This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft File: yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json) Hash identifier: GoJE4M2uyWzLMEYsrXzaHpbsQBjmoIg6ZjoDbhNdCS4= Subject key identifier: AA:73:80:3E:C4:7D:8E:6F:B4:31:02:B0:04:C3:58:DB:71:4A:D0:4C Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21 Certificate issuer: /CN=cb268b529393018d4bc9fc54073030a03d929721 Certificate serial: 019AF08831A2A5535B90CA0ADE5B411DDE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft Manifest number: 13F5 Signing time: Fri 05 Dec 2025 22:00:48 +0000 Manifest this update: Fri 05 Dec 2025 22:00:48 +0000 Manifest next update: Sat 06 Dec 2025 22:00:48 +0000 Files and hashes: 1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: iYTakqINIW34DvWfxW1zJywoEYurJA+/kArsqI3erno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:31:a2:a5:53:5b:90:ca:0a:de:5b:41:1d:de:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721 Validity Not Before: Dec 5 22:00:48 2025 GMT Not After : Dec 6 22:00:48 2025 GMT Subject: CN=aa73803ec47d8e6fb43102b004c358db714ad04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:1f:a9:ca:7f:0c:a8:a6:a2:ac:72:28:6a: 41:c9:a7:e8:4f:24:f0:c9:c2:4b:6b:d9:19:aa:93: 5d:4d:25:74:f5:59:75:d4:0d:70:fa:f4:ee:8b:2d: e3:ad:73:f3:8d:3e:b3:dd:f9:85:1d:dc:b3:f1:9c: 7b:62:af:a8:b2:07:55:05:eb:20:0f:71:36:72:ec: c6:97:d4:7b:44:71:c6:98:45:ad:6d:ba:14:ce:10: 87:5f:de:0d:0f:22:da:ba:65:c3:95:97:e3:b7:a4: d4:b0:1f:98:c6:82:55:de:30:cb:e4:5d:ed:ee:34: 69:e0:b0:7b:1b:05:a3:4b:f0:1a:71:1f:ec:00:1a: 72:1e:92:a6:29:3e:29:a6:eb:41:96:d1:26:39:e1: 34:bb:21:46:69:5b:e3:a8:e3:f9:30:af:57:2c:96: 7f:2e:66:d1:31:e1:be:40:5e:e0:df:45:11:08:5b: d1:f9:2b:8d:55:69:a7:46:30:49:09:16:14:94:90: ce:4a:fc:a5:3c:fb:f9:ee:86:5e:ce:51:04:58:1c: 63:09:78:c1:05:14:8e:d6:33:65:fb:51:be:c4:8f: f3:6c:4c:14:c9:a3:c0:b2:bd:77:bd:d8:24:a8:ed: fe:cc:b2:b0:1d:6e:a2:d8:5d:d3:86:0e:3f:4a:cb: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:80:3E:C4:7D:8E:6F:B4:31:02:B0:04:C3:58:DB:71:4A:D0:4C X509v3 Authority Key Identifier: keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e0:5f:c9:d5:df:8f:11:8d:3f:1d:cd:78:5a:7e:da:40:23: 4a:5f:c4:ce:05:ae:72:4d:77:0d:a3:85:e0:30:9b:39:e8:26: 26:e0:d5:e8:8e:f1:db:bb:96:e8:2d:ac:64:d9:79:c9:30:d8: 1c:b2:c6:d5:47:32:26:e6:51:98:7d:a1:0b:f5:ba:36:b8:39: 1b:93:d0:3a:07:b8:42:8e:bb:1c:57:cf:f4:2a:9a:21:de:77: 1e:42:28:d1:a5:51:47:f0:7d:f5:5f:8a:45:27:7d:13:58:f9: 9f:7c:41:24:10:99:3c:c2:af:68:16:b2:b1:2a:e3:1a:85:de: dc:57:d5:51:37:59:d7:d4:fc:d4:6c:08:3b:81:23:bb:5f:df: 81:92:41:07:21:0d:14:60:cb:4b:12:7b:08:48:bc:bc:19:a8: 13:a1:44:36:2a:ca:82:08:84:cd:1a:99:19:17:76:4e:f5:3c: 3b:de:59:4a:7d:3b:5f:8c:f1:c1:95:48:0f:4f:d8:c7:64:a0: 8a:07:26:3f:2a:c3:ea:55:f9:ce:6c:9c:be:c6:d6:41:83:ca: 94:4d:d6:13:f4:ad:63:6a:a8:a9:42:27:b6:3c:dd:9b:46:29: 51:84:b9:b3:2c:22:88:b8:18:93:d7:a3:56:01:87:32:bf:d2: 67:24:db:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDGipVNbkMoK3ltBHd6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjY4YjUyOTM5MzAxOGQ0YmM5ZmM1NDA3MzAzMGEwM2Q5 Mjk3MjEwHhcNMjUxMjA1MjIwMDQ4WhcNMjUxMjA2MjIwMDQ4WjAzMTEwLwYDVQQD EyhhYTczODAzZWM0N2Q4ZTZmYjQzMTAyYjAwNGMzNThkYjcxNGFkMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjkfqcp/DKimoqxyKGpByafoTyTw ycJLa9kZqpNdTSV09Vl11A1w+vTuiy3jrXPzjT6z3fmFHdyz8Zx7Yq+osgdVBesg D3E2cuzGl9R7RHHGmEWtbboUzhCHX94NDyLaumXDlZfjt6TUsB+YxoJV3jDL5F3t 7jRp4LB7GwWjS/AacR/sABpyHpKmKT4pputBltEmOeE0uyFGaVvjqOP5MK9XLJZ/ LmbRMeG+QF7g30URCFvR+SuNVWmnRjBJCRYUlJDOSvylPPv57oZezlEEWBxjCXjB BRSO1jNl+1G+xI/zbEwUyaPAsr13vdgkqO3+zLKwHW6i2F3Thg4/Ssu3NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpzgD7EfY5vtDECsATDWNtxStBMMB8GA1UdIwQY MBaAFMsmi1KTkwGNS8n8VAcwMKA9kpchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYt ZjI3MDA4NjRjMTg3LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8zOWE2ZDQtYjkzNy00ZDVmLTgwMTYtZjI3MDA4NjRjMTg3 LzEveXlhTFVwT1RBWTFMeWZ4VUJ6QXdvRDJTbHlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeBfydXf jxGNPx3NeFp+2kAjSl/EzgWuck13DaOF4DCbOegmJuDV6I7x27uW6C2sZNl5yTDY HLLG1UcyJuZRmH2hC/W6Nrg5G5PQOge4Qo67HFfP9CqaId53HkIo0aVRR/B99V+K RSd9E1j5n3xBJBCZPMKvaBaysSrjGoXe3FfVUTdZ19T81GwIO4Eju1/fgZJBByEN FGDLSxJ7CEi8vBmoE6FENirKggiEzRqZGRd2TvU8O95ZSn07X4zxwZVID0/Yx2Sg igcmPyrD6lX5zmycvsbWQYPKlE3WE/StY2qoqUIntjzdm0YpUYS5sywiiLgYk9ej VgGHMr/SZyTbTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:16 2025 by rpki-client