This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json) Hash identifier: IuujcwVGVZzwvAmpWxEvZffx/+dF4oCJnoxEpDWNMbc= Subject key identifier: BE:86:BB:BA:42:D9:56:26:C6:9E:51:64:CE:8B:37:DA:E5:0D:59:3C Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1 Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1 Certificate serial: 019B364559910D70EF1DA237A93BA815914D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 11:01:13 +0000 Manifest this update: Fri 19 Dec 2025 11:01:13 +0000 Manifest next update: Sat 20 Dec 2025 11:01:13 +0000 Files and hashes: 1: J9IdjUhrnmdPlVz9AGQjjVXnZY4.roa (hash: /POjVrGUKaeCRXBaJsPW90/VSUb2DNJJX57AghjcdVQ=) 2: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (hash: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=) 3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: AFLJUebb4wkhXm9/pPB6NpHMZZUNhPcJF73G63EIdqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:59:91:0d:70:ef:1d:a2:37:a9:3b:a8:15:91:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1 Validity Not Before: Dec 19 11:01:13 2025 GMT Not After : Dec 20 11:01:13 2025 GMT Subject: CN=be86bbba42d95626c69e5164ce8b37dae50d593c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:04:ba:84:96:81:83:c1:57:52:93:d9:41: 85:fc:46:4e:14:e2:8b:79:5a:3c:55:e6:6b:c4:13: f6:6e:15:90:fb:8f:2f:14:0c:18:6a:76:a6:11:da: 59:04:82:2a:67:26:5d:a5:7c:30:09:c2:05:f2:bc: 66:a9:e8:ae:d1:17:38:a7:21:b3:54:63:cc:fc:8b: f1:66:45:92:a4:eb:b7:f4:a8:9f:76:98:9d:3d:7c: b8:c2:df:4e:0f:02:04:e1:18:34:60:6c:e8:bb:5c: 27:51:b1:24:1e:0f:c8:1a:83:65:67:c6:0c:8e:c3: 80:19:75:de:6d:36:a9:e8:15:72:20:09:b9:8c:10: 34:59:2c:f9:b7:ec:0d:d7:88:9c:3c:3a:88:3c:26: 85:f5:fb:fa:8a:97:f7:9a:bd:a2:e3:78:2f:c2:43: 56:8c:50:fb:e7:1a:6f:0e:c7:9f:95:5d:78:5f:ce: bf:b1:d0:11:ee:1c:5f:87:54:d7:c2:4a:93:f5:31: dd:43:e6:84:70:fe:71:8f:64:af:82:42:b8:16:81: fb:ad:69:f4:be:a1:bc:88:90:0a:05:13:d3:25:13: 4a:ec:30:6e:da:61:13:42:42:a8:ca:73:63:9e:5d: 08:50:fd:4b:04:9c:1f:a6:98:5e:fb:19:b2:e3:a6: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:BB:BA:42:D9:56:26:C6:9E:51:64:CE:8B:37:DA:E5:0D:59:3C X509v3 Authority Key Identifier: keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:95:3f:d6:a9:74:cc:a6:69:3a:02:e1:1b:0d:a3:91:d4:28: df:a9:a2:37:85:d3:7b:06:b1:f0:8c:f7:fa:d2:a1:14:a4:ec: 8f:26:00:1d:9e:2a:70:c8:7c:fc:22:d2:a8:bb:c2:a3:ed:d3: 30:27:c4:df:5f:4e:83:59:bf:0b:70:59:59:18:8c:3f:16:6d: 2d:0a:5f:9c:be:42:a1:2f:0a:2b:5b:e3:63:7a:18:91:61:56: 03:01:07:d8:62:6b:51:08:f5:3b:7f:fa:3f:c9:52:70:ca:58: f5:6e:ec:27:7b:ab:2f:6c:4f:8c:2c:7d:60:b1:18:54:15:61: 67:98:ed:bb:61:c2:1f:b6:ca:25:19:a6:65:e2:91:69:22:38: df:67:80:b2:81:da:19:61:58:12:48:ba:d9:f9:f6:b1:08:58: 69:83:71:2d:73:ad:aa:9b:71:ba:8d:22:fd:6c:b3:35:2a:4d: d3:0f:f0:d2:7e:e1:5d:b0:fa:e3:c5:60:aa:ff:ec:e3:95:59: 02:2d:4d:9d:d3:ef:44:43:c0:8b:1e:c3:05:66:09:c0:03:42: ae:ab:4c:b7:01:17:fa:70:a3:4c:62:72:07:85:85:54:32:f7: b8:e2:4f:b9:29:a2:f0:95:a4:0a:67:39:92:72:06:be:f2:3b: 07:0f:71:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RVmRDXDvHaI3qTuoFZFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNWUzZWM1YTkwNjIzY2NiOTc3ODRkM2NlZjI0MjEyYTMx Y2JhZjEwHhcNMjUxMjE5MTEwMTEzWhcNMjUxMjIwMTEwMTEzWjAzMTEwLwYDVQQD EyhiZTg2YmJiYTQyZDk1NjI2YzY5ZTUxNjRjZThiMzdkYWU1MGQ1OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbgEuoSWgYPBV1KT2UGF/EZOFOKL eVo8VeZrxBP2bhWQ+48vFAwYanamEdpZBIIqZyZdpXwwCcIF8rxmqeiu0Rc4pyGz VGPM/IvxZkWSpOu39KifdpidPXy4wt9ODwIE4Rg0YGzou1wnUbEkHg/IGoNlZ8YM jsOAGXXebTap6BVyIAm5jBA0WSz5t+wN14icPDqIPCaF9fv6ipf3mr2i43gvwkNW jFD75xpvDseflV14X86/sdAR7hxfh1TXwkqT9THdQ+aEcP5xj2SvgkK4FoH7rWn0 vqG8iJAKBRPTJRNK7DBu2mETQkKoynNjnl0IUP1LBJwfpphe+xmy46b2+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6Gu7pC2VYmxp5RZM6LN9rlDVk8MB8GA1UdIwQY MBaAFMpePsWpBiPMuXeE087yQhKjHLrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMt NmYzMWY2ZjdmMTZiLzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8wZjkyYmQtMzVkMC00NTcwLWI1ZDMtNmYzMWY2ZjdmMTZi LzEveWw0LXhha0dJOHk1ZDRUVHp2SkNFcU1jdXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZU/1ql0 zKZpOgLhGw2jkdQo36miN4XTewax8Iz3+tKhFKTsjyYAHZ4qcMh8/CLSqLvCo+3T MCfE319Og1m/C3BZWRiMPxZtLQpfnL5CoS8KK1vjY3oYkWFWAwEH2GJrUQj1O3/6 P8lScMpY9W7sJ3urL2xPjCx9YLEYVBVhZ5jtu2HCH7bKJRmmZeKRaSI432eAsoHa GWFYEki62fn2sQhYaYNxLXOtqptxuo0i/WyzNSpN0w/w0n7hXbD648Vgqv/s45VZ Ai1NndPvREPAix7DBWYJwANCrqtMtwEX+nCjTGJyB4WFVDL3uOJPuSmi8JWkCmc5 knIGvvI7Bw9xaQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:16 2025 by rpki-client