This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json) Hash identifier: FuT/RN3w6l/th0/Vt7G8UHWx+6O4FAIKZpf8xzF0zcI= Subject key identifier: F6:5C:45:CE:52:30:C8:08:E0:A7:22:0F:4F:22:D2:6C:D1:25:C5:98 Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba Certificate serial: 019AF2099AE4E2792D8AF3E90BE5FFE3F15A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=) 2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: AJlBxt7/ZtKo3fSwnI7THovXJhYKEL5RlC4e7URqW8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9a:e4:e2:79:2d:8a:f3:e9:0b:e5:ff:e3:f1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=f65c45ce5230c808e0a7220f4f22d26cd125c598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:7c:91:51:9a:49:ea:02:5e:c1:af:f5:14: 21:53:ed:74:5a:26:0d:04:57:28:42:1f:79:f8:5f: 7c:dc:78:95:23:82:e0:42:fc:d3:d5:2d:cd:5f:37: d7:b6:58:5a:57:ce:ba:6e:f8:d6:e9:81:78:94:95: ef:d6:98:15:7d:25:a2:41:a2:2b:1e:0f:c6:3a:6a: 51:da:9d:44:e1:09:40:00:3c:80:30:6a:34:c3:80: da:fa:58:e8:1b:f0:3f:e7:eb:93:f3:97:dd:9d:cc: 5f:b8:00:d1:52:1f:14:e2:e9:76:98:c4:3a:bc:9c: 2f:29:77:a4:e1:de:e9:e2:80:5b:ad:26:c0:15:fd: 92:8b:a1:52:78:30:24:96:17:26:ea:48:24:3e:8b: fb:c0:07:ed:b2:24:37:85:59:c5:55:00:b3:df:04: a6:44:2d:a1:c6:e3:17:e6:85:b5:f5:17:e5:0e:8f: 83:df:6f:aa:bd:7c:75:b8:f7:b3:c1:3c:1f:72:cc: 17:da:2d:68:43:56:01:68:6d:aa:ca:7c:8e:53:ab: aa:05:b8:ce:b5:31:4e:0d:f5:ea:82:59:5c:80:d8: 79:1f:4d:be:22:75:fb:b6:03:89:67:3a:6a:04:82: cf:38:01:d2:ab:e1:5b:ff:2b:ee:25:20:83:3c:4f: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5C:45:CE:52:30:C8:08:E0:A7:22:0F:4F:22:D2:6C:D1:25:C5:98 X509v3 Authority Key Identifier: keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a7:6a:0f:46:34:da:e0:67:cb:72:ef:f6:86:c9:4c:9b:8c: b1:76:7b:d1:b8:3a:c6:3b:ef:11:39:9b:b2:02:dd:a7:b4:3d: ca:88:b2:28:3c:bc:70:c3:9a:9c:5a:f2:08:9c:12:74:c0:fa: 75:5b:c2:f3:ac:a6:ba:b9:86:c6:01:e1:11:66:a8:cb:b4:08: 42:63:67:9f:86:72:77:85:b0:53:bf:ba:11:b2:ec:32:fb:9d: 22:ab:9b:85:95:03:e4:d0:54:e6:78:45:93:d4:01:c5:9f:74: 6a:10:75:3b:ec:14:7e:1e:3b:83:f9:c1:7e:5f:a3:6d:a4:e2: b9:34:03:5b:40:28:42:16:50:47:82:3b:3f:05:1a:fa:0a:54: 26:41:2f:a6:4a:f3:32:c4:7b:9b:5f:33:18:59:b8:fc:4b:4c: c7:0c:35:ff:b7:97:d5:b5:28:6d:92:99:8b:33:71:f3:be:8a: d6:32:f8:af:e4:c0:fa:78:32:69:01:9a:b4:3b:9d:a5:7f:59: e6:7d:e9:f3:d5:8e:29:00:92:99:c9:4e:db:5a:68:2e:ff:81: b0:8f:d9:b8:f6:01:ef:4c:4f:c3:95:47:00:59:b9:19:eb:17: a2:5d:81:b4:3b:80:70:e1:3a:aa:5a:a0:08:8a:b5:68:a1:35: db:5a:74:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZrk4nktivPpC+X/4/FaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMTlhYmViOGFiOWU2Mzg5MGEyMjNjMmZkNmJhNTY4NDk4 YmRiYmEwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhmNjVjNDVjZTUyMzBjODA4ZTBhNzIyMGY0ZjIyZDI2Y2QxMjVjNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvl8kVGaSeoCXsGv9RQhU+10WiYN BFcoQh95+F983HiVI4LgQvzT1S3NXzfXtlhaV866bvjW6YF4lJXv1pgVfSWiQaIr Hg/GOmpR2p1E4QlAADyAMGo0w4Da+ljoG/A/5+uT85fdncxfuADRUh8U4ul2mMQ6 vJwvKXek4d7p4oBbrSbAFf2Si6FSeDAklhcm6kgkPov7wAftsiQ3hVnFVQCz3wSm RC2hxuMX5oW19RflDo+D32+qvXx1uPezwTwfcswX2i1oQ1YBaG2qynyOU6uqBbjO tTFODfXqgllcgNh5H02+InX7tgOJZzpqBILPOAHSq+Fb/yvuJSCDPE/zdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZcRc5SMMgI4KciD08i0mzRJcWYMB8GA1UdIwQY MBaAFMoZq+uKueY4kKIjwv1rpWhJi9u6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2Mt MTNiYmNkMGY5Mzc2LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2MtMTNiYmNkMGY5Mzc2 LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGadqD0Y0 2uBny3Lv9obJTJuMsXZ70bg6xjvvETmbsgLdp7Q9yoiyKDy8cMOanFryCJwSdMD6 dVvC86ymurmGxgHhEWaoy7QIQmNnn4Zyd4WwU7+6EbLsMvudIqubhZUD5NBU5nhF k9QBxZ90ahB1O+wUfh47g/nBfl+jbaTiuTQDW0AoQhZQR4I7PwUa+gpUJkEvpkrz MsR7m18zGFm4/EtMxww1/7eX1bUobZKZizNx876K1jL4r+TA+ngyaQGatDudpX9Z 5n3p89WOKQCSmclO21poLv+BsI/ZuPYB70xPw5VHAFm5GesXol2BtDuAcOE6qlqg CIq1aKE121p0Qg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:59 2025 by rpki-client