This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json) Hash identifier: 7KY+tIUinNKpy4jFWRCev9ODAcYIowFloy6uNo2BgNY= Subject key identifier: C2:5D:5F:10:F0:08:E7:AB:F8:7E:96:C1:00:1C:B5:7B:DE:02:81:1F Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019AF27684C44E1C4BE490CCB51B6D5350D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft Manifest number: 0A5E Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=) 2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=) 3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=) 4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=) 5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=) 6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: 3coSIttDnMBXYWeq48YtqSYonPfhxy0BuiwmJlP6TYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:84:c4:4e:1c:4b:e4:90:cc:b5:1b:6d:53:50:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=c25d5f10f008e7abf87e96c1001cb57bde02811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8e:43:18:46:0e:7a:60:bf:7b:96:7f:49:a4: bc:48:00:27:a2:a8:d1:06:59:8a:98:ba:91:63:c7: 61:95:06:57:c6:15:cc:d6:ae:2f:d9:5c:b7:42:5a: ec:b4:ec:4c:0f:ac:1b:ac:04:d2:21:2d:b0:18:42: b5:db:c2:f1:61:9e:90:4b:ca:01:e2:fd:6f:62:b4: 17:3a:e1:79:5b:1d:6c:44:0a:91:b4:63:40:50:96: b8:59:f6:e1:0e:86:d2:8f:2f:33:d2:c2:46:87:2f: 8f:78:f5:c4:42:3a:06:ab:4d:c7:53:77:11:65:a4: f7:aa:49:f0:eb:40:0e:7f:01:a9:51:a7:8b:b3:34: cd:0e:2f:04:c0:5e:f6:d7:ea:a4:c8:b6:da:6b:0a: 76:2e:90:da:dc:bc:cf:ac:73:c6:be:6b:ed:85:7a: d1:54:c3:b7:57:37:ca:1c:85:da:fc:95:c1:37:c9: bf:6a:5c:08:d0:80:59:31:6a:04:cb:a1:93:ea:05: 8f:75:8b:77:06:40:43:e0:96:85:02:ac:a7:c2:3a: 22:a0:f6:25:18:f4:a4:c5:74:a6:53:1a:5c:5c:4c: 3c:7d:b1:04:68:2a:ca:65:2d:b5:8c:d5:0d:7f:c0: 5e:33:66:ce:f3:96:c7:a2:c1:bb:45:cb:25:18:c4: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5D:5F:10:F0:08:E7:AB:F8:7E:96:C1:00:1C:B5:7B:DE:02:81:1F X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ad:70:92:18:35:13:7d:18:5b:a8:e1:15:7f:27:bb:d3:78: c9:9d:d6:b0:5d:9f:0d:d8:56:76:64:00:af:63:0c:53:ec:6d: 90:7b:38:e7:04:1f:a4:18:cd:ec:8c:84:3f:00:5f:1a:63:6a: d5:b7:47:c4:3e:03:d2:8d:84:fd:9c:45:a8:66:ae:38:5e:8c: 31:07:88:21:7e:72:e3:94:61:65:07:a2:ab:34:d5:86:28:87: 9f:1d:3e:80:cb:0d:a9:a6:1b:a6:e5:7b:44:df:3e:29:10:1e: 2e:49:ff:eb:1d:0e:61:03:0d:98:2a:8d:8c:5a:53:1b:43:08: ec:cf:34:bd:f3:d2:ea:60:b7:ea:ff:ea:d9:d6:24:12:66:e0: 41:9a:0b:3f:6d:ee:c8:35:bd:a4:4c:0f:2c:8e:d9:9f:d0:58: 4c:48:1e:24:ca:65:d0:d7:ae:3f:d6:f3:e9:a1:ca:f8:20:68: 2c:2b:77:86:6c:ca:10:83:54:d8:6e:f1:e6:8e:63:b2:fe:7f: 82:75:68:82:62:e2:dc:b6:51:9f:9e:88:f6:be:58:a7:59:89: 0e:07:c9:fb:73:a7:0c:1e:b5:d6:61:d8:06:05:0a:a9:e6:12: c3:66:74:35:d1:7b:c9:57:5e:ce:c3:2e:72:70:8f:8d:7d:e1: c8:27:c9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoTEThxL5JDMtRttU1DQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD EyhjMjVkNWYxMGYwMDhlN2FiZjg3ZTk2YzEwMDFjYjU3YmRlMDI4MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg45DGEYOemC/e5Z/SaS8SAAnoqjR BlmKmLqRY8dhlQZXxhXM1q4v2Vy3QlrstOxMD6wbrATSIS2wGEK128LxYZ6QS8oB 4v1vYrQXOuF5Wx1sRAqRtGNAUJa4WfbhDobSjy8z0sJGhy+PePXEQjoGq03HU3cR ZaT3qknw60AOfwGpUaeLszTNDi8EwF721+qkyLbaawp2LpDa3LzPrHPGvmvthXrR VMO3VzfKHIXa/JXBN8m/alwI0IBZMWoEy6GT6gWPdYt3BkBD4JaFAqynwjoioPYl GPSkxXSmUxpcXEw8fbEEaCrKZS21jNUNf8BeM2bO85bHosG7RcslGMR9vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJdXxDwCOer+H6WwQActXveAoEfMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq1wkhg1 E30YW6jhFX8nu9N4yZ3WsF2fDdhWdmQAr2MMU+xtkHs45wQfpBjN7IyEPwBfGmNq 1bdHxD4D0o2E/ZxFqGauOF6MMQeIIX5y45RhZQeiqzTVhiiHnx0+gMsNqaYbpuV7 RN8+KRAeLkn/6x0OYQMNmCqNjFpTG0MI7M80vfPS6mC36v/q2dYkEmbgQZoLP23u yDW9pEwPLI7Zn9BYTEgeJMpl0NeuP9bz6aHK+CBoLCt3hmzKEINU2G7x5o5jsv5/ gnVogmLi3LZRn56I9r5Yp1mJDgfJ+3OnDB611mHYBgUKqeYSw2Z0NdF7yVdezsMu cnCPjX3hyCfJbg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:12 2025 by rpki-client