This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft File: yqgF26w2R0m5sRVZCrbvD5cM29g.mft (raw, json) Hash identifier: q2k5S+mL6YlzqUCuANmBUTL84i4iDOFmPOaZNBebhX4= Subject key identifier: CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4 Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8 Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8 Certificate serial: 0252A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft Manifest number: 024E51 Signing time: Sat 22 Nov 2025 20:21:02 +0000 Manifest this update: Sat 22 Nov 2025 20:21:02 +0000 Manifest next update: Sun 23 Nov 2025 02:21:02 +0000 Files and hashes: 1: 111wEGLfsrCC1YXvRd90Mcgv3so.roa (hash: aK/B7f1mLzo2P0di31RLAL/n8lybzDgTkqimo9ZZzzQ=) 2: D53F-thyu-FB_Q-Qnu54dMG6kUc.roa (hash: F5BasJ7cpf0y1kDUV2GhJ9A7f+WVJ9Tg97K4I87sONg=) 3: XUJQ4tgdREjYop786R0p_wdeyeI.cer (hash: DrDVi/JiphSff/KUlYHrSjbrW1zgVdfqUcsc6Tdez74=) 4: euv64En05073B5-r95s2Uu_UwJg.roa (hash: XiuUZ8UmidXN8hBLSaaK/0y/A/0mIPPIW4YyRcs2pUg=) 5: voibVdC3Nzl9dcSfSFuFj6mK0R8.cer (hash: WwOEnrqRnDl0WwBdK6nhQGVkfYQQotE+5n1JMM/b8Bw=) 6: yqgF26w2R0m5sRVZCrbvD5cM29g.crl (hash: oQGIvZd0BiBC3fjAtLpep4SqK4Z6rEFk+B6nWC3bnsc=) 7: zIlYN-tDLuEj0BDwZSi5PS1eIDI.roa (hash: qLS98wDD6uBYR/1xGuHLGjRWrS9SRA1uwPUMSp/TaYE=) Validation: OK Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 02:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152233 (0x252a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8 Validity Not Before: Nov 22 20:21:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=CF75C749EB96455C6E8FF8701BEB1F964F79F1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:e7:56:e4:87:73:15:f5:a4:ce:2f:9f:82: 4d:05:06:8f:6d:ed:a7:7f:0f:18:17:92:fc:48:6f: 25:35:65:08:a6:60:1d:5e:b5:7f:d7:3a:cc:29:41: ae:4f:9e:19:a1:13:13:26:a9:fa:09:1e:f6:63:6b: b2:d7:32:e4:b0:fe:81:17:8f:c9:e7:a6:6d:fe:ec: 0d:44:60:51:6c:b3:c9:bf:ac:0f:e1:31:76:a0:2d: 42:08:a9:f7:31:fc:a7:21:ad:96:4f:6c:02:91:46: 80:3f:0a:43:de:37:dc:90:a1:c4:be:20:02:d1:5d: 50:e3:7e:02:15:98:a1:e3:cf:9a:fc:e8:31:ea:e4: 7e:8d:9c:c0:6f:5a:5c:cb:18:8a:c7:e3:b4:da:b5: e3:9c:f5:e4:ee:40:f6:16:03:04:cb:0c:5b:cc:29: 39:d4:a3:4a:a7:8a:52:13:6e:72:05:f1:79:f5:80: 12:3d:1e:49:07:bb:ae:48:f2:49:7c:bf:7c:97:63: 0a:df:40:cd:34:0a:97:12:ba:27:85:1b:84:2c:99: b5:34:07:88:91:2c:09:47:06:33:34:cf:15:1b:09: 36:7e:bf:97:92:95:8d:5e:b9:c1:50:1a:c0:05:a0: 87:8d:37:3c:13:42:18:2d:62:d6:26:40:64:a5:a2: 2f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:C7:49:EB:96:45:5C:6E:8F:F8:70:1B:EB:1F:96:4F:79:F1:B4 X509v3 Authority Key Identifier: keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d9:77:5a:2c:ad:20:9d:86:26:be:96:c5:80:78:7e:44:73: