This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft File: yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json) Hash identifier: gSAEgg2dfub6J/XIO98GX73i0X4SoewX7SxbBP6SYBk= Subject key identifier: 1E:8E:F8:36:4A:A8:79:A4:2A:F6:F8:F7:BA:18:EF:80:18:6B:1D:EB Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D Certificate issuer: /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d Certificate serial: 019B593EC94C46A914F3C0AAC468E83BDD8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft Manifest number: 0ECC Signing time: Fri 26 Dec 2025 06:00:45 +0000 Manifest this update: Fri 26 Dec 2025 06:00:45 +0000 Manifest next update: Sat 27 Dec 2025 06:00:45 +0000 Files and hashes: 1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: pWSYv+0FjA3h1TcM3ARJfSTH1NGr14yiiclmm7x3a4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c9:4c:46:a9:14:f3:c0:aa:c4:68:e8:3b:dd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d Validity Not Before: Dec 26 06:00:45 2025 GMT Not After : Dec 27 06:00:45 2025 GMT Subject: CN=1e8ef8364aa879a42af6f8f7ba18ef80186b1deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:64:4e:50:f3:b9:56:b0:b7:d8:a7:0a:b6: ae:79:f6:4c:2e:20:fd:4f:1a:de:26:f1:32:ac:fb: e7:b2:ab:0b:55:c2:52:7a:5c:8c:2d:11:13:fa:53: 1d:02:c6:88:1c:6c:e3:a8:d1:f8:7b:68:51:8e:42: 16:49:8f:f1:52:11:53:22:f8:3d:c7:47:66:e6:59: 86:21:e9:59:0b:69:97:33:d5:4b:e0:2d:7c:7c:4b: ac:7f:e1:24:49:e2:db:26:5d:23:7b:85:37:4d:d4: 81:d8:3c:14:04:9f:da:25:59:99:b3:27:ab:ee:04: 1c:95:e7:96:dc:37:1f:d8:64:21:6b:42:93:1f:c1: cc:29:db:a2:a5:f6:b4:e4:f9:4c:0a:8e:c8:5a:0b: d6:3e:46:c1:58:98:82:18:74:11:77:03:a6:29:9b: f5:b2:78:9b:85:a7:1b:7a:79:70:2c:53:02:b1:60: 88:98:83:36:0a:2a:74:59:d1:ed:7b:58:47:a7:db: 08:7b:3c:80:51:45:d3:76:0c:a6:39:e9:76:0e:c9: 16:42:14:75:97:dd:5b:37:35:38:ff:a3:a2:3e:83: 10:a2:ef:dd:bf:74:c2:30:cb:48:b3:c4:e2:46:c8: a4:0c:41:48:dd:9b:68:ea:5d:40:8d:16:64:7c:6b: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8E:F8:36:4A:A8:79:A4:2A:F6:F8:F7:BA:18:EF:80:18:6B:1D:EB X509v3 Authority Key Identifier: keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:0a:5c:89:7f:8c:7c:91:7a:74:ec:47:45:65:8d:65:08: b3:0d:f9:b5:e3:b1:4e:5d:ad:de:0d:80:61:68:56:31:33:60: 6b:f0:98:ce:e2:92:52:8d:fe:fd:3e:7d:57:6a:6c:5e:52:95: 96:01:ad:c4:53:2d:77:b0:eb:c2:b3:46:46:94:32:3c:c4:fe: 72:bb:7e:dc:7d:3e:58:4d:df:ae:53:75:ee:6f:d4:9b:e6:25: fb:38:6e:75:e0:0f:1a:01:63:82:5e:ee:a5:74:0f:46:ce:1b: 5c:7e:13:89:08:3d:10:37:da:dd:c4:67:7f:57:bf:3b:ad:c4: 92:bc:cf:09:80:0a:73:87:29:4c:c7:81:aa:7c:99:6c:be:93: a1:d8:6d:a8:bd:98:37:de:37:0a:0b:49:02:a5:f2:e5:47:02: 36:df:f4:32:45:f8:96:ba:63:62:97:bb:ba:61:bf:d4:93:4d: 16:55:db:a0:c9:7d:f1:8a:47:17:b8:b7:3b:a6:f0:ac:63:71: 35:73:61:ff:6d:e4:de:67:72:91:28:55:34:f8:55:9c:e1:7d: 6b:8a:9d:e5:2f:2a:0c:96:3c:f0:be:87:1f:53:1f:12:e8:f6: 3d:20:10:89:29:e4:0a:76:19:c8:84:98:7c:42:f9:36:cb:86: bf:42:0c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPslMRqkU88CqxGjoO92NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3 NmEzOGQwHhcNMjUxMjI2MDYwMDQ1WhcNMjUxMjI3MDYwMDQ1WjAzMTEwLwYDVQQD EygxZThlZjgzNjRhYTg3OWE0MmFmNmY4ZjdiYTE4ZWY4MDE4NmIxZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjRkTlDzuVawt9inCrauefZMLiD9 TxreJvEyrPvnsqsLVcJSelyMLRET+lMdAsaIHGzjqNH4e2hRjkIWSY/xUhFTIvg9 x0dm5lmGIelZC2mXM9VL4C18fEusf+EkSeLbJl0je4U3TdSB2DwUBJ/aJVmZsyer 7gQcleeW3Dcf2GQha0KTH8HMKduipfa05PlMCo7IWgvWPkbBWJiCGHQRdwOmKZv1 snibhacbenlwLFMCsWCImIM2Cip0WdHte1hHp9sIezyAUUXTdgymOel2DskWQhR1 l91bNzU4/6OiPoMQou/dv3TCMMtIs8TiRsikDEFI3Zto6l1AjRZkfGsIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6O+DZKqHmkKvb497oY74AYax3rMB8GA1UdIwQY MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0 LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlroKXIl/ jHyRenTsR0VljWUIsw35teOxTl2t3g2AYWhWMTNga/CYzuKSUo3+/T59V2psXlKV lgGtxFMtd7DrwrNGRpQyPMT+crt+3H0+WE3frlN17m/Um+Yl+zhudeAPGgFjgl7u pXQPRs4bXH4TiQg9EDfa3cRnf1e/O63EkrzPCYAKc4cpTMeBqnyZbL6TodhtqL2Y N943CgtJAqXy5UcCNt/0MkX4lrpjYpe7umG/1JNNFlXboMl98YpHF7i3O6bwrGNx NXNh/23k3mdykShVNPhVnOF9a4qd5S8qDJY88L6HH1MfEuj2PSAQiSnkCnYZyISY fEL5NsuGv0IM8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:00 2025 by rpki-client