This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft File: yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft (raw, json) Hash identifier: 3NIjmGwVaAi/SXnDH/mX2qRx9u8Txdizs+Ci3eaJvfU= Subject key identifier: 2B:99:DE:16:67:0B:78:2A:CA:72:EF:8D:46:26:DC:50:DB:7A:E5:17 Authority key identifier: CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C Certificate issuer: /CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c Certificate serial: 019B3D231A79F9CB657511E9DF368FE9E679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:01:09 +0000 Manifest this update: Sat 20 Dec 2025 19:01:09 +0000 Manifest next update: Sun 21 Dec 2025 19:01:09 +0000 Files and hashes: 1: rYX5OSjisXVBgIC77wXTzITcbqs.roa (hash: SPnPR9xhnE7+gAosfCHCqCDCEcNhjAT2MXJYL+lu5nM=) 2: yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl (hash: IhfMiX5Q7vg7vNKuY3aR81N+36EvuuPwEUZLujK3Scs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1a:79:f9:cb:65:75:11:e9:df:36:8f:e9:e6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2cc7ce42e79c351ac7d28f645de7f5938acc9c Validity Not Before: Dec 20 19:01:09 2025 GMT Not After : Dec 21 19:01:09 2025 GMT Subject: CN=2b99de16670b782aca72ef8d4626dc50db7ae517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:f2:b6:14:24:e8:79:f0:7d:e7:31:ae:b4: 8a:58:c9:02:ee:ac:6c:ea:84:4d:82:b3:f3:8e:a0: 6c:db:28:bb:12:30:54:2e:05:dc:b1:ea:66:18:58: 21:e0:66:11:9a:6a:a4:b6:68:da:32:9f:a5:9f:da: c8:c4:a6:66:36:4d:76:06:13:02:fa:fd:d8:77:21: 63:65:f2:8c:cd:3c:01:e7:24:8a:e0:46:af:29:a7: 7e:d8:63:6b:79:b2:8f:15:5d:0f:5b:2d:cf:df:34: 50:76:34:fb:b2:d5:c7:1e:1e:52:1a:b1:bc:d6:97: 10:68:82:a1:b4:51:6b:22:d4:28:e1:e9:b4:f8:4a: 0f:59:e2:f8:5f:8c:02:bb:61:8b:cf:e6:2f:d1:98: 3a:fd:02:5a:bd:45:9d:9a:f5:07:36:b2:b4:06:b5: dd:28:0d:5f:0a:82:7a:6a:41:5e:da:64:13:4d:50: e4:74:f5:03:aa:d8:e3:f0:99:60:89:26:22:08:42: 1f:98:ce:c3:c5:4b:30:09:72:16:71:3b:bb:f2:6b: 76:cd:75:87:fa:83:b8:17:20:29:cc:8a:c1:59:ab: 90:57:82:03:31:d0:ef:bc:06:46:c3:80:21:93:86: f6:19:ec:05:e0:f8:ba:11:68:92:a5:53:04:aa:76: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:99:DE:16:67:0B:78:2A:CA:72:EF:8D:46:26:DC:50:DB:7A:E5:17 X509v3 Authority Key Identifier: keyid:CB:2C:C7:CE:42:E7:9C:35:1A:C7:D2:8F:64:5D:E7:F5:93:8A:CC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyzHzkLnnDUax9KPZF3n9ZOKzJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/90c403-e6e9-41e0-b157-781d8fb1d2fb/1/yyzHzkLnnDUax9KPZF3n9ZOKzJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c9:db:5d:75:81:fe:1e:12:96:1d:a7:a9:51:3c:4b:4e:b5: 