This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json) Hash identifier: S38apGKjQJOgEL9QlCBZ7X+/cp++1Ul2n7QyDMmPt4w= Subject key identifier: 5B:A5:6F:AA:38:0A:F0:64:54:FE:03:5A:4D:1E:CF:05:86:45:F9:A0 Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a Certificate serial: 019B42B76BFC72AEAC7389DE6EB2A788A8A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft Manifest number: 0F38 Signing time: Sun 21 Dec 2025 21:01:15 +0000 Manifest this update: Sun 21 Dec 2025 21:01:15 +0000 Manifest next update: Mon 22 Dec 2025 21:01:15 +0000 Files and hashes: 1: n0pJCaUiRCl5Ps5_Vu5R9Y3I9qU.roa (hash: yrWbMC7j+dM+coJf76N3ZfAw2TV7juT6B31o0/J59Ds=) 2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: +CEfR/NHrV7fhUD8wmWTBs2J0NgTz3E+Dg3YAde9LsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:6b:fc:72:ae:ac:73:89:de:6e:b2:a7:88:a8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a Validity Not Before: Dec 21 21:01:15 2025 GMT Not After : Dec 22 21:01:15 2025 GMT Subject: CN=5ba56faa380af06454fe035a4d1ecf058645f9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:0e:6c:61:50:e4:1b:9c:fc:5b:bd:36:c6: 2f:8b:73:b8:d3:03:1b:d8:35:23:a8:0c:d9:b0:49: 8e:40:ff:1c:58:82:73:93:0a:91:0d:7b:8b:84:ff: 44:b9:cb:fa:8a:c0:b6:cc:52:ed:20:b0:84:de:18: c9:9c:9a:4a:2e:02:e0:7d:75:68:46:6e:be:37:06: 16:0f:5b:f3:6c:32:02:9d:6a:99:4b:79:f3:1f:2c: 47:d0:46:dc:3b:9f:75:d6:f1:2d:e7:77:b6:9e:b4: a0:10:a2:c8:0a:8f:89:48:06:08:ca:e3:12:93:7e: 8c:5c:55:bc:af:45:ef:5e:65:35:e1:90:2b:1d:dd: 87:74:4b:ce:55:d6:45:aa:45:3d:82:b5:8b:af:21: 23:75:30:e3:85:be:63:a7:52:9c:1e:1b:98:ab:db: d7:f6:85:3c:c7:bc:93:71:cf:fd:08:1a:9d:8a:81: f9:a8:3f:99:40:d5:50:92:01:97:79:db:a3:61:c6: df:a7:1c:4d:5b:97:87:03:0d:a4:f3:ab:90:cf:df: 43:8e:e8:2d:e2:78:2e:6a:74:8a:26:fc:ba:01:27: 26:30:0a:e2:83:7c:85:76:b7:4b:61:3b:12:6a:f0: ec:21:9f:5f:68:ed:80:06:51:63:81:ca:52:67:4b: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A5:6F:AA:38:0A:F0:64:54:FE:03:5A:4D:1E:CF:05:86:45:F9:A0 X509v3 Authority Key Identifier: keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:00:2d:cf:f4:e4:8e:be:74:64:25:f7:a9:4c:55:8c:e9:06: db:03:b6:7d:65:ee:17:f7:81:8b:a7:07:44:77:bc:b4:83:05: 18:9c:95:2b:5b:2a:03:b4:41:29:8f:39:25:cb:b8:0f:68:e3: 60:0c:a9:b4:f6:8c:7a:2f:54:41:9c:56:a5:c2:f3:ee:a2:ba: db:1b:24:c0:db:3e:d9:0e:4e:c5:8e:7e:f3:db:70:76:9c:9c: 3d:4c:40:80:db:83:a5:c8:85:26:79:6a:aa:64:95:e0:72:ad: 01:ef:87:a3:e6:17:d2:a6:52:ac:c1:bf:23:43:c1:dd:a6:44: 32:ea:c4:72:4c:57:fc:93:cd:d4:e7:a2:81:6e:84:cb:ba:98: 48:1f:ad:49:34:55:2a:a2:c7:d7:19:2f:e0:e2:40:1b:2f:86: 90:a2:58:95:b5:4c:c6:a3:64:e9:34:36:40:1f:76:7f:3b:59: 0d:90:2b:e5:0e:e1:d4:af:bd:e3:b0:64:ec:6b:8e:9e:3f:ad: f8:5a:fb:fe:9d:18:68:51:fb:d4:9f:37:37:70:af:28:47:5a: 6d:18:86:16:d4:8b:83:7a:62:21:d9:0b:4d:d6:7d:50:2c:b1: f0:d4:c9:31:b4:b3:e7:ed:04:e9:97:fa:e5:7f:3e:f2:a7:41: ec:3f:15:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt2v8cq6sc4nebrKniKioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTVkNWMwY2QyMTQ2YmFhZmU4YWE2YjhiOWFhN2NlYjZl NDE3NWEwHhcNMjUxMjIxMjEwMTE1WhcNMjUxMjIyMjEwMTE1WjAzMTEwLwYDVQQD Eyg1YmE1NmZhYTM4MGFmMDY0NTRmZTAzNWE0ZDFlY2YwNTg2NDVmOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwgObGFQ5Buc/Fu9NsYvi3O40wMb 2DUjqAzZsEmOQP8cWIJzkwqRDXuLhP9Eucv6isC2zFLtILCE3hjJnJpKLgLgfXVo Rm6+NwYWD1vzbDICnWqZS3nzHyxH0EbcO5911vEt53e2nrSgEKLICo+JSAYIyuMS k36MXFW8r0XvXmU14ZArHd2HdEvOVdZFqkU9grWLryEjdTDjhb5jp1KcHhuYq9vX 9oU8x7yTcc/9CBqdioH5qD+ZQNVQkgGXedujYcbfpxxNW5eHAw2k86uQz99Djugt 4nguanSKJvy6AScmMArig3yFdrdLYTsSavDsIZ9faO2ABlFjgcpSZ0vHrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFulb6o4CvBkVP4DWk0ezwWGRfmgMB8GA1UdIwQY MBaAFMgV1cDNIUa6r+iqa4uap8625BdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUt NTI0NzY0YTQwZTIyLzEveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wZWVjZWYtYWU4Zi00YmY5LWFiNWUtNTI0NzY0YTQwZTIy LzEveUJYVndNMGhScnF2Nktwcmk1cW56cmJrRjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwAtz/Tk jr50ZCX3qUxVjOkG2wO2fWXuF/eBi6cHRHe8tIMFGJyVK1sqA7RBKY85Jcu4D2jj YAyptPaMei9UQZxWpcLz7qK62xskwNs+2Q5OxY5+89twdpycPUxAgNuDpciFJnlq qmSV4HKtAe+Ho+YX0qZSrMG/I0PB3aZEMurEckxX/JPN1OeigW6Ey7qYSB+tSTRV KqLH1xkv4OJAGy+GkKJYlbVMxqNk6TQ2QB92fztZDZAr5Q7h1K+947Bk7GuOnj+t +Fr7/p0YaFH71J83N3CvKEdabRiGFtSLg3piIdkLTdZ9UCyx8NTJMbSz5+0E6Zf6 5X8+8qdB7D8VSQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:49:12 2025 by rpki-client