This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json) Hash identifier: yIEO2eD3lHP2pdR47fSS3Jkbpl7Xkpsd+wMR2akGsUI= Subject key identifier: D4:F9:F5:21:87:D5:64:8C:F9:A4:FD:9A:49:93:27:11:5D:FE:84:93 Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Certificate serial: 019AF12D57B5BE70AEBD93193E34CAF907C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft Manifest number: 0672 Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=) 2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=) 3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: bYbHfH2zGTEHis0Ja7qPmCpp9BONTNRZ33VCZf7CWHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:57:b5:be:70:ae:bd:93:19:3e:34:ca:f9:07:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097 Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=d4f9f52187d5648cf9a4fd9a499327115dfe8493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:83:5a:8c:fa:8b:07:8e:64:bd:b6:03:6b:44: 0b:1a:df:c7:ce:c3:07:82:33:91:c3:05:8a:70:93: 2c:25:ec:5e:ba:df:e1:64:f9:3f:e6:70:7d:24:a8: c0:cd:ed:50:f7:41:f2:63:1b:9b:b2:78:1d:ab:79: 37:ef:9b:7b:08:12:fb:14:e1:9d:17:f0:9c:a1:ad: 70:c6:c5:df:b6:5c:86:c0:a0:ff:63:3e:1b:6b:bf: 35:6c:cc:63:dc:88:44:77:ca:f3:31:6c:43:5a:44: f7:6c:32:12:68:1e:43:19:a9:a7:0e:2d:e8:d1:b5: 24:18:cc:bb:40:26:58:96:0c:2d:ec:89:fd:ae:32: fc:b8:f5:7c:4d:96:e4:5c:d5:4f:f5:1e:9f:82:d1: 91:d5:0f:98:02:cc:aa:13:42:2b:3d:34:d6:04:d6: 2c:6a:6c:2e:94:bb:1b:80:40:63:58:23:84:4c:12: 23:79:c1:e4:5e:95:15:04:39:87:a3:d7:ac:e7:af: 0c:75:a0:fe:31:71:35:81:f0:43:f2:a1:15:86:3a: 36:68:cf:43:36:32:fe:95:bf:13:12:0b:6c:41:2b: fa:82:3c:59:db:50:f7:0c:dc:ab:4d:c2:13:84:b0: 5c:99:f9:0b:a1:b9:ec:a0:a4:b5:71:14:d8:dd:1d: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:F5:21:87:D5:64:8C:F9:A4:FD:9A:49:93:27:11:5D:FE:84:93 X509v3 Authority Key Identifier: keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9c:9d:5d:24:31:bc:86:74:9d:bc:37:08:28:b1:d0:6a:8f: 8c:06:5f:f3:79:2d:72:49:d8:27:5b:d7:f1:1e:b0:08:55:88: a0:05:e6:30:b5:17:82:3b:e3:40:16:49:d9:dc:24:3b:b0:9b: 86:83:e5:10:8f:a9:f7:c0:56:41:9a:0f:49:2d:c1:f9:09:c3: b5:bb:b5:85:c4:e8:f1:26:5f:6b:a6:fa:12:90:2e:3b:bb:19: 77:3b:bb:c4:75:70:41:f5:2e:db:53:f6:3a:24:a2:f0:3f:57: a1:46:ef:f7:a3:7f:56:40:81:24:76:15:c3:00:78:62:4a:cc: a5:bc:49:03:6c:52:d9:e8:65:77:f2:53:b4:17:61:de:1c:cf: 14:4b:ae:e4:5f:7c:83:f3:7c:8a:47:3b:e9:c4:f2:33:08:1c: 27:1f:03:a1:a5:f1:12:81:5e:20:f4:89:0b:18:b8:3c:14:e5: 33:14:e8:27:0b:5c:6b:8f:1a:ec:c7:9c:f9:40:44:f6:df:e8: 34:d3:44:8f:17:64:f7:08:1d:97:97:f9:f4:67:02:bf:8f:39: ea:c8:c5:a7:e8:45:0e:9d:da:48:12:94:00:79:9f:bb:fd:f5: 37:d6:9e:fb:29:de:6a:d0:b4:92:99:45:0c:0f:54:49:79:df: e1:01:c2:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVe1vnCuvZMZPjTK+QfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MTEwMjk2ODZiMmM4MGE3ZjA0NjBiNmM2ZWYxYjkwODY3 MjgwOTcwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EyhkNGY5ZjUyMTg3ZDU2NDhjZjlhNGZkOWE0OTkzMjcxMTVkZmU4NDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oNajPqLB45kvbYDa0QLGt/HzsMH gjORwwWKcJMsJexeut/hZPk/5nB9JKjAze1Q90HyYxubsngdq3k375t7CBL7FOGd F/Ccoa1wxsXftlyGwKD/Yz4ba781bMxj3IhEd8rzMWxDWkT3bDISaB5DGamnDi3o 0bUkGMy7QCZYlgwt7In9rjL8uPV8TZbkXNVP9R6fgtGR1Q+YAsyqE0IrPTTWBNYs amwulLsbgEBjWCOETBIjecHkXpUVBDmHo9es568MdaD+MXE1gfBD8qEVhjo2aM9D NjL+lb8TEgtsQSv6gjxZ21D3DNyrTcIThLBcmfkLobnsoKS1cRTY3R26CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNT59SGH1WSM+aT9mkmTJxFd/oSTMB8GA1UdIwQY MBaAFMgRApaGssgKfwRgtsbvG5CGcoCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTIt NTBlMzMzMzg0NjY5LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZmNmNjQtMDA1MS00ZGE3LTliMTItNTBlMzMzMzg0NjY5 LzEveUJFQ2xvYXl5QXBfQkdDMnh1OGJrSVp5Z0pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJydXSQx vIZ0nbw3CCix0GqPjAZf83ktcknYJ1vX8R6wCFWIoAXmMLUXgjvjQBZJ2dwkO7Cb hoPlEI+p98BWQZoPSS3B+QnDtbu1hcTo8SZfa6b6EpAuO7sZdzu7xHVwQfUu21P2 OiSi8D9XoUbv96N/VkCBJHYVwwB4YkrMpbxJA2xS2ehld/JTtBdh3hzPFEuu5F98 g/N8ikc76cTyMwgcJx8DoaXxEoFeIPSJCxi4PBTlMxToJwtca48a7Mec+UBE9t/o NNNEjxdk9wgdl5f59GcCv4856sjFp+hFDp3aSBKUAHmfu/31N9ae+yneatC0kplF DA9USXnf4QHCfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:22 2025 by rpki-client