This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json) Hash identifier: Wc9AnModiqgdocNrTEJLqPCv7iVyra9uodc86/TOyio= Subject key identifier: B8:84:D7:89:3E:CD:41:D6:84:72:02:D0:67:15:FE:E6:30:E4:DD:CD Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72 Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172 Certificate serial: 019B5AF6C1FACCCCB4F6B410E7611906DFF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft Manifest number: 04CE Signing time: Fri 26 Dec 2025 14:01:19 +0000 Manifest this update: Fri 26 Dec 2025 14:01:19 +0000 Manifest next update: Sat 27 Dec 2025 14:01:19 +0000 Files and hashes: 1: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: VMQu/UzyZIO6yY13cpGmvo3iOZzzCJkRHeE2CMcsw0E=) 2: z4GL3R9iwn241BwmecTavitjvmk.roa (hash: gozzqy0wMPz097Vp/T+QSgyQzissUGlOoz2lP5A4OOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:c1:fa:cc:cc:b4:f6:b4:10:e7:61:19:06:df:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172 Validity Not Before: Dec 26 14:01:19 2025 GMT Not After : Dec 27 14:01:19 2025 GMT Subject: CN=b884d7893ecd41d6847202d06715fee630e4ddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:bb:82:05:e7:b3:fd:5f:98:62:13:27:a2: 9e:06:bc:0a:23:58:19:be:5d:46:82:31:d1:ed:03: f3:04:81:04:e4:53:d0:5f:42:2a:80:a9:d5:92:5e: b2:98:9e:1f:7b:42:84:e3:d2:4b:5d:ef:96:49:77: 51:ce:5e:4a:ae:09:09:53:c6:84:85:e8:07:a0:ac: ad:66:ea:78:29:0f:c8:79:a5:ee:92:de:b2:50:54: c4:1f:ca:a1:bd:51:9d:f3:38:1f:e7:a5:bb:60:c7: 42:50:a0:27:35:61:f8:df:90:de:eb:0f:2f:fa:c9: a6:f9:5f:e5:35:63:87:b1:49:1f:5a:69:ff:06:73: 88:ef:73:30:c1:6a:9e:28:2e:4e:de:15:d6:45:3c: 4c:15:86:4f:70:3a:a1:1b:c5:e1:69:8c:f0:59:21: 0d:3f:78:a4:94:74:df:d5:d4:04:8e:6a:02:ab:51: ab:67:8d:d5:a5:ab:37:aa:3f:09:f2:0a:2d:37:8c: cb:3b:33:eb:10:cf:21:9f:35:a9:fb:c1:81:c6:60: d1:6f:34:81:b6:ce:33:76:a3:5d:6b:82:98:84:cf: 45:5d:f6:8f:c0:65:0d:f5:ec:22:ba:99:e6:b1:b0: a9:ae:a4:8f:08:ce:71:0d:21:c2:92:59:f2:66:63: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:84:D7:89:3E:CD:41:D6:84:72:02:D0:67:15:FE:E6:30:E4:DD:CD X509v3 Authority Key Identifier: keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:35:d4:7c:60:12:91:d3:3a:be:11:4f:5d:a8:2e:72:9f:ec: 27:b3:c1:df:78:64:f7:1a:9b:fe:05:7c:d9:07:27:01:0a:52: db:d7:a4:2f:e7:01:09:a9:d2:3e:ce:62:4c:d1:99:ec:8c:98: 1d:b2:3b:f2:ab:60:a6:9f:4e:29:89:2f:36:55:8c:f0:0b:01: 8e:d4:d6:4a:fb:5f:86:ee:7c:a9:d7:e6:ba:43:9c:be:cd:16: 67:73:0c:1e:e4:90:45:16:e0:b3:de:65:22:18:20:4a:2d:b5: 48:78:95:c5:4c:b4:5e:40:1e:f1:a1:dd:47:bd:99:bc:85:16: be:d6:a5:7b:93:e5:18:f4:81:72:74:11:5a:31:e7:11:0e:35: 98:29:34:2f:99:26:89:43:1a:89:ba:19:6c:3e:85:f4:83:57: 52:dd:71:83:f0:67:ac:09:9e:7b:ca:97:e6:38:6e:8f:aa:96: 17:9f:43:0e:fe:81:05:3a:eb:99:f4:34:79:42:e3:a5:9f:38: d3:f8:cd:cb:6e:1f:a4:ba:25:a8:02:75:74:d7:0b:b9:b1:36: 46:a9:fb:bf:88:2a:85:e1:ae:d5:93:2a:fe:5c:e8:43:e6:2a: 9d:31:7a:bf:8f:cc:a2:a5:4e:5b:ec:4e:69:dd:c0:62:f1:45: ab:33:3f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9sH6zMy09rQQ52EZBt/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MWQ3ZTQ0OWNmZWMzMTIwYTk4NTExNjNjNzc5YTYwMjY5 ODYxNzIwHhcNMjUxMjI2MTQwMTE5WhcNMjUxMjI3MTQwMTE5WjAzMTEwLwYDVQQD EyhiODg0ZDc4OTNlY2Q0MWQ2ODQ3MjAyZDA2NzE1ZmVlNjMwZTRkZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0a7ggXns/1fmGITJ6KeBrwKI1gZ vl1GgjHR7QPzBIEE5FPQX0IqgKnVkl6ymJ4fe0KE49JLXe+WSXdRzl5KrgkJU8aE hegHoKytZup4KQ/IeaXukt6yUFTEH8qhvVGd8zgf56W7YMdCUKAnNWH435De6w8v +smm+V/lNWOHsUkfWmn/BnOI73MwwWqeKC5O3hXWRTxMFYZPcDqhG8XhaYzwWSEN P3iklHTf1dQEjmoCq1GrZ43Vpas3qj8J8gotN4zLOzPrEM8hnzWp+8GBxmDRbzSB ts4zdqNda4KYhM9FXfaPwGUN9ewiupnmsbCprqSPCM5xDSHCklnyZmNUYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiE14k+zUHWhHIC0GcV/uYw5N3NMB8GA1UdIwQY MBaAFMkdfkSc/sMSCphRFjx3mmAmmGFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZGU5NTQtOTdlOC00YzEzLTgzNGIt Y2RhNmJiNDA2OTc0LzEveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZGU5NTQtOTdlOC00YzEzLTgzNGItY2RhNmJiNDA2OTc0 LzEveVIxLVJKei13eElLbUZFV1BIZWFZQ2FZWVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDXUfGAS kdM6vhFPXagucp/sJ7PB33hk9xqb/gV82QcnAQpS29ekL+cBCanSPs5iTNGZ7IyY HbI78qtgpp9OKYkvNlWM8AsBjtTWSvtfhu58qdfmukOcvs0WZ3MMHuSQRRbgs95l IhggSi21SHiVxUy0XkAe8aHdR72ZvIUWvtale5PlGPSBcnQRWjHnEQ41mCk0L5km iUMaiboZbD6F9INXUt1xg/BnrAmee8qX5jhuj6qWF59DDv6BBTrrmfQ0eULjpZ84 0/jNy24fpLolqAJ1dNcLubE2Rqn7v4gqheGu1ZMq/lzoQ+YqnTF6v4/MoqVOW+xO ad3AYvFFqzM/lQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:19 2025 by rpki-client