This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft File: Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json) Hash identifier: l1s3H27hThIgezautUrXGgkj30j8pknW1tnr7tYxM30= Subject key identifier: 5B:E8:59:E9:5C:17:ED:BF:9F:A3:7F:4A:12:2F:7A:B9:F7:26:91:05 Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F Certificate issuer: /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f Certificate serial: 019B3D22D84A4FC1C064B7A6DF6B4A8ED02A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft Manifest number: 06F2 Signing time: Sat 20 Dec 2025 19:00:52 +0000 Manifest this update: Sat 20 Dec 2025 19:00:52 +0000 Manifest next update: Sun 21 Dec 2025 19:00:52 +0000 Files and hashes: 1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: +E4ejRWhBNOeHvqxBYmicCECeJJGczzTIRdsOfSoKOE=) 2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:d8:4a:4f:c1:c0:64:b7:a6:df:6b:4a:8e:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f Validity Not Before: Dec 20 19:00:52 2025 GMT Not After : Dec 21 19:00:52 2025 GMT Subject: CN=5be859e95c17edbf9fa37f4a122f7ab9f7269105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:4e:79:38:37:d6:7a:75:89:8f:5e:00:11: f3:2e:50:d5:a8:83:9d:7f:8a:87:6b:d0:25:7c:3a: f8:48:ff:f3:98:a4:eb:83:e2:ac:04:8b:3a:cb:7b: 08:82:6c:bf:b7:46:3b:67:7f:22:d1:2f:41:80:ce: 42:65:1e:5a:2a:58:4c:64:16:7b:ec:38:6a:5f:b1: 3f:20:ce:89:9b:43:8a:1f:91:2b:92:4a:46:c2:15: 80:df:a8:88:49:3a:a1:81:93:25:f9:f6:64:26:3b: 75:c3:6d:03:b2:b7:e9:bb:0c:84:d6:50:4c:be:57: 25:af:9a:de:36:cb:28:8d:ec:e5:7d:bf:6c:ef:ff: 21:a2:79:d7:8f:75:fe:b0:03:36:87:7d:5c:77:f8: 6d:10:67:1e:42:96:d4:e6:ad:d5:a2:c0:01:19:5a: 29:73:48:9d:08:91:ec:6d:35:86:a5:2c:01:c4:8e: 75:ea:ee:3a:ea:8f:ca:04:b9:66:7a:e0:40:c7:d3: 76:cd:8d:39:9a:02:34:d3:4c:f9:b8:01:5e:17:af: c6:70:ce:ae:a0:7b:85:6f:9e:3f:c7:3e:d5:7b:00: eb:28:fd:5d:b8:27:9a:e3:cb:7e:35:02:8b:df:36: c6:34:43:da:82:19:92:a5:93:1c:ca:38:dc:ac:4d: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:59:E9:5C:17:ED:BF:9F:A3:7F:4A:12:2F:7A:B9:F7:26:91:05 X509v3 Authority Key Identifier: keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ed:58:d1:43:b1:5a:17:c2:6e:82:5c:e4:c5:ce:fa:df:d8: 6c:3d:00:a8:bd:65:93:ad:5e:6b:69:5c:1b:3a:c2:d2:4b:c3: 84:45:3b:09:a7:ce:4b:2e:69:77:6e:57:0f:fa:5c:48:ea:48: d6:85:e7:d0:f3:16:88:7e:c2:b0:41:c5:fa:51:00:cc:7c:bd: 0e:da:60:9d:f9:24:fc:39:04:02:21:76:35:93:0b:8c:1f:8a: 7a:b9:08:5f:1d:f4:62:50:69:0c:d5:32:de:39:62:27:1d:3f: 2f:38:f4:72:6b:77:57:ff:bd:82:9f:85:14:22:ab:a4:9f:52: fa:85:91:5a:09:54:b1:75:7a:df:f5:6e:8b:4e:d8:71:b2:8f: 1d:91:35:17:30:ea:ed:8f:fa:be:74:89:92:2e:89:d0:bf:0c: 33:86:63:e5:ff:8b:d5:50:a7:23:15:78:04:44:33:02:d4:a8: b2:58:04:dd:79:c2:0d:98:07:39:92:37:9d:f1:da:80:da:ef: 0a:13:23:62:a3:49:60:1d:e0:3e:a9:f5:85:38:f0:b5:1b:13: b0:ea:b5:a5:53:41:a5:3a:a2:23:9e:06:7a:49:37:cf:b5:26: a1:bc:88:51:89:bf:ea:32:5e:b3:6e:c9:36:04:4f:5b:25:d7: 0c:e9:a0:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IthKT8HAZLem32tKjtAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYWE3ZDYzMTNhYmRjMjdjOTJkMGJhNTQ5ZTg2ODNmOWE4 ZjE1MGYwHhcNMjUxMjIwMTkwMDUyWhcNMjUxMjIxMTkwMDUyWjAzMTEwLwYDVQQD Eyg1YmU4NTllOTVjMTdlZGJmOWZhMzdmNGExMjJmN2FiOWY3MjY5MTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3NOeTg31np1iY9eABHzLlDVqIOd f4qHa9AlfDr4SP/zmKTrg+KsBIs6y3sIgmy/t0Y7Z38i0S9BgM5CZR5aKlhMZBZ7 7DhqX7E/IM6Jm0OKH5ErkkpGwhWA36iISTqhgZMl+fZkJjt1w20DsrfpuwyE1lBM vlclr5reNssojezlfb9s7/8honnXj3X+sAM2h31cd/htEGceQpbU5q3VosABGVop c0idCJHsbTWGpSwBxI516u466o/KBLlmeuBAx9N2zY05mgI000z5uAFeF6/GcM6u oHuFb54/xz7VewDrKP1duCea48t+NQKL3zbGNEPaghmSpZMcyjjcrE1XoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvoWelcF+2/n6N/ShIvern3JpEFMB8GA1UdIwQY MBaAFGGqfWMTq9wnyS0LpUnoaD+ajxUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEt ZGNhOGRhODc2ZmU2LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kMjMwY2YtODUzZi00M2I3LTk3NDEtZGNhOGRhODc2ZmU2 LzEvWWFwOVl4T3IzQ2ZKTFF1bFNlaG9QNXFQRlE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu1Y0UOx WhfCboJc5MXO+t/YbD0AqL1lk61ea2lcGzrC0kvDhEU7CafOSy5pd25XD/pcSOpI 1oXn0PMWiH7CsEHF+lEAzHy9Dtpgnfkk/DkEAiF2NZMLjB+KerkIXx30YlBpDNUy 3jliJx0/Lzj0cmt3V/+9gp+FFCKrpJ9S+oWRWglUsXV63/Vui07YcbKPHZE1FzDq 7Y/6vnSJki6J0L8MM4Zj5f+L1VCnIxV4BEQzAtSoslgE3XnCDZgHOZI3nfHagNrv ChMjYqNJYB3gPqn1hTjwtRsTsOq1pVNBpTqiI54Gekk3z7UmobyIUYm/6jJes27J NgRPWyXXDOmg3A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:22 2025 by rpki-client