This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft File: CYdvfc8Myud0IWBGOzjhw181bRI.mft (raw, json) Hash identifier: d0X7Ie7F5a3wZJvQHncQPBkGrCCdrIX/Bp1bzW3xnvo= Subject key identifier: DD:03:91:8C:39:AF:69:BD:0F:4D:61:F7:AB:D4:E7:C9:E1:D8:86:17 Authority key identifier: 09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12 Certificate issuer: /CN=09876f7dcf0ccae7742160463b38e1c35f356d12 Certificate serial: 019B6768D3CC4EF1F8C2C57453837B5D37D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft Manifest number: 1011 Signing time: Mon 29 Dec 2025 00:01:21 +0000 Manifest this update: Mon 29 Dec 2025 00:01:21 +0000 Manifest next update: Tue 30 Dec 2025 00:01:21 +0000 Files and hashes: 1: CYdvfc8Myud0IWBGOzjhw181bRI.crl (hash: xbAYjmIGqYKniDdJ9VZBkBVjXX9ILY6h6Yk6NcEKvX4=) 2: v1PRoA5ebsh_hlHI-WdJ9oH7RYY.roa (hash: g731f8Kk7ZRmBzHdANv/XJyJm7Gc4rKXDwNwW3MJnpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:d3:cc:4e:f1:f8:c2:c5:74:53:83:7b:5d:37:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09876f7dcf0ccae7742160463b38e1c35f356d12 Validity Not Before: Dec 29 00:01:21 2025 GMT Not After : Dec 30 00:01:21 2025 GMT Subject: CN=dd03918c39af69bd0f4d61f7abd4e7c9e1d88617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:27:36:27:ae:3e:a0:8d:19:f3:05:a5:12: de:4c:49:75:a0:e7:dc:21:6d:91:88:d8:f0:c7:43: 15:ce:d4:d2:53:b8:cb:a2:6a:63:18:7a:42:c6:a4: aa:0c:98:0e:c2:7a:96:92:04:49:40:a2:d7:97:b5: 53:f6:aa:ea:47:4d:56:cd:e4:f7:bc:b0:d6:3a:1e: 42:68:1e:57:27:52:86:46:ec:27:7c:88:70:cc:75: 51:a3:e0:50:68:88:e8:2b:03:bd:c1:00:72:9a:88: ef:90:96:37:2f:4d:f5:6b:6a:f6:49:d2:27:38:9b: c7:79:11:be:dc:85:24:95:4f:63:80:34:b1:67:a2: 59:59:d5:9a:26:e0:da:df:b4:c0:99:a7:ee:be:af: 25:4a:7a:95:6e:45:01:40:3d:53:46:ef:aa:50:c1: 29:6f:e9:27:07:9c:de:8a:c3:ca:4e:c2:05:be:48: db:81:f3:5f:b6:ec:8b:ec:b8:8b:6b:09:79:8e:63: b1:9d:cb:2a:df:42:4b:97:b0:c5:5e:dd:5f:62:a3: c5:81:7c:e7:7e:f1:72:63:dd:cf:46:e4:07:8c:a5: e7:40:dc:bb:3c:91:56:f8:a6:26:c9:55:bf:e2:97: 6f:97:77:4c:d0:a0:d6:8c:18:db:94:a5:80:fe:4a: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:03:91:8C:39:AF:69:BD:0F:4D:61:F7:AB:D4:E7:C9:E1:D8:86:17 X509v3 Authority Key Identifier: keyid:09:87:6F:7D:CF:0C:CA:E7:74:21:60:46:3B:38:E1:C3:5F:35:6D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYdvfc8Myud0IWBGOzjhw181bRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a43766-91dd-4266-af60-920b320d2e21/1/CYdvfc8Myud0IWBGOzjhw181bRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8e:e1:8c:6e:af:42:bd:75:78:a8:33:c6:c5:d2:9b:1c:cd: 