This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft File: yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json) Hash identifier: EfkJt9Fa1JNBVnqefBAL59AScQNQ784nkQtschw/02k= Subject key identifier: ED:C5:DD:51:77:03:96:04:74:B5:1A:6F:9D:72:7E:63:EF:E2:81:C1 Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba Certificate serial: 019B19BAD23836CBAB7FC7DD745CE8FEACF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 22:00:32 +0000 Manifest this update: Sat 13 Dec 2025 22:00:32 +0000 Manifest next update: Sun 14 Dec 2025 22:00:32 +0000 Files and hashes: 1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: 4AP2jg+Fr7YFY5eiWOpb+mXdoNM6YxnMS8cU3sOaWrs=) 2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:d2:38:36:cb:ab:7f:c7:dd:74:5c:e8:fe:ac:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba Validity Not Before: Dec 13 22:00:32 2025 GMT Not After : Dec 14 22:00:32 2025 GMT Subject: CN=edc5dd517703960474b51a6f9d727e63efe281c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:77:a9:9f:64:28:9c:6a:fc:88:10:2d:8e: e8:52:13:1c:c3:9b:b3:23:aa:0a:92:b5:0c:4f:31: 1b:20:b2:c0:02:e3:94:97:6b:47:a2:ea:b5:25:d9: 13:70:c4:a7:94:00:9c:89:3a:f1:41:f9:30:41:d1: 4c:91:99:d9:ca:48:92:28:2f:22:8e:aa:10:06:1d: 8d:b5:29:80:a2:9b:c8:46:cd:82:4f:d1:bf:8e:fb: a4:ef:96:27:f1:78:be:59:d3:d5:ed:14:10:1b:0b: b3:c5:9e:94:a3:0c:9a:c3:ec:e6:db:4f:22:1a:ee: 1a:2d:61:33:ef:bd:3f:10:d0:95:c5:6a:2e:5b:c3: 50:93:43:b9:9a:4e:9b:c8:46:7a:47:9f:d5:b5:19: 83:e6:4e:b8:90:0b:9e:71:88:08:10:5d:a8:f6:77: 05:e0:ba:4b:35:5d:fa:b0:96:66:47:7f:15:dd:ba: 12:66:18:7b:2d:56:48:48:c9:20:87:1b:69:18:6a: 66:62:c4:c9:d4:87:ae:a9:ce:33:f6:f6:8e:28:a9: cb:26:19:2b:46:28:7f:fc:3e:ee:02:1b:eb:b7:9b: a0:d7:f4:15:b3:c8:21:f4:da:7c:ae:51:43:72:ce: 5d:81:f8:27:6b:1a:ca:9a:a4:7c:56:a5:de:f9:30: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:DD:51:77:03:96:04:74:B5:1A:6F:9D:72:7E:63:EF:E2:81:C1 X509v3 Authority Key Identifier: keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ea:39:fc:02:e9:37:6c:94:78:70:3f:0a:c7:96:5a:60:ec: 63:7d:9d:93:02:ca:86:9e:c9:dc:c0:1c:d7:76:59:68:07:90: 3b:2b:e7:17:55:f0:66:be:78:fa:76:09:12:b4:e9:69:f7:64: 8d:ca:08:9e:d9:3a:be:5b:52:3f:28:d6:7e:c5:9b:9a:ee:a8: fa:8e:95:eb:cd:6d:a3:de:dd:d3:64:e3:6d:3b:ae:2e:3c:a1: 18:60:d2:9b:f1:f7:72:4d:0f:1a:2a:f3:2c:f7:9c:c3:05:9a: a7:8c:58:0f:e2:3e:b6:f0:5d:52:8b:5c:4c:9a:80:3d:b1:a9: a2:0a:8a:a6:ba:1d:f2:b0:7f:aa:e2:1c:9d:2b:26:37:1d:21: ea:e8:18:0c:d5:e6:5f:44:5c:07:a8:a2:d1:b3:70:7c:f0:51: c3:f8:41:bc:47:23:52:a2:96:18:ec:d6:1b:29:59:7f:e6:be: 5b:bb:e2:38:db:b4:48:d6:df:e5:d4:56:a7:21:72:0b:4c:1a: e6:67:51:8a:08:94:ff:86:8e:9c:d2:45:5f:fb:e3:8d:b4:9d: e9:be:4d:2d:a2:65:64:dd:14:70:da:e3:a8:af:1b:f8:d8:29: af:f4:4e:fa:b8:f8:00:0c:db:d7:59:f3:d7:f1:21:6b:d8:99: c0:93:37:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZutI4Nsurf8fddFzo/qz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWNjNWM3YjEyMTdjY2JiMTU1ZGRkYWU4MjZjZTZmOWZk YmFjYmEwHhcNMjUxMjEzMjIwMDMyWhcNMjUxMjE0MjIwMDMyWjAzMTEwLwYDVQQD EyhlZGM1ZGQ1MTc3MDM5NjA0NzRiNTFhNmY5ZDcyN2U2M2VmZTI4MWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbR3qZ9kKJxq/IgQLY7oUhMcw5uz I6oKkrUMTzEbILLAAuOUl2tHouq1JdkTcMSnlACciTrxQfkwQdFMkZnZykiSKC8i jqoQBh2NtSmAopvIRs2CT9G/jvuk75Yn8Xi+WdPV7RQQGwuzxZ6Uowyaw+zm208i Gu4aLWEz770/ENCVxWouW8NQk0O5mk6byEZ6R5/VtRmD5k64kAuecYgIEF2o9ncF 4LpLNV36sJZmR38V3boSZhh7LVZISMkghxtpGGpmYsTJ1Ieuqc4z9vaOKKnLJhkr Rih//D7uAhvrt5ug1/QVs8gh9Np8rlFDcs5dgfgnaxrKmqR8VqXe+TDgAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3F3VF3A5YEdLUab51yfmPv4oHBMB8GA1UdIwQY MBaAFMocxcexIXzLsVXd2ugmzm+f26y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTct MmI2MjMyMzJmZjIyLzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hYTA2ZjUtMDY1MC00YzFlLWI4YTctMmI2MjMyMzJmZjIy LzEveWh6Rng3RWhmTXV4VmQzYTZDYk9iNV9ickxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquo5/ALp N2yUeHA/CseWWmDsY32dkwLKhp7J3MAc13ZZaAeQOyvnF1XwZr54+nYJErTpafdk jcoIntk6vltSPyjWfsWbmu6o+o6V681to97d02TjbTuuLjyhGGDSm/H3ck0PGirz LPecwwWap4xYD+I+tvBdUotcTJqAPbGpogqKprod8rB/quIcnSsmNx0h6ugYDNXm X0RcB6ii0bNwfPBRw/hBvEcjUqKWGOzWGylZf+a+W7viONu0SNbf5dRWpyFyC0wa 5mdRigiU/4aOnNJFX/vjjbSd6b5NLaJlZN0UcNrjqK8b+Ngpr/RO+rj4AAzb11nz 1/Eha9iZwJM30w== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:33 2025 by rpki-client