This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json) Hash identifier: jO42zQX4uDeWY7lxvk9AwFBsP+pZy7dsIXypHpgrw+k= Subject key identifier: 3A:E6:5E:9E:50:C4:0A:B5:AE:81:2F:D6:97:57:42:24:B2:5A:52:7C Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58 Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458 Certificate serial: 019B5A1AB19F13DFE994774CA33825690458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft Manifest number: 1780 Signing time: Fri 26 Dec 2025 10:00:57 +0000 Manifest this update: Fri 26 Dec 2025 10:00:57 +0000 Manifest next update: Sat 27 Dec 2025 10:00:57 +0000 Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=) 2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: 24sKykinb7FFxQQ+1EMBcn3RVRR9nM/Iq4abXKk1ZGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b1:9f:13:df:e9:94:77:4c:a3:38:25:69:04:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458 Validity Not Before: Dec 26 10:00:57 2025 GMT Not After : Dec 27 10:00:57 2025 GMT Subject: CN=3ae65e9e50c40ab5ae812fd697574224b25a527c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:62:41:33:49:f2:de:9d:03:cf:63:03:0a:fc: 80:ae:10:67:20:61:f6:3e:83:b0:d5:3d:34:18:e6: a6:1a:53:88:79:53:5d:2d:0c:13:fa:7b:59:5c:c6: 84:f9:43:fb:41:f0:1b:1e:0d:c7:3e:79:4d:82:0c: 6c:f5:70:e4:91:dc:0a:c1:0e:20:0f:0c:9c:82:b3: 87:c9:d6:16:10:02:8c:91:c8:7b:b8:53:fc:81:4a: e0:cf:5c:99:1b:4a:b2:e2:82:fb:01:ee:90:b4:d6: b0:0f:e3:07:90:75:fb:24:ae:97:a5:5d:72:14:02: 3e:b3:4f:2a:e7:ee:85:d5:0f:ee:be:92:b8:68:d9: 75:29:a1:ad:42:96:37:77:ce:3a:b3:81:88:f5:16: d2:ce:a1:8a:8f:5f:af:5e:49:72:09:3a:bf:fc:78: 50:d1:8f:83:71:8e:c9:93:ef:fe:5f:d0:de:c4:55: d4:24:14:b5:9a:67:39:44:49:72:d8:e7:41:54:b4: 43:52:20:2e:fc:60:5f:f7:77:03:50:13:25:36:f1: 09:f6:45:24:87:ab:91:c2:a7:f6:8a:1e:e9:5f:7d: 2f:7d:b5:58:e9:f7:ee:34:18:0a:9b:c3:8e:c4:3b: 95:ce:86:ad:7b:19:b2:4d:cf:e1:76:cf:62:bc:c8: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E6:5E:9E:50:C4:0A:B5:AE:81:2F:D6:97:57:42:24:B2:5A:52:7C X509v3 Authority Key Identifier: keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d9:50:e3:cd:b5:66:7d:78:21:d6:bd:69:0e:db:4f:84:4b: c0:76:f2:b6:8f:98:c8:11:6c:77:fc:9b:3f:ad:b5:35:9e:84: 73:c3:1c:c8:f5:af:13:01:b6:aa:cd:a9:a4:a3:7a:7c:80:5f: ab:02:5b:eb:6a:f5:3d:09:73:5e:db:c6:bb:2c:b0:8b:e6:64: f4:97:f2:0c:3a:49:f8:e1:cd:b9:c9:f4:9f:e5:f9:26:8a:a3: 3b:b6:37:df:05:74:ed:77:f8:e8:39:20:be:c7:2e:2f:ba:a9: 4d:13:46:14:f3:27:71:96:f2:34:d2:66:6a:36:56:ea:e9:04: 88:69:75:e6:1f:7d:ae:4e:3e:70:98:1e:44:36:12:ef:e4:b6: ac:10:04:90:ff:71:2c:b4:d7:33:be:cf:1e:bf:ff:1f:04:f6: 6c:ec:24:7b:48:20:b9:0b:8b:69:91:fe:40:23:60:8b:66:c9: 6b:38:cf:f1:9c:79:6b:e6:0b:45:41:d2:1c:00:3c:83:96:8d: fb:f6:64:7b:19:e4:4e:90:53:34:26:3a:8a:85:a6:2d:e8:ef: 36:41:1d:54:a8:df:ab:81:68:99:30:fd:c3:c2:cb:92:ab:ec: b9:4f:3f:b2:89:dc:60:1f:8d:e1:40:0f:27:c2:29:88:44:55: 46:aa:5b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrGfE9/plHdMozglaQRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OGM1M2I0NzdjM2JmYTcwYjYxZjQyN2I0Nzk5NGMyZDE3 ODM0NTgwHhcNMjUxMjI2MTAwMDU3WhcNMjUxMjI3MTAwMDU3WjAzMTEwLwYDVQQD EygzYWU2NWU5ZTUwYzQwYWI1YWU4MTJmZDY5NzU3NDIyNGIyNWE1MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWJBM0ny3p0Dz2MDCvyArhBnIGH2 PoOw1T00GOamGlOIeVNdLQwT+ntZXMaE+UP7QfAbHg3HPnlNggxs9XDkkdwKwQ4g DwycgrOHydYWEAKMkch7uFP8gUrgz1yZG0qy4oL7Ae6QtNawD+MHkHX7JK6XpV1y FAI+s08q5+6F1Q/uvpK4aNl1KaGtQpY3d846s4GI9RbSzqGKj1+vXklyCTq//HhQ 0Y+DcY7Jk+/+X9DexFXUJBS1mmc5REly2OdBVLRDUiAu/GBf93cDUBMlNvEJ9kUk h6uRwqf2ih7pX30vfbVY6ffuNBgKm8OOxDuVzoatexmyTc/hds9ivMg+tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrmXp5QxAq1roEv1pdXQiSyWlJ8MB8GA1UdIwQY MBaAFMiMU7R3w7+nC2H0J7R5lMLReDRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYt YjA2NDY2MGY3MDRmLzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYtYjA2NDY2MGY3MDRm LzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdlQ4821 Zn14Ida9aQ7bT4RLwHbyto+YyBFsd/ybP621NZ6Ec8McyPWvEwG2qs2ppKN6fIBf qwJb62r1PQlzXtvGuyywi+Zk9JfyDDpJ+OHNucn0n+X5JoqjO7Y33wV07Xf46Dkg vscuL7qpTRNGFPMncZbyNNJmajZW6ukEiGl15h99rk4+cJgeRDYS7+S2rBAEkP9x LLTXM77PHr//HwT2bOwke0gguQuLaZH+QCNgi2bJazjP8Zx5a+YLRUHSHAA8g5aN +/ZkexnkTpBTNCY6ioWmLejvNkEdVKjfq4FomTD9w8LLkqvsuU8/soncYB+N4UAP J8IpiERVRqpbhw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client