This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft File: yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json) Hash identifier: ZdJueHgX9d3dWGhWv7hsYKfNPgCJZqida/BmWMf5Ugc= Subject key identifier: 62:23:C4:21:8E:7E:7E:F6:43:7D:00:AA:9B:E5:7C:54:4A:A5:AE:1D Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 Certificate issuer: /CN=caee41074e35990afe4f50a84e42eb09584a2f19 Certificate serial: 019B38A13693A5040520DA8A7343A41DFB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft Manifest number: 0E6C Signing time: Fri 19 Dec 2025 22:00:47 +0000 Manifest this update: Fri 19 Dec 2025 22:00:47 +0000 Manifest next update: Sat 20 Dec 2025 22:00:47 +0000 Files and hashes: 1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=) 2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: 6S6GTDrt7aEHfcutNT0jPsyCkSzoT7Q8fQcNfqmveXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:36:93:a5:04:05:20:da:8a:73:43:a4:1d:fb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19 Validity Not Before: Dec 19 22:00:47 2025 GMT Not After : Dec 20 22:00:47 2025 GMT Subject: CN=6223c4218e7e7ef6437d00aa9be57c544aa5ae1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:74:2a:b5:a3:c8:b0:d8:b4:19:56:31:0a: 38:c6:84:be:97:74:1a:c7:47:4f:a5:58:18:88:e5: 5f:35:d0:cd:c9:76:5d:e1:72:ee:9f:45:f4:fe:82: 2a:14:6e:b0:87:7d:ce:dd:12:60:26:e9:9b:36:2a: f9:a0:94:84:ea:ab:78:b1:a4:53:5e:16:77:02:0b: 78:76:99:e3:bb:95:7f:77:b0:78:1e:12:81:43:f4: f0:8c:d6:7f:a5:f1:23:fc:96:ba:4c:de:e1:d9:9f: 0e:57:d7:1a:2c:40:41:8e:7b:40:29:74:d7:d7:45: 12:03:cc:8e:aa:21:fc:4e:d5:29:f9:68:20:84:c8: dd:0d:a7:3f:32:32:79:f4:1d:ef:17:a7:24:7d:3e: 48:33:86:e4:ed:7d:4c:4e:57:ff:d9:86:fa:52:f7: 09:7b:e6:5a:de:b5:25:ce:99:89:37:be:12:ce:b8: 32:e8:40:6f:dd:e2:47:9f:2d:ee:cc:1a:f4:07:97: ca:22:6e:25:62:f8:c4:6d:a0:88:67:c8:14:cb:96: 21:89:dd:bd:a2:2f:f4:c7:37:be:f0:3a:f3:4c:91: 8a:c2:bf:07:01:bf:28:16:44:a4:70:b7:54:91:d2: 06:2c:af:e6:e1:82:9b:a3:07:6a:c4:64:fa:31:47: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:23:C4:21:8E:7E:7E:F6:43:7D:00:AA:9B:E5:7C:54:4A:A5:AE:1D X509v3 Authority Key Identifier: keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cd:24:dc:52:16:c0:aa:46:e2:16:58:f5:63:a9:37:30:d1: 18:fb:72:14:e9:05:13:53:1c:ce:98:ed:8b:fe:01:f8:3f:77: 0b:13:f2:f6:4d:c5:a1:75:c0:07:c8:99:c6:ce:04:16:c4:c8: 65:ba:f3:8f:2c:fc:d7:ca:af:f2:a7:a3:5c:7f:fe:07:7b:64: e0:50:db:f9:f6:f2:83:3e:43:ee:df:58:89:e5:27:eb:a2:7a: 41:5e:53:89:39:69:9b:b0:b3:75:f7:a4:d5:31:46:a9:b9:e2: 77:77:33:cf:2b:72:21:c7:04:03:5a:36:f6:7d:28:cf:8f:66: b6:32:5c:16:d9:42:94:32:90:57:c9:1c:98:8a:04:f9:5f:70: b7:14:ef:c4:33:8c:79:57:5c:34:72:1b:22:eb:6b:89:3b:9e: 03:8c:f1:20:2d:bf:87:7e:55:f4:16:43:62:91:f3:b8:ef:f8: e7:c0:db:88:4f:cc:4c:2e:df:62:4f:01:c6:da:a5:a8:4d:08: 3d:48:41:dc:e5:7a:d5:eb:f5:46:c0:58:0f:ee:19:56:15:2f: 43:69:95:89:b2:d2:1a:44:25:6d:1a:73:77:a1:38:39:b9:43: 26:02:da:94:f1:5e:42:6e:1f:cf:81:09:a6:fd:92:94:6f:fb: e4:7d:e0:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oTaTpQQFINqKc0OkHfsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0 YTJmMTkwHhcNMjUxMjE5MjIwMDQ3WhcNMjUxMjIwMjIwMDQ3WjAzMTEwLwYDVQQD Eyg2MjIzYzQyMThlN2U3ZWY2NDM3ZDAwYWE5YmU1N2M1NDRhYTVhZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppF0KrWjyLDYtBlWMQo4xoS+l3Qa x0dPpVgYiOVfNdDNyXZd4XLun0X0/oIqFG6wh33O3RJgJumbNir5oJSE6qt4saRT XhZ3Agt4dpnju5V/d7B4HhKBQ/TwjNZ/pfEj/Ja6TN7h2Z8OV9caLEBBjntAKXTX 10USA8yOqiH8TtUp+WgghMjdDac/MjJ59B3vF6ckfT5IM4bk7X1MTlf/2Yb6UvcJ e+Za3rUlzpmJN74Szrgy6EBv3eJHny3uzBr0B5fKIm4lYvjEbaCIZ8gUy5Yhid29 oi/0xze+8DrzTJGKwr8HAb8oFkSkcLdUkdIGLK/m4YKbowdqxGT6MUeuZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIjxCGOfn72Q30AqpvlfFRKpa4dMB8GA1UdIwQY MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM0k3FIW wKpG4hZY9WOpNzDRGPtyFOkFE1Mczpjti/4B+D93CxPy9k3FoXXAB8iZxs4EFsTI Zbrzjyz818qv8qejXH/+B3tk4FDb+fbygz5D7t9YieUn66J6QV5TiTlpm7Czdfek 1TFGqbnid3czzytyIccEA1o29n0oz49mtjJcFtlClDKQV8kcmIoE+V9wtxTvxDOM eVdcNHIbIutriTueA4zxIC2/h35V9BZDYpHzuO/458DbiE/MTC7fYk8BxtqlqE0I PUhB3OV61ev1RsBYD+4ZVhUvQ2mVibLSGkQlbRpzd6E4OblDJgLalPFeQm4fz4EJ pv2SlG/75H3gww== -----END CERTIFICATE-----Generated at Sat Dec 20 06:29:05 2025 by rpki-client