This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json) Hash identifier: NAIfuS6NwBzB7bF7LQ+Uc7A/vxM3a+b4BNpntryLD8k= Subject key identifier: 7F:89:6B:4E:02:38:7C:C9:FA:1C:CB:2D:C4:24:42:46:61:FD:67:2B Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Certificate serial: 019B4994D973BD161A9E9C204C24062248CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 05:00:50 +0000 Manifest this update: Tue 23 Dec 2025 05:00:50 +0000 Manifest next update: Wed 24 Dec 2025 05:00:50 +0000 Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=) 2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=) 3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: HLn/QFZQFHOs/G29VnTQ0QHqIDNKy9uVVe1yyVGnlWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:d9:73:bd:16:1a:9e:9c:20:4c:24:06:22:48:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Validity Not Before: Dec 23 05:00:50 2025 GMT Not After : Dec 24 05:00:50 2025 GMT Subject: CN=7f896b4e02387cc9fa1ccb2dc424424661fd672b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:b9:70:e5:bc:e1:f1:a7:ae:13:bc:82:c8: f7:0e:cf:5a:ce:64:5e:54:aa:0c:7d:f8:85:56:01: 6f:d5:12:52:ab:7e:ff:2a:59:c4:4c:cf:11:86:90: dd:a6:28:e1:2b:98:7e:a9:18:5d:35:d7:50:64:12: 5a:1e:df:03:05:91:3c:36:c6:1b:49:ff:6c:2f:54: c9:72:98:aa:7e:f5:27:5e:e7:36:d3:1e:78:88:f4: 4c:1f:c2:3f:64:94:15:89:d3:86:a2:c6:21:06:74: 08:5c:02:16:8c:1a:43:8b:de:61:2f:ff:9d:05:a8: 60:88:58:c4:bd:cd:0a:2f:3c:6c:6b:42:88:06:30: b2:70:4a:d3:06:9d:3b:50:5b:0d:35:b1:28:62:4b: f1:72:2e:a4:73:df:c1:e0:ef:ab:d9:f9:46:a1:a6: 8f:dd:df:4a:e2:8f:8e:80:a0:01:90:58:b6:55:19: c5:3f:1a:9a:1e:16:bd:25:64:fe:f3:5b:dd:19:57: ee:e5:96:30:a4:c4:82:ff:9a:28:e9:cb:c8:12:ee: 1b:5b:98:1a:8a:ba:ca:8e:dd:e5:f3:3a:d9:fc:b1: a0:99:4c:2d:a3:51:3b:27:90:f8:74:6c:f1:43:8d: 32:e5:4d:26:49:9a:9d:ce:0a:62:83:b0:7a:35:c7: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:89:6B:4E:02:38:7C:C9:FA:1C:CB:2D:C4:24:42:46:61:FD:67:2B X509v3 Authority Key Identifier: keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:82:d3:04:00:79:43:75:53:ad:aa:e1:da:6c:ec:92:77: 1f:38:7d:db:52:95:02:1d:ee:e8:3e:7b:7b:0c:6f:c2:0e:72: 42:91:dd:86:59:56:71:46:87:da:6e:a8:09:b0:eb:ff:4a:f3: 23:13:0f:15:13:9f:ef:79:13:68:25:be:cd:ac:16:38:df:0b: 18:59:58:7b:a8:22:98:ae:0d:50:1b:3c:a0:a8:80:ee:2c:6a: ce:14:6a:de:6e:c4:74:5b:05:f2:4b:ee:5b:c6:1e:2d:9e:99: 7b:5d:fd:1e:b9:a6:e4:25:12:9f:9e:89:1c:98:55:90:33:45: 9a:ae:e3:8b:e0:69:fc:d7:ba:36:66:2a:fe:92:0f:5f:5d:5e: 15:35:b0:25:49:db:01:42:c8:97:8b:4a:f6:6c:4d:42:cb:b1: d9:a7:1b:6e:59:f4:b8:5b:e2:a2:36:50:94:fd:89:39:10:87: c1:b8:ae:ec:2c:8e:86:58:05:99:52:00:19:d7:34:ee:02:ce: bc:c1:6a:f3:6d:a8:1c:8e:09:cc:71:bb:5d:d0:e6:eb:e3:4e: 0f:2e:5b:b5:b2:5c:c2:e7:4b:ab:59:64:2f:0d:38:59:99:f3: f1:a5:a7:b3:88:a5:92:70:66:4f:ae:53:dd:6f:9d:a7:4b:ab: a5:54:d6:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlNlzvRYanpwgTCQGIkjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz ZWM1YzIwHhcNMjUxMjIzMDUwMDUwWhcNMjUxMjI0MDUwMDUwWjAzMTEwLwYDVQQD Eyg3Zjg5NmI0ZTAyMzg3Y2M5ZmExY2NiMmRjNDI0NDI0NjYxZmQ2NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAC5cOW84fGnrhO8gsj3Ds9azmRe VKoMffiFVgFv1RJSq37/KlnETM8RhpDdpijhK5h+qRhdNddQZBJaHt8DBZE8NsYb Sf9sL1TJcpiqfvUnXuc20x54iPRMH8I/ZJQVidOGosYhBnQIXAIWjBpDi95hL/+d BahgiFjEvc0KLzxsa0KIBjCycErTBp07UFsNNbEoYkvxci6kc9/B4O+r2flGoaaP 3d9K4o+OgKABkFi2VRnFPxqaHha9JWT+81vdGVfu5ZYwpMSC/5oo6cvIEu4bW5ga irrKjt3l8zrZ/LGgmUwto1E7J5D4dGzxQ40y5U0mSZqdzgpig7B6NccX/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Ja04COHzJ+hzLLcQkQkZh/WcrMB8GA1UdIwQY MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt MzA1NjU4ZjkxNjM1LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1 LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqSC0wQA eUN1U62q4dps7JJ3Hzh921KVAh3u6D57ewxvwg5yQpHdhllWcUaH2m6oCbDr/0rz IxMPFROf73kTaCW+zawWON8LGFlYe6gimK4NUBs8oKiA7ixqzhRq3m7EdFsF8kvu W8YeLZ6Ze139Hrmm5CUSn56JHJhVkDNFmq7ji+Bp/Ne6NmYq/pIPX11eFTWwJUnb AULIl4tK9mxNQsux2acbbln0uFviojZQlP2JORCHwbiu7CyOhlgFmVIAGdc07gLO vMFq822oHI4JzHG7XdDm6+NODy5btbJcwudLq1lkLw04WZnz8aWns4ilknBmT65T 3W+dp0urpVTWIg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:10 2025 by rpki-client