This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json) Hash identifier: gOWrg5wmkCSu0PHGoyPPCDbKWDb+myZpI6CdqwGmtng= Subject key identifier: 79:A1:75:02:AE:8C:12:FE:EE:DC:4C:7B:CB:28:03:B9:64:E6:19:74 Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019AAC15897F866A59DA9C4FC46F1CA8CD49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft Manifest number: 03AA Signing time: Sat 22 Nov 2025 15:01:23 +0000 Manifest this update: Sat 22 Nov 2025 15:01:23 +0000 Manifest next update: Sun 23 Nov 2025 15:01:23 +0000 Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=) 2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=) 3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=) 4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: C9P2IhsTkJ7gqlfbnEU5xfCfTlZy3i4b4EmLf9feWSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:15:89:7f:86:6a:59:da:9c:4f:c4:6f:1c:a8:cd:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Nov 22 15:01:23 2025 GMT Not After : Nov 23 15:01:23 2025 GMT Subject: CN=79a17502ae8c12feeedc4c7bcb2803b964e61974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d7:63:8b:f6:10:37:bd:12:41:6d:bb:fb:57: e6:db:da:bb:14:81:77:08:3e:3d:e1:55:2a:ab:53: a9:44:d4:6b:09:7b:f2:6d:3a:12:80:17:63:2c:fb: 15:8a:1d:49:64:fe:34:e8:90:e5:b6:00:93:94:99: 6c:e9:20:1d:8d:76:95:d1:78:09:e2:c6:ef:c9:8b: fb:46:b7:e3:12:f6:f6:4f:3e:a1:3a:33:df:de:18: c1:48:95:5e:65:1e:cb:52:f4:cc:c7:7d:1e:86:e7: 7c:65:81:45:f2:d0:32:50:9f:c7:42:3a:65:6c:a8: 73:52:7e:4c:16:ca:ec:45:55:9f:dc:b0:2e:ad:93: fc:c4:b4:cd:36:57:98:62:ad:72:12:fa:ba:66:9c: 9c:b5:ec:29:84:14:2c:cd:a4:e3:df:c9:84:af:ff: 67:29:59:fa:7c:0f:7c:26:12:82:19:58:ef:70:a4: a3:36:b8:c5:f2:82:df:30:fe:47:9b:20:e4:29:cc: 34:10:0d:a2:d6:3e:a4:16:25:e0:fb:2f:af:52:5a: ab:3c:f2:bf:eb:24:aa:3a:99:b6:ff:f5:fa:c4:ab: 26:ae:9f:36:41:e7:b5:a3:59:d6:7c:83:5b:e4:91: 62:98:36:e9:56:bc:a7:8d:53:ee:21:f9:f0:6a:6c: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:75:02:AE:8C:12:FE:EE:DC:4C:7B:CB:28:03:B9:64:E6:19:74 X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fd:fb:14:70:21:77:2a:1d:c8:c1:02:85:31:e7:f9:96:2b: 18:8c:2d:71:2a:48:e3:f3:b8:5f:4c:72:96:1f:4c:d0:d5:93: a2:a7:ec:aa:86:b9:ab:94:e3:ae:07:a9:f6:3b:04:52:f7:a0: 21:03:3a:9a:cf:8e:13:e1:43:04:65:d4:83:ec:90:5c:6e:0a: e5:d6:52:0c:15:5a:38:ed:53:ef:5d:73:71:dc:11:27:a0:7f: 34:3c:2b:1d:c5:78:ca:97:c9:a1:88:3b:3f:ce:c1:c8:e2:3c: be:cc:62:33:94:30:11:46:b3:95:e6:c4:03:4c:4b:0a:dd:68: a0:a0:2c:43:35:e6:e1:69:90:84:56:df:29:52:a3:b7:8b:1a: 54:e3:7d:c8:93:c0:31:e4:87:de:c8:ae:3c:9a:7d:59:67:96: 8d:36:82:81:6a:be:2c:50:0a:7c:1c:ea:0b:bf:d1:a0:d4:3a: 5c:62:c4:b8:e3:11:a1:0b:e0:fb:37:b6:cb:d4:20:02:a4:c4: ba:01:60:53:07:12:c8:b1:91:03:45:c4:a7:0d:e1:64:61:bc: 00:09:cb:2e:bd:0f:f5:80:fd:71:07:23:32:c6:2f:fa:fd:c9: a5:a3:7e:1f:ac:04:ba:7e:3d:4f:bd:0b:d3:f8:3c:69:ee:dd: 16:80:f9:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFYl/hmpZ2pxPxG8cqM1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjUxMTIyMTUwMTIzWhcNMjUxMTIzMTUwMTIzWjAzMTEwLwYDVQQD Eyg3OWExNzUwMmFlOGMxMmZlZWVkYzRjN2JjYjI4MDNiOTY0ZTYxOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNdji/YQN70SQW27+1fm29q7FIF3 CD494VUqq1OpRNRrCXvybToSgBdjLPsVih1JZP406JDltgCTlJls6SAdjXaV0XgJ 4sbvyYv7RrfjEvb2Tz6hOjPf3hjBSJVeZR7LUvTMx30ehud8ZYFF8tAyUJ/HQjpl bKhzUn5MFsrsRVWf3LAurZP8xLTNNleYYq1yEvq6ZpyctewphBQszaTj38mEr/9n KVn6fA98JhKCGVjvcKSjNrjF8oLfMP5HmyDkKcw0EA2i1j6kFiXg+y+vUlqrPPK/ 6ySqOpm2//X6xKsmrp82Qee1o1nWfINb5JFimDbpVrynjVPuIfnwamxQGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmhdQKujBL+7txMe8soA7lk5hl0MB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkf37FHAh dyodyMEChTHn+ZYrGIwtcSpI4/O4X0xylh9M0NWToqfsqoa5q5Tjrgep9jsEUveg IQM6ms+OE+FDBGXUg+yQXG4K5dZSDBVaOO1T711zcdwRJ6B/NDwrHcV4ypfJoYg7 P87ByOI8vsxiM5QwEUazlebEA0xLCt1ooKAsQzXm4WmQhFbfKVKjt4saVON9yJPA MeSH3siuPJp9WWeWjTaCgWq+LFAKfBzqC7/RoNQ6XGLEuOMRoQvg+ze2y9QgAqTE ugFgUwcSyLGRA0XEpw3hZGG8AAnLLr0P9YD9cQcjMsYv+v3JpaN+H6wEun49T70L 0/g8ae7dFoD5GQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:25 2025 by rpki-client