This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft File: yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json) Hash identifier: XxP68kODREPIfnOiuvZ63TlfQWXBtMrqPd1P5UdU0oA= Subject key identifier: 74:2A:A5:16:6C:67:58:2D:01:63:23:DF:5A:C0:B1:8B:72:38:65:A4 Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9 Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9 Certificate serial: 019B6D6A73F6A015C36AF83030520F48B90C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft Manifest number: 0ED6 Signing time: Tue 30 Dec 2025 04:00:51 +0000 Manifest this update: Tue 30 Dec 2025 04:00:51 +0000 Manifest next update: Wed 31 Dec 2025 04:00:51 +0000 Files and hashes: 1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=) 2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: xVvftHNxqQ9G4LcOQ5GS8gv4qHRMSB/8pFK7BkqOB9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:73:f6:a0:15:c3:6a:f8:30:30:52:0f:48:b9:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9 Validity Not Before: Dec 30 04:00:51 2025 GMT Not After : Dec 31 04:00:51 2025 GMT Subject: CN=742aa5166c67582d016323df5ac0b18b723865a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:3a:28:5a:c9:d0:c3:2d:02:80:7a:64:87: f2:22:f5:66:8b:25:a4:af:5e:d1:c2:60:80:09:83: a9:2c:5a:90:30:cb:1e:5a:bf:fa:68:b9:6f:c5:e3: 4f:53:9c:52:f2:39:4e:5b:cb:80:c1:f2:11:7d:c1: 6a:03:06:05:16:41:8f:c4:62:c7:4f:66:66:c5:ca: b7:69:66:22:b2:32:9a:bc:48:55:82:38:a7:a5:ff: 20:bd:86:11:93:b8:e9:d6:33:11:f7:55:83:f4:47: 99:63:0a:a4:b5:d3:2e:61:27:0d:a9:c3:e9:ac:8d: b1:db:4c:70:00:fb:86:73:64:57:67:9e:a1:bb:e5: d9:eb:cf:12:68:24:75:20:da:fe:7c:ad:cb:44:58: f8:0d:79:4c:b6:0a:4f:b5:4c:1e:5f:cc:eb:46:00: ea:20:ea:af:1b:32:3b:c9:82:6a:6b:5d:86:54:cc: f6:43:0e:17:44:9e:89:4a:4e:5a:ac:c2:4f:de:cc: 82:4a:99:a2:7b:0f:85:8e:51:5d:b9:40:fc:3b:85: 42:b0:b4:3d:91:4c:f6:04:65:2f:2b:11:2f:58:1a: bf:40:06:2c:1f:02:59:84:a8:f4:43:c9:8b:10:b8: be:c2:21:62:21:d3:9f:f9:53:80:24:66:44:3e:c1: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2A:A5:16:6C:67:58:2D:01:63:23:DF:5A:C0:B1:8B:72:38:65:A4 X509v3 Authority Key Identifier: keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7c:0b:2d:9c:dc:88:04:cf:3e:74:76:38:09:f6:fc:3e:6d: 24:e6:28:31:87:2a:93:38:ed:0e:53:5b:71:eb:6d:5a:04:5d: a4:f2:33:35:2b:86:3b:16:bd:0d:7d:ee:91:30:a2:ed:e2:af: 22:db:69:f9:13:a9:e8:11:9c:c1:b7:86:82:bf:4b:a3:ee:db: 18:56:9c:7f:47:92:5e:05:57:81:72:1e:dc:1c:d3:0a:e6:21: df:c8:6c:a6:92:fb:b6:ac:59:d5:46:50:41:f4:b1:9c:10:cd: 96:19:bb:d7:c0:11:00:ed:d1:6f:b8:69:83:88:71:d7:71:e4: a6:cb:52:b9:af:43:6a:18:da:06:b9:d6:a3:32:30:3c:d7:c8: 39:98:10:fa:fc:f1:d6:a2:ef:44:46:be:e5:4e:0b:d0:27:b4: d5:fd:1f:b4:b4:77:96:d1:58:67:c2:a8:8c:da:1c:18:a8:80: 5a:a5:3b:38:32:b3:4a:fb:3d:04:1f:47:b9:ee:4f:ed:bd:b3: 19:1b:9e:fd:e1:a3:8b:bf:4f:1f:84:d9:d3:49:5f:c3:2d:2f: e0:7e:7b:3f:41:43:57:28:80:ac:4f:02:50:55:71:9f:da:a3: 5f:af:da:05:59:e6:44:81:66:f4:dd:04:6e:71:c8:ef:aa:a3: ca:b9:3c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttanP2oBXDavgwMFIPSLkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm YzM3YjkwHhcNMjUxMjMwMDQwMDUxWhcNMjUxMjMxMDQwMDUxWjAzMTEwLwYDVQQD Eyg3NDJhYTUxNjZjNjc1ODJkMDE2MzIzZGY1YWMwYjE4YjcyMzg2NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsk6KFrJ0MMtAoB6ZIfyIvVmiyWk r17RwmCACYOpLFqQMMseWr/6aLlvxeNPU5xS8jlOW8uAwfIRfcFqAwYFFkGPxGLH T2Zmxcq3aWYisjKavEhVgjinpf8gvYYRk7jp1jMR91WD9EeZYwqktdMuYScNqcPp rI2x20xwAPuGc2RXZ56hu+XZ688SaCR1INr+fK3LRFj4DXlMtgpPtUweX8zrRgDq IOqvGzI7yYJqa12GVMz2Qw4XRJ6JSk5arMJP3syCSpmiew+FjlFduUD8O4VCsLQ9 kUz2BGUvKxEvWBq/QAYsHwJZhKj0Q8mLELi+wiFiIdOf+VOAJGZEPsGVKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQqpRZsZ1gtAWMj31rAsYtyOGWkMB8GA1UdIwQY MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct OTlmNjgzMjA2Mzg4LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4 LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXwLLZzc iATPPnR2OAn2/D5tJOYoMYcqkzjtDlNbcettWgRdpPIzNSuGOxa9DX3ukTCi7eKv Ittp+ROp6BGcwbeGgr9Lo+7bGFacf0eSXgVXgXIe3BzTCuYh38hsppL7tqxZ1UZQ QfSxnBDNlhm718ARAO3Rb7hpg4hx13HkpstSua9DahjaBrnWozIwPNfIOZgQ+vzx 1qLvREa+5U4L0Ce01f0ftLR3ltFYZ8KojNocGKiAWqU7ODKzSvs9BB9Hue5P7b2z GRue/eGji79PH4TZ00lfwy0v4H57P0FDVyiArE8CUFVxn9qjX6/aBVnmRIFm9N0E bnHI76qjyrk8Lg== -----END CERTIFICATE-----Generated at Tue Dec 30 12:30:10 2025 by rpki-client