This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json) Hash identifier: W6gh+RBVbeKt5E8Fj/C4YUQCwM3pMiFA8EvZdkeCV1Q= Subject key identifier: 5E:A0:3C:D5:76:13:8E:2B:DE:10:AD:88:61:44:74:62:86:A9:DB:5A Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9 Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9 Certificate serial: 019B356942493E84FB4D32385267A98F1AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft Manifest number: 0EB9 Signing time: Fri 19 Dec 2025 07:00:49 +0000 Manifest this update: Fri 19 Dec 2025 07:00:49 +0000 Manifest next update: Sat 20 Dec 2025 07:00:49 +0000 Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=) 2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: AO5hFinlFuxnsDyFdrBF/85bPz6ymo8zkHzIm8pkoT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:42:49:3e:84:fb:4d:32:38:52:67:a9:8f:1a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9 Validity Not Before: Dec 19 07:00:49 2025 GMT Not After : Dec 20 07:00:49 2025 GMT Subject: CN=5ea03cd576138e2bde10ad886144746286a9db5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:4e:c7:2d:f8:37:94:e1:77:d1:cc:ac:12: 37:88:84:e4:f3:9b:71:3a:0d:d8:eb:5b:c0:98:20: ce:8a:57:cf:52:67:8d:24:54:41:43:91:98:1f:8b: 14:6d:3e:28:7b:a7:59:e8:b4:76:91:43:d7:13:a8: b3:0b:1e:58:0a:4f:95:ca:6a:7e:15:34:3b:fe:82: 8d:52:be:49:86:de:4b:64:52:33:b6:1d:0e:f0:4d: 95:c9:ca:6f:53:b9:98:cd:be:12:8e:43:fc:50:05: 16:f1:71:36:60:a6:ca:ff:d3:aa:ed:af:fe:99:a4: ac:3d:55:ff:73:5c:df:c4:36:b1:cf:c5:ed:9e:7f: 8d:31:9a:be:30:33:2d:64:97:7e:a1:15:56:ac:47: 5f:6f:bd:1e:55:5c:09:84:fc:6f:d6:53:8b:41:37: 14:dd:36:f3:69:0b:29:50:c7:bb:02:2d:58:6f:54: 88:b0:de:0f:a4:e8:76:6f:b0:0e:14:dd:48:de:ee: 95:31:d3:e5:de:19:8b:bc:53:43:d7:54:11:79:86: 93:5a:ad:19:38:50:84:44:fb:2f:14:d7:05:e6:d1: 18:d4:41:89:21:6e:96:92:f3:1a:fd:b3:a2:7e:42: a6:4a:f0:bf:a8:a8:43:ad:92:fd:80:d2:b2:7c:ab: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A0:3C:D5:76:13:8E:2B:DE:10:AD:88:61:44:74:62:86:A9:DB:5A X509v3 Authority Key Identifier: keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:18:1c:d4:cc:5c:67:16:00:bc:96:8f:df:45:0b:f9:4a:e9: 6b:40:fe:d3:62:ec:5b:21:3d:3e:aa:69:51:1a:51:bf:cc:1f: e9:58:74:6a:f3:33:b3:2a:e2:33:e8:68:2e:7d:18:5c:7b:3f: 14:c5:21:cc:01:af:d7:27:40:6c:10:24:71:44:6d:0f:b7:d5: d6:37:86:08:ff:0e:03:8e:ed:91:89:44:ad:b4:d9:20:01:b5: 5d:44:15:95:25:d7:34:00:1d:6c:bb:fc:8d:24:b7:f5:eb:d1: 04:f6:18:a4:da:16:4b:3c:95:66:41:ef:35:68:45:7b:77:15: 0c:58:a8:fc:83:47:4a:d4:df:6a:a5:b5:af:46:17:09:f7:cf: 28:6b:db:6b:b8:81:77:da:d6:d5:ca:f4:1f:78:0f:33:0b:1c: da:5b:a9:4d:a4:e6:76:c4:73:22:a0:c8:74:11:03:3f:46:fd: 5f:67:75:69:49:1b:44:6e:49:e6:ac:36:00:6c:41:24:92:a6: 72:d5:8c:a0:3a:7e:11:6f:35:73:d6:66:a8:8b:f6:d9:d8:0b: bc:8d:99:06:65:82:47:34:94:db:f5:40:ea:0b:9d:2b:b3:a2: 9a:2b:d6:0e:02:01:e7:61:60:f3:2d:59:f3:32:9c:7e:d3:ed: 2e:28:9c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aUJJPoT7TTI4UmepjxrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm YzM3YjkwHhcNMjUxMjE5MDcwMDQ5WhcNMjUxMjIwMDcwMDQ5WjAzMTEwLwYDVQQD Eyg1ZWEwM2NkNTc2MTM4ZTJiZGUxMGFkODg2MTQ0NzQ2Mjg2YTlkYjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszlOxy34N5Thd9HMrBI3iITk85tx Og3Y61vAmCDOilfPUmeNJFRBQ5GYH4sUbT4oe6dZ6LR2kUPXE6izCx5YCk+Vymp+ FTQ7/oKNUr5Jht5LZFIzth0O8E2VycpvU7mYzb4SjkP8UAUW8XE2YKbK/9Oq7a/+ maSsPVX/c1zfxDaxz8Xtnn+NMZq+MDMtZJd+oRVWrEdfb70eVVwJhPxv1lOLQTcU 3TbzaQspUMe7Ai1Yb1SIsN4PpOh2b7AOFN1I3u6VMdPl3hmLvFND11QReYaTWq0Z OFCERPsvFNcF5tEY1EGJIW6WkvMa/bOifkKmSvC/qKhDrZL9gNKyfKthNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6gPNV2E44r3hCtiGFEdGKGqdtaMB8GA1UdIwQY MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4 LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRgc1Mxc ZxYAvJaP30UL+Urpa0D+02LsWyE9PqppURpRv8wf6Vh0avMzsyriM+hoLn0YXHs/ FMUhzAGv1ydAbBAkcURtD7fV1jeGCP8OA47tkYlErbTZIAG1XUQVlSXXNAAdbLv8 jSS39evRBPYYpNoWSzyVZkHvNWhFe3cVDFio/INHStTfaqW1r0YXCffPKGvba7iB d9rW1cr0H3gPMwsc2lupTaTmdsRzIqDIdBEDP0b9X2d1aUkbRG5J5qw2AGxBJJKm ctWMoDp+EW81c9ZmqIv22dgLvI2ZBmWCRzSU2/VA6gudK7OimivWDgIB52Fg8y1Z 8zKcftPtLiic5g== -----END CERTIFICATE-----Generated at Fri Dec 19 13:15:53 2025 by rpki-client