This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json) Hash identifier: az+ouztz5/onBY6jPjil1sNgz2ryJiOIfrrx/bMFDBU= Subject key identifier: BD:FB:CB:96:3E:A8:34:D2:3F:D7:73:D5:97:CE:31:34:F3:E8:BA:8B Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69 Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69 Certificate serial: 019B6C209D123EF69A38EB1E1789FA7FA6E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft Manifest number: 1735 Signing time: Mon 29 Dec 2025 22:00:35 +0000 Manifest this update: Mon 29 Dec 2025 22:00:35 +0000 Manifest next update: Tue 30 Dec 2025 22:00:35 +0000 Files and hashes: 1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=) 2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: Ix0baeU+5bgX+0eCJMh8Lt8HZOtgzD+O5BgpUryjrsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:9d:12:3e:f6:9a:38:eb:1e:17:89:fa:7f:a6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69 Validity Not Before: Dec 29 22:00:35 2025 GMT Not After : Dec 30 22:00:35 2025 GMT Subject: CN=bdfbcb963ea834d23fd773d597ce3134f3e8ba8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:65:35:cc:ba:f3:47:5f:6a:b0:3c:3c:45: 5e:7c:13:cd:95:13:43:b9:ba:99:9d:26:64:0d:64: 50:4f:55:3c:58:4c:83:aa:76:7f:73:ef:aa:fb:fb: 06:87:a6:f8:73:25:b8:67:f1:89:8e:72:c0:d5:60: 75:7b:9b:d1:d6:dd:65:0c:61:e6:03:0e:cf:14:e4: f2:f0:5d:68:c1:ef:27:cc:10:66:78:1a:bc:10:a6: 77:b1:4e:fe:27:a7:b7:d7:5d:aa:9e:d5:1c:98:f5: 7b:c0:96:39:c4:49:0f:4c:a1:f1:12:ba:ea:b4:c2: 42:ae:0e:20:56:53:9a:11:df:ec:66:b5:f5:1d:f8: 3e:94:7d:c7:66:52:3d:c3:18:c8:3f:04:fa:66:0b: 7c:6a:aa:5f:49:ae:7c:5b:27:29:43:5c:99:1d:b5: 7b:cd:86:ed:4f:47:a2:46:4e:4f:1b:05:c2:cc:b8: 5c:e8:c1:83:e6:19:a1:12:af:7b:0d:bc:b4:64:86: 7f:db:e1:77:b1:fc:68:28:a7:9e:6d:23:83:66:76: 7d:5b:dd:8a:e1:7d:18:be:94:8c:c1:37:82:3b:0a: 58:6c:17:dd:a3:cf:fc:c5:db:06:09:1e:01:f5:f6: ff:9c:24:34:83:00:6b:b4:4a:b8:11:1d:10:fe:4f: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FB:CB:96:3E:A8:34:D2:3F:D7:73:D5:97:CE:31:34:F3:E8:BA:8B X509v3 Authority Key Identifier: keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:52:ea:48:04:c7:f4:d5:2f:b4:5c:0a:a8:a6:c0:ff:d7:e1: 62:c6:cb:26:3f:9e:6c:a1:f2:3e:b3:60:95:89:5c:72:96:6d: c8:7b:87:4b:06:8f:1f:68:47:a4:da:d3:55:f0:f4:dd:ee:ac: e3:ee:14:b3:5f:84:37:19:6a:d7:e0:ee:e0:04:15:01:65:fe: e8:4d:61:c1:80:6f:90:27:04:89:ce:c7:0a:10:64:db:e6:3f: 03:06:1b:e8:8c:52:6b:f6:79:60:3a:ec:04:a3:9a:15:47:4f: ad:bc:c9:bc:95:89:8c:e4:70:24:83:96:ea:b2:e1:d1:be:56: ba:0c:8b:8d:e3:da:a9:48:db:05:31:01:b9:1b:cd:81:b0:f7: 56:09:12:a5:05:82:f0:5a:ee:1a:bf:68:29:c7:b3:7c:1e:0d: d8:a3:e4:90:21:76:60:79:52:01:0e:29:17:20:93:24:15:b1: cd:9b:d0:e9:12:dc:e8:fa:06:2a:ec:43:23:26:11:4f:62:e7: 6e:ac:72:76:e9:71:f3:56:d2:41:57:54:82:39:71:c5:51:9e: fb:6e:0d:21:6c:fc:7a:85:f4:1f:63:0d:62:81:ea:b5:77:38: d8:b2:18:3d:94:7e:71:40:1b:5c:79:53:f6:2f:fd:c5:44:18: 3e:3c:3f:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIJ0SPvaaOOseF4n6f6bnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5 NWFmNjkwHhcNMjUxMjI5MjIwMDM1WhcNMjUxMjMwMjIwMDM1WjAzMTEwLwYDVQQD EyhiZGZiY2I5NjNlYTgzNGQyM2ZkNzczZDU5N2NlMzEzNGYzZThiYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jJlNcy680dfarA8PEVefBPNlRND ubqZnSZkDWRQT1U8WEyDqnZ/c++q+/sGh6b4cyW4Z/GJjnLA1WB1e5vR1t1lDGHm Aw7PFOTy8F1owe8nzBBmeBq8EKZ3sU7+J6e3112qntUcmPV7wJY5xEkPTKHxErrq tMJCrg4gVlOaEd/sZrX1Hfg+lH3HZlI9wxjIPwT6Zgt8aqpfSa58WycpQ1yZHbV7 zYbtT0eiRk5PGwXCzLhc6MGD5hmhEq97Dby0ZIZ/2+F3sfxoKKeebSODZnZ9W92K 4X0YvpSMwTeCOwpYbBfdo8/8xdsGCR4B9fb/nCQ0gwBrtEq4ER0Q/k998wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL37y5Y+qDTSP9dz1ZfOMTTz6LqLMB8GA1UdIwQY MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFLqSATH 9NUvtFwKqKbA/9fhYsbLJj+ebKHyPrNglYlccpZtyHuHSwaPH2hHpNrTVfD03e6s 4+4Us1+ENxlq1+Du4AQVAWX+6E1hwYBvkCcEic7HChBk2+Y/AwYb6IxSa/Z5YDrs BKOaFUdPrbzJvJWJjORwJIOW6rLh0b5WugyLjePaqUjbBTEBuRvNgbD3VgkSpQWC 8FruGr9oKcezfB4N2KPkkCF2YHlSAQ4pFyCTJBWxzZvQ6RLc6PoGKuxDIyYRT2Ln bqxydulx81bSQVdUgjlxxVGe+24NIWz8eoX0H2MNYoHqtXc42LIYPZR+cUAbXHlT 9i/9xUQYPjw/Sg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:58:34 2025 by rpki-client