This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json) Hash identifier: NefX6OpAzpEpEo7TeWaaRTMYHhqcqiulhLN7422LBTM= Subject key identifier: 35:D0:8F:3C:E4:40:7F:06:99:87:B6:78:94:D1:DB:D6:0B:C3:0A:40 Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e Certificate serial: 019B38332D4415EFBBE2399A61DC474E1590 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft Manifest number: 04D3 Signing time: Fri 19 Dec 2025 20:00:36 +0000 Manifest this update: Fri 19 Dec 2025 20:00:36 +0000 Manifest next update: Sat 20 Dec 2025 20:00:36 +0000 Files and hashes: 1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=) 2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: nS5E0u+Qfup+rS+DWptOlJcxrQIVV16ceFi4w2uvZmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:2d:44:15:ef:bb:e2:39:9a:61:dc:47:4e:15:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e Validity Not Before: Dec 19 20:00:36 2025 GMT Not After : Dec 20 20:00:36 2025 GMT Subject: CN=35d08f3ce4407f069987b67894d1dbd60bc30a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:62:d7:14:e6:a1:d5:95:16:df:96:ca:65: a1:45:0c:aa:8a:89:55:80:24:19:7d:ed:60:49:55: d7:24:ba:cb:e8:af:bf:22:70:ee:c4:48:8f:0c:9a: 7c:5d:3d:38:f6:bf:89:1f:11:90:b2:71:dd:de:96: 45:2e:23:3c:7c:21:da:a0:99:8d:15:4f:d5:7a:dd: 88:dd:0b:20:1d:87:03:4e:7d:1d:29:6c:fa:77:4a: 29:5e:95:98:e2:ae:5c:10:ad:c8:55:8b:c5:cd:8f: 49:6e:33:e8:1d:ab:d9:21:9e:58:a4:77:c4:24:9a: 26:da:93:50:b8:3d:02:fb:68:b8:49:e3:f8:08:f9: 14:cb:71:71:ae:d0:c5:37:48:0e:c0:d1:b0:94:2b: 49:7d:d4:b0:65:47:c2:08:c7:0f:f9:53:36:88:e4: 82:85:88:44:a3:80:1d:af:77:09:50:f1:94:64:c8: 17:10:36:2b:91:d1:2c:51:71:43:b8:8e:ff:f3:0f: ad:2b:81:a1:71:33:ae:05:e5:fd:c2:1f:83:e5:19: c5:3e:2d:95:58:ab:b4:cf:06:9d:f8:4c:19:27:13: 9d:a6:57:6a:0f:4e:fa:d0:20:cf:28:de:f1:cc:ac: 14:49:93:d8:a0:17:37:78:2d:33:5b:65:86:74:d2: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:8F:3C:E4:40:7F:06:99:87:B6:78:94:D1:DB:D6:0B:C3:0A:40 X509v3 Authority Key Identifier: keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b4:c6:6f:74:56:6f:29:f2:82:5b:b5:21:64:d0:0b:89:59: ad:5e:6a:23:82:dd:eb:f2:48:ce:e6:9d:9b:ae:2a:15:a1:69: fe:da:f3:97:c7:b1:7f:98:56:f1:08:85:50:23:90:8d:8c:47: 52:db:a5:0d:10:b3:37:9c:ad:af:65:36:73:e1:a8:e8:77:1a: 51:7d:5d:d1:18:a8:07:44:30:8a:f0:0e:46:da:df:49:22:2c: 5f:56:97:7a:be:e0:48:aa:67:f0:c1:b6:45:64:0f:71:3e:27: 04:af:0f:1a:de:98:b7:40:5b:74:6c:41:13:8b:f1:b2:09:2a: 6d:13:26:cb:9e:ce:68:14:05:a5:e5:ad:ff:ea:60:2e:47:13: 6c:3f:36:17:92:07:99:76:df:b3:e8:77:25:fd:b2:bd:15:15: 6e:4b:b4:a8:99:d5:38:b7:62:15:59:08:50:e6:2e:34:6b:fc: a4:24:4d:e6:01:8e:5b:99:61:51:84:81:85:64:d7:62:fa:48: 10:29:f0:bf:3e:52:98:15:7c:5a:c0:7c:99:17:40:41:9f:1e: 68:f5:41:f0:11:72:85:81:bb:26:8d:e3:71:f4:48:58:44:73: f6:1a:c0:b5:a1:6d:55:1c:c5:03:44:80:bb:12:8e:13:8a:70: 2e:a7:88:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4My1EFe+74jmaYdxHThWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhYzI0MTE1YTIyYzhkNDEyMWE0YTA2NzU4YWE4NjliZDFj OTNhMWUwHhcNMjUxMjE5MjAwMDM2WhcNMjUxMjIwMjAwMDM2WjAzMTEwLwYDVQQD EygzNWQwOGYzY2U0NDA3ZjA2OTk4N2I2Nzg5NGQxZGJkNjBiYzMwYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+Zi1xTmodWVFt+WymWhRQyqiolV gCQZfe1gSVXXJLrL6K+/InDuxEiPDJp8XT049r+JHxGQsnHd3pZFLiM8fCHaoJmN FU/Vet2I3QsgHYcDTn0dKWz6d0opXpWY4q5cEK3IVYvFzY9JbjPoHavZIZ5YpHfE JJom2pNQuD0C+2i4SeP4CPkUy3FxrtDFN0gOwNGwlCtJfdSwZUfCCMcP+VM2iOSC hYhEo4Adr3cJUPGUZMgXEDYrkdEsUXFDuI7/8w+tK4GhcTOuBeX9wh+D5RnFPi2V WKu0zwad+EwZJxOdpldqD0760CDPKN7xzKwUSZPYoBc3eC0zW2WGdNI2qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXQjzzkQH8GmYe2eJTR29YLwwpAMB8GA1UdIwQY MBaAFMrCQRWiLI1BIaSgZ1iqhpvRyToeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zZTlkOTktNjEwZS00NWI5LWI3NDkt NThjYTQ1ZjJlYmE4LzEveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zZTlkOTktNjEwZS00NWI5LWI3NDktNThjYTQ1ZjJlYmE4 LzEveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLTGb3RW bynyglu1IWTQC4lZrV5qI4Ld6/JIzuadm64qFaFp/trzl8exf5hW8QiFUCOQjYxH UtulDRCzN5ytr2U2c+Go6HcaUX1d0RioB0QwivAORtrfSSIsX1aXer7gSKpn8MG2 RWQPcT4nBK8PGt6Yt0BbdGxBE4vxsgkqbRMmy57OaBQFpeWt/+pgLkcTbD82F5IH mXbfs+h3Jf2yvRUVbku0qJnVOLdiFVkIUOYuNGv8pCRN5gGOW5lhUYSBhWTXYvpI ECnwvz5SmBV8WsB8mRdAQZ8eaPVB8BFyhYG7Jo3jcfRIWERz9hrAtaFtVRzFA0SA uxKOE4pwLqeIRg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:05:41 2025 by rpki-client