This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft File: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft (raw, json) Hash identifier: 5yDX1rwZt3IW+dOFytKis3skWWCQl4XuAyAGqB5wdpI= Subject key identifier: 4C:26:55:F8:76:73:BF:37:51:D1:73:87:B2:E7:D7:FC:44:E1:BB:BD Authority key identifier: 62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3 Certificate issuer: /CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3 Certificate serial: 019B5ABFEEA1E603E3F490F5BDA80C22EAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft Manifest number: 13 Signing time: Fri 26 Dec 2025 13:01:26 +0000 Manifest this update: Fri 26 Dec 2025 13:01:26 +0000 Manifest next update: Sat 27 Dec 2025 13:01:26 +0000 Files and hashes: 1: YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl (hash: tTUMK8k1Kuu+W2EUvj3OWLp9usks9nD/M8feV8JX0n0=) 2: kNwz-wn_5ECRjM46-yQxMUhYtyI.roa (hash: OusCMQlVI/Xz35FKi6gsyq4hpCK4uJL+aBVwWyq7Jvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ee:a1:e6:03:e3:f4:90:f5:bd:a8:0c:22:ea:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6223f564163f64eaf1e1ada6d668cad59d5ab0a3 Validity Not Before: Dec 26 13:01:26 2025 GMT Not After : Dec 27 13:01:26 2025 GMT Subject: CN=4c2655f87673bf3751d17387b2e7d7fc44e1bbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b0:5a:5d:3a:75:e6:25:01:a2:0f:2c:d3:af: ab:77:91:65:ed:e6:6c:6e:11:fc:ce:a2:a3:21:3c: 59:da:7e:69:36:7e:3b:63:ce:be:9e:53:58:a8:48: 7a:01:74:69:46:b8:3d:ee:17:c5:91:bd:3c:25:9a: 66:c2:98:06:19:0a:90:dd:24:cb:92:cd:53:84:33: 57:2f:26:e8:22:d4:56:31:17:c4:aa:bb:2b:c8:a5: 93:34:48:20:46:ea:94:e7:4a:d2:a5:72:5a:d5:a3: 8b:1f:46:e5:c0:8d:51:d4:f9:41:83:72:ad:6d:3b: d5:40:03:32:1d:e6:40:eb:91:9c:ef:f2:8c:78:f7: cf:c8:82:14:bc:3d:78:f1:11:20:3f:64:1d:2f:18: 7a:6d:bf:b1:46:fe:0d:a0:db:0a:b1:73:2e:ae:58: 89:ac:c9:0f:37:a5:10:e3:fb:11:63:8f:fa:ec:c4: ab:17:74:82:03:36:10:3b:10:07:8c:9d:f6:b4:0b: 15:51:81:50:bf:19:4a:38:06:58:72:32:82:54:16: a6:6f:53:6b:98:84:77:b2:bc:0b:9c:a3:62:67:eb: b7:a9:2c:66:b5:71:03:89:09:2b:36:75:a0:61:89: 49:67:51:51:8e:72:0f:d5:83:4d:3c:d7:3c:6f:65: 3d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:26:55:F8:76:73:BF:37:51:D1:73:87:B2:E7:D7:FC:44:E1:BB:BD X509v3 Authority Key Identifier: