This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json) Hash identifier: DuaAk2OD6i6QDHCvwB9LuOSLIywRwjhEkHRz3mCWQTg= Subject key identifier: 5B:FE:27:1B:B4:06:D9:DD:B8:FE:D1:FE:FD:FD:AC:2A:45:3E:E8:36 Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Certificate serial: 019B0DB6FC153CAC640588B9E9161FD06408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 14:00:54 +0000 Manifest this update: Thu 11 Dec 2025 14:00:54 +0000 Manifest next update: Fri 12 Dec 2025 14:00:54 +0000 Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=) 2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: g9DzfdeBfJ6rXXEl3PaSOTSQZolDXrPLw4VFTdW76lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:fc:15:3c:ac:64:05:88:b9:e9:16:1f:d0:64:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Validity Not Before: Dec 11 14:00:54 2025 GMT Not After : Dec 12 14:00:54 2025 GMT Subject: CN=5bfe271bb406d9ddb8fed1fefdfdac2a453ee836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:eb:84:0e:29:18:93:ba:87:be:43:61:16: 72:37:e8:d2:a1:e2:45:a9:24:45:6a:28:ee:42:1b: 7b:b4:63:b5:8f:52:ad:5f:6f:a8:3e:13:a0:7b:2d: dc:8a:4f:a5:8d:9c:01:c3:8e:1c:86:0f:e4:66:df: ee:4f:61:17:c8:d3:29:89:58:03:7c:cd:17:07:10: 0b:1a:27:9d:ff:3e:d8:7e:76:f0:c8:08:23:02:7b: 51:34:1b:32:07:4d:0d:b3:4a:b4:b1:ba:4f:c3:1b: b5:43:af:4c:62:67:5d:d3:51:1e:3c:a0:50:1d:4a: 31:22:cc:d2:87:b1:79:a0:5a:0c:2d:ed:00:4e:41: bd:f0:d5:aa:4b:b3:7f:e6:38:63:dc:15:a8:88:5b: 22:cd:1c:12:d0:37:d8:a0:ea:9e:8f:5b:cd:15:cc: 7c:79:c8:64:df:12:71:1e:69:f2:24:5d:b7:2f:1d: 3b:8e:11:d7:60:e7:ca:83:0c:cd:8d:4b:5d:10:27: 53:ba:21:ca:c1:98:ea:45:0e:95:a6:3f:50:6d:92: 6f:0e:50:3d:7f:d4:ed:ad:e5:e3:a0:16:e5:b6:30: 37:02:fb:df:64:da:af:60:75:76:18:aa:e4:b0:69: 8a:ad:0d:aa:d3:3b:8c:5a:2a:50:15:41:57:56:04: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FE:27:1B:B4:06:D9:DD:B8:FE:D1:FE:FD:FD:AC:2A:45:3E:E8:36 X509v3 Authority Key Identifier: keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3d:27:e7:9c:1d:79:62:e9:a2:d3:02:20:80:e8:34:0c:8f: 04:6e:47:d0:75:3b:1f:33:b2:c7:f8:c9:d5:80:27:0a:6b:bb: 5c:df:a6:d7:7e:cf:3b:12:8f:a0:2b:18:b4:94:d0:12:fa:4d: 18:9a:90:2a:e7:e7:cd:27:16:69:d0:92:3d:97:40:47:e9:d7: 7b:c2:17:e5:15:26:57:bc:53:51:bd:c5:43:f7:28:af:5c:9a: 3a:41:d5:e7:ae:61:9d:d2:51:fc:79:06:2c:75:c7:9e:e1:d3: 53:4f:a1:8a:70:0f:e2:dc:97:94:7a:9c:ce:02:6c:3e:51:cb: 13:a3:ec:13:b8:3b:06:fd:45:c3:70:41:ff:f4:44:77:ab:b0: 99:5d:2d:ff:b1:69:db:71:01:a4:91:79:cd:06:89:ca:cb:86: e5:3e:62:5f:ea:34:14:5d:f1:93:53:34:cc:11:4f:e0:0d:22: 9c:fc:8f:5d:12:69:8d:4f:4b:f1:7b:e6:e5:bf:a7:0e:a7:d2: 90:31:69:b0:14:c2:35:f3:14:b9:77:ef:20:29:33:e8:61:25: 20:5e:68:df:39:4a:6d:b5:ce:a1:5c:a5:52:bc:14:d3:0d:c6: e9:17:7b:76:8c:36:2c:e8:14:02:c7:fc:66:e2:26:6a:a4:ec: df:9f:b9:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtvwVPKxkBYi56RYf0GQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh MDRjYmYwHhcNMjUxMjExMTQwMDU0WhcNMjUxMjEyMTQwMDU0WjAzMTEwLwYDVQQD Eyg1YmZlMjcxYmI0MDZkOWRkYjhmZWQxZmVmZGZkYWMyYTQ1M2VlODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR/rhA4pGJO6h75DYRZyN+jSoeJF qSRFaijuQht7tGO1j1KtX2+oPhOgey3cik+ljZwBw44chg/kZt/uT2EXyNMpiVgD fM0XBxALGied/z7YfnbwyAgjAntRNBsyB00Ns0q0sbpPwxu1Q69MYmdd01EePKBQ HUoxIszSh7F5oFoMLe0ATkG98NWqS7N/5jhj3BWoiFsizRwS0DfYoOqej1vNFcx8 echk3xJxHmnyJF23Lx07jhHXYOfKgwzNjUtdECdTuiHKwZjqRQ6Vpj9QbZJvDlA9 f9TtreXjoBbltjA3AvvfZNqvYHV2GKrksGmKrQ2q0zuMWipQFUFXVgToCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv+Jxu0BtnduP7R/v39rCpFPug2MB8GA1UdIwQY MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt NWM3ODYzOTI2NGFhLzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT0n55wd eWLpotMCIIDoNAyPBG5H0HU7HzOyx/jJ1YAnCmu7XN+m137POxKPoCsYtJTQEvpN GJqQKufnzScWadCSPZdAR+nXe8IX5RUmV7xTUb3FQ/cor1yaOkHV565hndJR/HkG LHXHnuHTU0+hinAP4tyXlHqczgJsPlHLE6PsE7g7Bv1Fw3BB//REd6uwmV0t/7Fp 23EBpJF5zQaJysuG5T5iX+o0FF3xk1M0zBFP4A0inPyPXRJpjU9L8Xvm5b+nDqfS kDFpsBTCNfMUuXfvICkz6GElIF5o3zlKbbXOoVylUrwU0w3G6Rd7dow2LOgUAsf8 ZuImaqTs35+5Jg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:04 2025 by rpki-client