This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft File: YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json) Hash identifier: rlu4D+5fjcK+qnVNgGStBq6FVBdUR4VWhhnXXilVI38= Subject key identifier: 52:75:D8:21:95:88:37:DB:B3:99:DE:F8:8C:29:87:6F:66:95:49:92 Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF Certificate issuer: /CN=631077ccc482b91b4599f52c94a88900139249ff Certificate serial: 019B5A520DBCA3A1D2F5253B3C4CDF243165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft Manifest number: 0210 Signing time: Fri 26 Dec 2025 11:01:25 +0000 Manifest this update: Fri 26 Dec 2025 11:01:25 +0000 Manifest next update: Sat 27 Dec 2025 11:01:25 +0000 Files and hashes: 1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: CGTAYGVhm4wgDd4cOIjAxR9kUX8GRMWnzqWQWEfIdZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0d:bc:a3:a1:d2:f5:25:3b:3c:4c:df:24:31:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff Validity Not Before: Dec 26 11:01:25 2025 GMT Not After : Dec 27 11:01:25 2025 GMT Subject: CN=5275d821958837dbb399def88c29876f66954992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:e9:e7:90:73:41:98:f9:6f:c1:d9:68:44: d2:e2:0c:fb:b3:27:a1:46:c0:1c:38:95:ab:84:53: 89:66:e6:da:67:61:0c:c3:6a:b1:80:7d:65:77:37: 5b:d3:d2:54:1a:fa:48:cb:02:45:dd:be:d7:02:f8: 44:53:ce:9b:34:41:79:b7:58:c2:27:91:2b:05:1c: 61:8f:3f:b4:f5:71:d6:f0:8c:0a:a0:e5:cc:e4:af: 21:bb:ef:d6:9a:23:e5:38:d6:04:b4:7c:ae:d8:86: 9e:fe:c2:d2:fd:91:9a:79:96:74:3c:2b:19:d2:e1: c9:a0:a9:e7:d7:18:e1:7d:dc:a6:e4:48:d0:d9:aa: 25:3f:5b:f7:5a:b3:1d:dd:63:2d:9f:89:89:78:ff: e8:ea:36:64:ce:3b:a9:6b:30:7e:74:62:17:a8:17: 36:9d:6d:6f:8f:cc:cb:6d:b5:15:bd:c1:c7:03:2b: da:84:89:fa:d7:22:1f:04:52:31:d6:32:7f:3a:10: c3:4e:75:20:5b:cf:e6:c5:f2:b0:ea:bb:37:4c:d0: 49:26:99:26:de:41:13:fc:97:72:58:0a:9b:24:45: b1:1d:06:84:3d:24:60:a5:a9:45:cf:1e:2d:7d:08: 18:3a:7e:d8:1e:f8:c9:79:5f:83:7b:a2:e6:c8:14: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:D8:21:95:88:37:DB:B3:99:DE:F8:8C:29:87:6F:66:95:49:92 X509v3 Authority Key Identifier: keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2b:7b:e8:3d:2c:ab:a2:44:34:bb:92:81:46:b5:09:5b:bc: 75:36:58:27:87:1c:aa:5f:ab:f5:00:36:dd:a8:0f:fa:91:03: 46:92:2b:a7:d7:17:dc:21:be:54:a4:2f:f0:f9:00:20:38:1c: 95:6c:4e:f4:3f:c4:ea:63:b9:29:df:19:13:33:c8:92:f4:1b: 8e:54:41:de:2a:12:07:7d:a5:33:38:f8:b3:f8:32:7b:22:c1: 46:95:a3:61:0f:ea:79:a2:be:af:9e:f4:35:9d:44:4c:66:6b: ce:4b:f5:78:34:ed:e8:03:f6:af:dc:fb:40:96:59:49:6c:3f: 8d:fc:73:10:37:6c:e6:04:d6:77:31:80:8b:2f:eb:88:18:35: 4b:b0:f0:f2:fd:7c:83:e8:6f:3c:6a:a4:11:da:f0:6d:58:86: a9:59:5a:90:3d:0e:f1:9d:f6:2e:5e:56:b2:c0:c3:41:cc:c3: 43:5a:c1:85:82:da:97:56:9d:d4:fc:22:5d:2f:d5:2a:1d:d9: 31:1c:f3:87:35:44:6d:3f:6f:b3:da:c0:59:2c:b5:99:69:2d: 4c:f8:92:3b:b5:a6:4f:d7:72:b8:55:af:97:f2:a7:38:6d:f4: 6a:ef:32:c9:11:1d:14:64:22:77:77:ef:7d:ba:da:19:91:87: ee:bd:7c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUg28o6HS9SU7PEzfJDFlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTA3N2NjYzQ4MmI5MWI0NTk5ZjUyYzk0YTg4OTAwMTM5 MjQ5ZmYwHhcNMjUxMjI2MTEwMTI1WhcNMjUxMjI3MTEwMTI1WjAzMTEwLwYDVQQD Eyg1Mjc1ZDgyMTk1ODgzN2RiYjM5OWRlZjg4YzI5ODc2ZjY2OTU0OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzzp55BzQZj5b8HZaETS4gz7syeh RsAcOJWrhFOJZubaZ2EMw2qxgH1ldzdb09JUGvpIywJF3b7XAvhEU86bNEF5t1jC J5ErBRxhjz+09XHW8IwKoOXM5K8hu+/WmiPlONYEtHyu2Iae/sLS/ZGaeZZ0PCsZ 0uHJoKnn1xjhfdym5EjQ2aolP1v3WrMd3WMtn4mJeP/o6jZkzjupazB+dGIXqBc2 nW1vj8zLbbUVvcHHAyvahIn61yIfBFIx1jJ/OhDDTnUgW8/mxfKw6rs3TNBJJpkm 3kET/JdyWAqbJEWxHQaEPSRgpalFzx4tfQgYOn7YHvjJeV+De6LmyBS7IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ12CGViDfbs5ne+Iwph29mlUmSMB8GA1UdIwQY MBaAFGMQd8zEgrkbRZn1LJSoiQATkkn/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhCM3pNU0N1UnRGbWZVc2xLaUpBQk9TU2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84MTQyNTMtZjIxZi00YmM4LWI3Njgt ODA0Yjc2MGRkODc5LzEvWXhCM3pNU0N1UnRGbWZVc2xLaUpBQk9TU2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84MTQyNTMtZjIxZi00YmM4LWI3NjgtODA0Yjc2MGRkODc5 LzEvWXhCM3pNU0N1UnRGbWZVc2xLaUpBQk9TU2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICt76D0s q6JENLuSgUa1CVu8dTZYJ4ccql+r9QA23agP+pEDRpIrp9cX3CG+VKQv8PkAIDgc lWxO9D/E6mO5Kd8ZEzPIkvQbjlRB3ioSB32lMzj4s/gyeyLBRpWjYQ/qeaK+r570 NZ1ETGZrzkv1eDTt6AP2r9z7QJZZSWw/jfxzEDds5gTWdzGAiy/riBg1S7Dw8v18 g+hvPGqkEdrwbViGqVlakD0O8Z32Ll5WssDDQczDQ1rBhYLal1ad1PwiXS/VKh3Z MRzzhzVEbT9vs9rAWSy1mWktTPiSO7WmT9dyuFWvl/KnOG30au8yyREdFGQid3fv fbraGZGH7r18Mw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:19 2025 by rpki-client