This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json) Hash identifier: LgCW1nBT+p1A3SuBiwdFI6pUYlD7n0vkKfezpD+OYNM= Subject key identifier: 2E:DE:C1:D6:D9:67:B3:4F:CA:46:4E:11:87:95:AA:3D:64:B2:E8:90 Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19 Certificate serial: 019B51BBF31DE711F8D24904DA5630089463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft Manifest number: 0E79 Signing time: Wed 24 Dec 2025 19:00:30 +0000 Manifest this update: Wed 24 Dec 2025 19:00:30 +0000 Manifest next update: Thu 25 Dec 2025 19:00:30 +0000 Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=) 2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: KDSxCyFGmJR5qpANsUUW/m056kjnNqfmtUO8Il8wDgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bb:f3:1d:e7:11:f8:d2:49:04:da:56:30:08:94:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Validity Not Before: Dec 24 19:00:30 2025 GMT Not After : Dec 25 19:00:30 2025 GMT Subject: CN=2edec1d6d967b34fca464e118795aa3d64b2e890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:a7:7a:e6:37:2f:96:97:7d:f7:6a:b2:47: e5:03:a0:25:62:86:0b:67:f6:a4:b6:b8:49:e8:b2: 82:06:16:82:03:2a:c4:9a:42:3c:60:49:08:85:09: 72:e5:a6:74:02:b6:1c:14:61:e9:58:59:fe:3a:bb: a9:90:32:b9:98:85:b7:c5:f9:4a:95:29:25:bd:32: 18:5b:0e:50:67:fb:09:87:9f:c0:4b:cf:72:1c:10: 23:7f:05:60:88:6c:bc:70:9c:16:f7:3f:b6:c2:55: ab:1e:ac:46:f6:2e:16:0a:7c:cd:76:f7:d9:5e:a4: 5f:68:cf:3b:72:35:d2:e4:bd:33:ce:ff:76:53:44: 15:48:6a:64:7c:db:cf:3c:8c:dc:e3:f8:74:3d:13: 00:bd:04:69:72:35:af:3f:47:13:82:ba:d8:f8:84: e5:25:cd:63:c4:75:1c:5f:7d:7d:e9:1e:5b:51:2c: 19:45:a4:9e:41:76:05:bc:0e:62:46:7b:4f:71:3a: f1:b3:8c:00:88:8d:07:2d:07:88:19:b5:29:67:15: 9b:db:51:a0:fc:cc:38:63:f5:ab:bc:ba:9e:9c:64: 8a:a9:a4:3f:7e:a0:68:89:8a:28:07:cf:af:60:6b: f1:59:c0:45:cc:01:bc:51:e8:26:e5:a6:72:1c:76: 3f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DE:C1:D6:D9:67:B3:4F:CA:46:4E:11:87:95:AA:3D:64:B2:E8:90 X509v3 Authority Key Identifier: keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:6f:79:5a:8d:7d:19:4c:d7:55:2e:6c:a7:e7:ba:3a:98:ed: 48:1d:8c:00:fd:63:06:89:44:1d:fd:3b:48:fa:01:b6:58:f5: d1:1d:49:2c:e6:75:7f:83:47:db:37:8e:c1:4e:84:3b:3d:58: 0a:77:15:7f:94:60:42:fd:0c:31:5a:37:09:90:77:2f:b6:3b: dd:9d:6e:78:8f:d3:13:a3:12:ba:f1:e2:b8:17:dc:5a:ba:b6: 24:ca:f4:a2:64:43:14:b8:b5:a6:68:26:9f:f1:36:99:d1:9f: c6:67:86:46:bb:58:08:02:ab:25:5d:70:06:39:27:7d:e9:49: 32:ad:17:f8:71:97:73:06:0e:8d:7a:b1:a5:0b:28:90:27:b7: ec:14:e8:48:83:5a:fb:12:4d:b2:01:c0:5a:9b:c0:e9:89:ba: 68:14:5b:bb:f4:c6:70:13:73:ec:00:33:a1:08:62:40:59:b9: 02:94:41:31:37:fc:4c:e4:60:e2:2e:24:1f:f8:8b:57:d2:fb: 02:62:c7:09:c6:e4:fd:b4:76:9d:3c:a2:54:f4:f4:cf:56:70: 47:51:26:f8:fd:3c:52:5d:a4:1b:7c:ea:70:ac:24:e2:76:38: 1d:2c:e7:6c:42:dd:da:62:62:1e:02:1b:1e:52:34:12:ee:95: ef:d9:86:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRu/Md5xH40kkE2lYwCJRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0 YTJmMTkwHhcNMjUxMjI0MTkwMDMwWhcNMjUxMjI1MTkwMDMwWjAzMTEwLwYDVQQD EygyZWRlYzFkNmQ5NjdiMzRmY2E0NjRlMTE4Nzk1YWEzZDY0YjJlODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRSneuY3L5aXffdqskflA6AlYoYL Z/aktrhJ6LKCBhaCAyrEmkI8YEkIhQly5aZ0ArYcFGHpWFn+OrupkDK5mIW3xflK lSklvTIYWw5QZ/sJh5/AS89yHBAjfwVgiGy8cJwW9z+2wlWrHqxG9i4WCnzNdvfZ XqRfaM87cjXS5L0zzv92U0QVSGpkfNvPPIzc4/h0PRMAvQRpcjWvP0cTgrrY+ITl Jc1jxHUcX3196R5bUSwZRaSeQXYFvA5iRntPcTrxs4wAiI0HLQeIGbUpZxWb21Gg /Mw4Y/WrvLqenGSKqaQ/fqBoiYooB8+vYGvxWcBFzAG8Uegm5aZyHHY/QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7ewdbZZ7NPykZOEYeVqj1ksuiQMB8GA1UdIwQY MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW95Wo19 GUzXVS5sp+e6OpjtSB2MAP1jBolEHf07SPoBtlj10R1JLOZ1f4NH2zeOwU6EOz1Y CncVf5RgQv0MMVo3CZB3L7Y73Z1ueI/TE6MSuvHiuBfcWrq2JMr0omRDFLi1pmgm n/E2mdGfxmeGRrtYCAKrJV1wBjknfelJMq0X+HGXcwYOjXqxpQsokCe37BToSINa +xJNsgHAWpvA6Ym6aBRbu/TGcBNz7AAzoQhiQFm5ApRBMTf8TORg4i4kH/iLV9L7 AmLHCcbk/bR2nTyiVPT0z1ZwR1Em+P08Ul2kG3zqcKwk4nY4HSznbELd2mJiHgIb HlI0Eu6V79mGgA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:42:19 2025 by rpki-client