This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json) Hash identifier: lGnWdiWuwqqTlMYOP2VwwOB78Is+Z7Zu1WJlh1pfa9c= Subject key identifier: 5E:B7:D9:00:97:AB:86:C9:C4:42:E6:90:82:F7:AA:94:AD:66:FF:89 Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Certificate serial: 019AF164376F7CFC769FB7EF2EE702FFB190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft Manifest number: 0507 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=) 2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: w+fhABt9KLvW+gD/iUTVB/FsJHwdLRuUepanV105rUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:37:6f:7c:fc:76:9f:b7:ef:2e:e7:02:ff:b1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=5eb7d90097ab86c9c442e69082f7aa94ad66ff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:93:52:bc:73:2c:d7:28:47:d3:25:24:a9: 4d:6b:3a:a5:e6:e4:89:2c:71:46:c3:d7:14:f6:6f: 24:ae:a9:13:c9:2c:74:e5:d9:f8:b8:1f:13:12:71: cf:8c:0a:b9:77:ba:03:8b:c8:9f:97:62:a5:15:d4: fa:7a:c3:44:bf:20:7f:c1:03:87:27:97:ba:7d:72: 52:1c:91:31:6a:0b:13:95:8f:78:3b:c9:92:07:78: 43:66:ea:4f:c2:11:6f:0b:b2:4d:3c:7c:e8:d2:bb: 65:43:1c:63:7b:ea:6d:90:4e:a7:d4:d2:97:31:a9: eb:ca:da:ac:c1:ef:46:a1:d7:f5:bf:2c:f6:fd:21: ab:9c:3c:e1:49:bb:6e:0e:4d:17:43:09:0b:70:f7: 54:3f:e3:90:04:56:1a:69:b5:ce:ea:a2:4c:b6:76: 81:25:42:01:2d:ec:51:fc:3b:3c:78:93:3c:d7:37: ca:a9:70:c1:99:c1:ae:9d:c2:4a:4b:3e:6a:fc:09: ed:78:63:62:73:9d:13:78:71:17:c2:89:9d:ee:a4: d0:22:3a:88:8f:07:c0:91:53:27:7a:42:a1:11:fd: e3:fe:10:21:b7:64:ac:2c:af:56:28:9d:f1:ad:81: f2:b2:5e:43:f7:b3:c0:ac:79:d7:c3:dd:81:e9:db: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B7:D9:00:97:AB:86:C9:C4:42:E6:90:82:F7:AA:94:AD:66:FF:89 X509v3 Authority Key Identifier: keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:75:ae:fe:c9:17:14:a4:1f:10:5d:b4:c9:5f:a9:00:74:a6: af:40:93:74:e3:8c:d5:01:29:c4:3a:4c:be:7f:b1:ef:4e:89: 98:40:7f:43:09:10:4d:db:20:43:a3:c7:99:fb:a7:76:76:1f: 0a:46:f7:6e:7d:6e:01:04:d7:48:20:7e:58:4c:0b:e0:e8:5b: 38:90:b0:d7:e0:69:ed:ed:b6:e9:f9:27:37:9a:9b:9f:c7:19: a2:72:39:e5:ff:55:33:b2:da:28:5c:e1:87:b5:be:84:3f:37: 49:07:6f:be:99:31:31:36:38:aa:55:36:64:88:f3:99:f4:ab: 4c:6b:9a:6d:ef:7e:c2:9b:7f:4d:35:e5:68:94:aa:44:b5:c4: 2b:91:dc:57:8b:51:50:7c:da:e4:cd:7c:3d:c2:c8:9b:e0:07: 75:32:90:9b:ab:53:9b:6b:12:fc:ec:fa:28:3b:ec:2a:95:60: 67:95:e4:b9:43:d2:19:ea:04:7c:3d:52:f7:d9:8c:86:21:f4: 00:7a:47:a8:e8:ef:36:1b:6f:62:a4:40:84:d3:80:f5:c1:1f: 10:21:d2:f2:67:95:0e:a9:fd:81:98:f8:f8:dc:12:39:1e:a1: fa:e4:96:9c:75:f7:80:a1:e0:aa:3f:d7:af:81:fa:65:cc:6a: 57:31:17:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDdvfPx2n7fvLucC/7GQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0 YWY4YzcwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg1ZWI3ZDkwMDk3YWI4NmM5YzQ0MmU2OTA4MmY3YWE5NGFkNjZmZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU6TUrxzLNcoR9MlJKlNazql5uSJ LHFGw9cU9m8krqkTySx05dn4uB8TEnHPjAq5d7oDi8ifl2KlFdT6esNEvyB/wQOH J5e6fXJSHJExagsTlY94O8mSB3hDZupPwhFvC7JNPHzo0rtlQxxje+ptkE6n1NKX Manrytqswe9Godf1vyz2/SGrnDzhSbtuDk0XQwkLcPdUP+OQBFYaabXO6qJMtnaB JUIBLexR/Ds8eJM81zfKqXDBmcGuncJKSz5q/AnteGNic50TeHEXwomd7qTQIjqI jwfAkVMnekKhEf3j/hAht2SsLK9WKJ3xrYHysl5D97PArHnXw92B6dtH2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF632QCXq4bJxELmkIL3qpStZv+JMB8GA1UdIwQY MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1 LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXWu/skX FKQfEF20yV+pAHSmr0CTdOOM1QEpxDpMvn+x706JmEB/QwkQTdsgQ6PHmfundnYf Ckb3bn1uAQTXSCB+WEwL4OhbOJCw1+Bp7e226fknN5qbn8cZonI55f9VM7LaKFzh h7W+hD83SQdvvpkxMTY4qlU2ZIjzmfSrTGuabe9+wpt/TTXlaJSqRLXEK5HcV4tR UHza5M18PcLIm+AHdTKQm6tTm2sS/Oz6KDvsKpVgZ5XkuUPSGeoEfD1S99mMhiH0 AHpHqOjvNhtvYqRAhNOA9cEfECHS8meVDqn9gZj4+NwSOR6h+uSWnHX3gKHgqj/X r4H6ZcxqVzEX7g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:14 2025 by rpki-client