This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json) Hash identifier: ZTU8hu2sq6Md/Ik/s+9lGZJNXTIWaoO0rO9GgdyiSqY= Subject key identifier: AA:D9:F1:66:47:ED:7B:62:24:66:3C:D6:FF:D9:6E:6F:A4:B5:7B:52 Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Certificate serial: 019B416D3F81E0B23897B43A1EDDE7316EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft Manifest number: 0F50 Signing time: Sun 21 Dec 2025 15:00:37 +0000 Manifest this update: Sun 21 Dec 2025 15:00:37 +0000 Manifest next update: Mon 22 Dec 2025 15:00:37 +0000 Files and hashes: 1: E5pfM8_6xdfnWcd79wNvaskhDKo.roa (hash: y0Ll9TqNFCMXsaTQIESwVtfULWRNBlB/EyrKykV1sx8=) 2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: yFYfCkfDDo/5w/HcUEtBfzjW3hXoBfgU0zghnGM/94s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:3f:81:e0:b2:38:97:b4:3a:1e:dd:e7:31:6e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Validity Not Before: Dec 21 15:00:37 2025 GMT Not After : Dec 22 15:00:37 2025 GMT Subject: CN=aad9f16647ed7b6224663cd6ffd96e6fa4b57b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:9e:f0:69:eb:bc:f9:24:c4:87:30:d7:27: 7f:0d:37:42:fc:e3:ea:fa:71:f9:63:b6:e4:f9:10: c9:1f:14:71:ee:8b:69:a3:7d:60:92:85:01:b5:40: 89:d6:12:57:9e:9b:a5:30:83:ce:30:02:9a:7c:b4: ea:34:e9:df:50:0a:75:c5:b8:2f:eb:ce:a7:4c:b5: 6d:b3:25:62:b5:b3:03:fc:41:8d:c9:d5:76:86:9f: 18:fc:ab:ce:8f:39:51:35:db:d2:0d:9a:d8:7d:77: 4a:46:07:65:00:b4:bc:f8:1a:85:5b:37:2e:e2:62: 6d:6d:25:83:5e:01:50:e3:b7:1b:d2:b9:28:0d:c4: 86:e6:85:9d:21:8e:6d:86:18:f1:64:88:ef:9a:e2: 16:da:46:08:96:ef:48:e1:28:d1:33:23:ff:0e:92: 4f:ab:a5:91:4e:97:4e:46:30:c2:75:7f:56:60:f6: f9:5f:5e:ce:2e:e0:f5:bb:f5:b1:a4:eb:25:05:30: c8:d3:ae:a2:24:dc:bf:c4:40:bf:d3:d0:80:da:83: a0:a8:8f:c2:fc:3a:b5:d6:e1:60:23:de:e2:ed:e9: 0a:92:eb:c9:9f:35:dc:a5:b3:e6:f5:fa:6f:2f:cf: 8a:1f:95:c7:28:26:14:5b:b9:f8:0c:ce:6f:c1:66: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D9:F1:66:47:ED:7B:62:24:66:3C:D6:FF:D9:6E:6F:A4:B5:7B:52 X509v3 Authority Key Identifier: keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:18:32:09:b1:59:ce:a8:b3:24:87:77:ec:0f:3f:c2:9b:6c: 88:16:0c:f2:1f:4c:6d:d0:18:c1:1e:45:c2:fe:98:70:f5:e1: 4e:7a:f5:72:db:4e:06:ad:aa:b1:b3:2c:99:0f:60:89:8f:8b: 30:09:8e:8c:37:97:fd:96:41:74:19:51:be:9f:b0:39:ac:4e: 97:0c:ad:78:f2:da:e2:72:9d:e0:da:f1:48:86:81:f4:c4:b8: c1:47:83:a7:4c:56:a1:15:fa:d8:d8:2a:e0:85:59:b3:83:d1: 07:94:8a:f5:c7:4c:0a:60:35:4d:ca:5e:2e:10:31:c6:43:cf: a9:58:28:84:b6:90:f1:75:d0:8a:a8:e4:e5:95:94:fd:18:99: 19:80:8b:29:80:6e:5d:cb:4f:8f:27:31:1d:ad:89:7b:7a:0f: 72:0f:d0:86:a2:ed:86:9c:42:e2:ad:a9:21:a5:3d:49:05:1c: 43:43:a3:b5:f2:42:e2:4b:30:d7:bc:e5:69:b9:2d:a5:86:f7: 3c:22:5d:b7:9c:44:38:4e:d0:0a:0d:5d:87:83:36:4d:63:1f: bc:10:25:18:12:02:64:f5:0a:22:6d:c2:92:62:63:58:15:43: 3f:26:08:7c:2e:54:5b:89:92:93:02:b6:71:00:52:c6:02:89: 7e:a1:8e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbT+B4LI4l7Q6Ht3nMW68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl ZTRjZTEwHhcNMjUxMjIxMTUwMDM3WhcNMjUxMjIyMTUwMDM3WjAzMTEwLwYDVQQD EyhhYWQ5ZjE2NjQ3ZWQ3YjYyMjQ2NjNjZDZmZmQ5NmU2ZmE0YjU3YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFSe8GnrvPkkxIcw1yd/DTdC/OPq +nH5Y7bk+RDJHxRx7otpo31gkoUBtUCJ1hJXnpulMIPOMAKafLTqNOnfUAp1xbgv 686nTLVtsyVitbMD/EGNydV2hp8Y/KvOjzlRNdvSDZrYfXdKRgdlALS8+BqFWzcu 4mJtbSWDXgFQ47cb0rkoDcSG5oWdIY5thhjxZIjvmuIW2kYIlu9I4SjRMyP/DpJP q6WRTpdORjDCdX9WYPb5X17OLuD1u/WxpOslBTDI066iJNy/xEC/09CA2oOgqI/C /Dq11uFgI97i7ekKkuvJnzXcpbPm9fpvL8+KH5XHKCYUW7n4DM5vwWaPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrZ8WZH7XtiJGY81v/Zbm+ktXtSMB8GA1UdIwQY MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBgyCbFZ zqizJId37A8/wptsiBYM8h9MbdAYwR5Fwv6YcPXhTnr1cttOBq2qsbMsmQ9giY+L MAmOjDeX/ZZBdBlRvp+wOaxOlwytePLa4nKd4NrxSIaB9MS4wUeDp0xWoRX62Ngq 4IVZs4PRB5SK9cdMCmA1TcpeLhAxxkPPqVgohLaQ8XXQiqjk5ZWU/RiZGYCLKYBu XctPjycxHa2Je3oPcg/QhqLthpxC4q2pIaU9SQUcQ0OjtfJC4ksw17zlabktpYb3 PCJdt5xEOE7QCg1dh4M2TWMfvBAlGBICZPUKIm3CkmJjWBVDPyYIfC5UW4mSkwK2 cQBSxgKJfqGOKw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:26:45 2025 by rpki-client