This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json) Hash identifier: ajoCYsdVbXdLPDVYevtSUCVuv4PDUxzFFcnyoAXb0ys= Subject key identifier: 46:63:D5:4F:A3:3F:B9:9A:D3:59:F3:5F:BD:A0:A4:44:74:EA:8F:4C Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f Certificate serial: 019B5A1AD2A8C308244A1BCC4E53FA473B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft Manifest number: 0701 Signing time: Fri 26 Dec 2025 10:01:05 +0000 Manifest this update: Fri 26 Dec 2025 10:01:05 +0000 Manifest next update: Sat 27 Dec 2025 10:01:05 +0000 Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: F2q3HhUaeKOTJV6BsgvEkMir53yecXSoss7TmjreUVg=) 2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d2:a8:c3:08:24:4a:1b:cc:4e:53:fa:47:3b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f Validity Not Before: Dec 26 10:01:05 2025 GMT Not After : Dec 27 10:01:05 2025 GMT Subject: CN=4663d54fa33fb99ad359f35fbda0a44474ea8f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:85:f7:c9:e3:57:7d:33:ba:51:38:9b:f5: b9:d1:ab:09:7a:10:a3:23:a8:17:59:27:d6:6f:19: ff:5b:ef:48:34:b7:ca:e0:32:0c:3a:e6:44:e1:67: f7:0d:95:bf:1e:5d:ba:39:9e:07:40:fd:19:45:31: e8:04:ec:73:65:00:1f:5e:68:26:14:6a:b3:9d:1d: 33:6b:c2:30:db:1d:b7:ac:5d:c6:0c:28:21:9d:af: 1d:3b:6e:aa:ca:45:f3:ee:83:4c:1e:a8:d9:c9:bf: 65:ab:59:88:a1:58:35:5e:11:9f:cc:f4:88:1e:d9: b8:ca:15:07:74:ed:95:16:80:6a:7d:59:be:1f:79: 47:61:c9:db:bc:70:2f:ab:74:6a:42:65:f3:c3:2d: 99:02:f6:1b:dd:38:c3:df:95:c2:39:8d:59:cf:0c: 92:3f:24:f0:72:0c:4c:ab:13:39:e0:13:57:18:da: 63:5a:b7:87:e9:27:f5:3b:47:0c:db:97:23:7b:7f: 18:2f:d3:d1:46:f8:b8:23:aa:72:7d:78:3c:07:49: 82:f0:a6:03:a2:83:51:6a:7b:db:88:d9:db:33:1c: 84:31:a3:7c:18:8f:0e:ff:a5:16:ea:83:bd:b2:12: 43:c0:05:01:60:e3:68:88:8d:05:52:ea:8e:8e:a5: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:63:D5:4F:A3:3F:B9:9A:D3:59:F3:5F:BD:A0:A4:44:74:EA:8F:4C X509v3 Authority Key Identifier: keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c3:b1:46:b9:c5:1d:1e:ef:d6:85:ca:e9:55:b5:df:e2:22: 56:b8:9d:4b:c4:39:05:6f:5b:62:ce:20:82:61:de:e9:da:92: a9:ca:c4:52:7f:98:4e:fa:d2:71:ef:a1:92:07:d3:ff:db:87: 71:88:60:da:8d:d9:7d:04:06:de:e4:72:40:8f:19:64:ee:db: da:c1:0d:69:6c:16:f1:27:5e:a4:05:2a:66:89:27:c7:da:a1: 25:29:30:84:30:35:18:96:31:ec:1a:12:47:43:be:42:4d:9b: 98:37:1a:f8:9f:b4:83:fd:57:e6:47:54:86:6f:d8:c5:58:b7: 73:96:e4:97:ea:9d:cd:02:27:26:7d:09:db:81:20:a8:53:a8: 97:bc:0f:61:31:34:d8:23:17:48:c7:e3:64:72:9c:ec:8f:81: 75:89:3b:27:0f:eb:1e:59:88:52:83:17:4d:1b:58:05:7f:a1: 3d:f4:78:14:7a:ed:9e:4e:8e:08:53:59:41:20:6f:fd:b8:51: a7:7d:18:2b:52:06:ca:25:88:c4:a1:b8:d1:8d:da:0d:ad:71: c1:52:fa:12:0a:25:0c:45:f6:58:1e:af:5f:7b:8a:a9:98:a4: af:d2:95:e1:e8:76:5f:6a:56:78:e4:69:50:56:79:13:18:0d: a4:a5:65:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtKowwgkShvMTlP6RzuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWE3ZDYzMTNhYmRjMjdjOTJkMGJhNTQ5ZTg2ODNmOWE4 ZjE1MGYwHhcNMjUxMjI2MTAwMTA1WhcNMjUxMjI3MTAwMTA1WjAzMTEwLwYDVQQD Eyg0NjYzZDU0ZmEzM2ZiOTlhZDM1OWYzNWZiZGEwYTQ0NDc0ZWE4ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbiF98njV30zulE4m/W50asJehCj I6gXWSfWbxn/W+9INLfK4DIMOuZE4Wf3DZW/Hl26OZ4HQP0ZRTHoBOxzZQAfXmgm FGqznR0za8Iw2x23rF3GDCghna8dO26qykXz7oNMHqjZyb9lq1mIoVg1XhGfzPSI Htm4yhUHdO2VFoBqfVm+H3lHYcnbvHAvq3RqQmXzwy2ZAvYb3TjD35XCOY1ZzwyS PyTwcgxMqxM54BNXGNpjWreH6Sf1O0cM25cje38YL9PRRvi4I6pyfXg8B0mC8KYD ooNRanvbiNnbMxyEMaN8GI8O/6UW6oO9shJDwAUBYONoiI0FUuqOjqUniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZj1U+jP7ma01nzX72gpER06o9MMB8GA1UdIwQY MBaAFGGqfWMTq9wnyS0LpUnoaD+ajxUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEt ZGNhOGRhODc2ZmU2LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEtZGNhOGRhODc2ZmU2 LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMOxRrnF HR7v1oXK6VW13+IiVridS8Q5BW9bYs4ggmHe6dqSqcrEUn+YTvrSce+hkgfT/9uH cYhg2o3ZfQQG3uRyQI8ZZO7b2sENaWwW8SdepAUqZoknx9qhJSkwhDA1GJYx7BoS R0O+Qk2bmDca+J+0g/1X5kdUhm/YxVi3c5bkl+qdzQInJn0J24EgqFOol7wPYTE0 2CMXSMfjZHKc7I+BdYk7Jw/rHlmIUoMXTRtYBX+hPfR4FHrtnk6OCFNZQSBv/bhR p30YK1IGyiWIxKG40Y3aDa1xwVL6EgolDEX2WB6vX3uKqZikr9KV4eh2X2pWeORp UFZ5ExgNpKVl9g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:16 2025 by rpki-client