This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft File: yjuG5lRw-ZTfptb-6OJk22LiSvk.mft (raw, json) Hash identifier: zxfcXczGInrKQskfh/yka4dJVj3Nu0So/fD/Gx2ZFP0= Subject key identifier: 16:C9:80:93:EA:83:11:8D:37:5C:75:AF:E3:3C:F8:68:44:D4:D8:B6 Authority key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9 Certificate issuer: /CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9 Certificate serial: 019AF31B69B9055335321B000D50ABCA785D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: Db8DTjUYkYFq1VL2utnrt9ZhoOQ.roa (hash: d9GgydKG9uk/HAxIswAdFFBoSDorEX71FTaOERwLhzg=) 2: RfiogXB75ZZcw60YgsMcLXMGreQ.roa (hash: CxagJfgQ+HRjqYYAQUHG4nzSSm5GU9hHUNpe0/HqHLA=) 3: Vsvw7zSK2cjlfLBPzsEjNibepw0.roa (hash: fMTdJF0J/U/sST/3YzLYOWjYa8T84ONedHLdQ86kfmA=) 4: WTl9wt0Rp1_SP8V72BWndXzvVXk.roa (hash: BI9xuqlMchALIUZfnOAm1MAIdvbV4MZUCOFrf3rfZgA=) 5: yjuG5lRw-ZTfptb-6OJk22LiSvk.crl (hash: TXkmuJmRnWilmxT9q25kSZK7q/HhLPcwydIIQ3ENV0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:69:b9:05:53:35:32:1b:00:0d:50:ab:ca:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9 Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=16c98093ea83118d375c75afe33cf86844d4d8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:2f:ec:0a:e5:78:ff:69:30:e7:2f:71:f1: a5:c1:db:ec:97:f8:d5:7b:ec:cc:63:1b:1f:7f:28: eb:07:bb:b2:27:94:23:3e:fb:f5:7a:6c:f3:cb:2d: c7:a8:ef:92:02:57:4e:84:45:e0:2e:69:2c:7b:ed: 82:5f:f7:61:e7:0b:41:14:5a:e9:5d:8c:15:9e:94: 94:cb:a6:d6:0f:b6:2e:6c:23:f9:c7:04:f3:a8:62: 0a:4f:fd:37:5b:d9:2c:63:12:ec:46:2e:8d:4a:2f: a2:1b:48:bf:2c:f6:04:ec:ea:68:ec:27:f4:c4:c2: 0b:4d:65:9e:85:24:d9:47:79:71:99:e3:72:d8:f9: ba:de:72:21:04:f1:7d:b2:7d:cd:58:14:56:4a:e8: 2a:b7:6f:ad:50:c3:aa:ee:4d:4d:00:3e:9a:6d:34: 97:b4:c0:ca:1e:3c:a3:78:01:d4:94:e9:b9:83:4f: 93:7d:19:5a:db:26:2c:17:c4:82:e0:2f:02:b1:50: 42:00:78:06:c0:41:1b:56:18:fe:3a:a2:77:f1:e1: b3:de:86:af:c3:01:0d:f9:3b:59:9b:06:c1:7d:83: c1:bd:79:e1:5e:09:78:45:da:34:7e:6b:27:2b:82: ba:af:e1:b4:03:a1:47:7d:82:71:23:93:a2:4f:6f: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C9:80:93:EA:83:11:8D:37:5C:75:AF:E3:3C:F8:68:44:D4:D8:B6 X509v3 Authority Key Identifier: keyid:CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:a3:1f:c1:74:98:45:31:fa:73:98:ad:54:35:d6:8f:7f:a7: ca:ea:39:6b:73:6f:e0:67:a8:b0:50:3f:77:dc:88:1f:7a:79: 44:9f:9e:60:05:9a:13:a8:82:10:c8:45:bd:bc:da:48:f1:21: 4e:c3:34:4c:a4:16:c5:2f:f5:fe:11:6d:34:f1:63:79:fa:5c: ea:e7:89:f2:4c:b1:14:8c:63:0d:e0:e7:00:f4:5a:7e:62:ce: e3:4f:21:b8:db:52:33:a4:bf:00:90:f1:cb:08:d8:80:c4:28: 88:ff:af:8a:7f:68:b3:47:1b:53:64:67:9e:85:22:cd:2b:98: 8f:00:a7:5d:e0:e5:28:1a:e0:2a:f5:68:27:5d:41:b2:6a:d9: 6b:18:72:e2:37:b5:59:cb:4c:87:dd:c9:e8:92:f5:d6:46:6a: b0:54:19:b0:e9:b7:98:46:7c:42:3b:0c:7d:e9:c7:60:f8:f6: a8:1a:2f:78:2b:19:81:6c:70:77:93:a5:0c:4d:e2:1c:25:76: b3:68:e6:19:fa:71:97:c5:93:79:ac:e4:9f:10:5a:c3:e9:05: 98:d6:d6:c9:e9:25:bd:48:8c:ec:f8:80:33:5f:35:c6:f4:ac: 12:30:01:e0:66:85:bf:f7:b2:c7:c7:f2:2c:a5:f2:b6:67:3a: 1c:09:ad:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2m5BVM1MhsADVCrynhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhM2I4NmU2NTQ3MGY5OTRkZmE2ZDZmZWU4ZTI2NGRiNjJl MjRhZjkwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EygxNmM5ODA5M2VhODMxMThkMzc1Yzc1YWZlMzNjZjg2ODQ0ZDRkOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwIv7ArleP9pMOcvcfGlwdvsl/jV e+zMYxsffyjrB7uyJ5QjPvv1emzzyy3HqO+SAldOhEXgLmkse+2CX/dh5wtBFFrp XYwVnpSUy6bWD7YubCP5xwTzqGIKT/03W9ksYxLsRi6NSi+iG0i/LPYE7Opo7Cf0 xMILTWWehSTZR3lxmeNy2Pm63nIhBPF9sn3NWBRWSugqt2+tUMOq7k1NAD6abTSX tMDKHjyjeAHUlOm5g0+TfRla2yYsF8SC4C8CsVBCAHgGwEEbVhj+OqJ38eGz3oav wwEN+TtZmwbBfYPBvXnhXgl4Rdo0fmsnK4K6r+G0A6FHfYJxI5OiT2+oKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbJgJPqgxGNN1x1r+M8+GhE1Ni2MB8GA1UdIwQY MBaAFMo7huZUcPmU36bW/ujiZNti4kr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgt OTUzMWQyNGUwNjEwLzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zZGFlNzEtMWFjZi00MTk2LTk2MDgtOTUzMWQyNGUwNjEw LzEveWp1RzVsUnctWlRmcHRiLTZPSmsyMkxpU3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz6MfwXSY RTH6c5itVDXWj3+nyuo5a3Nv4GeosFA/d9yIH3p5RJ+eYAWaE6iCEMhFvbzaSPEh TsM0TKQWxS/1/hFtNPFjefpc6ueJ8kyxFIxjDeDnAPRafmLO408huNtSM6S/AJDx ywjYgMQoiP+vin9os0cbU2RnnoUizSuYjwCnXeDlKBrgKvVoJ11BsmrZaxhy4je1 WctMh93J6JL11kZqsFQZsOm3mEZ8QjsMfenHYPj2qBoveCsZgWxwd5OlDE3iHCV2 s2jmGfpxl8WTeazknxBaw+kFmNbWyeklvUiM7PiAM181xvSsEjAB4GaFv/eyx8fy LKXytmc6HAmt1g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:07 2025 by rpki-client