3Y2ZiOTdmNjFkMDEwYTkyMmJmODZlNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7x5twm4rsflB2XbvEiJAgCsuMrP 0DcKTnvud7IDi9BPzg8WQumLO2T44YJIK7CXf3VIDiVh2Sf73zM1eUFoQ1/36mAT 4fxRFIVcTNcvBYY+JHd52/qr/3usUZA5YVNT6ekYYaW8AYdIAN3pmp6c8aeZyHgU FG77nrxgoqUGBJGeXM3fjNa2BKZ6YncN77Fy0fQ1fzUggMZfLTyRVSzldNsAphVT wmaqlW+zOQEULAr0SNdqcm5UQaPjHCwUcTPy6u58q04YpokNpeK8iOLsb2Z5n5Ae uk5noI/1olv+QI1zDXgBf9zg0j49FKcrI1YY1IkPrnNxMHwj0Ngf0t137wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUj0pG5IPc3z7l/YdAQqSK/huZ8MB8GA1UdIwQY MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5 LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdpsWVFr YtSgkL8bgzM9pqNEOhK+UpougfC/sndJ66rAGi3o6l3BQxmjIRFhkUiziXqpaQEC NafrXOzG7rPWzSArm0L64iu0IKgLTIKBGZ8NvuQk9gc3vD5dz5FGzG0ZisNcvKU4 jXJknJTRenqW9hQnj62Rj9yleeC6Ig+pWWWj6sNiLqPulphGuujjoMmyGSMjSSBD 2UcjX4VtQ0Bx77xfF2DZuYMCTHiU67cTqzrYcRF9gBU4uRN1NBKoOcY7KUtxAaCY 1zRNxvQ8wENfact1+jjj9NAKUfIi3V9DlN0RNEoQ87m/ZHekqrkSCwqa7/9vYOkh 5hX9uhsvj3XgdQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:05 2025 by rpki-client