This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft File: YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json) Hash identifier: 0coQW1PC8NfS//4ZlDf1AODnkOvI1dI2zYtaaetKenA= Subject key identifier: 52:9F:53:C7:95:C5:BC:C9:FB:5E:79:B7:3E:92:15:FF:B7:83:81:5D Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5 Certificate issuer: /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5 Certificate serial: 019B78CA349C3761E57F15DC8BB49DF4EE62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft Manifest number: 0301 Signing time: Thu 01 Jan 2026 09:01:16 +0000 Manifest this update: Thu 01 Jan 2026 09:01:16 +0000 Manifest next update: Fri 02 Jan 2026 09:01:16 +0000 Files and hashes: 1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: IA4s1fNQ3lfi/5P1iqba46/dY5zqi1sfn/m6BowGjWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:34:9c:37:61:e5:7f:15:dc:8b:b4:9d:f4:ee:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5 Validity Not Before: Jan 1 09:01:16 2026 GMT Not After : Jan 2 09:01:16 2026 GMT Subject: CN=529f53c795c5bcc9fb5e79b73e9215ffb783815d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2b:5d:6e:f1:df:a4:9f:98:e1:f5:d9:91:9f: 63:88:f8:d7:12:6d:49:56:36:42:e6:53:51:d5:ad: c9:a9:37:67:11:1f:da:a5:cd:19:52:86:35:61:9a: 52:43:0d:d3:55:49:cb:22:85:13:0e:10:52:ed:31: d3:9a:a7:4e:38:c9:8f:7f:bc:b6:d8:2c:1a:f1:8c: 0b:fa:43:58:af:38:56:22:54:a7:36:fd:a3:de:76: c8:32:e4:f6:bf:17:af:a8:b2:10:32:52:8c:13:30: 5f:5d:7e:a4:55:6e:4f:4e:70:b4:6c:c8:14:71:bf: 2d:62:4d:e5:12:65:49:3f:c6:11:c2:5a:c5:2d:69: 2a:f7:3b:08:bc:3d:08:c0:7c:cd:3e:52:97:a5:82: 90:8b:04:c7:23:e8:65:ac:5e:79:2b:04:1c:d2:0d: 93:8c:91:de:fc:c0:f9:d6:dd:15:1d:d8:81:ff:67: a0:9e:35:30:25:67:8d:67:ce:85:50:ce:92:58:12: 23:d0:7c:72:0b:a5:b7:d2:89:55:3a:c3:65:b3:9f: fc:fd:44:7d:b9:d2:24:c5:97:77:dd:d5:29:63:11: 52:e4:e6:f9:9f:d8:f9:ba:4f:eb:23:b5:24:04:3b: 81:7a:72:cf:01:56:61:61:c2:5a:bb:d3:4c:65:4e: 8c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:53:C7:95:C5:BC:C9:FB:5E:79:B7:3E:92:15:FF:B7:83:81:5D X509v3 Authority Key Identifier: keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:72:b2:39:5c:33:f9:82:f0:51:2f:43:cf:30:8b:86:d4:de: 93:5a:c7:39:e2:84:43:a0:0d:90:b1:8a:49:f0:26:e0:82:8b: 30:1f:b6:ed:48:9e:c9:2c:d1:b8:c0:00:ab:e2:64:a4:96:0c: 46:18:e1:91:61:5e:7c:8c:e7:1c:07:45:c4:00:f7:e1:cc:d7: 30:d7:18:5a:7b:d8:7c:35:45:50:40:e6:8c:d7:fe:43:99:9d: e6:87:65:88:da:39:4f:7f:39:13:16:fd:4c:08:6a:3f:30:41: fd:7b:3a:43:12:e9:10:69:68:cc:d1:40:a8:e1:47:7b:9b:ce: f6:8b:48:27:9b:60:ba:66:be:c8:2f:08:10:96:da:c3:79:83: 60:14:b9:28:4c:79:f6:0e:a0:31:7f:af:59:cc:c5:b1:36:c2: c6:7a:81:b0:1a:83:06:24:91:3a:77:16:04:a1:84:64:dc:a8: 48:dc:7b:2a:89:93:35:28:28:9a:8b:cc:cd:84:a3:d7:62:4b: a3:f7:89:ec:07:e5:5c:6d:7a:e1:ea:6e:f7:f8:0b:3e:32:fb: 36:24:4e:dd:70:a0:9c:97:94:d9:cc:cb:ae:a5:6f:8f:98:f9: 41:28:c5:22:92:ab:ce:c2:1a:6f:9b:6c:69:a2:3c:18:1f:7f: de:db:96:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4yjScN2HlfxXci7Sd9O5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTVmMjVmY2Q0NTgxMWNlNGY5YTFlZjk0Yjk4YWU4MmQy M2M4ZTUwHhcNMjYwMTAxMDkwMTE2WhcNMjYwMTAyMDkwMTE2WjAzMTEwLwYDVQQD Eyg1MjlmNTNjNzk1YzViY2M5ZmI1ZTc5YjczZTkyMTVmZmI3ODM4MTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAritdbvHfpJ+Y4fXZkZ9jiPjXEm1J VjZC5lNR1a3JqTdnER/apc0ZUoY1YZpSQw3TVUnLIoUTDhBS7THTmqdOOMmPf7y2 2Cwa8YwL+kNYrzhWIlSnNv2j3nbIMuT2vxevqLIQMlKMEzBfXX6kVW5PTnC0bMgU cb8tYk3lEmVJP8YRwlrFLWkq9zsIvD0IwHzNPlKXpYKQiwTHI+hlrF55KwQc0g2T jJHe/MD51t0VHdiB/2egnjUwJWeNZ86FUM6SWBIj0HxyC6W30olVOsNls5/8/UR9 udIkxZd33dUpYxFS5Ob5n9j5uk/rI7UkBDuBenLPAVZhYcJau9NMZU6McQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKfU8eVxbzJ+155tz6SFf+3g4FdMB8GA1UdIwQY MBaAFGEV8l/NRYEc5Pmh75S5iugtI8jlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83MDIxZWItYjAzNy00N2ZlLTgyMjEt ZTAyNjBmYWM3NGI5LzEvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83MDIxZWItYjAzNy00N2ZlLTgyMjEtZTAyNjBmYWM3NGI5 LzEvWVJYeVg4MUZnUnprLWFIdmxMbUs2QzBqeU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXKyOVwz +YLwUS9DzzCLhtTek1rHOeKEQ6ANkLGKSfAm4IKLMB+27UieySzRuMAAq+JkpJYM RhjhkWFefIznHAdFxAD34czXMNcYWnvYfDVFUEDmjNf+Q5md5odliNo5T385Exb9 TAhqPzBB/Xs6QxLpEGlozNFAqOFHe5vO9otIJ5tguma+yC8IEJbaw3mDYBS5KEx5 9g6gMX+vWczFsTbCxnqBsBqDBiSROncWBKGEZNyoSNx7KomTNSgomovMzYSj12JL o/eJ7AflXG164epu9/gLPjL7NiRO3XCgnJeU2czLrqVvj5j5QSjFIpKrzsIab5ts aaI8GB9/3tuWkw== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:04 2026 by rpki-client