This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft File: yIxTtHfDv6cLYfQntHmUwtF4NFg.mft (raw, json) Hash identifier: LO1YCPfqCuIvfv+3PVKxFd6X+TqWbZ2mTlNF7OB6Bq0= Subject key identifier: 15:26:6E:36:BC:C4:7E:6D:37:8C:53:F9:E1:9B:B7:1F:46:4C:02:6F Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58 Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458 Certificate serial: 019B71471CCBBE1A1505FBA94EBEF82A900C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft Manifest number: 178C Signing time: Tue 30 Dec 2025 22:00:44 +0000 Manifest this update: Tue 30 Dec 2025 22:00:44 +0000 Manifest next update: Wed 31 Dec 2025 22:00:44 +0000 Files and hashes: 1: m58bu936joBld4DytknROe5jx80.roa (hash: NrLcVOqSqVsHWkNiV+l2TPI8nTmNKxpp0ie7MxAwGUE=) 2: yIxTtHfDv6cLYfQntHmUwtF4NFg.crl (hash: ctngWL6Hu5jdJtK0yqgZJEMuUkmxKUnZSFtJMn5qT88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:47:1c:cb:be:1a:15:05:fb:a9:4e:be:f8:2a:90:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458 Validity Not Before: Dec 30 22:00:44 2025 GMT Not After : Dec 31 22:00:44 2025 GMT Subject: CN=15266e36bcc47e6d378c53f9e19bb71f464c026f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:59:19:9c:89:19:9c:cc:82:e7:d0:a8:82: 76:ca:39:4f:6a:b9:7b:a2:fa:9b:6f:2a:eb:5d:31: 45:2f:c0:47:81:23:1d:c5:02:07:1a:cd:f0:f0:cf: f9:13:50:1c:4a:fc:ff:1f:a2:cc:8b:cd:c0:4f:cb: ad:fa:e9:43:a7:3e:ce:88:8b:d9:75:48:73:b8:8a: 7c:9b:46:b2:01:d4:a0:20:cc:f5:7c:34:01:fd:3a: 01:07:df:ad:80:00:66:86:f4:55:04:f1:cb:4c:c6: 22:15:2d:ab:08:54:4e:f7:d6:94:a0:1a:01:aa:54: a9:a4:95:09:40:20:69:ad:97:f4:17:08:c7:8a:19: f8:9c:80:49:67:52:0a:c9:ed:4d:46:33:6f:1e:f0: fe:99:c0:ca:77:db:99:36:4f:d2:17:19:88:c7:f3: a7:89:03:50:fb:7a:f7:56:27:5b:78:65:b6:13:51: da:2f:02:8e:86:b5:90:fd:d8:be:1f:ec:21:4b:e8: c4:e6:a6:0d:29:32:5a:e0:2d:a5:22:63:fc:a9:4c: d3:6c:41:50:a7:d0:85:bd:ca:cc:2c:76:04:27:d1: cf:f4:0b:ac:49:9d:3f:e0:cd:f1:ad:be:5a:09:8a: 59:03:2e:24:bb:b4:e3:ac:04:60:2a:2d:1b:d6:ae: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:26:6E:36:BC:C4:7E:6D:37:8C:53:F9:E1:9B:B7:1F:46:4C:02:6F X509v3 Authority Key Identifier: keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:93:73:d9:89:05:33:4e:75:5c:c4:80:5d:da:43:f2:b2: e1:cc:07:8a:38:4a:c3:31:ba:c1:0d:b4:e9:ec:6f:28:88:a8: b7:ad:e7:76:83:3b:50:03:dc:ec:44:d2:be:b2:ea:26:a4:8d: cf:fa:79:bf:34:05:bb:8a:4d:81:10:7a:10:89:f6:ec:7c:04: ab:99:18:bd:55:a4:1c:61:85:b9:fd:a9:11:64:6e:4c:2a:6b: c6:43:83:28:1a:01:74:ee:c3:21:2c:8a:6f:fa:cd:a5:7e:c4: 70:6d:f3:37:99:64:39:be:f7:b4:59:fe:ca:9b:54:46:21:96: 6d:1a:52:cc:f4:86:d0:69:ed:a5:3e:e5:7a:34:83:0a:32:a4: f1:3c:2c:be:cc:02:2c:39:92:60:b9:53:e5:cc:41:73:6c:73: bd:d0:b5:0c:3b:96:9c:bf:6f:e2:be:c5:b1:4f:ba:65:b8:21: f8:18:33:b5:28:d4:a8:f5:cb:4c:9d:6a:e0:ca:6e:50:3c:69: e6:c6:d0:91:f7:bd:72:34:54:14:7c:69:6c:d0:32:b5:25:3a: 5f:a7:e0:d5:ef:2a:db:52:6a:31:dd:5d:8d:95:a3:d2:77:2f: fb:f4:aa:92:e7:d1:fd:ca:c5:e1:13:a4:2a:50:79:9d:86:8c: 89:70:5f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxRxzLvhoVBfupTr74KpAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OGM1M2I0NzdjM2JmYTcwYjYxZjQyN2I0Nzk5NGMyZDE3 ODM0NTgwHhcNMjUxMjMwMjIwMDQ0WhcNMjUxMjMxMjIwMDQ0WjAzMTEwLwYDVQQD EygxNTI2NmUzNmJjYzQ3ZTZkMzc4YzUzZjllMTliYjcxZjQ2NGMwMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24xZGZyJGZzMgufQqIJ2yjlParl7 ovqbbyrrXTFFL8BHgSMdxQIHGs3w8M/5E1AcSvz/H6LMi83AT8ut+ulDpz7OiIvZ dUhzuIp8m0ayAdSgIMz1fDQB/ToBB9+tgABmhvRVBPHLTMYiFS2rCFRO99aUoBoB qlSppJUJQCBprZf0FwjHihn4nIBJZ1IKye1NRjNvHvD+mcDKd9uZNk/SFxmIx/On iQNQ+3r3VidbeGW2E1HaLwKOhrWQ/di+H+whS+jE5qYNKTJa4C2lImP8qUzTbEFQ p9CFvcrMLHYEJ9HP9AusSZ0/4M3xrb5aCYpZAy4ku7TjrARgKi0b1q6jnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUmbja8xH5tN4xT+eGbtx9GTAJvMB8GA1UdIwQY MBaAFMiMU7R3w7+nC2H0J7R5lMLReDRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYt YjA2NDY2MGY3MDRmLzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lMTVjZjYtNmYxMy00ZDI3LTkxNjYtYjA2NDY2MGY3MDRm LzEveUl4VHRIZkR2NmNMWWZRbnRIbVV3dEY0TkZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO56Tc9mJ BTNOdVzEgF3aQ/Ky4cwHijhKwzG6wQ206exvKIiot63ndoM7UAPc7ETSvrLqJqSN z/p5vzQFu4pNgRB6EIn27HwEq5kYvVWkHGGFuf2pEWRuTCprxkODKBoBdO7DISyK b/rNpX7EcG3zN5lkOb73tFn+yptURiGWbRpSzPSG0GntpT7lejSDCjKk8TwsvswC LDmSYLlT5cxBc2xzvdC1DDuWnL9v4r7FsU+6Zbgh+BgztSjUqPXLTJ1q4MpuUDxp 5sbQkfe9cjRUFHxpbNAytSU6X6fg1e8q21JqMd1djZWj0ncv+/SqkufR/crF4ROk KlB5nYaMiXBfaA== -----END CERTIFICATE-----Generated at Wed Dec 31 04:52:09 2025 by rpki-client