This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json) Hash identifier: r2KSb936BYJlsh7p+P1t5YC/lnn+DltbmhQmmCyM6uc= Subject key identifier: 13:A1:9B:AB:A4:09:01:8D:0F:12:0A:82:20:D6:C3:3D:ED:DE:17:F8 Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b Certificate serial: 019B341F81DD06618F2BD00A0978C3B823B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft Manifest number: 11F4 Signing time: Fri 19 Dec 2025 01:00:38 +0000 Manifest this update: Fri 19 Dec 2025 01:00:38 +0000 Manifest next update: Sat 20 Dec 2025 01:00:38 +0000 Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=) 2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: L3bRw01vNopyi/HBOEZtxqn9Ca0QlUe+ODAmv96dpVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:81:dd:06:61:8f:2b:d0:0a:09:78:c3:b8:23:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b Validity Not Before: Dec 19 01:00:38 2025 GMT Not After : Dec 20 01:00:38 2025 GMT Subject: CN=13a19baba409018d0f120a8220d6c33dedde17f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:39:4d:41:dc:ce:ea:36:3b:d0:55:e8:0e: 78:68:db:fe:39:a9:5e:d1:e2:0d:10:bc:e6:db:cc: c5:7b:0c:75:21:26:ed:47:63:d9:29:f2:ac:99:c5: 29:1b:8a:32:c3:a3:37:be:67:61:ed:c9:c0:94:99: be:0d:14:62:94:b0:81:1d:19:8e:df:94:37:29:ee: ad:68:2e:83:72:f2:ae:52:f8:5e:e4:d9:1f:f7:d3: 5b:72:89:f6:f3:58:0d:cc:ed:b9:73:a5:a8:cb:9a: 85:5a:5c:99:70:07:8b:a2:eb:d3:21:9e:a8:02:1c: b3:15:6b:53:17:dd:13:a8:64:ff:d2:78:63:8a:aa: 69:d5:74:5e:79:9b:2c:f0:f3:07:3e:0d:39:08:96: 65:88:1d:63:cd:43:8b:06:01:b0:47:07:80:fd:9e: c7:f3:9f:a0:79:d5:8e:5a:af:7a:4e:97:3e:5a:7b: f8:f4:12:f9:0a:3d:92:53:13:2e:d6:1a:dd:0b:f1: 79:7f:bf:12:7c:b7:bb:96:1f:f1:0b:f6:2c:e1:22: 6d:6e:8f:c0:de:95:73:b1:c8:df:41:b9:21:91:18: 83:ff:54:75:3a:83:d2:cb:f4:b7:5b:a8:c7:2f:93: 71:82:97:aa:ac:27:3c:ad:bb:e6:79:f3:d0:87:60: 91:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A1:9B:AB:A4:09:01:8D:0F:12:0A:82:20:D6:C3:3D:ED:DE:17:F8 X509v3 Authority Key Identifier: keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:60:3e:7d:2a:fa:85:47:ce:01:c0:25:be:f8:ce:b4:97:18: 50:35:f0:c6:30:94:a9:ca:4d:d7:29:02:77:c0:74:fa:3c:7b: b4:dd:f9:68:c3:da:c7:d0:86:40:fc:26:bf:28:b4:ee:18:58: 5b:a0:e8:10:22:82:6a:68:88:b0:ee:6c:7d:5b:f8:29:e5:f2: b1:07:45:ae:2c:8d:bb:1c:10:fc:a8:16:01:f4:fc:36:19:62: a5:98:58:bc:be:4f:39:04:5e:14:6e:df:b7:de:6f:11:10:4d: 63:a9:2d:5f:f8:21:7a:f2:94:f9:f8:44:a0:09:af:db:68:3f: b9:a0:2a:ae:6f:79:c5:1d:4b:0a:45:31:1b:e7:33:96:70:c3: 66:76:91:70:36:99:ee:ad:35:36:d6:ee:53:03:83:3b:41:8e: 9e:47:73:54:f4:7a:83:e6:5d:36:ce:f9:04:86:a6:b4:25:c9: 3c:2e:b1:bb:e4:f0:23:e4:d9:d0:0b:60:9b:69:d7:04:b2:02: 18:98:1b:89:28:68:2b:78:b5:64:e5:fe:ec:d9:ab:6f:b5:5c: a6:19:4c:15:16:e6:6e:87:45:b2:5f:8d:7d:e0:70:6e:36:58: d6:1c:b3:97:d8:3b:89:81:26:c1:fa:3f:81:0f:9b:ef:f3:47: 95:da:1a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H4HdBmGPK9AKCXjDuCO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MDBlZjNkZDVkZDFiZTE1ZDA4YmI5M2NiZGQ2M2I0YWM4 NjBlNmIwHhcNMjUxMjE5MDEwMDM4WhcNMjUxMjIwMDEwMDM4WjAzMTEwLwYDVQQD EygxM2ExOWJhYmE0MDkwMThkMGYxMjBhODIyMGQ2YzMzZGVkZGUxN2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cA5TUHczuo2O9BV6A54aNv+Oale 0eINELzm28zFewx1ISbtR2PZKfKsmcUpG4oyw6M3vmdh7cnAlJm+DRRilLCBHRmO 35Q3Ke6taC6DcvKuUvhe5Nkf99Nbcon281gNzO25c6Woy5qFWlyZcAeLouvTIZ6o AhyzFWtTF90TqGT/0nhjiqpp1XReeZss8PMHPg05CJZliB1jzUOLBgGwRweA/Z7H 85+gedWOWq96Tpc+Wnv49BL5Cj2SUxMu1hrdC/F5f78SfLe7lh/xC/Ys4SJtbo/A 3pVzscjfQbkhkRiD/1R1OoPSy/S3W6jHL5NxgpeqrCc8rbvmefPQh2CREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOhm6ukCQGNDxIKgiDWwz3t3hf4MB8GA1UdIwQY MBaAFMkA7z3V3RvhXQi7k8vdY7Sshg5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hODljMDEtNmJiMS00NzdjLTk0YmMt NWFiZTkzYWZmNjQyLzEveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hODljMDEtNmJiMS00NzdjLTk0YmMtNWFiZTkzYWZmNjQy LzEveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmA+fSr6 hUfOAcAlvvjOtJcYUDXwxjCUqcpN1ykCd8B0+jx7tN35aMPax9CGQPwmvyi07hhY W6DoECKCamiIsO5sfVv4KeXysQdFriyNuxwQ/KgWAfT8NhlipZhYvL5POQReFG7f t95vERBNY6ktX/ghevKU+fhEoAmv22g/uaAqrm95xR1LCkUxG+czlnDDZnaRcDaZ 7q01NtbuUwODO0GOnkdzVPR6g+ZdNs75BIamtCXJPC6xu+TwI+TZ0Atgm2nXBLIC GJgbiShoK3i1ZOX+7Nmrb7VcphlMFRbmbodFsl+NfeBwbjZY1hyzl9g7iYEmwfo/ gQ+b7/NHldoapg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:29:45 2025 by rpki-client