This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json) Hash identifier: +Ih/sLBVg2GZsmNyCImuI17OgYPuij/UDqpxXYOhFLU= Subject key identifier: 49:E4:2B:99:6C:F8:75:8E:52:F3:38:0E:09:67:C0:E3:B5:4C:26:DB Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Certificate serial: 019B43C97F824D6CACEFD38A4C0E5F606CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 02:00:37 +0000 Manifest this update: Mon 22 Dec 2025 02:00:37 +0000 Manifest next update: Tue 23 Dec 2025 02:00:37 +0000 Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=) 2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: qfy4TPnsRpCBURhSi8QrxKcxPpQB9FSDyVPYfU4EcyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:7f:82:4d:6c:ac:ef:d3:8a:4c:0e:5f:60:6c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Validity Not Before: Dec 22 02:00:37 2025 GMT Not After : Dec 23 02:00:37 2025 GMT Subject: CN=49e42b996cf8758e52f3380e0967c0e3b54c26db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:69:48:22:31:87:30:7c:91:af:52:d4:d1: 38:6a:90:12:fa:b4:88:3b:e7:19:fb:c8:c5:16:24: b0:a9:8d:12:bd:de:85:c2:a7:85:c3:86:2c:c4:44: 51:81:5b:e3:36:02:70:8b:6a:8d:dd:0e:77:33:bd: bb:83:d7:7a:74:22:b4:ea:cd:78:e5:c2:5f:34:5d: 7b:6c:5a:e1:d4:a1:bc:01:4c:ed:05:19:5c:e5:b5: 74:d7:7a:25:38:bf:c6:b3:24:c6:a2:f2:ab:cb:50: 6a:53:03:64:7f:bc:8e:47:1a:78:f8:05:4a:53:a6: 23:4e:b0:4b:d9:e6:5e:38:e3:ef:c6:f1:74:bf:22: 22:85:a6:83:d8:73:59:ad:9d:41:18:b9:d4:72:47: b2:08:f3:65:b8:a9:13:e5:3f:6d:22:39:a8:f0:68: 3f:bb:6e:c6:87:bd:a5:6f:72:10:5e:f9:35:e5:95: f4:74:c4:2a:bd:b0:02:e5:b8:e2:08:60:5d:b5:d1: fa:32:b0:c3:4e:80:9d:87:8c:5d:ba:e4:a6:c7:7d: 69:fa:3d:f8:a3:65:2b:10:9d:a5:01:f3:a3:8d:3d: 00:50:c5:58:f7:16:71:7d:84:1d:5f:dc:a8:0e:53: a7:d3:7a:33:2e:87:72:6a:86:f4:ed:da:32:ff:55: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:2B:99:6C:F8:75:8E:52:F3:38:0E:09:67:C0:E3:B5:4C:26:DB X509v3 Authority Key Identifier: keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ac:f6:6c:47:78:a4:f3:f5:1c:fe:f1:89:5a:9c:96:8b:a5: e2:75:85:92:cb:da:c5:50:96:ab:5b:c4:9d:88:98:c1:fd:11: dd:1f:42:10:9d:29:12:d9:10:ac:d4:a4:30:fe:dd:fb:f3:21: f9:63:06:42:bd:a1:49:78:bf:71:89:64:b6:d7:10:03:b3:38: 14:ed:06:3c:53:71:5a:ec:de:af:73:66:90:43:9b:57:29:c2: 67:f3:48:45:c4:c9:46:b7:f7:77:2f:a3:a0:70:2e:a8:c2:d6: 33:f4:fd:d1:db:70:38:a8:2e:14:77:96:b9:89:43:0d:b7:a2: 97:00:e8:29:b4:f3:73:bb:56:b5:9b:46:6d:33:f3:27:5b:55: 4c:40:1c:4b:5d:63:95:7e:66:a2:ee:50:5f:23:3b:91:70:d0: 88:a2:50:d7:99:a7:5d:32:1a:35:36:4a:a7:6d:c3:7e:81:3b: b8:ae:8f:38:79:37:e3:69:01:ea:63:f3:3d:a6:88:4e:80:c4: ed:ec:e1:5c:0f:fd:d1:1a:24:93:df:7a:26:5b:5c:3a:98:58: e7:ad:83:a3:db:e9:2d:e8:2e:f0:7f:70:b1:55:11:48:85:3b: c7:28:c0:d8:64:37:64:48:93:11:07:7a:f3:87:fd:9c:58:c9: 28:53:f7:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyX+CTWys79OKTA5fYGy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh MDRjYmYwHhcNMjUxMjIyMDIwMDM3WhcNMjUxMjIzMDIwMDM3WjAzMTEwLwYDVQQD Eyg0OWU0MmI5OTZjZjg3NThlNTJmMzM4MGUwOTY3YzBlM2I1NGMyNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JNpSCIxhzB8ka9S1NE4apAS+rSI O+cZ+8jFFiSwqY0Svd6FwqeFw4YsxERRgVvjNgJwi2qN3Q53M727g9d6dCK06s14 5cJfNF17bFrh1KG8AUztBRlc5bV013olOL/GsyTGovKry1BqUwNkf7yORxp4+AVK U6YjTrBL2eZeOOPvxvF0vyIihaaD2HNZrZ1BGLnUckeyCPNluKkT5T9tIjmo8Gg/ u27Gh72lb3IQXvk15ZX0dMQqvbAC5bjiCGBdtdH6MrDDToCdh4xduuSmx31p+j34 o2UrEJ2lAfOjjT0AUMVY9xZxfYQdX9yoDlOn03ozLodyaob07doy/1UFowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnkK5ls+HWOUvM4DglnwOO1TCbbMB8GA1UdIwQY MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt NWM3ODYzOTI2NGFhLzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6z2bEd4 pPP1HP7xiVqcloul4nWFksvaxVCWq1vEnYiYwf0R3R9CEJ0pEtkQrNSkMP7d+/Mh +WMGQr2hSXi/cYlkttcQA7M4FO0GPFNxWuzer3NmkEObVynCZ/NIRcTJRrf3dy+j oHAuqMLWM/T90dtwOKguFHeWuYlDDbeilwDoKbTzc7tWtZtGbTPzJ1tVTEAcS11j lX5mou5QXyM7kXDQiKJQ15mnXTIaNTZKp23DfoE7uK6POHk342kB6mPzPaaIToDE 7ezhXA/90Rokk996JltcOphY562Do9vpLegu8H9wsVURSIU7xyjA2GQ3ZEiTEQd6 84f9nFjJKFP3pA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:48:31 2025 by rpki-client