This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json) Hash identifier: KgEavcI6CMbGucycaGOsfN8gxQpP8qNWv6Pz493/gxs= Subject key identifier: BB:90:62:05:DE:E7:2F:0E:58:B0:38:FB:F3:07:40:83:56:6D:3B:A7 Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21 Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721 Certificate serial: 019B3FB5FB59678858F5E85C0D57E407FBD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft Manifest number: 141E Signing time: Sun 21 Dec 2025 07:00:49 +0000 Manifest this update: Sun 21 Dec 2025 07:00:49 +0000 Manifest next update: Mon 22 Dec 2025 07:00:49 +0000 Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: B7KoTgeBVE/jBh+3mI46mLZuLPfUZD9Ny5mBegXpXJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:fb:59:67:88:58:f5:e8:5c:0d:57:e4:07:fb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721 Validity Not Before: Dec 21 07:00:49 2025 GMT Not After : Dec 22 07:00:49 2025 GMT Subject: CN=bb906205dee72f0e58b038fbf3074083566d3ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:29:e7:07:9a:09:3e:25:f7:3c:89:35:fe: 17:fb:c5:65:3c:8e:25:14:5f:98:0e:58:8b:58:10: a6:87:33:e0:67:0b:de:45:b7:ba:ee:04:24:8e:99: c1:a6:c9:b4:5c:d4:99:d1:82:b7:d8:f7:14:25:da: d9:ee:8a:d3:b3:4c:ec:55:b1:ed:46:d1:f3:53:44: 9a:08:8a:60:1b:d2:d7:1e:94:42:1c:68:bf:2b:c7: 5f:70:d8:00:dd:8b:d3:eb:c3:c4:b7:97:23:b5:7e: ec:68:12:f2:fd:de:ac:2c:8e:ef:e9:e8:3c:ca:1d: 9d:32:78:73:9a:09:51:e0:3b:0d:d2:d8:c7:33:39: f0:94:80:e7:4e:af:87:c2:4e:3a:02:5c:a0:2e:d8: 97:00:08:65:27:b1:f1:ff:cd:81:47:c2:7b:2e:35: dc:57:93:7c:1c:75:d9:db:9d:f3:2a:23:a0:0f:0b: 5b:f7:2a:41:57:a8:25:e0:b9:4e:ef:5f:b2:d7:4b: 98:db:d3:2f:07:0a:c1:fc:8e:5a:98:d3:7f:bb:12: 03:5c:45:7c:92:4c:3e:5a:25:72:c5:8e:47:5a:39: be:a3:56:8d:a0:20:81:ef:7f:4b:ed:17:66:3c:ec: 99:d0:3b:31:fd:3f:0e:f1:d2:41:ce:dc:ee:35:fe: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:90:62:05:DE:E7:2F:0E:58:B0:38:FB:F3:07:40:83:56:6D:3B:A7 X509v3 Authority Key Identifier: keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:89:bb:73:0d:2a:de:ee:a4:cc:a2:09:fe:3b:e2:74:5f:ad: f0:3a:63:f8:ea:59:e9:29:dd:57:d5:ea:16:1b:de:2f:20:98: da:a3:67:9b:6d:ba:26:f0:55:ba:04:1d:d9:36:a5:88:aa:38: ab:b9:ab:a4:ee:70:60:25:b0:e7:4a:f6:28:86:ad:60:32:32: d4:6f:45:04:bd:72:07:fc:4d:3f:80:5a:0c:a5:b5:b2:58:b0: fc:47:75:08:5d:1e:c9:5b:b9:50:52:e7:27:23:1a:57:7e:7b: 5c:26:e6:9a:3f:5e:4a:67:3c:e8:70:9d:04:09:00:9f:47:9d: 56:c7:91:11:25:17:9e:c9:4e:b9:8c:e9:53:46:0d:21:19:fc: 86:cb:6b:9f:4e:43:9c:fc:05:5d:b0:ea:57:3e:21:65:d6:d4: 5f:23:5d:99:06:3e:99:b9:68:7b:e0:45:b6:5e:ce:8e:f3:8b: 70:59:79:21:6d:43:29:75:fd:16:08:29:6d:6c:ad:d6:a2:75: c4:8d:69:fb:7a:db:82:c4:c5:1e:26:5d:d4:7d:53:c2:44:d8: 66:e0:14:5f:85:17:46:dd:05:e0:7b:cd:7a:45:e1:4c:75:9f: 0c:1e:c8:be:72:64:23:b7:f6:38:3d:4e:b2:47:26:57:f1:64: 37:11:a7:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tftZZ4hY9ehcDVfkB/vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5 Mjk3MjEwHhcNMjUxMjIxMDcwMDQ5WhcNMjUxMjIyMDcwMDQ5WjAzMTEwLwYDVQQD EyhiYjkwNjIwNWRlZTcyZjBlNThiMDM4ZmJmMzA3NDA4MzU2NmQzYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAkp5weaCT4l9zyJNf4X+8VlPI4l FF+YDliLWBCmhzPgZwveRbe67gQkjpnBpsm0XNSZ0YK32PcUJdrZ7orTs0zsVbHt RtHzU0SaCIpgG9LXHpRCHGi/K8dfcNgA3YvT68PEt5cjtX7saBLy/d6sLI7v6eg8 yh2dMnhzmglR4DsN0tjHMznwlIDnTq+Hwk46AlygLtiXAAhlJ7Hx/82BR8J7LjXc V5N8HHXZ253zKiOgDwtb9ypBV6gl4LlO71+y10uY29MvBwrB/I5amNN/uxIDXEV8 kkw+WiVyxY5HWjm+o1aNoCCB739L7RdmPOyZ0Dsx/T8O8dJBztzuNf6fSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuQYgXe5y8OWLA4+/MHQINWbTunMB8GA1UdIwQY MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3 LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvYm7cw0q 3u6kzKIJ/jvidF+t8Dpj+OpZ6SndV9XqFhveLyCY2qNnm226JvBVugQd2TaliKo4 q7mrpO5wYCWw50r2KIatYDIy1G9FBL1yB/xNP4BaDKW1sliw/Ed1CF0eyVu5UFLn JyMaV357XCbmmj9eSmc86HCdBAkAn0edVseRESUXnslOuYzpU0YNIRn8hstrn05D nPwFXbDqVz4hZdbUXyNdmQY+mbloe+BFtl7OjvOLcFl5IW1DKXX9FggpbWyt1qJ1 xI1p+3rbgsTFHiZd1H1TwkTYZuAUX4UXRt0F4HvNekXhTHWfDB7IvnJkI7f2OD1O skcmV/FkNxGnAQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:08:46 2025 by rpki-client