This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json) Hash identifier: xwHsPdI5teUiTTKZj9aLyy8GFbUjjCd8sOnHw3/0/V8= Subject key identifier: FF:6F:24:77:FB:0A:9F:B5:60:5C:D4:21:49:74:2A:8F:D3:A0:49:9E Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Certificate serial: 019B397CE442ED34171733EC0A54142C034F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft Manifest number: 055E Signing time: Sat 20 Dec 2025 02:00:44 +0000 Manifest this update: Sat 20 Dec 2025 02:00:44 +0000 Manifest next update: Sun 21 Dec 2025 02:00:44 +0000 Files and hashes: 1: 1-LEPBz6i6hImn3mV_S1v00A4A9I.roa (hash: n8X2YxrArW/csdR8L4lSuYzNuaLlfUpgcoHhlnq7ZqA=) 2: CRLKSL7jlflKsL6EjE4-moIQmCM.roa (hash: 6+JoZAmESgaN/76bU7Y5WiwYsPPWlXJLt1m1R/AMrUc=) 3: UVQQxsyFxE5G_GAZUd3A6ZXjkCE.roa (hash: zpm9oScjJUHtNk/CwO+EVZyjIHRYFCB8FAgH34Qnsvo=) 4: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: Ljq29apWYq3uXebM0g8By9Qv6aWwAOijGxxtd+dAcRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:e4:42:ed:34:17:17:33:ec:0a:54:14:2c:03:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3 Validity Not Before: Dec 20 02:00:44 2025 GMT Not After : Dec 21 02:00:44 2025 GMT Subject: CN=ff6f2477fb0a9fb5605cd42149742a8fd3a0499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:c8:15:e8:a8:1a:7f:27:aa:c0:c0:8f:46: dc:36:bc:88:a2:d4:00:6b:64:38:c0:91:45:0e:22: 55:bf:a9:b6:bf:40:dd:e3:5f:0f:b7:47:98:94:19: 8f:3c:26:48:ba:44:bb:79:33:44:2f:85:db:52:2f: 27:9f:cb:b0:63:71:a6:69:53:18:94:1a:58:c1:33: 49:9e:91:3a:95:be:60:55:2c:1f:38:db:a3:07:77: 99:30:1d:b4:7d:01:8f:06:ab:66:d1:60:04:46:3c: bd:0d:7f:0d:c1:a8:c1:17:03:df:8b:38:8c:05:a2: a8:0e:22:10:a0:d6:74:d7:5e:6b:19:c4:36:08:a2: 19:f7:04:e1:9a:80:40:58:7f:e4:29:63:b1:d1:f5: 09:73:2b:97:0d:3a:cc:40:2f:db:e8:f5:25:4b:de: b3:6f:91:b9:38:c3:a6:88:e2:37:0f:b2:13:0a:29: dc:2a:30:f1:60:fe:e6:0a:55:f3:e6:98:17:92:0d: 2f:13:09:7c:b9:08:ce:3d:1c:84:89:b8:10:b6:11: 73:5c:16:01:d9:aa:53:cb:b8:df:a3:b3:f1:9b:98: 37:e2:40:59:c4:54:46:83:6f:33:b2:bd:60:d1:cb: 27:77:1d:f2:ad:f7:e1:c5:46:29:69:22:da:15:75: 20:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6F:24:77:FB:0A:9F:B5:60:5C:D4:21:49:74:2A:8F:D3:A0:49:9E X509v3 Authority Key Identifier: keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:48:ba:08:90:7c:9d:6b:29:50:06:c1:c7:96:72:35:96:49: 