This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft File: yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json) Hash identifier: uNJ9xTSsYn8g33SFLMmTGvxGRetNGbpT84xa2W99yPw= Subject key identifier: 1B:8E:1C:19:AB:16:8E:43:34:E6:F8:1B:F2:44:8A:11:FE:22:FD:E7 Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba Certificate serial: 019B18A930529DCAA5CCF420B510585D8AF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 17:01:39 +0000 Manifest this update: Sat 13 Dec 2025 17:01:39 +0000 Manifest next update: Sun 14 Dec 2025 17:01:39 +0000 Files and hashes: 1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=) 2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: abmNHaoTRVHY7i3mpLdRHF7MtG1vtOKVSyR4TzzVtNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a9:30:52:9d:ca:a5:cc:f4:20:b5:10:58:5d:8a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba Validity Not Before: Dec 13 17:01:39 2025 GMT Not After : Dec 14 17:01:39 2025 GMT Subject: CN=1b8e1c19ab168e4334e6f81bf2448a11fe22fde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:5d:f7:f0:f9:66:d1:27:ff:4d:88:70:7f: e9:07:fa:01:60:11:ac:87:a8:e5:fe:fd:25:4f:97: 78:ac:f3:78:45:e5:ee:f5:cd:3c:c3:48:ea:b6:b3: 86:3f:ec:7f:2e:dc:cc:63:3b:09:58:40:29:da:e0: 8f:aa:da:0f:14:c3:dd:7e:24:c6:51:4f:ba:a0:80: ad:16:f7:9d:c3:43:68:49:13:b7:dc:cd:65:88:2e: 64:3b:1f:94:39:ff:f7:08:64:60:66:99:b1:ff:5a: 30:4e:3b:6b:49:db:fb:8b:11:97:c3:27:44:29:d2: b1:65:0d:07:60:bf:dd:ee:c4:4e:40:48:4d:06:48: 00:d6:7e:f1:23:ac:5b:69:32:64:43:a7:54:ad:50: 33:2f:38:27:51:99:59:a3:b0:f4:64:e7:64:ad:aa: 1a:29:80:0d:35:3f:fc:57:93:bd:7c:98:66:ed:bc: fe:fc:3a:0d:e2:ae:e8:d2:e7:ca:e6:ad:4c:6e:bd: 5d:93:63:ec:3d:4d:60:b8:01:e6:50:0d:bd:89:56: 27:ab:f6:10:7e:53:82:70:a7:8a:ee:6d:62:20:18: 41:57:1e:62:df:e6:06:6e:52:67:00:8b:da:91:4e: 7e:51:be:a0:32:04:71:b1:22:57:8a:b9:72:b3:af: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8E:1C:19:AB:16:8E:43:34:E6:F8:1B:F2:44:8A:11:FE:22:FD:E7 X509v3 Authority Key Identifier: keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f1:0b:39:9e:e7:f7:fa:1d:67:77:aa:69:66:f3:08:7a:37: 9e:b2:d3:3c:f4:ad:a5:c0:44:b1:2b:b7:e7:57:5b:85:6a:c1: 8c:48:e0:e4:e9:74:0b:bf:07:4e:c3:9e:f5:e1:46:dd:7f:55: 25:e1:63:3c:65:95:cb:26:13:7b:00:57:4e:ed:0b:be:06:3b: f3:97:bc:e1:fa:68:2f:e8:34:28:00:dd:aa:72:8d:be:36:9c: b5:5d:1b:9d:df:c3:e2:7d:6c:e1:23:88:c8:43:d6:5f:36:13: 57:bb:f4:53:a6:92:b5:9f:3d:87:05:ed:f7:ae:49:32:a7:82: 79:8a:e5:43:b3:1b:57:35:0c:b6:38:6a:b1:b1:bc:7f:6d:65: 8c:32:13:39:5d:2d:8f:cc:87:7f:7d:0a:a3:61:cc:31:fc:58: 4f:5f:df:61:64:e7:ad:25:ff:2b:88:7d:1f:d7:a2:22:cb:1c: b4:65:a7:1e:97:1b:8c:d4:d6:cd:9e:47:ab:11:04:90:6b:4b: 74:98:5f:6f:ec:ee:66:bf:60:b7:85:1e:40:5e:d4:88:82:11: 98:3c:12:a7:67:99:9c:cc:51:f2:d8:7f:c1:d5:35:7e:5c:86: 5b:52:fc:80:7c:4e:a4:b2:25:cd:a0:bd:c4:fd:8a:04:6c:55: 7b:fc:78:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqTBSncqlzPQgtRBYXYr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMTlhYmViOGFiOWU2Mzg5MGEyMjNjMmZkNmJhNTY4NDk4 YmRiYmEwHhcNMjUxMjEzMTcwMTM5WhcNMjUxMjE0MTcwMTM5WjAzMTEwLwYDVQQD EygxYjhlMWMxOWFiMTY4ZTQzMzRlNmY4MWJmMjQ0OGExMWZlMjJmZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug1d9/D5ZtEn/02IcH/pB/oBYBGs h6jl/v0lT5d4rPN4ReXu9c08w0jqtrOGP+x/LtzMYzsJWEAp2uCPqtoPFMPdfiTG UU+6oICtFvedw0NoSRO33M1liC5kOx+UOf/3CGRgZpmx/1owTjtrSdv7ixGXwydE KdKxZQ0HYL/d7sROQEhNBkgA1n7xI6xbaTJkQ6dUrVAzLzgnUZlZo7D0ZOdkraoa KYANNT/8V5O9fJhm7bz+/DoN4q7o0ufK5q1Mbr1dk2PsPU1guAHmUA29iVYnq/YQ flOCcKeK7m1iIBhBVx5i3+YGblJnAIvakU5+Ub6gMgRxsSJXirlys6+6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuOHBmrFo5DNOb4G/JEihH+Iv3nMB8GA1UdIwQY MBaAFMoZq+uKueY4kKIjwv1rpWhJi9u6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2Mt MTNiYmNkMGY5Mzc2LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2MtMTNiYmNkMGY5Mzc2 LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafELOZ7n 9/odZ3eqaWbzCHo3nrLTPPStpcBEsSu351dbhWrBjEjg5Ol0C78HTsOe9eFG3X9V JeFjPGWVyyYTewBXTu0LvgY785e84fpoL+g0KADdqnKNvjactV0bnd/D4n1s4SOI yEPWXzYTV7v0U6aStZ89hwXt965JMqeCeYrlQ7MbVzUMtjhqsbG8f21ljDITOV0t j8yHf30Ko2HMMfxYT1/fYWTnrSX/K4h9H9eiIssctGWnHpcbjNTWzZ5HqxEEkGtL dJhfb+zuZr9gt4UeQF7UiIIRmDwSp2eZnMxR8th/wdU1flyGW1L8gHxOpLIlzaC9 xP2KBGxVe/x4Ng== -----END CERTIFICATE-----Generated at Sat Dec 13 21:20:14 2025 by rpki-client