keyid:62:23:F5:64:16:3F:64:EA:F1:E1:AD:A6:D6:68:CA:D5:9D:5A:B0:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6ebf8-9c35-4dd3-abf5-e97b65794439/1/YiP1ZBY_ZOrx4a2m1mjK1Z1asKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:74:7e:21:59:ec:09:36:3c:54:7c:3e:c3:dd:ac:22:98:9d: 9b:23:c9:c8:29:1a:c1:2f:b7:31:34:9c:5d:82:f5:d3:17:e4: 24:49:93:a1:ea:56:99:6a:44:39:39:3f:9a:ae:2f:07:5d:39: 28:a2:ab:1b:68:af:60:79:46:93:f7:f4:6b:07:d7:ff:b0:50: 6e:30:66:b0:63:7e:04:53:e1:bc:f5:91:69:25:3e:7b:86:04: 8d:bb:ac:21:d9:1d:2a:ba:d8:b8:3a:95:06:65:43:7d:0e:ef: f6:ee:eb:31:ed:1c:cd:46:38:f7:44:57:dd:97:bf:2c:17:4c: b2:fc:69:76:10:9e:fe:cc:66:f3:a2:89:eb:20:31:2d:1f:e5: fe:42:ce:7a:90:be:fa:27:8f:0e:3d:49:1d:40:18:5b:b6:60: d7:5c:7e:23:9d:5e:25:6d:50:b4:c5:c3:1d:ab:a5:bc:1a:df: 18:8b:90:bc:6c:7a:eb:80:2e:13:76:07:9d:40:1d:09:40:da: d6:47:2a:5b:35:0b:aa:9f:bb:69:6d:0f:43:dc:12:fb:3f:ca: 70:8e:02:10:46:02:3b:58:c2:18:d5:28:e7:3c:74:e2:45:56: e1:ba:41:51:71:e7:79:49:8c:86:27:83:b9:54:60:29:53:3c: a9:c9:b1:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+6h5gPj9JD1vagMIurFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjNmNTY0MTYzZjY0ZWFmMWUxYWRhNmQ2NjhjYWQ1OWQ1 YWIwYTMwHhcNMjUxMjI2MTMwMTI2WhcNMjUxMjI3MTMwMTI2WjAzMTEwLwYDVQQD Eyg0YzI2NTVmODc2NzNiZjM3NTFkMTczODdiMmU3ZDdmYzQ0ZTFiYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLBaXTp15iUBog8s06+rd5Fl7eZs bhH8zqKjITxZ2n5pNn47Y86+nlNYqEh6AXRpRrg97hfFkb08JZpmwpgGGQqQ3STL ks1ThDNXLyboItRWMRfEqrsryKWTNEggRuqU50rSpXJa1aOLH0blwI1R1PlBg3Kt bTvVQAMyHeZA65Gc7/KMePfPyIIUvD148REgP2QdLxh6bb+xRv4NoNsKsXMurliJ rMkPN6UQ4/sRY4/67MSrF3SCAzYQOxAHjJ32tAsVUYFQvxlKOAZYcjKCVBamb1Nr mIR3srwLnKNiZ+u3qSxmtXEDiQkrNnWgYYlJZ1FRjnIP1YNNPNc8b2U9xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwmVfh2c783UdFzh7Ln1/xE4bu9MB8GA1UdIwQY MBaAFGIj9WQWP2Tq8eGtptZoytWdWrCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUt ZTk3YjY1Nzk0NDM5LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNmViZjgtOWMzNS00ZGQzLWFiZjUtZTk3YjY1Nzk0NDM5 LzEvWWlQMVpCWV9aT3J4NGEybTFtaksxWjFhc0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnR+IVns CTY8VHw+w92sIpidmyPJyCkawS+3MTScXYL10xfkJEmToepWmWpEOTk/mq4vB105 KKKrG2ivYHlGk/f0awfX/7BQbjBmsGN+BFPhvPWRaSU+e4YEjbusIdkdKrrYuDqV BmVDfQ7v9u7rMe0czUY490RX3Ze/LBdMsvxpdhCe/sxm86KJ6yAxLR/l/kLOepC+ +iePDj1JHUAYW7Zg11x+I51eJW1QtMXDHaulvBrfGIuQvGx664AuE3YHnUAdCUDa 1kcqWzULqp+7aW0PQ9wS+z/KcI4CEEYCO1jCGNUo5zx04kVW4bpBUXHneUmMhieD uVRgKVM8qcmxiw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:25 2025 by rpki-client