This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft File: yhx1cVluREqjI3HLq3JNRtPDxSw.mft (raw, json) Hash identifier: k9yCUT7pHfOnty6Hqlu9LG1sc+JjgYPnWJeVrEJUmCs= Subject key identifier: 6A:75:0A:D6:A7:EB:1F:CC:A8:F3:F8:32:B4:08:CF:DF:78:C7:8F:8D Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B4392B296DEDDA25F9886815B8BDBEC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft Manifest number: 0A88 Signing time: Mon 22 Dec 2025 01:00:45 +0000 Manifest this update: Mon 22 Dec 2025 01:00:45 +0000 Manifest next update: Tue 23 Dec 2025 01:00:45 +0000 Files and hashes: 1: 56-grqWuHjTPmkYLHRFcR5-Ux58.roa (hash: gayWrfFlVUOECLN0SMVWsAb7/dSgVjPIqac7AI9CyUk=) 2: 95UXEF21gZ7flq3LIhzoSnMGHMI.roa (hash: G69a8tnacaWcTDuPydYIocEgi7cgOBN1HbyOI50NXo4=) 3: hioMXdeaeDX5ZwJdBDoUC1hMGLo.roa (hash: FQzlEOIGmKTMKyev68yd0Z/p1ylOojH96N0RveKYIkI=) 4: i9MKvpjRepI8dYh_VvTEXaHKTiY.roa (hash: c70wNkd/qbsRvsati+ezzilEYRMdduKUeN/M//jVIeM=) 5: nUZL90rmkrco30I534YuD3uEoLU.roa (hash: zS/bb7bQWf/BZ30BCRDM5mkZ9dJzZ5idpS5nw3pZw2g=) 6: yhx1cVluREqjI3HLq3JNRtPDxSw.crl (hash: AnyqbW7AoUlJm7o60OT/yJffA+4dqrX215kSgjAc/z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:b2:96:de:dd:a2:5f:98:86:81:5b:8b:db:ec:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Dec 22 01:00:45 2025 GMT Not After : Dec 23 01:00:45 2025 GMT Subject: CN=6a750ad6a7eb1fcca8f3f832b408cfdf78c78f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:ff:59:9c:af:9c:c9:2d:14:df:8c:fe:ee: f6:ee:0f:af:38:41:1f:bd:c4:e0:73:9d:6e:47:ee: 5e:3c:47:d1:29:69:1e:cd:63:e1:36:9d:f6:13:11: d3:5e:ba:b4:ea:71:17:74:34:b3:98:09:8a:06:f8: 20:3c:a9:24:50:5a:bc:e9:48:06:18:a5:f0:9d:ac: 24:fc:19:3e:e4:79:2f:a5:91:10:51:c2:25:eb:21: 3c:8f:40:6d:3b:38:79:ec:82:6b:f2:76:00:69:29: a3:8e:64:e2:6c:b6:8c:19:a6:16:9c:66:63:ae:98: f9:5b:7a:e7:c2:38:d2:00:63:6d:37:b0:0e:9c:40: eb:2b:bb:87:67:0e:01:d0:46:4e:5f:f7:f6:d1:5e: ab:20:8e:ca:65:b7:0e:f6:f9:44:c1:94:03:2d:cd: 4b:a0:32:7e:32:8b:ed:4b:d6:c8:b6:d3:5d:b5:ba: 6e:cf:f3:0e:b3:9f:e0:1a:da:c5:ef:bf:39:d2:59: 8b:fe:4b:4e:10:bc:98:8b:34:fa:5e:54:ae:54:e6: 6a:b3:6e:bc:54:cf:64:11:23:ef:2e:26:dc:4b:cc: 8c:b6:b1:1f:59:93:fc:01:b4:38:bc:f6:59:c0:5d: 