This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json) Hash identifier: P46yKYwyGVgVTfnbTGvgLpAGc+QCvC7LSECBTCPWnJo= Subject key identifier: CE:55:85:7C:84:24:E1:D3:B3:76:CA:FA:6E:45:2F:20:3B:D6:BF:FD Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019B2B8AE2C1FF20497BEA3AE0F50BF9CD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft Manifest number: 03EC Signing time: Wed 17 Dec 2025 09:01:20 +0000 Manifest this update: Wed 17 Dec 2025 09:01:20 +0000 Manifest next update: Thu 18 Dec 2025 09:01:20 +0000 Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=) 2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=) 3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=) 4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: xJs4kh0hlagmMSZwn1mjEzPrK3vFVSqdfI5akv9uvuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:e2:c1:ff:20:49:7b:ea:3a:e0:f5:0b:f9:cd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Dec 17 09:01:20 2025 GMT Not After : Dec 18 09:01:20 2025 GMT Subject: CN=ce55857c8424e1d3b376cafa6e452f203bd6bffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:37:29:60:50:5f:c1:7b:02:a8:cb:10:d0:b6: 8d:a4:dd:1c:8b:44:34:4e:71:a5:2a:55:5f:cd:dd: 94:e0:e2:b9:f6:c3:43:65:f2:12:5f:33:9f:3f:26: b9:8b:08:a4:ff:8d:8a:ce:fd:7b:3b:ed:9f:35:2a: 41:c1:d1:5d:46:44:9f:24:d4:17:44:a9:b9:38:38: 25:4a:ea:75:6a:28:97:78:44:a2:cc:31:9c:27:c1: 97:e6:58:01:33:d6:ca:00:5d:2a:40:d4:72:25:9a: 01:67:7e:1b:00:90:75:20:69:46:0b:45:a3:77:97: 7d:f4:4f:c7:b8:e1:54:8a:16:38:11:90:8f:da:99: 04:82:5f:93:b3:ed:bd:cf:61:1b:e7:76:bf:64:f9: c5:01:0e:cb:1f:e3:71:93:e9:e9:dc:51:11:71:ef: 95:97:06:82:36:06:f2:5a:d5:b3:e7:f1:69:f7:d4: 9c:12:44:93:96:1d:a2:c9:f4:98:0c:f9:ce:46:9c: fc:51:c3:46:2c:74:ca:62:27:e0:b8:7b:29:3c:39: 90:0f:16:e5:30:38:be:73:6a:dd:6a:f9:fd:eb:31: 04:84:07:f7:2c:b4:18:bc:be:5c:7a:de:39:37:7e: 80:9a:1a:1a:3b:ad:7f:b9:0c:00:66:8a:25:ba:28: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:55:85:7C:84:24:E1:D3:B3:76:CA:FA:6E:45:2F:20:3B:D6:BF:FD X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4b:8c:90:43:81:cb:70:4a:f6:02:62:26:ec:81:72:e9:37: 5b:26:42:51:6f:20:bd:db:16:ad:a2:a8:d8:9f:06:85:d5:4f: fe:41:4b:20:68:da:f6:11:d7:7d:8c:94:26:ba:a8:e7:a0:0f: cd:7d:27:5f:10:cb:98:fb:fa:e5:1d:b0:e4:10:b5:46:74:16: 33:11:43:dd:ea:e7:b3:51:3d:9f:27:36:0c:03:53:08:f1:32: 66:b1:e4:fb:ca:4d:f7:bb:70:e8:26:ba:9b:44:77:ba:93:f8: ec:88:63:3d:cc:54:b2:45:ed:f7:55:f7:30:20:a6:7d:4a:38: ee:5e:fc:51:55:16:2d:90:cb:b2:63:d0:6c:03:87:c2:f1:33: 52:ea:26:ce:67:4c:14:b0:e7:82:af:77:2c:08:eb:b3:22:c0: bf:cc:e7:72:83:45:eb:33:f9:65:89:cf:d5:b2:1a:4b:e0:0f: f4:31:64:b1:fd:26:f5:c8:9e:6d:64:4f:64:1f:33:3d:4c:05: 15:3e:9a:90:90:62:fe:e9:0f:e3:3b:f1:46:f8:33:65:d9:49: b9:f5:78:5d:03:e7:70:c6:46:63:e3:ae:59:55:3b:61:6a:b6: 79:35:e8:1f:0a:14:e3:8d:df:75:68:4c:2c:32:3b:51:e4:11: ee:c4:3b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriuLB/yBJe+o64PUL+c18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjUxMjE3MDkwMTIwWhcNMjUxMjE4MDkwMTIwWjAzMTEwLwYDVQQD EyhjZTU1ODU3Yzg0MjRlMWQzYjM3NmNhZmE2ZTQ1MmYyMDNiZDZiZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jcpYFBfwXsCqMsQ0LaNpN0ci0Q0 TnGlKlVfzd2U4OK59sNDZfISXzOfPya5iwik/42Kzv17O+2fNSpBwdFdRkSfJNQX RKm5ODglSup1aiiXeESizDGcJ8GX5lgBM9bKAF0qQNRyJZoBZ34bAJB1IGlGC0Wj d5d99E/HuOFUihY4EZCP2pkEgl+Ts+29z2Eb53a/ZPnFAQ7LH+Nxk+np3FERce+V lwaCNgbyWtWz5/Fp99ScEkSTlh2iyfSYDPnORpz8UcNGLHTKYifguHspPDmQDxbl MDi+c2rdavn96zEEhAf3LLQYvL5cet45N36AmhoaO61/uQwAZooluiioVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5VhXyEJOHTs3bK+m5FLyA71r/9MB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUuMkEOB y3BK9gJiJuyBcuk3WyZCUW8gvdsWraKo2J8GhdVP/kFLIGja9hHXfYyUJrqo56AP zX0nXxDLmPv65R2w5BC1RnQWMxFD3erns1E9nyc2DANTCPEyZrHk+8pN97tw6Ca6 m0R3upP47IhjPcxUskXt91X3MCCmfUo47l78UVUWLZDLsmPQbAOHwvEzUuomzmdM FLDngq93LAjrsyLAv8zncoNF6zP5ZYnP1bIaS+AP9DFksf0m9ciebWRPZB8zPUwF FT6akJBi/ukP4zvxRvgzZdlJufV4XQPncMZGY+OuWVU7YWq2eTXoHwoU443fdWhM LDI7UeQR7sQ7zA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:33 2025 by rpki-client