This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json) Hash identifier: 5KzbW0EftEr+8ouA6BxCJYsbW+YqiQGE3fjDL9bnprw= Subject key identifier: 10:CC:D0:7F:BA:2F:98:C1:12:ED:14:56:D4:A7:E0:80:54:6C:B2:62 Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d Certificate serial: 019B484B743CD389A62BAE0D0042F6FBF490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft Manifest number: 0542 Signing time: Mon 22 Dec 2025 23:01:03 +0000 Manifest this update: Mon 22 Dec 2025 23:01:03 +0000 Manifest next update: Tue 23 Dec 2025 23:01:03 +0000 Files and hashes: 1: 08xZwFBzMyKw2fj33b3OnpzdQe4.roa (hash: +I7unp7UZt75QPcPL8zRjg6wNwODWaDJ+uiuaz4dcnQ=) 2: pedXVkU_3_VDst7sTxTSsbn2Em4.roa (hash: 3VM8cHkV3+LaUs7pbcy8XQqPPtDXhoRXeq5taS4kpbU=) 3: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: BD/1QOBpJJ/wqc5E0S1oiCOXVaeq0dZ1soJZN8TmHHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:74:3c:d3:89:a6:2b:ae:0d:00:42:f6:fb:f4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d Validity Not Before: Dec 22 23:01:03 2025 GMT Not After : Dec 23 23:01:03 2025 GMT Subject: CN=10ccd07fba2f98c112ed1456d4a7e080546cb262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:54:c7:54:49:fe:84:8c:cc:68:81:0d:36: 5d:c0:4a:27:15:bf:16:55:2f:8c:f6:d5:4f:34:a0: 78:02:e2:2e:c9:9f:9d:e8:a3:54:be:14:5a:a2:0e: 29:02:bb:20:fd:1d:58:25:ad:70:02:bc:27:1a:86: a5:73:37:df:d7:e1:09:09:5c:c6:2a:48:49:ab:c5: c0:ff:86:c4:bb:25:2b:ee:d1:f3:8d:5b:bf:f7:e6: 75:49:bd:54:e3:d9:da:6a:d0:c4:3d:b1:90:9a:ee: 89:c4:22:5d:7c:8a:68:36:b3:68:85:2c:8d:28:8d: f4:c9:dd:9f:82:1d:eb:af:38:6a:70:d5:74:13:53: b9:18:2f:bd:a8:52:7c:32:73:cd:0c:e3:bb:f0:9b: 29:ef:89:81:28:43:88:ec:ba:af:68:6a:e1:86:25: ad:cf:99:48:3d:9e:2b:03:ec:41:2e:d5:20:bc:30: a1:55:db:24:0f:c1:9d:1d:8e:db:d9:6c:66:fa:28: 62:c0:13:24:35:cd:2a:d6:56:e9:39:7e:9b:8a:18: 82:64:9c:32:8d:84:48:78:d3:b7:a3:d2:e5:a0:bd: ed:5c:55:21:4d:71:7c:91:a7:5c:38:78:83:88:a6: 5e:53:c4:ac:5f:b7:36:eb:a7:be:b4:d2:86:d9:9c: 1c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CC:D0:7F:BA:2F:98:C1:12:ED:14:56:D4:A7:E0:80:54:6C:B2:62 X509v3 Authority Key Identifier: keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a6:29:f1:ae:af:57:30:18:e6:47:9b:7e:a0:19:26:06:a1: 93:5a:6c:2a:4d:ee:b5:36:14:98:5e:ff:8f:b1:ab:fe:07:88: 69:e4:b1:49:67:49:66:6e:5b:fa:b8:b2:d2:34:d8:ca:ed:63: fb:b8:79:1d:48:34:a0:29:1c:28:64:49:37:54:54:42:dc:7f: b7:75:ae:4c:80:f0:25:6b:06:96:76:f7:42:82:70:eb:31:8f: b3:f0:c0:60:c1:f4:fd:47:c6:95:cb:28:3f:a0:c1:a9:b9:53: 83:bf:67:8f:3b:9b:8a:bf:50:67:55:d6:53:5a:58:61:47:90: 81:11:3b:57:1c:1a:a3:1f:2c:7b:8f:44:c5:71:e9:78:fc:f0: 27:6f:9e:1d:68:97:04:c1:04:e8:ae:7e:00:ac:46:cf:95:05: 5d:6f:a4:af:7b:0c:b7:98:a3:20:cb:91:be:de:b6:f6:7a:9d: 30:cd:34:46:0a:82:5e:2f:43:e2:65:8c:40:db:fa:aa:dd:f2: f7:35:21:e9:e7:a1:33:21:dc:63:94:e9:df:9a:73:3c:b0:a5: 79:20:81:96:2b:80:33:25:c0:cd:75:71:08:db:84:10:5a:b7: c6:40:c6:98:00:ce:a2:af:48:60:eb:37:ac:a4:02:f1:0f:a8: b5:7a:f4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS3Q804mmK64NAEL2+/SQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhODg2ZDU1ODdlYzg1ZjcxMjQyY2Q1N2NlZDQwOTU0NDUy ODE2OGQwHhcNMjUxMjIyMjMwMTAzWhcNMjUxMjIzMjMwMTAzWjAzMTEwLwYDVQQD EygxMGNjZDA3ZmJhMmY5OGMxMTJlZDE0NTZkNGE3ZTA4MDU0NmNiMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9dUx1RJ/oSMzGiBDTZdwEonFb8W VS+M9tVPNKB4AuIuyZ+d6KNUvhRaog4pArsg/R1YJa1wArwnGoalczff1+EJCVzG KkhJq8XA/4bEuyUr7tHzjVu/9+Z1Sb1U49naatDEPbGQmu6JxCJdfIpoNrNohSyN KI30yd2fgh3rrzhqcNV0E1O5GC+9qFJ8MnPNDOO78Jsp74mBKEOI7LqvaGrhhiWt z5lIPZ4rA+xBLtUgvDChVdskD8GdHY7b2Wxm+ihiwBMkNc0q1lbpOX6bihiCZJwy jYRIeNO3o9LloL3tXFUhTXF8kadcOHiDiKZeU8SsX7c266e+tNKG2ZwcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDM0H+6L5jBEu0UVtSn4IBUbLJiMB8GA1UdIwQY MBaAFMqIbVWH7IX3EkLNV87UCVRFKBaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt YzdlMjUyMGM0Y2VhLzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh LzEveW9odFZZZnNoZmNTUXMxWHp0UUpWRVVvRm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqYp8a6v VzAY5kebfqAZJgahk1psKk3utTYUmF7/j7Gr/geIaeSxSWdJZm5b+riy0jTYyu1j +7h5HUg0oCkcKGRJN1RUQtx/t3WuTIDwJWsGlnb3QoJw6zGPs/DAYMH0/UfGlcso P6DBqblTg79njzubir9QZ1XWU1pYYUeQgRE7Vxwaox8se49ExXHpePzwJ2+eHWiX BMEE6K5+AKxGz5UFXW+kr3sMt5ijIMuRvt629nqdMM00RgqCXi9D4mWMQNv6qt3y 9zUh6eehMyHcY5Tp35pzPLCleSCBliuAMyXAzXVxCNuEEFq3xkDGmADOoq9IYOs3 rKQC8Q+otXr0/A== -----END CERTIFICATE-----Generated at Tue Dec 23 02:38:44 2025 by rpki-client