This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json) Hash identifier: mTPvHL/EgKYjyPYkkxoPdV1GBsjc5sY4KZ3FtoaA7EQ= Subject key identifier: A4:0D:C0:13:9C:0B:2D:6E:4D:E2:9B:E7:62:3A:47:C4:B8:B8:CF:62 Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Certificate serial: 019B390FB509D57D686B4AC220926FAA04F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft Manifest number: 03F3 Signing time: Sat 20 Dec 2025 00:01:29 +0000 Manifest this update: Sat 20 Dec 2025 00:01:29 +0000 Manifest next update: Sun 21 Dec 2025 00:01:29 +0000 Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=) 2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=) 3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=) 4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 5XXjOZNntoIF21VgzXqB5parA+Q2+rETgbC98AHzzGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:b5:09:d5:7d:68:6b:4a:c2:20:92:6f:aa:04:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d Validity Not Before: Dec 20 00:01:29 2025 GMT Not After : Dec 21 00:01:29 2025 GMT Subject: CN=a40dc0139c0b2d6e4de29be7623a47c4b8b8cf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:59:82:97:d4:1a:97:e7:03:a2:d2:4c:f9: 16:94:2e:27:94:55:40:d3:37:66:c5:f3:40:63:6b: 80:3f:90:db:94:32:9e:a5:ee:52:1b:92:48:66:58: ea:56:7c:ce:df:cb:ef:26:28:ca:61:cb:a7:bc:de: 20:69:dc:d6:2a:22:e5:c8:86:f3:97:83:e8:30:c8: 4c:42:39:df:b9:4b:71:cc:e2:c3:6c:95:2d:42:d8: 42:41:9a:6d:b7:68:78:af:9f:4b:b2:6f:c1:75:ab: a7:28:ab:10:da:4b:c6:7c:90:b8:2d:f4:c4:46:38: 5d:6c:52:26:90:83:2e:52:34:15:44:9f:2f:01:9a: d2:f9:79:cb:d8:b4:e2:fb:f5:58:63:10:00:62:06: b0:ad:7a:1e:60:dd:61:a5:03:35:27:71:96:ad:98: 08:f3:3e:74:f3:7a:aa:26:69:7c:41:50:bf:98:92: 6f:96:1c:e8:b3:b7:37:a0:ec:a3:18:99:cf:8f:69: 2e:d7:52:eb:3a:63:e9:43:f2:fd:4c:83:8d:34:fe: d9:51:00:89:46:35:1e:0a:92:fb:d4:91:04:58:d7: f2:69:fd:f2:ef:e8:0f:a6:10:bb:dc:28:ea:6a:92: 42:0f:80:41:2d:c4:d2:72:d0:ed:4c:fa:7f:ea:7d: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0D:C0:13:9C:0B:2D:6E:4D:E2:9B:E7:62:3A:47:C4:B8:B8:CF:62 X509v3 Authority Key Identifier: keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b3:37:80:7d:17:a1:3e:f5:04:ef:42:6b:2c:c0:40:ed:bd: a4:9d:86:16:2f:cf:82:20:66:23:4a:75:8d:ad:0a:29:01:5a: 80:5f:8d:fc:69:ba:e4:6c:8b:96:c3:fa:64:a9:69:dd:ca:b9: c2:c7:f3:d9:31:10:08:fb:a5:fa:8d:ee:43:98:37:8c:9b:3e: fa:67:e6:ff:44:88:20:11:b7:24:72:a9:e8:ee:25:c3:d3:31: ed:21:2b:32:85:80:c9:0d:2b:26:18:f3:39:39:80:d6:71:d9: a1:98:75:b4:7a:a0:60:ea:c2:b6:65:eb:ab:f8:ac:75:e1:6e: 1b:77:fb:f6:5f:fb:74:1c:49:f1:96:12:ba:16:a9:26:49:9d: 6d:8b:0a:6a:79:a4:42:38:c9:0b:01:e4:ee:eb:c4:89:72:2a: 39:43:c4:5d:88:3e:a4:e6:95:8c:83:6d:14:ea:12:3e:b2:2a: 1d:ec:cb:af:be:0a:ee:47:16:d4:e8:8f:df:af:94:cd:9e:b3: c2:00:dd:f5:a2:7b:92:ea:ef:a9:c9:38:42:0f:03:23:68:91: d3:91:86:d1:5e:4b:77:6f:9d:ca:7c:a2:f9:ae:af:ae:b6:83: 63:94:c2:9f:b7:9a:5e:a5:36:0f:fe:33:56:47:0a:37:c0:af: 5d:19:1a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D7UJ1X1oa0rCIJJvqgTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm ZTI2MWQwHhcNMjUxMjIwMDAwMTI5WhcNMjUxMjIxMDAwMTI5WjAzMTEwLwYDVQQD EyhhNDBkYzAxMzljMGIyZDZlNGRlMjliZTc2MjNhNDdjNGI4YjhjZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EtZgpfUGpfnA6LSTPkWlC4nlFVA 0zdmxfNAY2uAP5DblDKepe5SG5JIZljqVnzO38vvJijKYcunvN4gadzWKiLlyIbz l4PoMMhMQjnfuUtxzOLDbJUtQthCQZptt2h4r59Lsm/BdaunKKsQ2kvGfJC4LfTE RjhdbFImkIMuUjQVRJ8vAZrS+XnL2LTi+/VYYxAAYgawrXoeYN1hpQM1J3GWrZgI 8z5083qqJml8QVC/mJJvlhzos7c3oOyjGJnPj2ku11LrOmPpQ/L9TIONNP7ZUQCJ RjUeCpL71JEEWNfyaf3y7+gPphC73CjqapJCD4BBLcTSctDtTPp/6n0qfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQNwBOcCy1uTeKb52I6R8S4uM9iMB8GA1UdIwQY MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7M3gH0X oT71BO9CayzAQO29pJ2GFi/PgiBmI0p1ja0KKQFagF+N/Gm65GyLlsP6ZKlp3cq5 wsfz2TEQCPul+o3uQ5g3jJs++mfm/0SIIBG3JHKp6O4lw9Mx7SErMoWAyQ0rJhjz OTmA1nHZoZh1tHqgYOrCtmXrq/isdeFuG3f79l/7dBxJ8ZYSuhapJkmdbYsKanmk QjjJCwHk7uvEiXIqOUPEXYg+pOaVjINtFOoSPrIqHezLr74K7kcW1OiP36+UzZ6z wgDd9aJ7kurvqck4Qg8DI2iR05GG0V5Ld2+dynyi+a6vrraDY5TCn7eaXqU2D/4z VkcKN8CvXRkamA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:01:34 2025 by rpki-client