This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: xSTb/LeYVlf1YOr1k273lfX8lHpx5iNh3GGcsLfGeHc=
Subject key identifier: 80:37:1A:08:37:CE:98:53:81:7E:70:3A:28:B7:8E:7D:CD:99:71:9C
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019B07EBDA86B9CBDF516FC20BBA59D5711D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 176B
Signing time: Wed 10 Dec 2025 11:00:55 +0000
Manifest this update: Wed 10 Dec 2025 11:00:55 +0000
Manifest next update: Thu 11 Dec 2025 11:00:55 +0000
Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=)
2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: 6JefKaScEIMHGC2e/rnTgQbHyZSzU6Ng2PmNC7ttREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:07:eb:da:86:b9:cb:df:51:6f:c2:0b:ba:59:d5:71:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Dec 10 11:00:55 2025 GMT
Not After : Dec 11 11:00:55 2025 GMT
Subject: CN=80371a0837ce9853817e703a28b78e7dcd99719c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:e2:2f:00:8a:6b:58:21:83:2c:34:41:68:
15:ef:4f:92:b4:4b:c8:65:fe:eb:45:89:83:dd:4d:
2a:0f:13:3c:da:6f:f8:3b:75:fc:e7:25:3b:05:1a:
be:7d:3d:e2:cc:cb:53:93:2d:38:03:dc:73:11:65:
18:28:09:e9:45:91:ac:97:60:70:d7:3a:31:73:0f:
9f:e3:35:d3:d8:70:ea:79:ea:74:b3:7c:aa:49:39:
0a:11:80:e6:e6:03:4f:e8:74:6d:e0:48:fb:e2:d4:
de:f6:de:b2:28:8b:7c:93:af:fb:3f:b5:50:e2:20:
79:d7:53:1b:44:2e:58:d3:96:18:ef:ec:a3:d0:2f:
4d:41:15:4e:40:79:29:f6:b2:d5:83:87:76:43:bc:
e2:eb:a1:cb:30:e0:e5:3b:6c:c3:6c:ed:fd:7b:4f:
1e:9f:d5:76:91:fb:c9:05:99:66:72:b2:4a:50:5f:
c6:95:3b:f4:43:03:68:68:52:13:77:9a:8b:66:9b:
40:05:7b:11:c3:c6:f7:76:9e:e5:51:ee:ec:cd:84:
2b:00:54:f2:a3:e3:f4:17:33:6b:d0:2b:1f:e1:b8:
74:68:99:16:04:6a:4d:08:88:d4:2a:17:6b:f6:e7:
85:b8:55:4c:c1:b7:b8:70:26:c6:e7:22:42:76:b8:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:1A:08:37:CE:98:53:81:7E:70:3A:28:B7:8E:7D:CD:99:71:9C
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1f:56:04:66:b7:76:50:d3:e6:88:83:ea:96:a2:f6:f7:6d:
65:d0:b2:0e:1f:e6:28:ab:5c:4e:a8:86:fc:b6:2c:33:a5:61:
a8:9d:b2:09:dc:76:5b:4d:2a:f5:43:24:f0:7c:94:7d:27:cf:
bf:e9:2a:3b:b9:1a:fa:d3:2b:fc:23:8d:6d:20:5e:0b:ce:28:
44:42:04:57:2b:56:4f:33:31:e5:b0:cb:07:2f:74:ca:5c:45:
91:c3:4c:0b:77:10:a3:0a:4a:85:49:47:49:32:7a:bb:f8:54:
43:60:0b:36:19:f8:50:9a:cd:5a:64:f1:e8:36:c8:9f:aa:ba:
38:b0:63:fb:2c:72:ab:59:9e:de:e8:75:8f:d2:9d:18:e0:4b:
e2:11:9f:1d:3e:01:9e:4c:c4:44:3c:3b:15:ca:54:29:9b:4f:
ee:cb:7a:ca:53:87:ea:68:18:f6:65:63:63:ca:ea:d8:58:9e:
af:cc:38:9c:7c:9b:bd:6d:3c:1d:1b:33:39:f4:4f:81:0e:52:
ce:10:2e:67:fd:8d:9f:1b:49:4c:9b:4f:32:af:e0:7d:69:7b:
47:4e:bd:74:aa:ef:de:20:19:fb:1f:89:13:2b:71:6a:ed:11:
fb:d7:47:15:fd:8c:29:3b:43:90:e4:90:ed:3c:32:53:6d:ba:
bf:f4:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:25:24 2025 by rpki-client