7f:15:4d:93:6e:f8:32:a7:52:e5:cb:96:c3:6a:bb: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:75:0A:D6:A7:EB:1F:CC:A8:F3:F8:32:B4:08:CF:DF:78:C7:8F:8D X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7f:7a:a2:a0:9f:ae:99:1b:8b:6e:09:32:8d:a4:b6:9b:9d: d1:55:fe:eb:af:d5:44:ef:04:81:15:1e:13:12:73:da:f1:ef: 2c:af:69:46:22:2b:d2:ef:65:d5:79:56:c2:d2:34:e9:c5:48: 8e:3f:07:c4:f5:99:e7:c9:1c:c1:c9:ff:87:ed:74:14:bf:9b: cd:11:40:13:a8:b8:1c:91:71:f0:01:50:43:5a:1c:b2:e0:98: c2:d1:b5:0d:92:66:30:a4:44:78:51:d0:01:71:f3:38:74:04: bd:73:7c:66:52:49:2d:d1:bf:a1:1c:ac:d4:88:dc:e4:66:10: fe:8c:ef:fc:03:06:e8:30:13:17:67:d9:18:47:0e:fc:9c:e5: ba:6c:d1:90:82:1a:d6:5e:fc:1d:53:9f:e7:63:8d:b0:62:ed: 6d:9a:4b:7d:da:36:d0:d4:55:2a:83:af:e0:d0:c8:aa:ba:c0: 2b:b9:17:2e:d2:51:5b:c2:32:b0:de:b7:99:d2:b6:56:eb:27: 68:3c:83:f1:42:b8:92:8f:4a:77:73:fb:6c:20:8c:0e:f7:9b: ca:0c:f8:dd:2f:4c:b4:92:18:98:c0:4b:b6:9c:c9:a7:91:31: b6:10:38:cf:49:58:96:7a:f0:a6:61:4c:7b:f1:ad:ea:8b:11: c2:4b:c5:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkrKW3t2iX5iGgVuL2+x/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjUxMjIyMDEwMDQ1WhcNMjUxMjIzMDEwMDQ1WjAzMTEwLwYDVQQD Eyg2YTc1MGFkNmE3ZWIxZmNjYThmM2Y4MzJiNDA4Y2ZkZjc4Yzc4ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBn/WZyvnMktFN+M/u727g+vOEEf vcTgc51uR+5ePEfRKWkezWPhNp32ExHTXrq06nEXdDSzmAmKBvggPKkkUFq86UgG GKXwnawk/Bk+5HkvpZEQUcIl6yE8j0BtOzh57IJr8nYAaSmjjmTibLaMGaYWnGZj rpj5W3rnwjjSAGNtN7AOnEDrK7uHZw4B0EZOX/f20V6rII7KZbcO9vlEwZQDLc1L oDJ+MovtS9bIttNdtbpuz/MOs5/gGtrF77850lmL/ktOELyYizT6XlSuVOZqs268 VM9kESPvLibcS8yMtrEfWZP8AbQ4vPZZwF1/FU2Tbvgyp1Lly5bDartBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp1Ctan6x/MqPP4MrQIz994x4+NMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbn96oqCf rpkbi24JMo2ktpud0VX+66/VRO8EgRUeExJz2vHvLK9pRiIr0u9l1XlWwtI06cVI jj8HxPWZ58kcwcn/h+10FL+bzRFAE6i4HJFx8AFQQ1ocsuCYwtG1DZJmMKREeFHQ AXHzOHQEvXN8ZlJJLdG/oRys1Ijc5GYQ/ozv/AMG6DATF2fZGEcO/JzlumzRkIIa 1l78HVOf52ONsGLtbZpLfdo20NRVKoOv4NDIqrrAK7kXLtJRW8IysN63mdK2Vusn aDyD8UK4ko9Kd3P7bCCMDvebygz43S9MtJIYmMBLtpzJp5ExthA4z0lYlnrwpmFM e/Gt6osRwkvF/A== -----END CERTIFICATE-----Generated at Mon Dec 22 07:57:22 2025 by rpki-client