88:b9:78:f6:0e:42:51:b5:1a:5a:7b:c0:e2:ae:67:ea:21:6f: f3:2e:cd:84:a3:90:44:19:55:85:0c:2a:d3:49:51:8c:8a:b2: 2a:cb:ba:23:ab:79:ed:73:ed:79:94:c4:fc:ee:b6:f8:26:7a: fa:ae:0f:b2:77:c2:3a:d6:41:2e:73:b9:43:87:bc:51:61:0c: fc:07:f0:62:64:34:e5:d8:16:fa:39:74:f8:e3:24:e6:90:e4: 8d:81:3c:f2:bf:24:2a:8b:0c:ab:64:e0:d0:fe:56:5a:53:d9: f9:49:26:1c:b0:40:bd:71:a7:32:ac:2e:5e:cf:10:9c:d3:99: 1b:7a:55:1d:61:ab:4f:e6:89:47:f9:20:b9:5a:60:da:6e:0f: fd:d4:8e:aa:99:fa:9a:e3:ca:ce:42:91:2f:96:83:6c:9b:7e: 5a:c4:d3:74:33:de:b8:0d:9e:35:43:0b:c0:76:01:96:91:55: a7:b6:98:38:43:29:a4:3c:1a:aa:b9:fc:cf:54:fb:74:35:66: 1f:70:a9:9e:ef:33:f0:51:77:3a:4e:ea:70:6d:cc:1f:6f:c0: ae:48:1f:c3:fa:4e:ac:d9:3c:35:f3:a6:90:99:b3:fc:56:65: 33:f4:1a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fORC7TQXFzPsClQULANPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YTNhNWU0MTFkZWFmMjI4NGZmZDAxNTMwYmZiNDFmODE2 Y2JiYTMwHhcNMjUxMjIwMDIwMDQ0WhcNMjUxMjIxMDIwMDQ0WjAzMTEwLwYDVQQD EyhmZjZmMjQ3N2ZiMGE5ZmI1NjA1Y2Q0MjE0OTc0MmE4ZmQzYTA0OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9LIFeioGn8nqsDAj0bcNryIotQA a2Q4wJFFDiJVv6m2v0Dd418Pt0eYlBmPPCZIukS7eTNEL4XbUi8nn8uwY3GmaVMY lBpYwTNJnpE6lb5gVSwfONujB3eZMB20fQGPBqtm0WAERjy9DX8NwajBFwPfiziM BaKoDiIQoNZ0115rGcQ2CKIZ9wThmoBAWH/kKWOx0fUJcyuXDTrMQC/b6PUlS96z b5G5OMOmiOI3D7ITCincKjDxYP7mClXz5pgXkg0vEwl8uQjOPRyEibgQthFzXBYB 2apTy7jfo7Pxm5g34kBZxFRGg28zsr1g0csndx3yrffhxUYpaSLaFXUgxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9vJHf7Cp+1YFzUIUl0Ko/ToEmeMB8GA1UdIwQY MBaAFMmjpeQR3q8ihP/QFTC/tB+BbLujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYt MjBkMjQ5MDAxMzBhLzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iOGVhODMtNDc2NS00M2E2LWE1NGYtMjBkMjQ5MDAxMzBh LzEveWFPbDVCSGVyeUtFXzlBVk1MLTBINEZzdTZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtEi6CJB8 nWspUAbBx5ZyNZZJiLl49g5CUbUaWnvA4q5n6iFv8y7NhKOQRBlVhQwq00lRjIqy Ksu6I6t57XPteZTE/O62+CZ6+q4PsnfCOtZBLnO5Q4e8UWEM/AfwYmQ05dgW+jl0 +OMk5pDkjYE88r8kKosMq2Tg0P5WWlPZ+UkmHLBAvXGnMqwuXs8QnNOZG3pVHWGr T+aJR/kguVpg2m4P/dSOqpn6muPKzkKRL5aDbJt+WsTTdDPeuA2eNUMLwHYBlpFV p7aYOEMppDwaqrn8z1T7dDVmH3Cpnu8z8FF3Ok7qcG3MH2/Arkgfw/pOrNk8NfOm kJmz/FZlM/Qagg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:24:09 2025 by rpki-client