This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json) Hash identifier: boXZhNEJX0VKyJpmmprYriIwUoMahr1rTeWtnG/Zya4= Subject key identifier: F7:C4:55:BE:95:AF:57:E7:5B:4B:EC:65:2F:9B:15:98:BF:3C:A1:5F Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Certificate serial: 019B41DB3AD5293305E8AE2CDB55509EB5A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 17:00:45 +0000 Manifest this update: Sun 21 Dec 2025 17:00:45 +0000 Manifest next update: Mon 22 Dec 2025 17:00:45 +0000 Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=) 2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=) 3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: M/EuMvKVstTeBuu2TOoiVzT4PgbPKRsAaGchcF6rZUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:3a:d5:29:33:05:e8:ae:2c:db:55:50:9e:b5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Validity Not Before: Dec 21 17:00:45 2025 GMT Not After : Dec 22 17:00:45 2025 GMT Subject: CN=f7c455be95af57e75b4bec652f9b1598bf3ca15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:44:d9:9e:9f:21:ad:56:25:ac:ea:0a:26: d3:f3:d3:10:e2:88:43:dc:99:33:cc:b5:2e:54:13: d1:bb:c8:ae:33:6b:b8:6b:86:81:85:13:ba:c2:b2: 30:62:ca:e6:f8:99:d8:27:32:9a:26:87:c7:f4:d7: 49:a9:67:a4:08:ab:eb:57:01:d6:04:88:82:5f:92: af:a0:d1:02:09:b4:64:7d:23:f2:90:db:af:35:ab: f9:27:90:da:30:fe:4a:25:7b:ae:22:3d:30:f5:6c: c8:2b:24:1b:58:5c:d9:75:66:7d:2c:89:ed:b5:68: ea:26:e5:61:9a:44:2d:bc:1e:5f:5f:50:65:d1:93: 1e:06:4e:7d:b8:a4:53:54:5c:20:22:48:d9:3b:48: bf:09:a2:99:07:6b:1b:ec:74:94:91:26:0b:a5:3c: cc:d2:a0:ba:f4:6f:20:38:40:fa:9e:7a:92:02:c8: ca:5b:4e:7e:99:ac:bb:16:6f:29:28:7a:07:d9:77: d9:c2:9e:ec:61:51:43:70:e8:6d:bf:42:2e:ff:96: f4:20:b8:d2:56:2f:18:88:51:3a:c7:22:01:f2:9c: 56:2f:31:77:4e:2c:fd:37:09:bd:4e:7f:ef:79:75: aa:90:d0:52:82:d4:b1:51:c5:14:ef:03:3b:4f:ec: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C4:55:BE:95:AF:57:E7:5B:4B:EC:65:2F:9B:15:98:BF:3C:A1:5F X509v3 Authority Key Identifier: keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3a:67:bb:74:7c:1d:40:77:d4:75:59:d2:8d:f5:d3:a7:55: 1b:84:05:f4:5c:62:ca:0f:51:b9:b5:1f:9f:c4:ab:23:5d:a7: 11:a7:10:36:10:ca:76:88:ce:4a:c5:92:7d:fe:a8:dc:84:b3: 2f:d4:5f:4e:a5:8c:5a:64:5a:33:aa:61:46:30:23:87:17:86: eb:79:e1:c2:93:d6:6c:46:86:c8:d9:5a:4b:58:65:3d:1b:92: c8:59:56:91:e6:da:8a:7c:45:ab:b0:13:85:01:35:e1:9b:a9: b6:b8:c6:a5:58:b7:e5:e9:d7:fe:98:a9:cd:c8:d3:d2:9e:1a: 62:3f:ea:ac:c6:70:d8:5e:f3:85:74:1f:53:8a:9f:e6:b7:b1: 9b:00:db:d0:f2:ef:24:61:b0:03:be:e3:a8:3f:89:99:dd:bb: 5a:2e:46:f8:39:ac:54:64:dc:69:e6:d5:27:67:26:80:80:3e: 43:35:cf:ee:81:7a:ea:6c:0d:ca:97:71:98:26:8b:42:bb:83: d8:37:99:0a:ad:fd:86:a1:7b:34:c0:e2:2e:e8:b7:69:e0:b9: 9d:25:4d:fb:c1:89:6f:f5:90:ae:7c:80:2f:1d:d0:f9:48:6b: ac:47:21:be:e1:42:92:c2:61:79:4e:ce:01:78:80:4f:24:19: 91:9d:68:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2zrVKTMF6K4s21VQnrWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz ZWM1YzIwHhcNMjUxMjIxMTcwMDQ1WhcNMjUxMjIyMTcwMDQ1WjAzMTEwLwYDVQQD EyhmN2M0NTViZTk1YWY1N2U3NWI0YmVjNjUyZjliMTU5OGJmM2NhMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+9E2Z6fIa1WJazqCibT89MQ4ohD 3JkzzLUuVBPRu8iuM2u4a4aBhRO6wrIwYsrm+JnYJzKaJofH9NdJqWekCKvrVwHW BIiCX5KvoNECCbRkfSPykNuvNav5J5DaMP5KJXuuIj0w9WzIKyQbWFzZdWZ9LInt tWjqJuVhmkQtvB5fX1Bl0ZMeBk59uKRTVFwgIkjZO0i/CaKZB2sb7HSUkSYLpTzM 0qC69G8gOED6nnqSAsjKW05+may7Fm8pKHoH2XfZwp7sYVFDcOhtv0Iu/5b0ILjS Vi8YiFE6xyIB8pxWLzF3Tiz9Nwm9Tn/veXWqkNBSgtSxUcUU7wM7T+yrGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfEVb6Vr1fnW0vsZS+bFZi/PKFfMB8GA1UdIwQY MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt MzA1NjU4ZjkxNjM1LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1 LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDpnu3R8 HUB31HVZ0o3106dVG4QF9Fxiyg9RubUfn8SrI12nEacQNhDKdojOSsWSff6o3ISz L9RfTqWMWmRaM6phRjAjhxeG63nhwpPWbEaGyNlaS1hlPRuSyFlWkebainxFq7AT hQE14ZuptrjGpVi35enX/pipzcjT0p4aYj/qrMZw2F7zhXQfU4qf5rexmwDb0PLv JGGwA77jqD+Jmd27Wi5G+DmsVGTcaebVJ2cmgIA+QzXP7oF66mwNypdxmCaLQruD 2DeZCq39hqF7NMDiLui3aeC5nSVN+8GJb/WQrnyALx3Q+UhrrEchvuFCksJheU7O AXiATyQZkZ1oaw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:30:53 2025 by rpki-client