This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft File: yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json) Hash identifier: Qf39qAUDR4IwiRLOVCdBD6TJ9zZk0hDCe1pctZiDi9A= Subject key identifier: 26:5F:16:D5:A1:9A:54:C9:9D:D2:62:F4:51:BE:ED:AD:89:4B:3B:87 Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E Certificate issuer: /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e Certificate serial: 019AF1D21420D0C75ED94BDA8DA5BD7E3A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft Manifest number: 0BD3 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=) 2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: So0yhRdFNyzW8OoP6L2ECJDPHEmVrfvEdwzo1P26ykE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:14:20:d0:c7:5e:d9:4b:da:8d:a5:bd:7e:3a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=265f16d5a19a54c99dd262f451beedad894b3b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:5b:8b:e8:b4:e5:cd:0c:02:81:d9:0f:47: da:2f:af:60:a9:5c:d6:82:db:34:a6:4c:9f:1c:b3: 71:88:92:8a:5c:1e:60:c5:0a:18:55:53:2c:15:f8: 8d:07:85:24:05:d9:17:4e:b7:24:59:3a:a3:4e:60: 8e:26:81:1b:6c:04:31:12:13:a4:d7:52:6a:2c:13: d6:21:e1:ba:4c:90:61:36:3e:e5:9f:a1:ce:a5:f5: e8:90:2a:c2:77:d6:88:28:7b:25:8a:87:61:d4:44: b6:cf:41:c7:bc:90:d4:a2:93:74:8a:6a:68:bd:8f: 89:0c:2a:fd:b6:fd:d2:ad:41:c0:5f:d5:dd:80:c2: 5b:1c:8f:04:0c:98:9a:af:8e:b7:b4:56:29:06:f9: 76:51:f7:c8:6e:54:85:55:c5:27:23:6c:26:9c:03: fa:e3:c4:1a:a7:12:8b:04:d5:d8:3a:4a:2e:11:e9: f0:5a:80:1d:f3:84:ef:cd:55:de:22:bb:86:37:53: 38:56:9a:6c:b5:7f:df:d7:5f:13:8c:0e:c0:54:be: 5e:41:63:87:ba:a3:ca:ea:5a:d0:9d:d4:f6:da:4f: 23:4d:84:67:de:7a:af:19:82:74:0e:28:7c:b3:53: e5:35:53:bf:5a:07:98:51:c6:52:8c:b8:c3:92:9a: 67:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:5F:16:D5:A1:9A:54:C9:9D:D2:62:F4:51:BE:ED:AD:89:4B:3B:87 X509v3 Authority Key Identifier: keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f8:a7:3a:c2:41:52:35:4c:f2:61:51:02:c7:d3:3f:cc:d3: 2c:54:6d:b2:77:10:3a:38:6b:a3:ba:a9:a8:fd:c3:66:17:e7: 66:93:01:61:76:6c:0f:51:37:75:14:68:80:06:81:14:df:b5: d3:55:cb:a6:e0:fc:9e:76:91:79:b0:81:69:8b:f0:7c:54:6f: 0f:c1:3a:e4:19:58:01:45:c7:29:ed:a1:d3:fd:a1:9c:5e:0a: 87:ca:79:90:44:c0:2c:c7:8c:d6:4b:94:89:a7:21:63:39:ac: 81:37:4f:24:2f:ad:d3:57:cd:66:74:98:0e:c5:2a:1e:6d:f8: 3a:3c:48:40:64:d5:27:ed:05:3a:d5:4b:49:51:7e:f8:72:80: 4f:3b:ff:4f:53:88:91:74:b4:88:fb:63:ec:31:12:49:08:d9: 9b:3a:df:3d:1f:b5:eb:e3:eb:92:bf:f6:c2:a9:f4:f5:cb:b0: 10:59:f8:0f:89:76:71:4f:7d:d8:ef:1d:62:c2:55:cf:2d:72: fb:d4:07:0b:80:42:37:a0:dc:c0:9b:90:f5:6a:77:9f:d2:a9: 1b:21:d9:00:6f:88:96:2d:65:03:7f:54:2d:26:13:e6:30:6b: 83:b9:79:2b:c7:cf:0d:0a:29:c6:93:f5:eb:e1:46:1a:91:51: e5:f9:37:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hQg0Mde2UvajaW9fjpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWRmMmJiY2NjMDJlNGU3ZjQ2NGQ2OWZhYWYzZDZjMzcy MzQ5NWUwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EygyNjVmMTZkNWExOWE1NGM5OWRkMjYyZjQ1MWJlZWRhZDg5NGIzYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkRbi+i05c0MAoHZD0faL69gqVzW gts0pkyfHLNxiJKKXB5gxQoYVVMsFfiNB4UkBdkXTrckWTqjTmCOJoEbbAQxEhOk 11JqLBPWIeG6TJBhNj7ln6HOpfXokCrCd9aIKHsliodh1ES2z0HHvJDUopN0impo vY+JDCr9tv3SrUHAX9XdgMJbHI8EDJiar463tFYpBvl2UffIblSFVcUnI2wmnAP6 48QapxKLBNXYOkouEenwWoAd84TvzVXeIruGN1M4VppstX/f118TjA7AVL5eQWOH uqPK6lrQndT22k8jTYRn3nqvGYJ0Dih8s1PlNVO/WgeYUcZSjLjDkppn6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZfFtWhmlTJndJi9FG+7a2JSzuHMB8GA1UdIwQY MBaAFMod8rvMwC5Of0ZNafqvPWw3I0leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTkt ZGQ0OWVjYzI2MDk1LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTktZGQ0OWVjYzI2MDk1 LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/inOsJB UjVM8mFRAsfTP8zTLFRtsncQOjhro7qpqP3DZhfnZpMBYXZsD1E3dRRogAaBFN+1 01XLpuD8nnaRebCBaYvwfFRvD8E65BlYAUXHKe2h0/2hnF4Kh8p5kETALMeM1kuU iachYzmsgTdPJC+t01fNZnSYDsUqHm34OjxIQGTVJ+0FOtVLSVF++HKATzv/T1OI kXS0iPtj7DESSQjZmzrfPR+16+Prkr/2wqn09cuwEFn4D4l2cU992O8dYsJVzy1y +9QHC4BCN6DcwJuQ9Wp3n9KpGyHZAG+Ili1lA39ULSYT5jBrg7l5K8fPDQopxpP1 6+FGGpFR5fk3GA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:22 2025 by rpki-client