This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft File: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft (raw, json) Hash identifier: QxArCtkvzeR0pIQj/yOfGTh0AaEcVb1lhO5qBjgIZMk= Subject key identifier: 6B:8E:3A:DD:4C:53:D8:38:49:07:63:A2:99:96:BF:A5:FD:03:69:51 Authority key identifier: CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF Certificate issuer: /CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Certificate serial: 019B7222F04FA17672565862AD43D4B96517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 02:00:50 +0000 Manifest this update: Wed 31 Dec 2025 02:00:50 +0000 Manifest next update: Thu 01 Jan 2026 02:00:50 +0000 Files and hashes: 1: KNF-QXBE-ET2Ss8Ra3b9tGjUuzU.roa (hash: ZA2nOGYGdA1K+/Cu62amSanLsSzoKdIYO3r9rfPBtJE=) 2: yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl (hash: +DFEUNCEBgeqQVQXKYwJOipGL28npY4o+VYx2uKgL38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:f0:4f:a1:76:72:56:58:62:ad:43:d4:b9:65:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb173e8a827e636c4f251ef363bd94ea90a04cbf Validity Not Before: Dec 31 02:00:50 2025 GMT Not After : Jan 1 02:00:50 2026 GMT Subject: CN=6b8e3add4c53d838490763a29996bfa5fd036951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:c8:b9:15:ed:09:f3:64:5f:49:7a:70:28: 6a:b1:01:a9:e4:d7:74:c7:e6:2b:d5:e2:f9:62:4b: 1b:96:c1:41:f9:ea:d7:6b:e3:a1:9e:ca:6f:ba:e0: db:68:f3:19:a6:34:c6:57:c3:92:72:9f:93:74:bd: fd:bf:59:d1:b6:ab:eb:96:72:48:5b:03:11:8f:9d: 9c:09:70:67:c7:f5:7c:ea:b2:22:52:45:1b:13:20: b5:f7:28:57:68:3c:9b:0d:da:e2:97:32:5b:c9:e7: 82:f3:c0:e3:25:3e:cb:df:e3:96:af:cb:64:bd:6b: b2:0b:80:a9:5a:4e:4c:2b:4f:47:d4:a6:fb:5d:74: ca:04:6a:fe:de:df:75:c8:79:06:6e:e2:2a:00:47: d1:0c:20:4d:f9:b3:3a:49:64:f9:76:d2:26:19:52: b1:35:8b:5a:a1:98:bd:0c:b4:bb:52:0f:d5:6d:93: 17:b5:db:cc:15:2a:f3:5a:79:21:99:ab:0b:b9:92: 2a:57:2a:d6:bc:45:e5:52:a7:02:46:27:af:46:02: f9:2f:c8:a4:ab:6e:ff:5c:d0:53:37:fe:3d:f8:e9: af:bc:61:2a:b7:ae:e7:b3:c1:b7:c1:47:1e:b2:83: 07:1b:c1:a6:24:16:9b:71:9e:19:b6:73:4f:49:87: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8E:3A:DD:4C:53:D8:38:49:07:63:A2:99:96:BF:A5:FD:03:69:51 X509v3 Authority Key Identifier: keyid:CB:17:3E:8A:82:7E:63:6C:4F:25:1E:F3:63:BD:94:EA:90:A0:4C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ba7854-886d-4148-a208-5c78639264aa/1/yxc-ioJ-Y2xPJR7zY72U6pCgTL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:94:73:7d:97:d3:52:e9:ee:a9:3c:f6:c7:57:8b:e3:88:a3: f1:9f:e3:2c:cc:ba:e0:a5:87:cd:b5:67:ca:63:06:a5:29:c2: 48:73:b1:77:aa:98:6b:01:b8:4f:04:0c:c2:8e:cf:b1:28:52: 62:ab:19:4b:f1:2b:b3:47:b3:ba:8b:03:ad:d5:80:ca:ad:e5: f3:b2:29:8c:47:49:23:3e:19:da:4d:c7:68:f4:09:14:80:e3: 2f:03:40:88:2c:e2:b0:27:c6:d5:b8:60:5c:ff:bd:f3:47:73: dc:28:0c:73:29:51:99:52:34:ba:58:25:c3:88:b7:04:6c:1b: 55:2c:ba:a5:1c:ce:34:02:01:ac:9f:7d:d0:2e:59:7e:ef:76: a8:9d:9e:0f:ef:dc:4f:b3:6f:a7:a3:d9:a3:7d:56:48:8e:4d: 87:2f:42:d6:4c:48:8c:20:54:d2:3b:d1:07:ea:bc:25:40:d5: f4:91:10:91:53:55:91:9e:1c:66:45:76:86:f9:7b:1d:97:41: c2:89:a0:82:c8:ab:c8:a4:e9:c8:d4:8a:97:9f:7b:58:13:76: 42:11:e0:a9:a0:31:84:d9:a6:e4:95:fd:c5:31:14:0b:bf:92: 3e:ba:66:c9:4a:af:c7:80:b8:e6:2f:ce:08:85:56:3e:95:e9: b3:2b:94:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIvBPoXZyVlhirUPUuWUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTczZThhODI3ZTYzNmM0ZjI1MWVmMzYzYmQ5NGVhOTBh MDRjYmYwHhcNMjUxMjMxMDIwMDUwWhcNMjYwMTAxMDIwMDUwWjAzMTEwLwYDVQQD Eyg2YjhlM2FkZDRjNTNkODM4NDkwNzYzYTI5OTk2YmZhNWZkMDM2OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51fIuRXtCfNkX0l6cChqsQGp5Nd0 x+Yr1eL5YksblsFB+erXa+OhnspvuuDbaPMZpjTGV8OScp+TdL39v1nRtqvrlnJI WwMRj52cCXBnx/V86rIiUkUbEyC19yhXaDybDdrilzJbyeeC88DjJT7L3+OWr8tk vWuyC4CpWk5MK09H1Kb7XXTKBGr+3t91yHkGbuIqAEfRDCBN+bM6SWT5dtImGVKx NYtaoZi9DLS7Ug/VbZMXtdvMFSrzWnkhmasLuZIqVyrWvEXlUqcCRievRgL5L8ik q27/XNBTN/49+OmvvGEqt67ns8G3wUcesoMHG8GmJBabcZ4ZtnNPSYcwHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuOOt1MU9g4SQdjopmWv6X9A2lRMB8GA1UdIwQY MBaAFMsXPoqCfmNsTyUe82O9lOqQoEy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgt NWM3ODYzOTI2NGFhLzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iYTc4NTQtODg2ZC00MTQ4LWEyMDgtNWM3ODYzOTI2NGFh LzEveXhjLWlvSi1ZMnhQSlI3elk3MlU2cENnVEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJRzfZfT UunuqTz2x1eL44ij8Z/jLMy64KWHzbVnymMGpSnCSHOxd6qYawG4TwQMwo7PsShS YqsZS/Ers0ezuosDrdWAyq3l87IpjEdJIz4Z2k3HaPQJFIDjLwNAiCzisCfG1bhg XP+980dz3CgMcylRmVI0ulglw4i3BGwbVSy6pRzONAIBrJ990C5Zfu92qJ2eD+/c T7Nvp6PZo31WSI5Nhy9C1kxIjCBU0jvRB+q8JUDV9JEQkVNVkZ4cZkV2hvl7HZdB womggsiryKTpyNSKl597WBN2QhHgqaAxhNmm5JX9xTEUC7+SPrpmyUqvx4C45i/O CIVWPpXpsyuUyw== -----END CERTIFICATE-----Generated at Wed Dec 31 03:44:23 2025 by rpki-client