This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft File: YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json) Hash identifier: bhgwnUaWPe84JwXwwHf7Fv4BLmWbVpRKtwY1LyfEDFo= Subject key identifier: F9:CA:46:78:81:44:55:C7:58:07:13:57:54:C4:5A:D1:BC:FD:4A:8A Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef Certificate serial: 019AF19B5EE12E417F3CD8300A9FF786ED09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=) 2: PwNKn35Sokbr7evbRQGt6ldKTJc.roa (hash: xbgSTs/2Kz3u8buklKtIXDkz4OYgPF3eYqw2N++Xd9U=) 3: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: jgLbtMDYvBjIIynGwdPgoD9hjTY5+r+ec0MAKKd5nJk=) 4: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=) 5: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=) 6: hoqonLcixGOse9XNJgoeFQV8jS0.roa (hash: wxy/iAlcRlwLJ9zqBBHoE9Kmygd21D/X2jI5AKbdq90=) 7: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=) 8: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5e:e1:2e:41:7f:3c:d8:30:0a:9f:f7:86:ed:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=f9ca4678814455c75807135754c45ad1bcfd4a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:1b:c4:e8:bc:79:54:d2:3b:34:e8:72:8a: 28:2c:d6:3b:90:18:d3:bc:66:94:c4:df:8c:77:3b: b9:e1:06:2e:49:97:c3:4e:a1:05:54:0d:fd:a7:23: a9:46:78:df:8f:37:81:64:8f:8b:82:61:4d:33:be: 2a:cd:5c:8b:e7:61:ad:f5:21:60:01:04:96:3b:0c: 0f:d2:69:31:61:0c:f7:f4:38:0e:ee:15:e6:a5:77: fa:d1:37:8f:12:a6:a3:20:92:47:f7:16:ad:0a:f9: 36:ba:2d:ea:b2:b9:3d:00:18:9f:e9:ad:04:08:0c: 3a:03:64:b5:65:7b:b5:1c:07:80:f9:2d:76:2a:e8: 92:fa:4f:04:20:d3:77:2e:9d:3e:c7:52:06:d4:61: 11:5f:7f:a9:2d:d0:6e:56:82:5c:45:7e:f9:1a:01: c5:f3:e2:ff:d1:71:2d:99:86:d0:0f:55:06:c1:f8: ef:78:3e:84:01:86:e1:2d:5c:f9:58:f1:82:cf:9e: 9e:b8:8a:60:c8:9d:8e:87:d8:0f:be:e5:23:d0:88: 9b:7e:d1:1c:93:f3:b0:20:e0:08:5c:7d:9a:ca:6d: c6:e4:1a:cc:23:2e:b4:cf:31:d0:6c:e9:1f:82:c7: 13:38:34:36:96:31:e9:83:4f:72:d9:c8:63:bf:f4: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:46:78:81:44:55:C7:58:07:13:57:54:C4:5A:D1:BC:FD:4A:8A X509v3 Authority Key Identifier: keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f6:9f:e3:c0:08:51:8c:fb:db:2a:f1:3f:05:c0:9d:c5:d8: 5c:94:2d:db:ad:ce:2d:c9:4f:9d:c4:06:20:fe:e8:ed:1c:40: a5:47:eb:cb:bb:a3:04:4d:18:e7:2d:26:b7:0d:81:2b:cc:c4: 6a:73:f9:7a:6a:a3:b8:fa:a3:a3:05:68:05:dc:d6:c4:ce:7e: f6:09:cb:85:6b:6f:49:0f:cf:36:36:f4:27:6c:26:d1:64:30: 89:58:bb:a0:97:0c:88:1d:b7:37:f8:99:82:2d:ba:68:10:70: 41:59:ed:ea:90:9d:77:21:d7:49:c6:0b:2f:a9:59:70:60:78: 1b:9b:b9:40:85:d3:84:08:2a:21:cb:58:2d:79:58:a6:d0:cc: 44:0d:17:77:cc:25:62:e3:cf:4e:01:0b:e0:8d:87:36:9b:46: f6:34:39:aa:85:0d:a0:40:21:0d:da:28:cc:39:03:5e:f6:b6: f7:0a:8a:b3:51:c7:f7:28:78:54:d2:35:d6:bd:07:92:53:2a: 64:db:19:07:7d:22:0a:89:aa:69:9e:03:45:5d:64:a9:ee:f3: c0:aa:73:2a:e9:2d:44:db:ca:55:5e:b2:ac:81:86:52:7d:6a: db:37:7f:e6:db:51:2a:b8:16:12:3c:46:96:cb:c8:c6:c9:9f: f7:7d:20:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm17hLkF/PNgwCp/3hu0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk NmIxZWYwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhmOWNhNDY3ODgxNDQ1NWM3NTgwNzEzNTc1NGM0NWFkMWJjZmQ0YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ4bxOi8eVTSOzTocoooLNY7kBjT vGaUxN+Mdzu54QYuSZfDTqEFVA39pyOpRnjfjzeBZI+LgmFNM74qzVyL52Gt9SFg AQSWOwwP0mkxYQz39DgO7hXmpXf60TePEqajIJJH9xatCvk2ui3qsrk9ABif6a0E CAw6A2S1ZXu1HAeA+S12KuiS+k8EINN3Lp0+x1IG1GERX3+pLdBuVoJcRX75GgHF 8+L/0XEtmYbQD1UGwfjveD6EAYbhLVz5WPGCz56euIpgyJ2Oh9gPvuUj0IibftEc k/OwIOAIXH2aym3G5BrMIy60zzHQbOkfgscTODQ2ljHpg09y2chjv/QizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnKRniBRFXHWAcTV1TEWtG8/UqKMB8GA1UdIwQY MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt YmU1N2Q3ZGZhMGRlLzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvaf48AI UYz72yrxPwXAncXYXJQt263OLclPncQGIP7o7RxApUfry7ujBE0Y5y0mtw2BK8zE anP5emqjuPqjowVoBdzWxM5+9gnLhWtvSQ/PNjb0J2wm0WQwiVi7oJcMiB23N/iZ gi26aBBwQVnt6pCddyHXScYLL6lZcGB4G5u5QIXThAgqIctYLXlYptDMRA0Xd8wl YuPPTgEL4I2HNptG9jQ5qoUNoEAhDdoozDkDXva29wqKs1HH9yh4VNI11r0HklMq ZNsZB30iComqaZ4DRV1kqe7zwKpzKuktRNvKVV6yrIGGUn1q2zd/5ttRKrgWEjxG lsvIxsmf930gBg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:30 2025 by rpki-client