This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json) Hash identifier: PwpcAEtc1a6Hwh2gKrl81qlYahHHALGW9wywYGk/aKk= Subject key identifier: 62:40:64:96:84:8F:86:7B:B9:DC:BA:C3:2C:19:EE:02:BC:70:54:97 Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019AF19AE2C26A9ABA781D45C1C483360E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft Manifest number: 03CE Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=) 2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=) 3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=) 4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 0eb+bK/VK5tOw5lAUGcZXM5H/mg5E68aVodWNR0i5co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e2:c2:6a:9a:ba:78:1d:45:c1:c4:83:36:0e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=62406496848f867bb9dcbac32c19ee02bc705497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:0b:b9:63:fb:0c:b5:c2:f1:43:df:75:3f: f2:af:32:a1:55:eb:9e:3f:21:f4:c3:cd:8c:4b:61: 03:d8:10:a1:2a:c9:a2:f0:04:02:83:e4:16:13:c8: 8a:5c:2f:3b:d4:d6:9f:ea:4e:b7:ba:6a:8a:ae:43: c1:a5:ed:72:2b:7b:d1:0c:97:0d:30:d7:6d:e3:f0: 0e:4c:c1:1f:3e:d8:ac:55:0b:2d:e7:04:27:27:31: 41:85:12:53:32:94:d5:61:79:43:64:90:23:e6:fd: b3:92:63:f3:92:e0:3e:d4:c7:e5:48:d5:ca:cf:2a: 38:2e:25:40:28:72:45:e2:bb:a3:0c:e7:14:2e:ff: e5:2b:e3:1a:21:46:6e:a7:01:35:e2:48:f5:d7:9d: d0:ed:b2:8e:84:bf:99:a0:bf:e3:a8:78:23:82:b7: 44:51:f3:b6:08:a5:43:97:22:c4:94:49:ed:d3:07: 78:20:c2:be:cf:15:3a:36:5c:84:bf:ce:47:47:b7: be:7d:13:03:05:fc:6e:53:23:19:17:65:01:bb:f1: 19:93:6b:0a:08:06:d8:b5:e5:fc:34:1d:fa:5f:94: ad:51:18:54:c1:77:f6:c2:15:93:6d:a7:5e:e1:83: 37:a5:ab:67:0e:91:5d:70:16:32:6b:d0:75:93:18: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:64:96:84:8F:86:7B:B9:DC:BA:C3:2C:19:EE:02:BC:70:54:97 X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1f:9f:30:fd:76:dd:8b:77:20:af:24:ea:6d:c3:b7:b8:e5: 66:cd:30:e6:6b:da:8e:38:e8:be:5e:cd:3f:3a:78:70:b1:94: 2e:d0:23:db:3f:92:13:d3:ba:fe:f0:09:60:34:ad:06:73:f6: db:1a:1c:e2:1a:30:1e:16:27:f8:14:a6:ce:c5:5b:8a:07:b2: ee:8b:b3:e5:19:4f:f1:65:4b:47:26:46:d5:a5:e4:b9:ff:ff: 1e:b4:e7:81:83:71:d0:77:23:8e:85:1a:7f:e2:60:ff:e4:29: 8a:74:c7:61:51:9a:fb:ff:93:67:b2:6c:61:af:be:80:81:7c: e5:58:3b:d7:08:b0:cf:37:4e:a1:1b:34:2e:c1:32:aa:fe:12: 02:02:46:d5:c6:07:00:01:46:bf:a3:b0:9f:0f:a1:d7:eb:d0: 83:12:d2:e0:76:9a:22:b3:3d:b8:ce:4f:47:ec:7b:ca:d4:03: 81:98:95:e9:07:7c:e6:6c:34:86:de:1c:26:23:a5:82:ac:b5: 4b:7e:ce:d1:64:a2:b4:e6:23:aa:25:30:f2:1f:82:f9:15:65: 73:2d:c3:22:e5:ba:9e:1b:a9:ac:75:31:c6:3c:38:1a:cf:e6: 54:ed:92:b4:f4:44:8f:47:9d:6f:1e:70:08:17:3a:55:41:fe: 07:55:0e:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuLCapq6eB1FwcSDNg54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD Eyg2MjQwNjQ5Njg0OGY4NjdiYjlkY2JhYzMyYzE5ZWUwMmJjNzA1NDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZkLuWP7DLXC8UPfdT/yrzKhVeue PyH0w82MS2ED2BChKsmi8AQCg+QWE8iKXC871Naf6k63umqKrkPBpe1yK3vRDJcN MNdt4/AOTMEfPtisVQst5wQnJzFBhRJTMpTVYXlDZJAj5v2zkmPzkuA+1MflSNXK zyo4LiVAKHJF4rujDOcULv/lK+MaIUZupwE14kj1153Q7bKOhL+ZoL/jqHgjgrdE UfO2CKVDlyLElEnt0wd4IMK+zxU6NlyEv85HR7e+fRMDBfxuUyMZF2UBu/EZk2sK CAbYteX8NB36X5StURhUwXf2whWTbade4YM3patnDpFdcBYya9B1kxi3tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJAZJaEj4Z7udy6wywZ7gK8cFSXMB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGR+fMP12 3Yt3IK8k6m3Dt7jlZs0w5mvajjjovl7NPzp4cLGULtAj2z+SE9O6/vAJYDStBnP2 2xoc4howHhYn+BSmzsVbigey7ouz5RlP8WVLRyZG1aXkuf//HrTngYNx0HcjjoUa f+Jg/+QpinTHYVGa+/+TZ7JsYa++gIF85Vg71wiwzzdOoRs0LsEyqv4SAgJG1cYH AAFGv6Ownw+h1+vQgxLS4HaaIrM9uM5PR+x7ytQDgZiV6Qd85mw0ht4cJiOlgqy1 S37O0WSitOYjqiUw8h+C+RVlcy3DIuW6nhuprHUxxjw4Gs/mVO2StPREj0edbx5w CBc6VUH+B1UObQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:55 2025 by rpki-client