This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json) Hash identifier: PyZy6Wb5mfmIyqsjDVE0NmeRAtiC1W/841xA4rgXVKM= Subject key identifier: E4:86:DA:F0:58:83:2B:4C:16:3B:7A:66:2C:DD:FE:23:40:71:78:B3 Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Certificate serial: 019B72C7984FB43F05C43CCB6FB77D004742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft Manifest number: 054A Signing time: Wed 31 Dec 2025 05:00:41 +0000 Manifest this update: Wed 31 Dec 2025 05:00:41 +0000 Manifest next update: Thu 01 Jan 2026 05:00:41 +0000 Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=) 2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: tID4zHWfvcpaWKMZujAAl/XR4LrhoUG1nGGbKDAvHho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:98:4f:b4:3f:05:c4:3c:cb:6f:b7:7d:00:47:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Validity Not Before: Dec 31 05:00:41 2025 GMT Not After : Jan 1 05:00:41 2026 GMT Subject: CN=e486daf058832b4c163b7a662cddfe23407178b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:36:3c:72:cd:de:1e:6d:a8:2e:85:0d:22: 35:07:c8:b4:d6:d8:4f:0c:16:24:8b:bb:fd:a7:98: 75:84:47:86:f7:f1:c2:c8:1f:0a:c1:53:3f:4d:ab: c4:78:26:a2:59:95:e5:c6:c4:42:c7:82:03:7b:9b: ab:a4:32:70:5d:a6:d7:c3:88:fb:10:cd:d4:ee:cd: aa:db:4b:bf:b5:32:25:9e:a8:58:df:af:30:8a:db: 2c:36:7b:75:b0:df:c1:5a:93:df:95:e3:1b:79:b7: 94:72:02:1d:f7:c2:d4:9f:14:72:4b:94:74:9e:12: a5:31:7e:b2:f1:00:21:75:68:00:33:17:d4:b8:36: 38:d7:76:a9:37:f3:20:be:68:c2:f4:1a:4a:c9:4c: 49:a6:98:af:75:8a:b9:38:eb:1d:8c:05:d0:8b:76: 0a:fe:79:13:7e:b4:3b:83:59:61:fb:d3:1a:3b:25: 10:ac:05:d2:93:92:72:63:2e:06:88:a8:73:d2:3c: 8a:6f:1b:dc:3e:a8:e2:a3:d1:69:b1:2e:dd:8a:d6: 01:63:1c:f5:87:b2:93:b4:bb:fc:ae:46:f6:65:a1: e4:bc:c1:56:bc:7b:75:a2:b6:09:fa:7b:d4:b2:f6: 87:88:f7:dc:7a:bd:9e:56:62:d1:af:97:4c:10:f3: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:86:DA:F0:58:83:2B:4C:16:3B:7A:66:2C:DD:FE:23:40:71:78:B3 X509v3 Authority Key Identifier: keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cb:6d:a5:0f:db:19:1c:4d:7f:46:5d:f9:92:7a:d7:ed:8b: c6:23:f8:e8:dd:86:83:89:63:47:71:81:46:47:f6:9d:2e:a7: d0:f7:54:ca:dc:af:98:27:d0:64:e3:9d:7d:70:4c:be:05:81: 36:41:62:39:a7:f7:22:37:24:cd:7f:54:41:ab:45:ea:04:dd: 32:47:1d:8a:ec:7a:6d:9c:b2:56:45:44:7d:e4:ac:fe:d0:2a: 8f:d2:05:6c:0c:d4:93:d1:59:2b:ff:61:7d:77:c4:aa:a2:68: 99:df:cd:a1:cc:15:73:be:28:12:79:ec:b1:8a:e6:66:02:a3: 3d:d0:8a:7b:ae:bf:59:89:d1:fa:d1:35:6e:60:60:9b:f6:07: 3f:3b:f6:86:5f:a1:8e:f6:ea:b8:f0:b4:a9:c9:26:9f:56:73: d0:24:37:cb:74:fb:76:1c:3d:aa:be:84:9e:96:d1:69:aa:57: 11:be:96:39:16:2b:c8:0f:03:df:53:0e:65:af:dc:73:7a:6d: f7:17:78:a0:c6:ec:f2:21:37:7d:79:68:1a:ce:b0:c2:6d:c2: a5:85:f2:81:25:47:7b:7a:25:92:b3:36:58:e3:3d:f5:98:37: f3:43:2c:35:21:bc:29:e7:f7:92:ba:91:67:db:73:21:80:e7: 48:5c:32:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx5hPtD8FxDzLb7d9AEdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0 YWY4YzcwHhcNMjUxMjMxMDUwMDQxWhcNMjYwMTAxMDUwMDQxWjAzMTEwLwYDVQQD EyhlNDg2ZGFmMDU4ODMyYjRjMTYzYjdhNjYyY2RkZmUyMzQwNzE3OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0w2PHLN3h5tqC6FDSI1B8i01thP DBYki7v9p5h1hEeG9/HCyB8KwVM/TavEeCaiWZXlxsRCx4IDe5urpDJwXabXw4j7 EM3U7s2q20u/tTIlnqhY368witssNnt1sN/BWpPfleMbebeUcgId98LUnxRyS5R0 nhKlMX6y8QAhdWgAMxfUuDY413apN/MgvmjC9BpKyUxJppivdYq5OOsdjAXQi3YK /nkTfrQ7g1lh+9MaOyUQrAXSk5JyYy4GiKhz0jyKbxvcPqjio9FpsS7ditYBYxz1 h7KTtLv8rkb2ZaHkvMFWvHt1orYJ+nvUsvaHiPfcer2eVmLRr5dMEPP7AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSG2vBYgytMFjt6Zizd/iNAcXizMB8GA1UdIwQY MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1 LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsttpQ/b GRxNf0Zd+ZJ61+2LxiP46N2Gg4ljR3GBRkf2nS6n0PdUytyvmCfQZOOdfXBMvgWB NkFiOaf3IjckzX9UQatF6gTdMkcdiux6bZyyVkVEfeSs/tAqj9IFbAzUk9FZK/9h fXfEqqJomd/NocwVc74oEnnssYrmZgKjPdCKe66/WYnR+tE1bmBgm/YHPzv2hl+h jvbquPC0qckmn1Zz0CQ3y3T7dhw9qr6EnpbRaapXEb6WORYryA8D31MOZa/cc3pt 9xd4oMbs8iE3fXloGs6wwm3CpYXygSVHe3olkrM2WOM99Zg380MsNSG8Kef3krqR Z9tzIYDnSFwyjg== -----END CERTIFICATE-----Generated at Wed Dec 31 11:55:41 2025 by rpki-client