This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json) Hash identifier: iWQFpIOFXPeUPpvR2BcIjMuo4qOFBVuQ4+d775+SvYA= Subject key identifier: ED:2A:88:C4:3C:74:8D:AF:03:5B:E9:FA:65:C4:83:D9:65:03:C9:30 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B39EB44115897B50B0BEFA74193C74571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft Manifest number: 0A83 Signing time: Sat 20 Dec 2025 04:01:18 +0000 Manifest this update: Sat 20 Dec 2025 04:01:18 +0000 Manifest next update: Sun 21 Dec 2025 04:01:18 +0000 Files and hashes: 1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=) 2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=) 3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=) 4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=) 5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=) 6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: iN84wyn5TWrErlPB0hWl7IykfISxHDTXpu1gbSOLIfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:44:11:58:97:b5:0b:0b:ef:a7:41:93:c7:45:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Dec 20 04:01:18 2025 GMT Not After : Dec 21 04:01:18 2025 GMT Subject: CN=ed2a88c43c748daf035be9fa65c483d96503c930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:29:6f:11:5b:2a:a6:8b:46:e8:b2:3e:85: ef:bc:24:48:26:45:a2:99:b1:a3:ed:bf:22:cf:d7: 13:43:67:30:2e:3e:f9:9f:47:27:e7:dc:3d:37:e3: 8f:d5:b5:4c:4f:fa:23:f4:7e:b9:8b:d6:5c:3d:b6: 23:7b:58:34:8c:31:8f:ed:90:33:98:14:90:f5:c5: 65:27:35:b6:16:75:63:c9:78:29:ad:6a:da:ce:82: 62:51:bd:32:bb:89:9f:bc:94:f2:2c:f4:e5:91:0b: c5:c2:10:97:01:6d:c0:0e:b6:4d:ad:27:54:28:f3: c5:29:bc:9c:05:8e:84:9b:f2:7a:dc:59:c7:46:07: 24:5e:b9:22:8a:02:7b:f6:b6:c1:7e:bd:44:e0:1e: 90:ac:eb:4c:2d:cd:ee:c5:3e:30:e7:ba:16:52:b7: 39:7e:83:b3:96:cb:0c:a1:30:b8:c9:a9:00:82:96: 8b:ee:44:dd:05:43:03:78:7b:31:a5:05:b0:69:ef: de:01:84:ae:a5:cf:cd:3f:66:aa:9d:79:f7:a9:5b: 73:3e:5b:64:22:46:b6:80:dc:23:51:31:69:be:bc: 46:94:12:15:ed:12:1a:f3:ab:d7:42:95:6a:31:2d: 7e:c2:b7:59:ad:fa:cf:00:f8:94:9d:be:d8:27:ee: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2A:88:C4:3C:74:8D:AF:03:5B:E9:FA:65:C4:83:D9:65:03:C9:30 X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c2:90:c9:1b:9f:17:c1:24:56:d4:fa:01:c8:ab:f1:47:6e: 6c:10:b5:61:db:f4:b0:40:d2:19:13:83:15:8e:49:f3:43:55: 33:8e:e8:5f:6e:1f:80:0a:c7:74:fb:c7:1c:69:54:00:9d:5e: 01:55:dc:9e:66:e8:92:91:01:80:be:e6:c3:98:59:b1:ad:65: 91:da:71:62:44:1e:1e:1c:2a:74:0e:bc:0d:ca:16:41:88:62: f4:c3:54:c7:df:8b:56:ae:ea:7c:56:da:b9:8d:55:f7:2e:36: fe:cd:2d:c1:96:e1:32:20:d3:59:71:9b:16:bc:5e:41:57:43: 68:90:87:7a:7c:f4:7f:cd:b2:5c:79:22:67:24:f9:69:a7:5a: 22:b5:0e:af:fb:8f:c9:a1:f6:d6:e0:3b:ca:b0:b0:d6:aa:9a: 4b:ba:73:c2:bf:d1:e8:6a:e4:70:3a:3b:01:0a:2d:8e:d2:44: a5:2e:18:1b:ee:54:eb:fd:fe:df:60:15:54:28:cc:99:86:eb: 3e:5e:a8:40:e8:09:14:d5:b3:72:1a:0b:05:78:9f:81:37:13: 04:59:46:aa:d4:9e:17:37:88:39:64:66:28:85:63:73:98:2c: 91:75:ff:68:cb:75:88:ad:2c:5f:d9:ae:fd:91:de:f9:58:54: a3:54:0d:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560QRWJe1Cwvvp0GTx0VxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjUxMjIwMDQwMTE4WhcNMjUxMjIxMDQwMTE4WjAzMTEwLwYDVQQD EyhlZDJhODhjNDNjNzQ4ZGFmMDM1YmU5ZmE2NWM0ODNkOTY1MDNjOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJkpbxFbKqaLRuiyPoXvvCRIJkWi mbGj7b8iz9cTQ2cwLj75n0cn59w9N+OP1bVMT/oj9H65i9ZcPbYje1g0jDGP7ZAz mBSQ9cVlJzW2FnVjyXgprWrazoJiUb0yu4mfvJTyLPTlkQvFwhCXAW3ADrZNrSdU KPPFKbycBY6Em/J63FnHRgckXrkiigJ79rbBfr1E4B6QrOtMLc3uxT4w57oWUrc5 foOzlssMoTC4yakAgpaL7kTdBUMDeHsxpQWwae/eAYSupc/NP2aqnXn3qVtzPltk Ika2gNwjUTFpvrxGlBIV7RIa86vXQpVqMS1+wrdZrfrPAPiUnb7YJ+5kVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0qiMQ8dI2vA1vp+mXEg9llA8kwMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcKQyRuf F8EkVtT6Acir8UdubBC1Ydv0sEDSGRODFY5J80NVM47oX24fgArHdPvHHGlUAJ1e AVXcnmbokpEBgL7mw5hZsa1lkdpxYkQeHhwqdA68DcoWQYhi9MNUx9+LVq7qfFba uY1V9y42/s0twZbhMiDTWXGbFrxeQVdDaJCHenz0f82yXHkiZyT5aadaIrUOr/uP yaH21uA7yrCw1qqaS7pzwr/R6GrkcDo7AQotjtJEpS4YG+5U6/3+32AVVCjMmYbr Pl6oQOgJFNWzchoLBXifgTcTBFlGqtSeFzeIOWRmKIVjc5gskXX/aMt1iK0sX9mu /ZHe+VhUo1QNiw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:24:04 2025 by rpki-client