This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft File: yHX3bo-JQkeSPA4nYjTZikw-xcI.mft (raw, json) Hash identifier: ZOMwvdwyYmsk28P0Qn9ZxMrNPagQoO3k7AL9KrfSZ3w= Subject key identifier: 29:D4:CC:FD:91:13:21:58:9D:31:3E:FF:C0:E1:2A:70:2D:13:22:C8 Authority key identifier: C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 Certificate issuer: /CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Certificate serial: 019B0FA585D19F8DBEE00E71B56890A096AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 23:01:04 +0000 Manifest this update: Thu 11 Dec 2025 23:01:04 +0000 Manifest next update: Fri 12 Dec 2025 23:01:04 +0000 Files and hashes: 1: FGsyv-avFXn_iimzPOzOCwcPyYs.roa (hash: x+nbArqL7XpMEWFfS8pufHXCc23im3EMURx/7GPfFLI=) 2: I709bbaWjjvBjycgl5Y9TKJLvE0.roa (hash: XtOSTkSn/jS5PlGEkzSWe5jgilvzImx3IY3GpNZBgXs=) 3: yHX3bo-JQkeSPA4nYjTZikw-xcI.crl (hash: WgKD4DPAjfPWhD1IPcZA4X9WQ2P1f3/NPnTpTahKeyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:85:d1:9f:8d:be:e0:0e:71:b5:68:90:a0:96:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c875f76e8f894247923c0e276234d98a4c3ec5c2 Validity Not Before: Dec 11 23:01:04 2025 GMT Not After : Dec 12 23:01:04 2025 GMT Subject: CN=29d4ccfd911321589d313effc0e12a702d1322c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:90:c6:89:58:5a:53:21:8a:e2:b3:68:8e: d7:2c:c8:80:e9:25:e7:f8:cf:ad:f1:0e:fb:92:ac: a6:cf:41:c4:c2:e0:5c:9f:1b:38:cc:29:18:17:ba: f9:75:05:02:27:ff:55:7d:dc:3b:2d:51:94:30:fb: 48:c9:d2:8c:8e:61:37:df:28:0a:7e:3f:53:7c:68: 00:06:b9:73:04:de:e9:8a:6c:11:0a:b9:3c:62:a0: d7:8b:84:c5:f5:f2:bb:95:ae:29:72:20:bc:d3:b7: cc:ba:97:73:07:77:76:04:de:82:ad:32:76:f0:09: c4:3b:4d:2f:ec:80:cd:b0:a8:84:fe:46:77:de:01: aa:47:36:48:0b:f0:e0:b0:aa:45:1f:95:b1:77:a3: 68:e5:90:8c:5c:ca:ad:64:11:ef:ea:df:09:09:cd: 03:01:77:57:f9:20:87:85:9c:f0:f0:8f:34:aa:85: fb:83:e9:51:1a:60:dd:7b:f0:8f:a1:b1:e7:fa:96: ec:71:37:2a:30:7b:91:5f:cb:2f:8e:b0:a9:b9:75: cd:1c:e7:ab:f6:e8:77:5f:e3:8e:5e:58:cd:fd:fa: 15:a5:dd:f6:93:30:17:d3:3a:30:9a:ba:23:e0:9d: bc:99:54:1c:52:f1:0a:6b:53:ec:86:4b:92:3c:88: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D4:CC:FD:91:13:21:58:9D:31:3E:FF:C0:E1:2A:70:2D:13:22:C8 X509v3 Authority Key Identifier: keyid:C8:75:F7:6E:8F:89:42:47:92:3C:0E:27:62:34:D9:8A:4C:3E:C5:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHX3bo-JQkeSPA4nYjTZikw-xcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9e798-4ef3-4aa8-81f0-305658f91635/1/yHX3bo-JQkeSPA4nYjTZikw-xcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6f:99:bc:25:16:df:92:7d:46:77:1f:9f:70:8e:77:75:98: 