a1:00:27:df:0b:ed:60:9c:01:9c:23:4f:43:bf:ae:a0:f6:00: ce:9c:1a:6a:23:cd:11:95:7d:3b:4b:7a:d9:c4:30:9c:24:a1: 5e:3a:65:14:05:14:c3:c2:67:d6:e8:3a:0e:f6:d5:f5:cc:71: 7e:8b:eb:c4:2c:41:f7:4b:9c:81:e4:0a:f2:88:6f:ca:b9:c7: 11:6c:6e:7e:9e:39:3a:53:d8:5a:1e:e7:c2:89:27:02:f2:3f: 82:08:d4:33:c1:1a:4a:ff:81:67:67:4d:13:cd:bc:6b:1c:48: 5e:0a:85:0a:42:ee:98:3f:32:87:46:ea:29:7c:2f:1b:f1:8c: 64:2e:b9:b9:41:91:ce:c7:51:ab:0f:29:12:96:88:04:11:bf: 5f:3a:a4:7c:35:bc:a7:c9:db:76:c1:d7:b2:05:12:41:78:43: a5:ba:aa:00:f5:47:81:5a:2a:96:a7:88:c4:d4:cc:fc:25:47: 9e:01:d0:44:30:ce:fe:9d:3b:4d:b7:ba:b8:82:e7:a7:3f:ed: 74:cf:26:48:ea:58:4a:2d:ce:58:92:6c:2c:23:20:4f:9d:99: 35:8d:a0:2b:17:b9:8e:cf:e8:c6:7d:35:7c:e8:99:ed:4f:08: ae:b7:a3:9e -----BEGIN CERTIFICATE----- MIIEyjCCA7KgAwIBAgIDAlKpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh YTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBhYjZlZjBmOTcwY2RiZDgwHhcNMjUxMTIy MjAyMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhDRjc1Qzc0OUVCOTY0 NTVDNkU4RkY4NzAxQkVCMUY5NjRGNzlGMUI0MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAxebnVuSHcxX1pM4vn4JNBQaPbe2nfw8YF5L8SG8lNWUIpmAd XrV/1zrMKUGuT54ZoRMTJqn6CR72Y2uy1zLksP6BF4/J56Zt/uwNRGBRbLPJv6wP 4TF2oC1CCKn3MfynIa2WT2wCkUaAPwpD3jfckKHEviAC0V1Q434CFZih48+a/Ogx 6uR+jZzAb1pcyxiKx+O02rXjnPXk7kD2FgMEywxbzCk51KNKp4pSE25yBfF59YAS PR5JB7uuSPJJfL98l2MK30DNNAqXEronhRuELJm1NAeIkSwJRwYzNM8VGwk2fr+X kpWNXrnBUBrABaCHjTc8E0IYLWLWJkBkpaIvawIDAQABo4IB5TCCAeEwHQYDVR0O BBYEFM91x0nrlkVcbo/4cBvrH5ZPefG0MB8GA1UdIwQYMBaAFMqoBdusNkdJubEV WQq27w+XDNvYMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYDVR0fBF0wWzBZ oFegVYZTcnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpv YnNuaWpkZXJzL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jcmwwZAYIKwYB BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS9ERUZBVUxUL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jZXIw DgYDVR0PAQH/BAQDAgeAMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5 bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpvYnNuaWpkZXJz L3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5tZnQwFQYIKwYBBQUHAQgBAf8E BjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAi2XdaLK0gnYYmvpbFgHh+RHOhACffC+1gnAGcI09Dv66g 9gDOnBpqI80RlX07S3rZxDCcJKFeOmUUBRTDwmfW6DoO9tX1zHF+i+vELEH3S5yB 5AryiG/KuccRbG5+njk6U9haHufCiScC8j+CCNQzwRpK/4FnZ00TzbxrHEheCoUK Qu6YPzKHRuopfC8b8YxkLrm5QZHOx1GrDykSlogEEb9fOqR8Nbynydt2wdeyBRJB eEOluqoA9UeBWiqWp4jE1Mz8JUeeAdBEMM7+nTtNt7q4guenP+10zyZI6lhKLc5Y kmwsIyBPnZk1jaArF7mOz+jGfTV86JntTwiut6Oe -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:12 2025 by rpki-client