This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft File: yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json) Hash identifier: Qx+KrHltHnw+z2fh0+31+8/rxXKtZZRFnMOqLHH8pjo= Subject key identifier: E3:AC:19:82:28:C4:1E:D9:73:77:99:D2:B3:EA:00:20:D1:CB:D4:EE Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52 Certificate issuer: /CN=ca3348abf173d2774c8942008cadf6d6012a3d52 Certificate serial: 019AF3F71C4586B376902B13D746336BB64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft Manifest number: 0758 Signing time: Sat 06 Dec 2025 14:00:49 +0000 Manifest this update: Sat 06 Dec 2025 14:00:49 +0000 Manifest next update: Sun 07 Dec 2025 14:00:49 +0000 Files and hashes: 1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=) 2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: 4Pibm8mEXAv+NrMTIP+UnaMlsNu2AX7kx81ELLbiuxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:1c:45:86:b3:76:90:2b:13:d7:46:33:6b:b6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52 Validity Not Before: Dec 6 14:00:49 2025 GMT Not After : Dec 7 14:00:49 2025 GMT Subject: CN=e3ac198228c41ed9737799d2b3ea0020d1cbd4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:38:14:15:fb:48:43:99:f9:f3:d3:0e:66: 63:60:72:45:44:ea:a9:82:55:53:ad:8e:7a:0e:e9: 49:3e:19:6d:cc:05:31:2b:29:a1:f9:dc:22:95:5b: a4:c4:2a:8e:d0:a8:28:e1:7e:e1:6f:cf:e8:c8:2d: 9f:21:39:65:d8:a7:5f:aa:84:ac:de:49:42:80:0c: 5e:97:3d:e1:4f:f1:e8:5b:6d:4e:39:6b:f6:f8:8f: fa:9d:51:71:d1:01:e8:aa:a5:4a:75:fd:7d:46:ca: 91:75:ba:ee:66:f4:35:c3:cd:33:cb:d4:8e:02:82: 39:1c:76:c1:b8:55:16:fc:50:de:c1:a5:e1:87:2b: ac:bc:da:48:4d:48:c1:43:6c:e8:1c:d8:06:87:53: 89:41:6a:24:49:f4:54:fd:dd:cb:19:13:86:4f:03: 67:7b:96:0a:9c:e5:8e:04:8d:4d:04:f2:bd:e5:0c: 69:92:1a:7a:6a:ec:9e:a9:36:e3:4d:d9:01:70:87: f7:f6:71:22:b3:87:5c:4f:54:f7:a6:d1:8f:c6:00: fb:81:53:6a:36:6b:be:af:a0:02:ba:b3:0d:75:a0: 0b:e7:44:40:89:21:51:de:87:8d:36:61:94:a0:fe: 19:d4:00:6d:eb:ed:22:1e:07:e4:16:02:1b:04:8d: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:19:82:28:C4:1E:D9:73:77:99:D2:B3:EA:00:20:D1:CB:D4:EE X509v3 Authority Key Identifier: keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f5:8d:13:e5:9d:c6:13:32:3f:57:03:c7:4e:76:12:7f:bd: 1f:30:f8:08:00:fe:eb:b7:cd:25:1c:64:16:66:9b:41:da:63: d9:5c:ca:35:bc:cf:e4:36:21:39:5d:5a:5d:04:7a:68:db:f4: 7f:6d:17:57:96:64:e1:ba:46:23:17:a1:7a:48:80:99:32:a0: 68:3b:9a:b2:ed:dc:d9:d2:4a:07:d3:86:13:ec:02:a7:23:f0: 7b:cf:dd:f5:02:18:f5:0e:51:b7:5e:72:9f:43:70:50:9a:9b: 44:23:ba:82:d9:1c:ca:76:bb:c2:44:bd:fb:b8:a8:fe:65:d2: 54:45:a9:cc:70:83:9b:cf:50:37:5c:63:e3:e3:51:b3:9e:1a: 43:e5:23:1f:e3:f7:a7:ee:16:00:8e:43:0d:c0:16:fa:ff:d3: 47:59:2e:ed:56:7d:62:66:f6:f9:eb:20:1d:23:73:80:2b:6b: ca:48:66:70:eb:2b:f5:c9:d8:42:1a:34:3b:6a:6f:ff:72:e7: b2:c6:5c:60:79:9e:c8:7f:fe:a3:d0:49:34:75:99:1a:62:51: 19:08:72:a3:7f:ab:31:ab:0f:40:39:78:57:04:2c:db:48:8a: 87:f8:45:07:2a:fd:69:a0:4c:3f:54:b6:e5:f1:47:ed:10:3f: d2:f4:33:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xxFhrN2kCsT10Yza7ZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzM0OGFiZjE3M2QyNzc0Yzg5NDIwMDhjYWRmNmQ2MDEy YTNkNTIwHhcNMjUxMjA2MTQwMDQ5WhcNMjUxMjA3MTQwMDQ5WjAzMTEwLwYDVQQD EyhlM2FjMTk4MjI4YzQxZWQ5NzM3Nzk5ZDJiM2VhMDAyMGQxY2JkNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKc4FBX7SEOZ+fPTDmZjYHJFROqp glVTrY56DulJPhltzAUxKymh+dwilVukxCqO0Kgo4X7hb8/oyC2fITll2KdfqoSs 3klCgAxelz3hT/HoW21OOWv2+I/6nVFx0QHoqqVKdf19RsqRdbruZvQ1w80zy9SO AoI5HHbBuFUW/FDewaXhhyusvNpITUjBQ2zoHNgGh1OJQWokSfRU/d3LGROGTwNn e5YKnOWOBI1NBPK95Qxpkhp6auyeqTbjTdkBcIf39nEis4dcT1T3ptGPxgD7gVNq Nmu+r6ACurMNdaAL50RAiSFR3oeNNmGUoP4Z1ABt6+0iHgfkFgIbBI3/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOsGYIoxB7Zc3eZ0rPqACDRy9TuMB8GA1UdIwQY MBaAFMozSKvxc9J3TIlCAIyt9tYBKj1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYt MmFjYjlkMTdjMTFjLzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8wMjY5MTQtMTYxMi00NWY0LWFjZGYtMmFjYjlkMTdjMTFj LzEveWpOSXFfRnowbmRNaVVJQWpLMzIxZ0VxUFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvWNE+Wd xhMyP1cDx052En+9HzD4CAD+67fNJRxkFmabQdpj2VzKNbzP5DYhOV1aXQR6aNv0 f20XV5Zk4bpGIxehekiAmTKgaDuasu3c2dJKB9OGE+wCpyPwe8/d9QIY9Q5Rt15y n0NwUJqbRCO6gtkcyna7wkS9+7io/mXSVEWpzHCDm89QN1xj4+NRs54aQ+UjH+P3 p+4WAI5DDcAW+v/TR1ku7VZ9Ymb2+esgHSNzgCtrykhmcOsr9cnYQho0O2pv/3Ln ssZcYHmeyH/+o9BJNHWZGmJRGQhyo3+rMasPQDl4VwQs20iKh/hFByr9aaBMP1S2 5fFH7RA/0vQzog== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:02 2025 by rpki-client