This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json) Hash identifier: KRe3jA1WoOIpEX90sbq89SPPvcf3lA8bvPhBiNkywsU= Subject key identifier: A3:F2:EE:A9:F5:9B:03:73:06:76:03:B9:90:70:1E:A2:42:92:D6:F4 Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Certificate serial: 019AF2AD898234DF5E74553263C398588194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=) 2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=) 3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: jkO/ETFQafVUrrcVDHbsDYEfvRssMkoqilp9HOBS2Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:89:82:34:df:5e:74:55:32:63:c3:98:58:81:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=a3f2eea9f59b0373067603b990701ea24292d6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dd:cd:01:4a:78:ca:fd:90:ad:69:e6:10:a9: 22:cc:ef:3e:30:d5:c7:d8:98:5b:c9:f1:2f:f1:1b: 0f:eb:1f:0d:97:51:cd:d6:fc:51:96:d8:93:dd:70: 86:c9:90:ff:48:95:af:48:89:9a:41:3d:e0:4f:6c: de:37:43:19:4a:f6:d0:7c:95:bb:b5:33:bb:58:ef: a0:ca:f1:b7:e9:f2:88:34:d5:fb:53:b5:83:4e:50: 07:b4:a3:22:5e:dd:30:4b:f2:90:9e:bf:f0:88:4f: e2:82:c6:8d:aa:98:31:62:45:92:4a:4d:0d:cd:56: d4:5a:78:3e:fa:7c:25:42:1e:d9:c2:7d:6a:10:b2: 52:75:24:88:c1:ab:0c:86:0e:06:fe:40:1a:13:e1: 72:91:6f:c2:fe:0f:19:93:eb:f2:25:af:2f:08:58: 3c:98:74:e5:81:48:26:67:af:35:6c:21:93:a4:5f: 6e:f0:78:5f:d4:aa:5c:f5:76:1f:6c:42:d9:94:3e: 14:f2:50:b5:0e:03:1d:a7:48:33:03:6e:b5:54:89: c3:1b:f5:3f:e5:56:f7:1e:42:8b:9a:39:43:8c:ba: 73:79:2d:88:f9:1a:58:0a:b6:dd:f9:ef:f7:27:7a: 15:5f:b9:3b:65:b1:14:85:72:04:c2:dd:49:ac:ef: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F2:EE:A9:F5:9B:03:73:06:76:03:B9:90:70:1E:A2:42:92:D6:F4 X509v3 Authority Key Identifier: keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9c:2f:ed:1b:1b:01:f6:48:9b:06:66:d6:58:60:47:7a:2c: 61:39:66:68:da:43:51:6e:aa:11:7b:77:98:b7:57:4d:53:8d: d8:59:eb:fe:e8:0b:25:57:a9:a6:2f:31:86:23:f6:b6:05:fa: 33:2b:a6:78:57:b9:e8:ce:73:47:01:fc:0d:d9:83:9f:be:85: 2c:0c:cc:b0:e1:62:71:09:b2:66:48:09:62:f3:b0:09:fa:6f: 4d:d1:5a:7a:5c:eb:0b:57:cc:db:57:8c:57:fb:d6:c8:b1:96: 41:7c:c0:47:f3:be:e8:d3:aa:a9:f5:cc:70:c4:d3:7a:2d:6c: da:28:49:2e:c9:22:7b:d3:dd:b1:d6:ba:a5:b0:10:47:b4:a4: 62:49:bd:91:ab:6f:c0:5f:d4:86:15:a6:db:7f:0f:70:b2:ad: 96:6f:0c:70:9c:cf:41:9a:ab:a6:d3:e0:cc:fa:1f:dc:64:53: 5e:e9:e9:15:f0:06:4a:0d:34:8e:2d:13:b1:f5:35:7b:78:63: f5:71:23:77:77:2f:80:a9:92:f5:fd:de:63:a3:f2:31:c6:67: da:57:bd:77:b2:a3:c0:06:01:0f:58:d7:2b:ef:45:b4:4e:1d: ca:9d:ec:62:aa:b6:2b:4f:30:44:81:c6:d8:96:cd:35:d0:98: 6d:31:c8:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYmCNN9edFUyY8OYWIGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz ZWM1YzIwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD EyhhM2YyZWVhOWY1OWIwMzczMDY3NjAzYjk5MDcwMWVhMjQyOTJkNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA793NAUp4yv2QrWnmEKkizO8+MNXH 2JhbyfEv8RsP6x8Nl1HN1vxRltiT3XCGyZD/SJWvSImaQT3gT2zeN0MZSvbQfJW7 tTO7WO+gyvG36fKINNX7U7WDTlAHtKMiXt0wS/KQnr/wiE/igsaNqpgxYkWSSk0N zVbUWng++nwlQh7Zwn1qELJSdSSIwasMhg4G/kAaE+FykW/C/g8Zk+vyJa8vCFg8 mHTlgUgmZ681bCGTpF9u8Hhf1Kpc9XYfbELZlD4U8lC1DgMdp0gzA261VInDG/U/ 5Vb3HkKLmjlDjLpzeS2I+RpYCrbd+e/3J3oVX7k7ZbEUhXIEwt1JrO+PUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPy7qn1mwNzBnYDuZBwHqJCktb0MB8GA1UdIwQY MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt MzA1NjU4ZjkxNjM1LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1 LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpwv7Rsb AfZImwZm1lhgR3osYTlmaNpDUW6qEXt3mLdXTVON2Fnr/ugLJVeppi8xhiP2tgX6 MyumeFe56M5zRwH8DdmDn76FLAzMsOFicQmyZkgJYvOwCfpvTdFaelzrC1fM21eM V/vWyLGWQXzAR/O+6NOqqfXMcMTTei1s2ihJLskie9Pdsda6pbAQR7SkYkm9katv wF/UhhWm238PcLKtlm8McJzPQZqrptPgzPof3GRTXunpFfAGSg00ji0TsfU1e3hj 9XEjd3cvgKmS9f3eY6PyMcZn2le9d7KjwAYBD1jXK+9FtE4dyp3sYqq2K08wRIHG 2JbNNdCYbTHIyA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:11 2025 by rpki-client