This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft File: YxGp1MECUvv3O3Fl81rMHc6fCpM.mft (raw, json) Hash identifier: AffKaCAiePAEWz2tGNojxJA/8XxaXemy7Z+33zzD/HA= Subject key identifier: C8:A6:EB:F5:52:90:75:40:F4:B8:32:9B:43:0F:A0:A7:85:1E:DE:83 Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Certificate serial: 019B4023C85877AB5BA52C8A217F575BBCAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 09:00:45 +0000 Manifest this update: Sun 21 Dec 2025 09:00:45 +0000 Manifest next update: Mon 22 Dec 2025 09:00:45 +0000 Files and hashes: 1: YxGp1MECUvv3O3Fl81rMHc6fCpM.crl (hash: xFQXNwZPrzM/y7IR6Q9me73/sU5g9Fl1alSRIc73qPk=) 2: i3-W5-Ta6sBkBaVXLtrbHOUQC-E.roa (hash: 2aNhrbvrEkaQFxMvRn3+DLhaklq4ZkGpo3VgxiZSM9U=) 3: uiXugz_zdUbpxMkNc0xXlcVLf8Q.roa (hash: v6GaXjJ/81kT64ynxaO/yyZsUsxo0QcrAwLzz7FnW/8=) 4: x85xaclh_I5fag7LOhEkjo3jhMw.asa (hash: SZArydHLaUzTTdXtg5nAF/HF99OnEgr16Dnn25uMEJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:c8:58:77:ab:5b:a5:2c:8a:21:7f:57:5b:bc:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Validity Not Before: Dec 21 09:00:45 2025 GMT Not After : Dec 22 09:00:45 2025 GMT Subject: CN=c8a6ebf552907540f4b8329b430fa0a7851ede83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:84:ea:7d:8d:41:c1:d5:d5:0d:46:ed:84: 71:ae:2a:27:8e:ba:7a:66:d6:f8:f8:4d:e8:02:26: 99:53:d0:83:72:57:9a:53:dc:45:d2:8b:e1:55:ff: fa:c3:5a:5b:55:3d:f4:6d:58:e6:88:bd:ff:b2:19: 48:94:68:f7:cf:68:b0:47:d3:5d:55:d2:f3:02:41: 39:f1:2c:c1:72:bc:b3:db:60:3e:6b:4c:dc:bc:0c: b9:38:8d:c8:98:b9:3b:ad:0e:7e:80:f4:1e:91:1c: 67:16:39:eb:63:4c:8d:5c:3d:6b:d3:c1:f0:ce:db: 10:19:07:de:be:58:5e:70:15:8e:a3:f8:e4:6a:58: e0:cd:c9:3f:5a:5e:53:12:07:fa:3b:03:12:5c:a0: 29:45:56:9f:ff:af:a1:a8:8c:18:b5:a5:7e:e0:49: aa:40:59:23:e8:4c:f2:88:d8:ae:54:b4:54:bc:95: a3:53:09:6b:76:a5:74:a4:a9:b0:c1:86:dd:0e:60: 87:46:63:ec:c9:a4:e0:d9:72:2a:b2:8a:52:34:f9: b1:1e:f7:a9:3a:06:72:ed:3f:75:bc:ab:f4:c4:fd: c1:68:08:3f:e8:b4:97:a4:99:e0:02:11:ce:d7:c2: 27:93:07:7f:f4:23:fc:d3:9a:48:54:d1:2e:c2:7a: 5a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:EB:F5:52:90:75:40:F4:B8:32:9B:43:0F:A0:A7:85:1E:DE:83 X509v3 Authority Key Identifier: keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:98:d8:9c:9e:ce:4e:25:94:e1:c9:6f:d9:b4:37:9c:fc:06: cf:59:6d:32:9f:0b:95:85:40:6d:82:5a:d1:c9:ad:24:85:ce: 80:e1:77:79:90:9d:1d:3c:0d:5d:9f:5f:74:20:ce:0a:6c:06: b9:60:a4:25:5b:3d:f7:1f:ec:cf:d5:85:1a:ec:1e:9e:ac:6f: 3b:1e:c9:f3:49:a6:18:de:77:3c:5e:d1:17:18:ed:5b:e3:2a: ae:13:af:77:53:bb:c2:67:d3:c4:5d:c9:4f:37:07:bc:45:e3: 66:73:69:68:9c:19:cf:f3:bc:9d:a5:8a:c1:bf:fb:ae:cc:03: 15:40:a3:73:49:f3:4b:ed:b0:eb:49:dd:3a:bd:59:c6:de:7a: e8:a9:f0:6e:a9:cd:06:1c:2c:0d:cf:76:37:13:08:c5:b3:ba: fa:86:da:79:68:e1:53:77:30:39:7d:6a:a6:ff:9a:91:5c:d9: c8:b1:0d:07:61:1e:75:d1:49:ff:f0:e7:32:62:71:56:a3:fa: 34:bf:23:12:8a:7a:1e:63:d9:c2:fb:49:10:14:7a:88:f8:ca: 75:0f:d3:1b:38:23:98:1b:ef:ed:73:9b:86:26:f0:95:29:3e: 7d:72:c7:5d:0d:af:ba:92:f5:28:66:62:4b:2b:fc:1b:39:96: 85:ec:59:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI8hYd6tbpSyKIX9XW7yqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5 ZjBhOTMwHhcNMjUxMjIxMDkwMDQ1WhcNMjUxMjIyMDkwMDQ1WjAzMTEwLwYDVQQD EyhjOGE2ZWJmNTUyOTA3NTQwZjRiODMyOWI0MzBmYTBhNzg1MWVkZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZaE6n2NQcHV1Q1G7YRxrionjrp6 Ztb4+E3oAiaZU9CDcleaU9xF0ovhVf/6w1pbVT30bVjmiL3/shlIlGj3z2iwR9Nd VdLzAkE58SzBcryz22A+a0zcvAy5OI3ImLk7rQ5+gPQekRxnFjnrY0yNXD1r08Hw ztsQGQfevlhecBWOo/jkaljgzck/Wl5TEgf6OwMSXKApRVaf/6+hqIwYtaV+4Emq QFkj6EzyiNiuVLRUvJWjUwlrdqV0pKmwwYbdDmCHRmPsyaTg2XIqsopSNPmxHvep OgZy7T91vKv0xP3BaAg/6LSXpJngAhHO18Inkwd/9CP805pIVNEuwnpa4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMim6/VSkHVA9Lgym0MPoKeFHt6DMB8GA1UdIwQY MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt N2NmZDk1N2YwOGZmLzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5jYnJ7O TiWU4clv2bQ3nPwGz1ltMp8LlYVAbYJa0cmtJIXOgOF3eZCdHTwNXZ9fdCDOCmwG uWCkJVs99x/sz9WFGuwenqxvOx7J80mmGN53PF7RFxjtW+MqrhOvd1O7wmfTxF3J TzcHvEXjZnNpaJwZz/O8naWKwb/7rswDFUCjc0nzS+2w60ndOr1Zxt566KnwbqnN BhwsDc92NxMIxbO6+obaeWjhU3cwOX1qpv+akVzZyLENB2EeddFJ//DnMmJxVqP6 NL8jEop6HmPZwvtJEBR6iPjKdQ/TGzgjmBvv7XObhibwlSk+fXLHXQ2vupL1KGZi Syv8GzmWhexZIw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:58:30 2025 by rpki-client