36:84:be:25:ce:44:6c:08:6c:99:eb:83:ed:11:62:33:22:32: 85:f5:f3:de:21:86:59:f3:01:9d:4c:82:95:9f:e1:2b:9d:c6: 0e:28:a7:ba:03:54:ec:a9:bd:32:d2:10:d5:30:d8:ef:1c:e4: 7b:f6:c5:44:03:db:0d:7c:93:cb:93:a5:1e:6a:1e:2e:e3:5f: 3c:6f:a5:67:8d:68:df:c3:75:e1:fe:a7:ac:94:22:e0:7e:6b: e3:b8:d1:da:30:10:3c:01:49:14:c7:f9:c4:63:94:20:cd:59: 4b:ab:e6:74:19:87:e7:07:04:b1:ba:a7:7b:6f:d8:b7:ae:30: 6b:de:82:4f:6c:85:7f:a7:31:c0:21:fe:f3:8a:8a:ea:9a:05: 3c:0d:26:3f:ca:14:b6:8b:63:e3:00:b7:79:fc:ed:2e:54:00: fb:70:12:b0:b9:92:e6:54:f1:a7:d3:5d:07:95:02:76:0e:2a: 97:9b:31:e4:d8:d9:73:bc:8b:96:d1:13:a5:0a:fd:a6:7e:0c: 2d:8e:cd:1a:25:ab:df:3b:3d:3f:48:4f:5c:4b:1e:b5:16:b9: 24:77:be:be:da:ba:cb:20:17:3b:3c:d2:4b:1a:aa:53:de:fe: 95:60:f6:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ixp5+ctldRHp3zaP6eZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMmNjN2NlNDJlNzljMzUxYWM3ZDI4ZjY0NWRlN2Y1OTM4 YWNjOWMwHhcNMjUxMjIwMTkwMTA5WhcNMjUxMjIxMTkwMTA5WjAzMTEwLwYDVQQD EygyYjk5ZGUxNjY3MGI3ODJhY2E3MmVmOGQ0NjI2ZGM1MGRiN2FlNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOrythQk6HnwfecxrrSKWMkC7qxs 6oRNgrPzjqBs2yi7EjBULgXcsepmGFgh4GYRmmqktmjaMp+ln9rIxKZmNk12BhMC +v3YdyFjZfKMzTwB5ySK4EavKad+2GNrebKPFV0PWy3P3zRQdjT7stXHHh5SGrG8 1pcQaIKhtFFrItQo4em0+EoPWeL4X4wCu2GLz+Yv0Zg6/QJavUWdmvUHNrK0BrXd KA1fCoJ6akFe2mQTTVDkdPUDqtjj8JlgiSYiCEIfmM7DxUswCXIWcTu78mt2zXWH +oO4FyApzIrBWauQV4IDMdDvvAZGw4Ahk4b2GewF4Pi6EWiSpVMEqnaZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuZ3hZnC3gqynLvjUYm3FDbeuUXMB8GA1UdIwQY MBaAFMssx85C55w1GsfSj2Rd5/WTisycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTct NzgxZDhmYjFkMmZiLzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85MGM0MDMtZTZlOS00MWUwLWIxNTctNzgxZDhmYjFkMmZi LzEveXl6SHprTG5uRFVheDlLUFpGM245Wk9Lekp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8nbXXWB /h4Slh2nqVE8S061NoS+Jc5EbAhsmeuD7RFiMyIyhfXz3iGGWfMBnUyClZ/hK53G DiinugNU7Km9MtIQ1TDY7xzke/bFRAPbDXyTy5OlHmoeLuNfPG+lZ41o38N14f6n rJQi4H5r47jR2jAQPAFJFMf5xGOUIM1ZS6vmdBmH5wcEsbqne2/Yt64wa96CT2yF f6cxwCH+84qK6poFPA0mP8oUtotj4wC3efztLlQA+3ASsLmS5lTxp9NdB5UCdg4q l5sx5NjZc7yLltETpQr9pn4MLY7NGiWr3zs9P0hPXEsetRa5JHe+vtq6yyAXOzzS SxqqU97+lWD2tw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:48 2025 by rpki-client