3f:3e:90:7a:db:5c:14:33:89:a0:a9:05:8b:c1:b0:b2:49:9e: 10:a9:30:dc:bf:7e:28:0c:b1:fb:29:61:46:c1:c1:65:07:0a: ac:5c:7d:48:b2:01:7d:af:08:e3:6e:d8:a8:06:e6:a7:1e:3e: 6a:e7:66:ee:93:88:7e:62:29:17:a1:86:54:ca:b1:6a:5a:18: 27:44:32:ca:6f:fc:bf:06:02:8f:a5:00:d1:6d:29:e7:ca:45: 6e:05:74:0e:75:9f:12:ca:50:df:1c:03:c0:af:5c:8f:e4:45: 27:d9:6b:a5:2c:29:27:62:ef:b7:14:d8:40:60:a5:10:4d:59: 28:13:97:f2:80:d6:55:ad:f0:95:72:59:46:2f:2f:d7:a9:4d: 69:c6:15:4a:4e:5d:f2:73:27:41:6c:e0:d6:ab:ff:53:13:59: 98:43:c9:17:29:1a:1d:3e:43:19:72:6f:4e:74:77:7e:af:65: a7:12:85:c0:e9:e2:7e:64:77:ee:6b:0c:5f:f7:30:6e:4a:2b: 16:39:01:7a:3b:9b:f8:16:91:b0:d5:f5:87:40:ea:ac:45:14: 69:a6:9e:aa:7e:1f:d0:3d:83:0c:81:53:8b:92:e4:5a:67:d1: f4:60:65:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpYXRn42+4A5xtWiQoJaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzVmNzZlOGY4OTQyNDc5MjNjMGUyNzYyMzRkOThhNGMz ZWM1YzIwHhcNMjUxMjExMjMwMTA0WhcNMjUxMjEyMjMwMTA0WjAzMTEwLwYDVQQD EygyOWQ0Y2NmZDkxMTMyMTU4OWQzMTNlZmZjMGUxMmE3MDJkMTMyMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLqQxolYWlMhiuKzaI7XLMiA6SXn +M+t8Q77kqymz0HEwuBcnxs4zCkYF7r5dQUCJ/9Vfdw7LVGUMPtIydKMjmE33ygK fj9TfGgABrlzBN7pimwRCrk8YqDXi4TF9fK7la4pciC807fMupdzB3d2BN6CrTJ2 8AnEO00v7IDNsKiE/kZ33gGqRzZIC/DgsKpFH5Wxd6No5ZCMXMqtZBHv6t8JCc0D AXdX+SCHhZzw8I80qoX7g+lRGmDde/CPobHn+pbscTcqMHuRX8svjrCpuXXNHOer 9uh3X+OOXljN/foVpd32kzAX0zowmroj4J28mVQcUvEKa1PshkuSPIiQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnUzP2REyFYnTE+/8DhKnAtEyLIMB8GA1UdIwQY MBaAFMh1926PiUJHkjwOJ2I02YpMPsXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAt MzA1NjU4ZjkxNjM1LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lOWU3OTgtNGVmMy00YWE4LTgxZjAtMzA1NjU4ZjkxNjM1 LzEveUhYM2JvLUpRa2VTUEE0bllqVFppa3cteGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG+ZvCUW 35J9Rncfn3COd3WYPz6QettcFDOJoKkFi8GwskmeEKkw3L9+KAyx+ylhRsHBZQcK rFx9SLIBfa8I427YqAbmpx4+audm7pOIfmIpF6GGVMqxaloYJ0Qyym/8vwYCj6UA 0W0p58pFbgV0DnWfEspQ3xwDwK9cj+RFJ9lrpSwpJ2LvtxTYQGClEE1ZKBOX8oDW Va3wlXJZRi8v16lNacYVSk5d8nMnQWzg1qv/UxNZmEPJFykaHT5DGXJvTnR3fq9l pxKFwOnifmR37msMX/cwbkorFjkBejub+BaRsNX1h0DqrEUUaaaeqn4f0D2DDIFT i5LkWmfR9GBlkw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:41:42 2025 by rpki-client