This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json) Hash identifier: 59fRfKOhDcc5X7kcGuRCFx1HNob2cCGJu+zh5/U1oi0= Subject key identifier: BE:9A:67:B4:8A:44:42:7B:49:32:6A:31:AF:AB:41:9C:F8:19:E8:48 Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762 Certificate serial: 019B52CEC9D5B0A4871AA42E3B2D0749BD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft Manifest number: 1257 Signing time: Thu 25 Dec 2025 00:00:42 +0000 Manifest this update: Thu 25 Dec 2025 00:00:42 +0000 Manifest next update: Fri 26 Dec 2025 00:00:42 +0000 Files and hashes: 1: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: fo5YjMY6KrogxbqD3UWzb59Roh/hNFqKKMhzR8Ez7pM=) 2: y7v-mWbLIi-YEJOLFYZrPZdamNM.roa (hash: fFSatUERbg8P2zLQbPAXLJNzdwJ2j7jhYqM1W6Xx4mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:c9:d5:b0:a4:87:1a:a4:2e:3b:2d:07:49:bd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762 Validity Not Before: Dec 25 00:00:42 2025 GMT Not After : Dec 26 00:00:42 2025 GMT Subject: CN=be9a67b48a44427b49326a31afab419cf819e848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:d6:83:a9:70:e0:13:61:77:61:f4:8e:7d: e6:38:58:84:09:ba:80:6b:9e:1b:c9:f4:93:86:ad: 88:0e:69:07:63:2b:88:6d:d5:02:be:9d:98:38:77: 16:38:d3:b3:2d:69:a6:c0:eb:2c:86:29:2b:38:02: 30:27:0a:06:69:d5:16:4a:2c:5a:1f:ab:0e:a1:9c: 90:c7:de:21:f1:f0:78:49:9d:6a:15:3b:fa:0a:a7: 8a:06:4c:10:2b:fc:e4:0f:7d:d9:9d:42:96:d3:65: 58:f7:72:2a:d6:17:43:c5:a8:f3:b7:ce:99:17:eb: a8:66:b5:8a:e9:c9:26:71:27:1e:3d:bd:85:2a:c3: ee:64:47:14:a0:a1:85:bf:c5:97:41:d6:8b:0e:35: cc:25:58:26:c7:ae:96:1d:a2:31:4d:36:c9:fe:2e: 18:74:1c:c3:40:db:90:6f:26:b0:a0:9f:ce:a9:6d: 5c:6a:5b:f0:ac:0c:ba:7c:67:18:05:98:16:53:b7: 1d:65:1b:d7:57:ee:6a:12:4a:02:cf:20:2e:e0:21: 31:19:d3:5a:45:91:4f:98:4e:14:ae:c9:47:ce:2c: ab:bf:e9:86:d1:2e:bd:07:15:08:f0:23:9a:32:dd: eb:55:8d:a6:40:3e:23:d6:9a:da:ec:fb:54:0d:19: 3b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:67:B4:8A:44:42:7B:49:32:6A:31:AF:AB:41:9C:F8:19:E8:48 X509v3 Authority Key Identifier: keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:13:86:83:66:ed:72:8d:b9:94:15:d6:0d:9e:10:72:85:7d: 28:42:16:43:ef:6f:61:cd:a3:1b:ae:0f:9b:3f:1e:8e:b7:f4: 40:16:07:14:55:eb:c2:17:34:a6:2b:03:32:5e:8f:fa:07:47: c7:d6:65:ff:7f:5a:70:7d:9a:33:e0:76:9e:4f:6c:0e:59:0c: 0d:c9:30:c0:a7:c2:79:13:25:bd:19:0e:7f:46:6d:4f:04:f4: 6f:69:da:56:f8:10:48:b8:03:e7:32:84:62:97:9e:73:30:56: 04:7a:b9:aa:af:9a:6c:db:92:3f:b6:80:39:ef:28:8e:5c:02: 97:74:3a:d0:e5:8e:f2:33:5b:02:8e:1f:09:57:78:a7:ac:89: b6:4a:94:4b:9e:b4:1b:64:7d:ff:d7:57:11:b5:6b:df:1f:8e: 18:c9:4f:ac:e6:ba:cd:34:d4:c0:0b:a7:5e:6f:cc:c2:e2:90: 03:1a:75:00:e3:7f:ab:9c:5e:12:39:d9:38:19:45:96:f0:58: 61:2d:fe:8b:a9:ef:e9:90:ef:1a:7c:c2:bf:25:39:2a:e0:05: e6:8d:88:a0:8b:42:48:8c:13:3c:d4:91:9a:a5:88:5d:32:6b: 89:89:b5:c7:ce:8b:cd:ef:e2:7d:2f:73:65:4e:90:ad:89:ef: b5:14:b4:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzsnVsKSHGqQuOy0HSb01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE5MDEyMjc1Nzc4MDdmNGI2OGM4YjhmMjVmYmVhOWM3 MjA3NjIwHhcNMjUxMjI1MDAwMDQyWhcNMjUxMjI2MDAwMDQyWjAzMTEwLwYDVQQD EyhiZTlhNjdiNDhhNDQ0MjdiNDkzMjZhMzFhZmFiNDE5Y2Y4MTllODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE/Wg6lw4BNhd2H0jn3mOFiECbqA a54byfSThq2IDmkHYyuIbdUCvp2YOHcWONOzLWmmwOsshikrOAIwJwoGadUWSixa H6sOoZyQx94h8fB4SZ1qFTv6CqeKBkwQK/zkD33ZnUKW02VY93Iq1hdDxajzt86Z F+uoZrWK6ckmcScePb2FKsPuZEcUoKGFv8WXQdaLDjXMJVgmx66WHaIxTTbJ/i4Y dBzDQNuQbyawoJ/OqW1calvwrAy6fGcYBZgWU7cdZRvXV+5qEkoCzyAu4CExGdNa RZFPmE4UrslHziyrv+mG0S69BxUI8COaMt3rVY2mQD4j1pra7PtUDRk7zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6aZ7SKREJ7STJqMa+rQZz4GehIMB8GA1UdIwQY MBaAFGIRkBInV3gH9LaMi48l++qccgdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYt N2NmZGQ4NGY3MzRkLzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iMjEwZjYtN2NhMS00N2IxLTlhNWYtN2NmZGQ4NGY3MzRk LzEvWWhHUUVpZFhlQWYwdG95TGp5WDc2cHh5QjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBOGg2bt co25lBXWDZ4QcoV9KEIWQ+9vYc2jG64Pmz8ejrf0QBYHFFXrwhc0pisDMl6P+gdH x9Zl/39acH2aM+B2nk9sDlkMDckwwKfCeRMlvRkOf0ZtTwT0b2naVvgQSLgD5zKE YpeeczBWBHq5qq+abNuSP7aAOe8ojlwCl3Q60OWO8jNbAo4fCVd4p6yJtkqUS560 G2R9/9dXEbVr3x+OGMlPrOa6zTTUwAunXm/MwuKQAxp1AON/q5xeEjnZOBlFlvBY YS3+i6nv6ZDvGnzCvyU5KuAF5o2IoItCSIwTPNSRmqWIXTJriYm1x86Lze/ifS9z ZU6QrYnvtRS0Vg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:54:54 2025 by rpki-client