2d:1e:8c:f1:63:60:6a:f5:b4:9d:2b:fa:71:b4:97:39:e1:20: f0:c8:4f:da:06:07:f6:13:ef:21:0c:6d:85:9b:70:bf:43:3b: af:01:f1:5c:a8:b9:97:ee:d0:80:9e:f5:e7:c6:d2:03:c0:b8: 79:f9:98:5d:e9:09:e0:6d:f1:b3:50:c1:e2:98:3b:7f:a7:66: a1:85:a8:fd:cc:10:5d:42:18:5b:a6:5d:4e:10:0b:86:15:ee: 73:1e:0b:d6:f5:49:54:bd:e4:53:14:4c:36:09:d5:4f:46:40: 7c:63:39:33:6d:f9:ec:c0:7f:b7:17:02:f9:12:f8:69:e2:f3: 69:1d:29:06:d0:cd:9a:df:84:bb:2e:bc:c4:b1:6e:a7:d3:cf: 5f:c8:bf:51:bb:4e:50:29:83:90:78:82:11:1e:ec:09:f1:7f: 89:62:f0:7d:e3:4d:b5:e7:d8:ac:09:be:3a:4f:b1:fa:ee:05: ea:8a:0b:c1:40:67:ab:6a:c2:cc:7e:40:02:ed:83:b8:9a:e1: 7a:db:e5:b8:7a:e5:05:28:97:fe:da:44:ec:a0:f2:02:e5:ab: f4:60:82:e7:0c:d3:33:ee:9d:8e:ec:37:9e:27:7b:24:1a:26: d6:b0:8b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaNPMTvH4wsV0U4N7XTfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ODc2ZjdkY2YwY2NhZTc3NDIxNjA0NjNiMzhlMWMzNWYz NTZkMTIwHhcNMjUxMjI5MDAwMTIxWhcNMjUxMjMwMDAwMTIxWjAzMTEwLwYDVQQD EyhkZDAzOTE4YzM5YWY2OWJkMGY0ZDYxZjdhYmQ0ZTdjOWUxZDg4NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXAnNieuPqCNGfMFpRLeTEl1oOfc IW2RiNjwx0MVztTSU7jLompjGHpCxqSqDJgOwnqWkgRJQKLXl7VT9qrqR01WzeT3 vLDWOh5CaB5XJ1KGRuwnfIhwzHVRo+BQaIjoKwO9wQBymojvkJY3L031a2r2SdIn OJvHeRG+3IUklU9jgDSxZ6JZWdWaJuDa37TAmafuvq8lSnqVbkUBQD1TRu+qUMEp b+knB5zeisPKTsIFvkjbgfNftuyL7LiLawl5jmOxncsq30JLl7DFXt1fYqPFgXzn fvFyY93PRuQHjKXnQNy7PJFW+KYmyVW/4pdvl3dM0KDWjBjblKWA/kqMjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0DkYw5r2m9D01h96vU58nh2IYXMB8GA1UdIwQY MBaAFAmHb33PDMrndCFgRjs44cNfNW0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lkdmZjOE15dWQwSVdCR096amh3MTgxYlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9hNDM3NjYtOTFkZC00MjY2LWFmNjAt OTIwYjMyMGQyZTIxLzEvQ1lkdmZjOE15dWQwSVdCR096amh3MTgxYlJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9hNDM3NjYtOTFkZC00MjY2LWFmNjAtOTIwYjMyMGQyZTIx LzEvQ1lkdmZjOE15dWQwSVdCR096amh3MTgxYlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY7hjG6v Qr11eKgzxsXSmxzNLR6M8WNgavW0nSv6cbSXOeEg8MhP2gYH9hPvIQxthZtwv0M7 rwHxXKi5l+7QgJ7158bSA8C4efmYXekJ4G3xs1DB4pg7f6dmoYWo/cwQXUIYW6Zd ThALhhXucx4L1vVJVL3kUxRMNgnVT0ZAfGM5M2357MB/txcC+RL4aeLzaR0pBtDN mt+Euy68xLFup9PPX8i/UbtOUCmDkHiCER7sCfF/iWLwfeNNtefYrAm+Ok+x+u4F 6ooLwUBnq2rCzH5AAu2DuJrhetvluHrlBSiX/tpE7KDyAuWr9GCC5wzTM+6djuw3 nid7JBom1rCL7w== -----END CERTIFICATE-----Generated at Mon Dec 29 05:21:22 2025 by rpki-client