This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json) Hash identifier: YU7yiIsx7iWsLzbLS0DtCbzoGoy2nKizbvCHGlSWNQA= Subject key identifier: DC:CB:C5:19:C6:90:2A:09:DB:13:3B:71:A0:10:A9:20:3C:F5:5E:D5 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B05C6CB3B874C99FEF3BBEFDAD7BC8783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft Manifest number: 0A68 Signing time: Wed 10 Dec 2025 01:01:12 +0000 Manifest this update: Wed 10 Dec 2025 01:01:12 +0000 Manifest next update: Thu 11 Dec 2025 01:01:12 +0000 Files and hashes: 1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=) 2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=) 3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=) 4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=) 5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=) 6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: p8tvPcwWf0sPOOl08TNAWW449sRGnePuoaSmeqUYf68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:cb:3b:87:4c:99:fe:f3:bb:ef:da:d7:bc:87:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Dec 10 01:01:12 2025 GMT Not After : Dec 11 01:01:12 2025 GMT Subject: CN=dccbc519c6902a09db133b71a010a9203cf55ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:ec:65:2a:a4:3d:d5:cc:56:49:3e:cc:5e: 0e:3b:cd:43:22:ce:6a:f1:1c:0a:20:d8:ba:ab:94: f8:80:e7:ce:5a:eb:f0:ac:f4:78:98:8e:b1:d7:f3: 9a:58:07:7d:1d:ca:ae:09:6c:67:ac:64:1c:7c:ba: 65:c8:71:1c:5c:bf:84:ef:61:d6:b3:f6:ce:1c:7b: 62:fb:8e:28:08:fc:90:1b:90:0c:e2:47:5d:6d:c6: 69:e4:bf:7e:8b:30:d6:1c:48:f1:75:dd:b7:2b:84: 7c:8d:c9:e4:c2:98:93:c1:f0:47:05:93:e6:10:39: bf:d6:45:83:ac:ef:3d:a6:0d:9a:83:b7:e0:da:da: f6:0b:14:9a:a9:21:2d:08:0d:4d:b6:be:11:4a:54: c2:19:bc:b2:30:cc:04:60:47:9c:1b:80:59:7f:be: 3b:bd:ee:c4:e3:45:1e:d4:67:38:43:ee:90:aa:4a: 27:b9:c2:24:86:3b:5d:89:ef:bd:0b:03:a8:eb:50: 1a:69:c2:06:d8:ae:65:18:e3:48:df:6f:94:98:eb: 45:40:53:95:39:93:b1:27:95:33:9f:d1:c4:67:1d: f2:0b:18:4c:29:94:a8:a7:58:75:a6:7a:d6:1b:13: 01:95:90:11:45:c5:be:bc:fd:65:dc:6d:03:22:e1: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CB:C5:19:C6:90:2A:09:DB:13:3B:71:A0:10:A9:20:3C:F5:5E:D5 X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f8:49:d0:a9:ce:49:42:f8:23:d2:66:1b:86:03:8b:f8:96: 65:ba:1d:ff:3e:14:49:28:88:8d:d8:4c:39:17:08:42:fc:cb: 35:c1:5d:4f:5a:0c:26:15:ed:42:be:c8:2b:ab:84:f8:0d:bb: 87:d7:a0:d8:d1:8b:63:85:b0:84:ae:12:0c:39:97:ac:f3:c2: 91:c8:12:08:52:87:e3:95:63:a0:ca:d7:35:eb:11:df:81:a5: d0:0c:f3:e3:cf:5a:c8:56:cc:65:cd:22:35:16:25:b4:ba:aa: e5:8f:8a:6a:6e:23:67:f3:3d:7f:d0:5f:99:4f:c5:4c:fd:13: 36:21:b5:09:ec:7b:db:da:fb:a9:24:ba:b9:79:4c:e9:58:c1: 1b:0d:6e:b1:8f:70:1a:4e:5e:f3:01:5f:3d:9b:d2:77:7b:c4: e9:22:c7:2b:51:2b:9d:d0:12:b0:5a:7a:b2:06:a0:45:e5:55: 4f:b5:e5:b3:8c:3e:54:0b:5a:60:95:be:1c:be:97:75:4f:88: 20:88:19:e6:c6:e7:fd:1e:89:03:14:6d:4e:1a:f0:09:11:37: 52:47:23:d7:fb:e9:20:90:92:10:7e:86:2a:98:eb:e0:a3:a0: d4:b2:17:cf:93:95:6e:b8:b9:ac:54:09:ee:29:e4:58:58:9a: 41:79:ac:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxss7h0yZ/vO779rXvIeDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjUxMjEwMDEwMTEyWhcNMjUxMjExMDEwMTEyWjAzMTEwLwYDVQQD EyhkY2NiYzUxOWM2OTAyYTA5ZGIxMzNiNzFhMDEwYTkyMDNjZjU1ZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsbsZSqkPdXMVkk+zF4OO81DIs5q 8RwKINi6q5T4gOfOWuvwrPR4mI6x1/OaWAd9HcquCWxnrGQcfLplyHEcXL+E72HW s/bOHHti+44oCPyQG5AM4kddbcZp5L9+izDWHEjxdd23K4R8jcnkwpiTwfBHBZPm EDm/1kWDrO89pg2ag7fg2tr2CxSaqSEtCA1Ntr4RSlTCGbyyMMwEYEecG4BZf747 ve7E40Ue1Gc4Q+6QqkonucIkhjtdie+9CwOo61AaacIG2K5lGONI32+UmOtFQFOV OZOxJ5Uzn9HEZx3yCxhMKZSop1h1pnrWGxMBlZARRcW+vP1l3G0DIuEiUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzLxRnGkCoJ2xM7caAQqSA89V7VMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/hJ0KnO SUL4I9JmG4YDi/iWZbod/z4USSiIjdhMORcIQvzLNcFdT1oMJhXtQr7IK6uE+A27 h9eg2NGLY4WwhK4SDDmXrPPCkcgSCFKH45VjoMrXNesR34Gl0Azz489ayFbMZc0i NRYltLqq5Y+Kam4jZ/M9f9BfmU/FTP0TNiG1Cex729r7qSS6uXlM6VjBGw1usY9w Gk5e8wFfPZvSd3vE6SLHK1ErndASsFp6sgagReVVT7Xls4w+VAtaYJW+HL6XdU+I IIgZ5sbn/R6JAxRtThrwCRE3Ukcj1/vpIJCSEH6GKpjr4KOg1LIXz5OVbri5rFQJ 7inkWFiaQXmsQw== -----END CERTIFICATE-----Generated at Wed Dec 10 09:25:49 2025 by rpki-client