This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft File: yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json) Hash identifier: MRgqCrMxpxlfeP4/u7HyMl/5hYXZ75tr7ac1Zjjd9Vk= Subject key identifier: 51:9E:CE:DE:6C:68:AE:E6:3C:9F:8F:BF:F5:22:CA:F3:C4:21:80:EF Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11 Certificate issuer: /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11 Certificate serial: 019B5975CAFAB7F637E48BDB7D1F9DB3170F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft Manifest number: 13EF Signing time: Fri 26 Dec 2025 07:00:50 +0000 Manifest this update: Fri 26 Dec 2025 07:00:50 +0000 Manifest next update: Sat 27 Dec 2025 07:00:50 +0000 Files and hashes: 1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: 8/6wPYXKhT7txh+jgn80RG0DiQZq6vRnHRMjhI6TRJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ca:fa:b7:f6:37:e4:8b:db:7d:1f:9d:b3:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11 Validity Not Before: Dec 26 07:00:50 2025 GMT Not After : Dec 27 07:00:50 2025 GMT Subject: CN=519ecede6c68aee63c9f8fbff522caf3c42180ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:36:7b:dc:7f:6e:83:c4:39:a5:0a:c7:4b: 08:3b:f2:e2:40:d0:85:7a:80:f5:95:26:98:3a:34: dc:2d:eb:f8:af:bd:09:a3:62:da:bf:60:4f:27:1d: 5e:22:dc:2d:d2:c4:3c:26:9a:ed:3c:e6:7e:12:34: 5f:b1:c8:a5:01:62:37:4c:97:c0:67:bf:91:b6:14: 1e:57:e8:80:96:21:88:e1:24:3a:b5:cf:d7:57:04: 76:14:6a:95:8c:3d:60:d5:1a:7e:a1:19:bd:3f:15: 86:39:34:f7:3d:f0:a3:79:67:fc:56:d3:4a:cf:a0: a3:32:96:de:a5:45:13:88:7f:7f:58:fa:a2:9c:41: 9d:86:6d:18:2d:e0:02:67:c0:2e:91:2e:f4:ea:63: 9b:2b:f4:3b:25:4f:f3:f8:b5:74:c0:f7:5e:80:21: 3c:30:e1:79:a7:ad:5c:d3:0f:a7:1c:2c:e9:0e:6c: 6d:ee:cd:53:76:01:b7:35:c2:b3:b2:fe:2d:c1:8c: 29:49:c1:ed:63:98:ba:03:b6:36:fc:0a:eb:a1:a8: f4:7d:7c:72:3a:60:e4:c8:48:55:c8:17:a3:19:50: 80:f3:30:0e:3b:4c:93:4b:c5:a8:25:34:ce:36:24: fa:46:15:8c:89:1b:88:f7:ae:d9:18:06:a8:76:f2: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9E:CE:DE:6C:68:AE:E6:3C:9F:8F:BF:F5:22:CA:F3:C4:21:80:EF X509v3 Authority Key Identifier: keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:12:21:63:05:9a:08:c2:81:7f:d3:7e:0a:94:b6:01:b7:e0: b4:01:89:77:bf:32:1e:7a:d5:f1:ba:66:3e:75:6b:38:fa:e5: cb:0f:90:1c:ad:50:24:c3:5e:d1:6b:2e:b6:23:6d:92:ef:a8: a4:7c:fb:9d:92:b7:76:65:e9:5a:84:00:e2:1c:dd:4f:b5:b6: 79:a3:c3:e8:81:e1:f3:54:15:e8:49:a0:78:35:0c:07:6a:b7: aa:c6:a7:f4:63:e9:65:b4:5c:70:39:a6:d3:d0:84:ad:9b:68: 65:85:88:95:f9:46:c6:ba:b2:9a:22:7b:41:da:2b:32:2d:e2: ba:8e:0a:4b:23:40:0c:35:4a:38:83:9a:cb:ca:ca:de:c3:db: dd:c9:b1:23:ff:64:ba:a5:d0:ff:ba:7d:da:c2:d5:16:54:c2: 54:97:34:3f:6c:c8:15:ba:5e:a2:bd:30:cd:41:51:45:24:32: 92:aa:3e:63:a4:9e:fc:c1:3d:0a:1c:4e:79:1f:aa:3a:bd:ca: c0:69:cc:55:e6:c4:8c:6a:df:39:f4:53:79:e9:57:1e:73:a2: 44:e2:b7:3b:28:79:f8:c9:3c:35:f8:f6:a9:5c:e7:05:72:0c: e6:5b:27:06:9f:21:7e:62:c2:66:ec:2e:80:ca:83:c5:bd:a4: 8f:d4:62:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcr6t/Y35IvbfR+dsxcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjU2Njg0M2UwM2Q2MzlhNDYwYjFiZDg2YmY2OWMxYzM5 ZjhiMTEwHhcNMjUxMjI2MDcwMDUwWhcNMjUxMjI3MDcwMDUwWjAzMTEwLwYDVQQD Eyg1MTllY2VkZTZjNjhhZWU2M2M5ZjhmYmZmNTIyY2FmM2M0MjE4MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3js2e9x/boPEOaUKx0sIO/LiQNCF eoD1lSaYOjTcLev4r70Jo2Lav2BPJx1eItwt0sQ8JprtPOZ+EjRfscilAWI3TJfA Z7+RthQeV+iAliGI4SQ6tc/XVwR2FGqVjD1g1Rp+oRm9PxWGOTT3PfCjeWf8VtNK z6CjMpbepUUTiH9/WPqinEGdhm0YLeACZ8AukS706mObK/Q7JU/z+LV0wPdegCE8 MOF5p61c0w+nHCzpDmxt7s1TdgG3NcKzsv4twYwpScHtY5i6A7Y2/Arroaj0fXxy OmDkyEhVyBejGVCA8zAOO0yTS8WoJTTONiT6RhWMiRuI967ZGAaodvLRYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGezt5saK7mPJ+Pv/UiyvPEIYDvMB8GA1UdIwQY MBaAFMslZoQ+A9Y5pGCxvYa/acHDn4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYt MDZiODEyODk4OGY4LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9lN2EzMmMtNzNmMS00NjdkLTk4ZGYtMDZiODEyODk4OGY4 LzEveXlWbWhENEQxam1rWUxHOWhyOXB3Y09maXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhIhYwWa CMKBf9N+CpS2AbfgtAGJd78yHnrV8bpmPnVrOPrlyw+QHK1QJMNe0WsutiNtku+o pHz7nZK3dmXpWoQA4hzdT7W2eaPD6IHh81QV6EmgeDUMB2q3qsan9GPpZbRccDmm 09CErZtoZYWIlflGxrqymiJ7QdorMi3iuo4KSyNADDVKOIOay8rK3sPb3cmxI/9k uqXQ/7p92sLVFlTCVJc0P2zIFbpeor0wzUFRRSQykqo+Y6Se/ME9ChxOeR+qOr3K wGnMVebEjGrfOfRTeelXHnOiROK3Oyh5+Mk8Nfj2qVznBXIM5lsnBp8hfmLCZuwu gMqDxb2kj9RiDw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:37 2025 by rpki-client