This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json) Hash identifier: iqTuTbag2JT6cYj1+yIT8h1kFsWVQSayrEiaENFBAr0= Subject key identifier: F1:AC:17:93:7B:7C:F2:26:81:C8:FF:0C:4D:F8:EB:00:22:1A:6B:85 Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19 Certificate serial: 019B631DC4A68551B89004EC548892DD3F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft Manifest number: 0E82 Signing time: Sun 28 Dec 2025 04:00:53 +0000 Manifest this update: Sun 28 Dec 2025 04:00:53 +0000 Manifest next update: Mon 29 Dec 2025 04:00:53 +0000 Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=) 2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: BPHA41ceHy+cqJZBMdaLtAKr1YO9g5jI3F7+SSKWReQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:c4:a6:85:51:b8:90:04:ec:54:88:92:dd:3f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Validity Not Before: Dec 28 04:00:53 2025 GMT Not After : Dec 29 04:00:53 2025 GMT Subject: CN=f1ac17937b7cf22681c8ff0c4df8eb00221a6b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:fb:fd:c4:8e:6e:6e:b6:6e:1a:b0:47:a5: 3b:33:75:27:61:cc:5d:a3:4f:a6:f5:dd:6e:3a:7c: b9:73:76:bb:a1:08:0a:d1:47:7a:16:ed:6b:bb:8e: ee:23:d3:ec:38:3a:8e:87:94:0c:bc:f9:0f:d0:5a: 1b:e7:f0:a1:bd:b4:59:5c:0d:14:6f:9e:0b:12:79: 4c:b8:41:56:dd:c2:f9:bb:f7:0b:ae:1e:d8:7b:cc: 2d:0f:b4:e5:01:f7:65:e6:8f:78:ba:2f:b3:ff:f4: 25:94:2b:52:08:05:b9:d9:59:3c:8c:b6:b4:00:e2: db:b6:e2:0d:a7:12:74:89:41:26:30:31:3c:81:35: 83:ef:71:07:2b:f8:25:7f:08:21:4f:52:79:d0:aa: d2:ed:a1:63:10:7e:e2:f2:9f:af:77:28:e1:29:81: 5b:dd:c0:d6:87:3e:0c:0b:a6:1e:a8:81:1c:76:ae: 67:ad:f0:21:9b:01:63:57:5c:1b:b4:d6:a6:58:75: 20:1d:67:ec:24:db:db:93:70:9e:76:d4:9f:ab:a6: 17:2f:0e:c8:d0:7b:c2:4d:6f:9c:5a:41:2b:38:1d: 70:1b:71:f4:19:41:60:07:e2:62:8c:2a:7a:a7:c8: 9c:b0:03:7b:7a:b5:12:fc:69:9a:13:34:55:06:d4: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AC:17:93:7B:7C:F2:26:81:C8:FF:0C:4D:F8:EB:00:22:1A:6B:85 X509v3 Authority Key Identifier: keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:51:7d:e6:9d:2a:a4:dc:f3:49:8d:b1:5b:3c:b5:99:52:32: 60:70:b6:6d:55:8b:31:65:45:23:6e:86:8e:f1:8c:88:b0:7d: 6e:dc:83:70:b8:fa:91:9c:6d:5a:52:05:21:0a:a0:ae:54:fb: 98:7a:a3:26:17:8b:08:75:5f:c8:33:67:75:66:a7:6a:ff:b3: 44:b9:1e:1d:a2:f8:15:aa:34:74:67:22:1e:c5:ef:b7:0d:a4: 25:7b:f0:da:21:9f:71:58:b4:fe:7c:4e:9d:62:ab:b7:03:e6: 9b:34:46:77:6f:56:73:44:0f:83:73:82:83:35:77:b6:8d:b1: ad:6e:62:c8:d2:31:71:e8:5c:65:3a:95:eb:09:32:ec:f4:64: 77:a7:a8:ac:23:ed:b1:21:36:89:35:19:dd:6b:05:e5:28:c0: 18:5d:d4:e3:40:a0:1b:6b:8b:cc:3b:e6:70:dd:d4:8c:e2:0a: 64:74:15:90:e9:aa:c5:51:a5:d7:56:ed:38:89:8f:e7:1c:44: 36:1d:3c:e4:de:63:fb:2e:73:8c:4b:29:49:27:eb:43:55:3b: 96:67:07:cb:df:1a:de:b9:1c:1a:7e:94:50:39:b7:d4:99:e4: 6d:e3:ed:da:89:05:fd:d4:cf:fe:a5:1f:af:67:00:98:28:26: 07:c1:d9:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHcSmhVG4kATsVIiS3T8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0 YTJmMTkwHhcNMjUxMjI4MDQwMDUzWhcNMjUxMjI5MDQwMDUzWjAzMTEwLwYDVQQD EyhmMWFjMTc5MzdiN2NmMjI2ODFjOGZmMGM0ZGY4ZWIwMDIyMWE2Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV37/cSObm62bhqwR6U7M3UnYcxd o0+m9d1uOny5c3a7oQgK0Ud6Fu1ru47uI9PsODqOh5QMvPkP0Fob5/ChvbRZXA0U b54LEnlMuEFW3cL5u/cLrh7Ye8wtD7TlAfdl5o94ui+z//QllCtSCAW52Vk8jLa0 AOLbtuINpxJ0iUEmMDE8gTWD73EHK/glfwghT1J50KrS7aFjEH7i8p+vdyjhKYFb 3cDWhz4MC6YeqIEcdq5nrfAhmwFjV1wbtNamWHUgHWfsJNvbk3CedtSfq6YXLw7I 0HvCTW+cWkErOB1wG3H0GUFgB+JijCp6p8icsAN7erUS/GmaEzRVBtQP6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGsF5N7fPImgcj/DE346wAiGmuFMB8GA1UdIwQY MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlF95p0q pNzzSY2xWzy1mVIyYHC2bVWLMWVFI26GjvGMiLB9btyDcLj6kZxtWlIFIQqgrlT7 mHqjJheLCHVfyDNndWanav+zRLkeHaL4Fao0dGciHsXvtw2kJXvw2iGfcVi0/nxO nWKrtwPmmzRGd29Wc0QPg3OCgzV3to2xrW5iyNIxcehcZTqV6wky7PRkd6eorCPt sSE2iTUZ3WsF5SjAGF3U40CgG2uLzDvmcN3UjOIKZHQVkOmqxVGl11btOImP5xxE Nh085N5j+y5zjEspSSfrQ1U7lmcHy98a3rkcGn6UUDm31JnkbePt2okF/dTP/qUf r2cAmCgmB8HZWQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:27:27 2025 by rpki-client