This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft File: yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json) Hash identifier: lQXewhRaKtSKDzMxzuM/LQG3akvLF1jD9V/p/mfCmTw= Subject key identifier: C3:46:39:D0:8E:83:40:3F:4E:9D:D5:45:A6:3B:75:0E:6C:3D:11:83 Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79 Certificate issuer: /CN=c874132c12f86995fe2893e4dea72638d2601079 Certificate serial: 019B3DFE815F6EF87D2606385DC7B655662F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft Manifest number: 045A Signing time: Sat 20 Dec 2025 23:00:47 +0000 Manifest this update: Sat 20 Dec 2025 23:00:47 +0000 Manifest next update: Sun 21 Dec 2025 23:00:47 +0000 Files and hashes: 1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=) 2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=) 3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=) 4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: cMDMSTofKf1Y9JK17kVgD7DGjo4tRBom6gjugnJNcKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:81:5f:6e:f8:7d:26:06:38:5d:c7:b6:55:66:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079 Validity Not Before: Dec 20 23:00:47 2025 GMT Not After : Dec 21 23:00:47 2025 GMT Subject: CN=c34639d08e83403f4e9dd545a63b750e6c3d1183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:35:e4:69:ea:b5:a2:fd:a6:60:90:ec:b7: ae:81:bc:51:5f:d3:09:75:6b:aa:61:89:b9:00:74: 9f:79:c1:5b:f6:1b:8a:35:45:5e:29:42:56:88:0a: 42:6e:c5:33:74:e9:9a:60:84:a5:3d:81:30:35:d9: 8e:dc:91:ab:53:da:28:02:91:f1:c7:91:29:a3:36: b2:3c:f2:5f:f9:b3:37:06:b4:b3:7c:9d:06:49:3b: 79:0a:9f:3d:cd:b2:51:aa:b0:6e:8b:e7:e4:38:9c: 71:71:eb:c1:b7:da:dd:31:a5:73:7e:c4:23:57:6c: ba:24:c8:e0:ec:2c:93:db:c3:3d:24:0d:71:41:0e: 7a:74:2c:7d:57:bc:d9:ea:49:db:c9:0b:dd:35:2f: cd:ed:f4:a3:d1:dd:bb:73:ca:d2:a5:1c:a6:d2:a2: 39:7d:ee:ed:c7:55:93:e7:d3:95:eb:4b:e4:8f:b7: 73:55:70:14:16:72:a7:10:4c:73:01:21:49:42:7f: e0:07:a2:1d:e9:16:e4:7c:3c:3e:0c:1f:a4:e9:b1: 08:e7:83:99:41:dc:2d:2d:67:c4:e9:bd:df:bc:3a: 5b:be:a7:74:c2:b0:2d:35:01:1f:23:59:61:98:93: 47:39:41:1e:76:7a:5f:10:73:9e:18:df:ab:b7:d3: 3b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:39:D0:8E:83:40:3F:4E:9D:D5:45:A6:3B:75:0E:6C:3D:11:83 X509v3 Authority Key Identifier: keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f8:bb:53:bb:f4:58:c3:92:63:82:cf:8b:2f:e1:69:21:d8: f5:0c:73:a1:4a:f3:da:e4:5f:82:ca:ab:c7:9b:2e:a5:12:e0: 9f:19:52:d9:e1:2a:5e:a7:d3:a5:ca:91:37:bd:6b:06:22:4d: a2:87:af:a1:45:48:fe:e4:41:59:68:35:28:50:b2:a0:4a:be: 5d:50:01:48:b3:f8:b4:1b:fe:08:57:ae:47:2d:d7:5c:45:22: 3d:b0:5f:13:60:6b:50:f3:6f:6e:4e:37:a8:e5:e8:e1:be:97: ad:9a:31:e0:39:8d:cd:2d:d1:13:e4:1e:19:44:85:6d:7d:84: 82:6c:dc:b9:06:01:de:88:b7:04:f0:57:d2:6e:65:eb:54:90: bc:76:45:6d:f5:16:59:2b:a3:95:0a:b1:9d:d4:59:fb:4f:1b: 3c:b0:2a:72:b8:f6:4a:c4:b0:22:26:d2:3e:a9:3d:e1:90:52: 69:73:5b:30:20:47:55:ba:40:4d:fa:a8:9c:5d:66:9c:e6:09: 8d:2b:6d:6f:cb:3a:31:0b:10:3a:85:91:6b:44:be:ca:33:27: c7:2a:d7:48:4a:2c:9f:a7:de:92:d9:ac:e2:d8:eb:b5:13:cc: 9f:3c:69:2c:69:76:7a:d3:5f:81:03:e6:7a:8c:57:cd:0b:2e: 3f:c9:b3:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/oFfbvh9JgY4Xce2VWYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NzQxMzJjMTJmODY5OTVmZTI4OTNlNGRlYTcyNjM4ZDI2 MDEwNzkwHhcNMjUxMjIwMjMwMDQ3WhcNMjUxMjIxMjMwMDQ3WjAzMTEwLwYDVQQD EyhjMzQ2MzlkMDhlODM0MDNmNGU5ZGQ1NDVhNjNiNzUwZTZjM2QxMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzE15GnqtaL9pmCQ7LeugbxRX9MJ dWuqYYm5AHSfecFb9huKNUVeKUJWiApCbsUzdOmaYISlPYEwNdmO3JGrU9ooApHx x5EpozayPPJf+bM3BrSzfJ0GSTt5Cp89zbJRqrBui+fkOJxxcevBt9rdMaVzfsQj V2y6JMjg7CyT28M9JA1xQQ56dCx9V7zZ6knbyQvdNS/N7fSj0d27c8rSpRym0qI5 fe7tx1WT59OV60vkj7dzVXAUFnKnEExzASFJQn/gB6Id6RbkfDw+DB+k6bEI54OZ QdwtLWfE6b3fvDpbvqd0wrAtNQEfI1lhmJNHOUEednpfEHOeGN+rt9M7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNGOdCOg0A/Tp3VRaY7dQ5sPRGDMB8GA1UdIwQY MBaAFMh0EywS+GmV/iiT5N6nJjjSYBB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUt NGMwOGI0YWEyMGZlLzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84OWNlNzQtOTM4MC00Y2NmLWE2MTUtNGMwOGI0YWEyMGZl LzEveUhRVExCTDRhWlgtS0pQazNxY21PTkpnRUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvi7U7v0 WMOSY4LPiy/haSHY9QxzoUrz2uRfgsqrx5supRLgnxlS2eEqXqfTpcqRN71rBiJN ooevoUVI/uRBWWg1KFCyoEq+XVABSLP4tBv+CFeuRy3XXEUiPbBfE2BrUPNvbk43 qOXo4b6XrZox4DmNzS3RE+QeGUSFbX2EgmzcuQYB3oi3BPBX0m5l61SQvHZFbfUW WSujlQqxndRZ+08bPLAqcrj2SsSwIibSPqk94ZBSaXNbMCBHVbpATfqonF1mnOYJ jSttb8s6MQsQOoWRa0S+yjMnxyrXSEosn6fektms4tjrtRPMnzxpLGl2etNfgQPm eoxXzQsuP8mz+g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:33 2025 by rpki-client