This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json) Hash identifier: TlbT0gvwq+QCpMt1GN4IVtyHsNyFF3f/jPycePIU+nA= Subject key identifier: AD:A7:74:18:19:94:CD:CD:7D:B4:52:71:7D:30:B4:FA:DE:31:D1:E3 Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b Certificate serial: 019B495DB0E9D2971D404E71A7FAAFAA7BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft Manifest number: 11FF Signing time: Tue 23 Dec 2025 04:00:35 +0000 Manifest this update: Tue 23 Dec 2025 04:00:35 +0000 Manifest next update: Wed 24 Dec 2025 04:00:35 +0000 Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=) 2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: apb3wrYeoS4wn1gSgFTnRFctYx/IO9Z2CpXV7s5D1nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:b0:e9:d2:97:1d:40:4e:71:a7:fa:af:aa:7b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b Validity Not Before: Dec 23 04:00:35 2025 GMT Not After : Dec 24 04:00:35 2025 GMT Subject: CN=ada774181994cdcd7db452717d30b4fade31d1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:c3:0f:c2:d6:04:9e:ad:6f:52:1f:59:24: 55:4f:e2:4e:64:0c:4c:61:b3:ab:00:63:53:1e:39: 8b:25:47:e1:e6:02:1f:21:00:fb:fc:e3:ec:64:4f: 7f:23:10:cb:07:ad:06:18:b5:78:a0:3e:96:ee:f7: 80:0d:e5:75:c3:25:7e:26:f2:02:eb:95:99:0c:75: ab:b2:49:f4:45:ef:13:b1:f7:99:70:8f:33:46:47: 87:49:50:2e:08:5e:e1:3d:72:f0:80:db:a9:42:0e: d2:34:15:81:42:6d:4c:63:ab:ef:4b:7f:ff:d9:0e: 30:51:1b:0e:7d:a7:99:99:b7:d5:44:19:7a:10:45: e9:28:0c:24:ba:92:3f:6f:57:1c:db:4b:39:d6:f2: d2:06:54:22:3a:4f:a7:70:bb:c7:87:a5:4b:7d:94: cb:0d:06:7c:f3:b4:80:4b:5e:ad:41:79:8c:f4:a0: fb:c9:c5:1b:2f:12:15:ea:7f:ec:8a:b8:d2:d4:0d: d7:6c:6c:21:c5:a0:de:e0:8b:7a:c6:b0:b3:53:9f: 58:4c:cb:91:ea:d6:9c:22:a2:16:9f:f9:34:c9:01: f9:f2:b5:b4:ee:8a:46:e1:48:66:ab:50:35:25:d7: 8a:3b:eb:c5:fc:a7:d4:51:08:34:e9:26:ad:d7:3c: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A7:74:18:19:94:CD:CD:7D:B4:52:71:7D:30:B4:FA:DE:31:D1:E3 X509v3 Authority Key Identifier: keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0e:c1:41:64:45:7c:2a:97:b8:13:7b:d2:a1:cb:b1:c7:1e: 12:d8:d0:56:8c:02:1e:a6:12:a2:2a:aa:d3:2c:58:e9:f7:a6: bb:82:82:14:7e:a5:c7:1c:a3:ec:f3:37:d4:75:6b:64:de:1a: 0b:f5:43:5a:e0:eb:43:a4:a1:d7:92:5b:22:f6:19:f8:33:d3: 79:82:19:2d:f3:3e:a5:ad:0e:db:ce:6f:80:80:9e:06:64:3f: 38:51:d4:c3:fe:51:12:de:7e:65:87:82:c8:49:fd:9c:30:90: cc:18:e4:64:78:c9:5b:a2:a4:07:8f:e7:10:d9:1f:3b:68:4c: 79:b5:60:08:4b:43:1f:cb:fa:03:38:85:7c:77:2d:fe:60:4c: fb:94:8d:3c:e3:fc:0a:ea:99:86:b3:94:ac:67:92:d0:21:3a: 74:90:0c:55:e6:78:b5:6d:07:3b:51:84:c2:e6:02:4d:da:16: b3:0b:d5:7c:c2:d0:7a:4b:c6:1f:fa:72:55:58:2a:50:39:53: 2a:e8:ab:14:5e:1e:47:24:87:e6:c8:eb:71:f5:ec:e4:4f:d8: c0:b1:2c:40:c2:21:10:91:20:aa:c9:b8:57:74:26:ba:cc:56: fe:83:47:ca:11:e1:db:55:9c:64:70:82:c4:99:b7:32:0b:e8: 25:cc:70:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXbDp0pcdQE5xp/qvqnuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MDBlZjNkZDVkZDFiZTE1ZDA4YmI5M2NiZGQ2M2I0YWM4 NjBlNmIwHhcNMjUxMjIzMDQwMDM1WhcNMjUxMjI0MDQwMDM1WjAzMTEwLwYDVQQD EyhhZGE3NzQxODE5OTRjZGNkN2RiNDUyNzE3ZDMwYjRmYWRlMzFkMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTbDD8LWBJ6tb1IfWSRVT+JOZAxM YbOrAGNTHjmLJUfh5gIfIQD7/OPsZE9/IxDLB60GGLV4oD6W7veADeV1wyV+JvIC 65WZDHWrskn0Re8TsfeZcI8zRkeHSVAuCF7hPXLwgNupQg7SNBWBQm1MY6vvS3// 2Q4wURsOfaeZmbfVRBl6EEXpKAwkupI/b1cc20s51vLSBlQiOk+ncLvHh6VLfZTL DQZ887SAS16tQXmM9KD7ycUbLxIV6n/sirjS1A3XbGwhxaDe4It6xrCzU59YTMuR 6tacIqIWn/k0yQH58rW07opG4Uhmq1A1JdeKO+vF/KfUUQg06Sat1zytgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2ndBgZlM3NfbRScX0wtPreMdHjMB8GA1UdIwQY MBaAFMkA7z3V3RvhXQi7k8vdY7Sshg5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hODljMDEtNmJiMS00NzdjLTk0YmMt NWFiZTkzYWZmNjQyLzEveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hODljMDEtNmJiMS00NzdjLTk0YmMtNWFiZTkzYWZmNjQy LzEveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg7BQWRF fCqXuBN70qHLscceEtjQVowCHqYSoiqq0yxY6femu4KCFH6lxxyj7PM31HVrZN4a C/VDWuDrQ6Sh15JbIvYZ+DPTeYIZLfM+pa0O285vgICeBmQ/OFHUw/5REt5+ZYeC yEn9nDCQzBjkZHjJW6KkB4/nENkfO2hMebVgCEtDH8v6AziFfHct/mBM+5SNPOP8 CuqZhrOUrGeS0CE6dJAMVeZ4tW0HO1GEwuYCTdoWswvVfMLQekvGH/pyVVgqUDlT KuirFF4eRySH5sjrcfXs5E/YwLEsQMIhEJEgqsm4V3QmusxW/oNHyhHh21WcZHCC xJm3MgvoJcxwXA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:08 2025 by rpki-client