This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json) Hash identifier: Xq/Le/aIS9MipfkqgEKUTV5lOqYKaC9XyYW2eLRO08E= Subject key identifier: C0:E7:2C:F4:62:9F:DA:EE:92:AE:A8:5F:7C:81:B7:33:43:B4:32:8F Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84 Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84 Certificate serial: 019AF12E28BFABDB07D96A38E77D21F388BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: 3Pz5apja5cKJYgXJqXnfQrYcWDc.roa (hash: tS0StXV35H98QzpAWS3J2vqaI9c0cKyaGDVnVfsQlWI=) 2: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: iepfsCNYmPRPrzbNM4MvFLnWFoslKtUqpItpkjUKjOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:28:bf:ab:db:07:d9:6a:38:e7:7d:21:f3:88:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84 Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=c0e72cf4629fdaee92aea85f7c81b73343b4328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:23:1b:eb:d2:80:60:3b:f1:47:61:73:c4: e4:b0:da:00:0e:03:57:cc:3e:0a:1e:90:d2:f9:62: f6:64:4e:34:29:f0:f1:37:d6:f4:a3:1f:10:0f:7e: 8e:5c:33:8e:0d:e1:24:8e:ac:d6:ce:ad:b3:f2:b5: fe:aa:67:78:10:80:3f:05:bf:cb:92:1d:89:e1:9f: 88:96:7a:b2:d6:bc:15:d4:95:f6:f9:fb:9e:bb:8e: 19:5d:a6:0e:5a:0e:1d:43:07:1b:bb:11:91:01:33: c2:4a:a0:ab:e8:e8:ed:62:6f:8e:ab:46:db:1b:0d: 10:06:dd:2b:9f:a1:f9:d6:ec:a4:5e:31:70:7a:2b: 85:e0:06:3f:ed:ea:44:1c:c8:6e:d0:59:2e:c4:d5: 10:18:08:59:93:b8:72:fe:b1:ac:5c:29:69:62:32: 47:96:7c:1f:b3:e2:03:f8:35:4d:80:14:9b:63:92: e4:ad:58:59:b8:b2:a9:9a:3b:4d:aa:54:98:3d:21: da:d0:80:d3:ce:8b:5d:7c:5c:fd:97:45:25:42:b1: 69:1b:7d:b1:02:28:4d:9b:ab:7e:e4:1f:82:ae:b9: 9e:b4:a6:ef:50:0c:06:4b:e7:4e:dd:50:f7:ef:d6: 99:39:08:de:23:c3:f9:81:fc:c6:40:8b:ce:72:0f: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E7:2C:F4:62:9F:DA:EE:92:AE:A8:5F:7C:81:B7:33:43:B4:32:8F X509v3 Authority Key Identifier: keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5d:78:94:2d:0e:ec:01:0d:f2:fc:6c:de:e4:7d:f1:1d:63: 76:87:1b:05:e4:9c:ee:d7:4e:d7:73:f2:31:9c:4c:cd:22:bc: 79:ac:bf:d5:12:a4:8d:47:e2:b8:d5:54:d5:d5:56:62:be:de: c1:63:1a:92:d9:8a:9e:3b:02:92:79:cd:b9:b7:be:df:7a:48: 93:b0:f9:7e:d4:d8:37:6f:7a:72:54:3c:ea:af:3a:e0:58:22: 0e:c5:e8:74:4f:06:7b:f8:5a:f7:92:19:82:65:7b:09:d7:37: ea:8a:4c:56:6a:a0:3f:c5:37:06:85:f0:c6:a5:88:9f:20:51: f8:8b:34:93:2d:d0:e3:3d:73:ac:15:bd:ad:a9:9a:cf:6a:d5: 92:33:47:d5:f9:d8:89:39:b1:b9:52:13:49:52:63:82:2f:b3: 5b:bb:c0:9e:ff:0d:6c:1f:0d:8d:c1:51:7f:54:8d:7c:df:e8: a1:f1:88:5b:21:ff:92:bc:0e:b3:4c:da:d0:47:24:26:6b:e6: 93:de:61:60:b0:e5:72:24:f6:25:4d:df:76:c6:89:b4:aa:39: 72:d5:7e:25:7e:1c:f5:6a:ea:fe:3a:89:b0:84:ac:d3:a4:f1: a0:d4:41:88:40:95:f7:23:d9:47:51:7d:05:37:66:84:46:bb: 91:9b:1f:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLii/q9sH2Wo4530h84i9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4N2M3OGI1YjA2YTZmOTAyYzUxMGY5YjRhOGY4MDNiYTMy ZGZhODQwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD EyhjMGU3MmNmNDYyOWZkYWVlOTJhZWE4NWY3YzgxYjczMzQzYjQzMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlasjG+vSgGA78Udhc8TksNoADgNX zD4KHpDS+WL2ZE40KfDxN9b0ox8QD36OXDOODeEkjqzWzq2z8rX+qmd4EIA/Bb/L kh2J4Z+Ilnqy1rwV1JX2+fueu44ZXaYOWg4dQwcbuxGRATPCSqCr6OjtYm+Oq0bb Gw0QBt0rn6H51uykXjFweiuF4AY/7epEHMhu0FkuxNUQGAhZk7hy/rGsXClpYjJH lnwfs+ID+DVNgBSbY5LkrVhZuLKpmjtNqlSYPSHa0IDTzotdfFz9l0UlQrFpG32x AihNm6t+5B+CrrmetKbvUAwGS+dO3VD379aZOQjeI8P5gfzGQIvOcg8slwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDnLPRin9rukq6oX3yBtzNDtDKPMB8GA1UdIwQY MBaAFMh8eLWwam+QLFEPm0qPgDujLfqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUh4NHRiQnFiNUFzVVEtYlNvLUFPNk10LW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lMjI5ODAtZDVlNS00MWU4LWEwNmEt NzQ2OWVmMjAzZjgyLzEveUh4NHRiQnFiNUFzVVEtYlNvLUFPNk10LW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lMjI5ODAtZDVlNS00MWU4LWEwNmEtNzQ2OWVmMjAzZjgy LzEveUh4NHRiQnFiNUFzVVEtYlNvLUFPNk10LW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl14lC0O 7AEN8vxs3uR98R1jdocbBeSc7tdO13PyMZxMzSK8eay/1RKkjUfiuNVU1dVWYr7e wWMaktmKnjsCknnNube+33pIk7D5ftTYN296clQ86q864FgiDsXodE8Ge/ha95IZ gmV7Cdc36opMVmqgP8U3BoXwxqWInyBR+Is0ky3Q4z1zrBW9ramaz2rVkjNH1fnY iTmxuVITSVJjgi+zW7vAnv8NbB8NjcFRf1SNfN/oofGIWyH/krwOs0za0EckJmvm k95hYLDlciT2JU3fdsaJtKo5ctV+JX4c9Wrq/jqJsISs06TxoNRBiECV9yPZR1F9 BTdmhEa7kZsftw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:46 2025 by rpki-client