This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json) Hash identifier: V/rKItzfqw1oHzfzIoFcnAVfreKXwHdLYvuZmOVIpm8= Subject key identifier: D4:93:5B:B7:CA:69:89:F9:3D:51:47:05:0D:B2:11:9C:97:E7:72:EC Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Certificate serial: 019B4DE0A876D463B0CE708764232EEE09DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft Manifest number: 06A2 Signing time: Wed 24 Dec 2025 01:02:07 +0000 Manifest this update: Wed 24 Dec 2025 01:02:07 +0000 Manifest next update: Thu 25 Dec 2025 01:02:07 +0000 Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=) 2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=) 3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: WOUoeonHe9UAfWjL/skRAOm7mhFp9egZkeUc9IhkF+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:a8:76:d4:63:b0:ce:70:87:64:23:2e:ee:09:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Validity Not Before: Dec 24 01:02:07 2025 GMT Not After : Dec 25 01:02:07 2025 GMT Subject: CN=d4935bb7ca6989f93d5147050db2119c97e772ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:b7:ff:db:65:b1:02:e9:d0:c0:25:9a:3a: 8f:59:31:a0:10:c0:e0:29:dc:9c:b5:c8:2f:f0:6c: bf:6a:d2:d8:f8:14:b3:aa:36:e1:25:63:c7:12:97: 94:b0:b7:e7:69:1f:12:51:8f:63:2d:3b:cd:ef:44: 60:e8:d5:dd:53:d9:a0:17:99:a6:d8:d2:07:bf:1e: fe:ec:2c:e9:ab:39:8f:d2:d4:23:7d:ba:3c:ab:0c: 41:1b:b0:3c:f1:c1:d1:2a:ed:b4:50:08:1c:7b:25: 31:9a:c1:5f:2f:93:e2:4a:b7:0b:62:4a:4e:3f:af: 33:7e:6d:a7:d8:ca:ed:22:3f:82:df:6a:d4:90:0c: 2f:bf:fa:5f:a4:91:6a:3a:95:0c:b0:e9:b8:ad:e2: c6:de:76:29:f7:e5:84:41:72:b4:39:9b:b2:20:fe: 85:5e:ad:29:84:c3:79:35:8f:ff:4d:10:5a:6c:61: 4a:5e:3a:e2:58:70:01:ce:a5:d1:75:4b:44:e2:24: 84:f8:1a:72:27:36:21:26:1a:8b:24:17:2f:24:ff: 29:5e:4f:9b:fa:13:6a:d9:0d:0e:75:e0:0d:18:6e: 7f:10:23:c6:ef:42:ac:2a:6d:a8:4e:4f:d7:5c:fc: ab:bb:01:bf:6d:fc:67:61:ad:cc:e8:84:ab:17:b3: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:93:5B:B7:CA:69:89:F9:3D:51:47:05:0D:B2:11:9C:97:E7:72:EC X509v3 Authority Key Identifier: keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:83:c7:f2:1d:b2:fe:39:03:9a:38:15:9c:5d:d3:d5:1b:ca: 90:7e:ae:88:aa:89:df:5d:72:7d:b7:6b:27:2a:c6:22:8c:27: 27:75:7b:a7:7a:81:2e:ab:13:29:50:63:04:b9:53:d0:33:58: 6d:2e:b3:33:69:b8:8d:17:80:7c:f4:67:2d:34:5e:83:18:0e: d9:9f:31:91:92:fa:e5:67:1b:b0:75:ac:2c:79:d6:07:40:8a: 47:f4:4c:4b:5e:07:f5:9f:be:66:e5:2a:64:0a:d0:08:b1:db: d6:34:3f:c4:f5:42:33:11:02:44:9e:b3:bd:3a:b3:54:54:0c: d2:d6:b5:cf:42:8f:8f:16:08:4f:44:b5:ea:35:83:1b:86:4a: 31:3a:71:ee:c3:a6:49:b5:0e:f3:20:c5:d8:ef:10:04:e5:0c: d7:c7:c1:40:30:f4:7b:81:f4:c7:c5:a5:fb:44:47:87:68:c2: da:a7:69:2b:82:85:46:5d:70:b6:22:cf:84:7e:32:48:73:5a: 58:a7:c0:e7:67:67:bb:46:26:51:3a:41:68:f0:4f:fc:72:7e: 60:5a:57:01:7a:76:0b:2c:61:2f:38:5c:dd:8d:5c:8b:e0:28: 6d:f2:d2:52:75:58:37:16:e6:8f:70:f0:db:ed:df:4a:c6:75: 43:ba:db:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Kh21GOwznCHZCMu7gnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3 MjgwOTcwHhcNMjUxMjI0MDEwMjA3WhcNMjUxMjI1MDEwMjA3WjAzMTEwLwYDVQQD EyhkNDkzNWJiN2NhNjk4OWY5M2Q1MTQ3MDUwZGIyMTE5Yzk3ZTc3MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVK3/9tlsQLp0MAlmjqPWTGgEMDg Kdyctcgv8Gy/atLY+BSzqjbhJWPHEpeUsLfnaR8SUY9jLTvN70Rg6NXdU9mgF5mm 2NIHvx7+7CzpqzmP0tQjfbo8qwxBG7A88cHRKu20UAgceyUxmsFfL5PiSrcLYkpO P68zfm2n2MrtIj+C32rUkAwvv/pfpJFqOpUMsOm4reLG3nYp9+WEQXK0OZuyIP6F Xq0phMN5NY//TRBabGFKXjriWHABzqXRdUtE4iSE+BpyJzYhJhqLJBcvJP8pXk+b +hNq2Q0OdeANGG5/ECPG70KsKm2oTk/XXPyruwG/bfxnYa3M6ISrF7MDZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSTW7fKaYn5PVFHBQ2yEZyX53LsMB8GA1UdIwQY MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5 LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIPH8h2y /jkDmjgVnF3T1RvKkH6uiKqJ311yfbdrJyrGIownJ3V7p3qBLqsTKVBjBLlT0DNY bS6zM2m4jReAfPRnLTRegxgO2Z8xkZL65WcbsHWsLHnWB0CKR/RMS14H9Z++ZuUq ZArQCLHb1jQ/xPVCMxECRJ6zvTqzVFQM0ta1z0KPjxYIT0S16jWDG4ZKMTpx7sOm SbUO8yDF2O8QBOUM18fBQDD0e4H0x8Wl+0RHh2jC2qdpK4KFRl1wtiLPhH4ySHNa WKfA52dnu0YmUTpBaPBP/HJ+YFpXAXp2CyxhLzhc3Y1ci+AobfLSUnVYNxbmj3Dw 2+3fSsZ1Q7rbtw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:03:55 2025 by rpki-client