This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json) Hash identifier: ylN0Ty/+AOm1w/+JWy9nvZS99ZoOlB6T2pYrDErHlQw= Subject key identifier: F1:3A:E5:96:9E:F9:0D:C6:36:71:CC:95:32:A5:A9:95:AB:AE:01:5B Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Certificate serial: 019B484B5B208F1F7D537AA71C491573DB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft Manifest number: 0534 Signing time: Mon 22 Dec 2025 23:00:56 +0000 Manifest this update: Mon 22 Dec 2025 23:00:56 +0000 Manifest next update: Tue 23 Dec 2025 23:00:56 +0000 Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=) 2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: pvlFb/wevYjtY3DC4FL+PsBwTmAdQaPCe5/6XolpUFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:5b:20:8f:1f:7d:53:7a:a7:1c:49:15:73:db:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Validity Not Before: Dec 22 23:00:56 2025 GMT Not After : Dec 23 23:00:56 2025 GMT Subject: CN=f13ae5969ef90dc63671cc9532a5a995abae015b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:cf:7b:6c:a2:b3:06:01:51:ac:14:2e:11: 98:f6:05:22:3f:85:23:3d:32:31:47:1e:7d:c3:e5: 3b:d4:a3:a3:84:6e:c1:6c:5e:22:65:51:7f:a4:b3: 6f:20:47:51:99:6b:70:d8:a8:c3:15:9a:18:e0:d5: 5e:ce:2a:33:23:22:96:f5:2f:4d:c2:ce:88:24:4c: fa:07:62:db:d4:21:98:b0:a1:fd:22:e2:13:70:02: a9:d0:f7:02:25:87:28:ae:58:23:6d:3c:8c:c9:c2: ae:59:1c:14:02:cb:bf:5d:e6:be:3d:7d:48:ca:42: 84:ae:3f:9f:ec:25:53:0e:d4:4c:34:d8:09:0a:68: d2:04:9c:a2:f9:9d:72:37:15:34:25:a9:96:22:d5: 02:f3:d5:11:e9:36:72:e3:1f:18:13:f0:38:b0:2e: e4:b0:49:d9:9a:34:85:38:28:ed:cb:ca:b2:f0:90: d7:6a:76:f9:eb:5f:51:4d:0d:07:c6:81:b8:45:e9: 9c:29:4b:41:67:64:88:b3:30:4e:92:ca:a7:97:26: 66:b5:f8:14:92:38:e2:2b:60:30:3e:68:7f:84:1d: b9:97:0f:64:73:bb:98:b8:8c:d0:fe:f7:d6:67:65: 27:e6:9f:cc:22:a5:16:35:ca:26:14:c1:91:18:48: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3A:E5:96:9E:F9:0D:C6:36:71:CC:95:32:A5:A9:95:AB:AE:01:5B X509v3 Authority Key Identifier: keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f7:b6:18:93:58:58:a5:9b:ce:2d:91:52:ff:f4:3d:80:51: 11:20:4c:92:de:2f:e6:cc:10:6b:72:6f:ab:12:8f:1b:6f:c5: 41:98:22:7a:55:81:e4:2a:b9:a5:57:50:b0:9a:23:d1:0a:fc: 60:64:73:63:7a:e5:46:10:b0:ca:0f:de:1b:60:39:f6:27:f4: 68:d8:e9:a0:d5:e0:ad:92:02:e3:54:9c:b2:fc:4a:c8:88:cf: e6:0e:75:15:ab:77:bf:c8:74:9d:5d:a9:b5:ef:c0:83:55:69: 0d:ad:78:f9:be:3d:64:5a:9d:2c:1b:8f:3e:82:13:be:20:78: 9a:70:35:1d:67:b8:55:18:46:1b:3d:d2:1d:32:61:e0:8b:20: 4b:1e:28:ac:07:cf:e0:e7:04:9a:84:e1:e2:8e:6c:65:a8:65: 12:52:c9:32:fe:10:5d:63:77:1f:32:68:e3:54:23:d1:ec:1b: 09:25:d9:4d:f0:86:c6:c7:37:19:5a:e7:ca:95:2d:37:e9:8c: 67:05:f0:d5:64:81:35:61:63:f7:d5:fb:e0:bb:9b:13:96:88: 07:1f:37:e6:f9:39:e0:05:d4:85:8c:4c:43:84:ea:e1:c3:99: ca:29:4f:5f:0b:ff:32:71:bb:05:01:32:e6:07:3b:66:27:e9: 11:97:62:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS1sgjx99U3qnHEkVc9uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0 YWY4YzcwHhcNMjUxMjIyMjMwMDU2WhcNMjUxMjIzMjMwMDU2WjAzMTEwLwYDVQQD EyhmMTNhZTU5NjllZjkwZGM2MzY3MWNjOTUzMmE1YTk5NWFiYWUwMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt/Pe2yiswYBUawULhGY9gUiP4Uj PTIxRx59w+U71KOjhG7BbF4iZVF/pLNvIEdRmWtw2KjDFZoY4NVeziozIyKW9S9N ws6IJEz6B2Lb1CGYsKH9IuITcAKp0PcCJYcorlgjbTyMycKuWRwUAsu/Xea+PX1I ykKErj+f7CVTDtRMNNgJCmjSBJyi+Z1yNxU0JamWItUC89UR6TZy4x8YE/A4sC7k sEnZmjSFOCjty8qy8JDXanb5619RTQ0HxoG4RemcKUtBZ2SIszBOksqnlyZmtfgU kjjiK2AwPmh/hB25lw9kc7uYuIzQ/vfWZ2Un5p/MIqUWNcomFMGRGEjAowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE65Zae+Q3GNnHMlTKlqZWrrgFbMB8GA1UdIwQY MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1 LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPe2GJNY WKWbzi2RUv/0PYBRESBMkt4v5swQa3JvqxKPG2/FQZgielWB5Cq5pVdQsJoj0Qr8 YGRzY3rlRhCwyg/eG2A59if0aNjpoNXgrZIC41ScsvxKyIjP5g51Fat3v8h0nV2p te/Ag1VpDa14+b49ZFqdLBuPPoITviB4mnA1HWe4VRhGGz3SHTJh4IsgSx4orAfP 4OcEmoTh4o5sZahlElLJMv4QXWN3HzJo41Qj0ewbCSXZTfCGxsc3GVrnypUtN+mM ZwXw1WSBNWFj99X74LubE5aIBx835vk54AXUhYxMQ4Tq4cOZyilPXwv/MnG7BQEy 5gc7ZifpEZdiBw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:10:33 2025 by rpki-client