This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json) Hash identifier: nv1q5VTLWwKKtjhhDtE0UEPBQMoElYL3LUB8UZyKfwM= Subject key identifier: 2D:FB:32:E2:B6:CA:4C:DE:09:C8:09:B2:7C:AD:EC:77:BF:31:94:72 Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Certificate serial: 019B3E6E303468DE54B7D8B6DEB29F64B029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft Manifest number: 069A Signing time: Sun 21 Dec 2025 01:02:47 +0000 Manifest this update: Sun 21 Dec 2025 01:02:47 +0000 Manifest next update: Mon 22 Dec 2025 01:02:47 +0000 Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=) 2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=) 3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: g3rl2wHPNS1Hah2gBHUqKor8ItwLCHKzYsMNYyW5Cl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:30:34:68:de:54:b7:d8:b6:de:b2:9f:64:b0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Validity Not Before: Dec 21 01:02:47 2025 GMT Not After : Dec 22 01:02:47 2025 GMT Subject: CN=2dfb32e2b6ca4cde09c809b27cadec77bf319472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:cb:ce:6c:11:42:1a:fd:76:ee:f1:e2:40: ce:c1:d4:a6:f0:cd:13:80:b1:b0:7d:6d:7e:62:a6: d8:c9:43:0e:11:b3:2c:71:b8:54:63:f1:fc:95:c7: a3:58:c8:9e:7d:67:bb:d1:38:42:5e:35:1d:6f:94: d0:83:fd:9d:35:15:ca:79:bf:c3:a5:45:ba:ea:ca: 02:f6:42:9a:61:c8:57:40:1b:43:d0:34:4c:4e:c3: c2:95:44:e5:e1:a0:42:95:99:9e:6f:ff:42:b3:b5: 81:50:be:4c:55:15:9b:7c:ed:fb:da:ca:2a:a4:2b: 2a:08:9f:98:0c:9e:f6:b7:41:51:da:27:1a:8f:25: b3:6e:9d:10:01:63:91:27:58:26:b9:c2:d7:46:73: 4b:d3:2b:98:c9:e7:c7:8d:65:13:b8:d5:d3:4c:81: da:64:b6:ea:33:4c:9f:80:97:16:f7:c3:7b:ff:12: 58:e4:3f:d4:6e:de:e6:7f:92:f8:37:d5:bb:53:ff: ce:36:de:58:36:46:9e:2a:8a:59:ca:bc:b3:c8:9d: 7b:a0:f0:1b:56:66:39:ea:5d:16:e1:6e:06:0d:a3: cf:a2:45:82:8a:e2:40:6a:d2:1c:52:3d:b5:c9:b5: eb:15:62:37:9b:6f:f2:7b:0c:33:6d:00:27:9a:71: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FB:32:E2:B6:CA:4C:DE:09:C8:09:B2:7C:AD:EC:77:BF:31:94:72 X509v3 Authority Key Identifier: keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:92:fd:d7:61:2b:4a:89:24:28:ab:7e:cf:b3:7d:42:ff:56: 0b:bc:50:6a:79:18:e0:7e:95:70:da:f9:1e:19:23:9c:46:8a: 5c:36:bb:34:81:2a:8d:3a:6f:eb:8b:c7:94:4d:59:f2:47:2f: 04:78:d2:24:f7:8d:9d:86:a8:5e:4a:df:5f:c6:1d:57:ac:5a: 44:03:56:6f:12:7d:c8:35:9a:cd:e9:1e:8e:d2:65:ef:54:02: b6:38:b8:4c:6f:44:51:a4:80:79:c3:1b:f7:ed:6e:1b:6e:17: 2b:e7:e9:95:16:5b:26:39:7f:b7:f6:f3:51:03:d6:91:ab:4e: 5e:60:b8:55:68:88:56:b2:8a:0a:c4:29:ac:d0:3a:a9:2b:3d: 70:24:1b:c2:56:3f:58:41:28:39:db:37:ce:a2:5f:e1:3e:69: be:27:bd:83:17:93:de:6f:cb:b1:88:8a:ca:ee:4f:1f:e0:4b: 95:b0:60:ed:31:ba:91:0f:ca:a4:26:c8:03:93:a8:cd:1e:1e: 32:d4:da:3e:2c:7d:23:7c:94:6f:da:9a:66:c1:9b:c5:14:85: c1:6c:9c:61:8f:f1:87:ea:c4:ea:ca:99:53:af:67:e3:74:bd: 2e:5a:78:38:23:37:f4:6a:9d:5f:78:ac:8e:05:7b:a6:2c:25: 0a:3e:c1:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bjA0aN5Ut9i23rKfZLApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3 MjgwOTcwHhcNMjUxMjIxMDEwMjQ3WhcNMjUxMjIyMDEwMjQ3WjAzMTEwLwYDVQQD EygyZGZiMzJlMmI2Y2E0Y2RlMDljODA5YjI3Y2FkZWM3N2JmMzE5NDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm/LzmwRQhr9du7x4kDOwdSm8M0T gLGwfW1+YqbYyUMOEbMscbhUY/H8lcejWMiefWe70ThCXjUdb5TQg/2dNRXKeb/D pUW66soC9kKaYchXQBtD0DRMTsPClUTl4aBClZmeb/9Cs7WBUL5MVRWbfO372soq pCsqCJ+YDJ72t0FR2icajyWzbp0QAWORJ1gmucLXRnNL0yuYyefHjWUTuNXTTIHa ZLbqM0yfgJcW98N7/xJY5D/Ubt7mf5L4N9W7U//ONt5YNkaeKopZyryzyJ17oPAb VmY56l0W4W4GDaPPokWCiuJAatIcUj21ybXrFWI3m2/yewwzbQAnmnHvJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC37MuK2ykzeCcgJsnyt7He/MZRyMB8GA1UdIwQY MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5 LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5L912Er SokkKKt+z7N9Qv9WC7xQankY4H6VcNr5HhkjnEaKXDa7NIEqjTpv64vHlE1Z8kcv BHjSJPeNnYaoXkrfX8YdV6xaRANWbxJ9yDWazekejtJl71QCtji4TG9EUaSAecMb 9+1uG24XK+fplRZbJjl/t/bzUQPWkatOXmC4VWiIVrKKCsQprNA6qSs9cCQbwlY/ WEEoOds3zqJf4T5pvie9gxeT3m/LsYiKyu5PH+BLlbBg7TG6kQ/KpCbIA5OozR4e MtTaPix9I3yUb9qaZsGbxRSFwWycYY/xh+rE6sqZU69n43S9Llp4OCM39GqdX3is jgV7piwlCj7BtQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:38:23 2025 by rpki-client