This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json) Hash identifier: T2clphrqNFX1Hl+3OoXBCup3yXXMrodi8xI/ajO3Bc4= Subject key identifier: B8:56:8F:08:9F:30:67:AF:BE:87:51:E4:DB:3F:B4:2E:7C:A4:81:1A Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Certificate serial: 019B3BA2759E7C14F79CC62AD58F0C6713E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft Manifest number: 0F4D Signing time: Sat 20 Dec 2025 12:01:01 +0000 Manifest this update: Sat 20 Dec 2025 12:01:01 +0000 Manifest next update: Sun 21 Dec 2025 12:01:01 +0000 Files and hashes: 1: E5pfM8_6xdfnWcd79wNvaskhDKo.roa (hash: y0Ll9TqNFCMXsaTQIESwVtfULWRNBlB/EyrKykV1sx8=) 2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: MsrARuJxY38EenO4urBJbmQ5J8hIoPgmGj0iIKgjhO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:75:9e:7c:14:f7:9c:c6:2a:d5:8f:0c:67:13:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Validity Not Before: Dec 20 12:01:01 2025 GMT Not After : Dec 21 12:01:01 2025 GMT Subject: CN=b8568f089f3067afbe8751e4db3fb42e7ca4811a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:30:49:16:3b:cc:ad:cb:67:e8:bc:78:eb: 14:ba:72:bd:f8:a5:8d:b1:4f:1c:d1:67:04:a2:9d: 48:a1:1a:d2:06:ef:df:09:85:48:4f:2d:4b:85:e1: cd:c8:f4:b8:ea:08:c5:a6:dc:c7:9e:ec:9a:c9:6e: a9:3a:2b:f7:50:05:0c:f4:8e:d6:e0:38:e8:40:7f: 32:a1:33:0b:0e:8c:9a:d0:c4:78:9c:ec:b1:fb:09: ca:0d:aa:5c:36:cb:08:11:05:71:86:6d:9d:f7:0d: f0:ce:b8:ff:7a:c5:14:d0:71:5f:c8:19:07:70:0a: 0a:6d:34:be:0d:bd:7f:bb:35:c6:85:60:1e:04:b5: fb:d9:ec:78:24:2e:27:ef:ce:88:fb:aa:33:f2:0b: 52:40:9a:2f:c2:37:8d:2a:cd:2a:cf:64:b9:9c:f7: 7b:2a:2e:62:09:d6:47:77:41:1b:9d:14:d1:10:1e: c9:77:28:71:ea:cb:ee:9d:ea:7d:b8:76:ea:47:3b: 9f:61:33:0b:66:b1:81:3f:4f:46:13:64:d9:ca:24: 9a:ab:5b:0d:3e:e1:e4:39:fb:78:f1:36:eb:40:e0: 82:d8:fa:05:36:55:58:b2:c6:48:01:0a:b2:c6:95: 18:77:10:03:9d:cb:c6:4a:48:b4:ce:4e:76:34:2c: d0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:56:8F:08:9F:30:67:AF:BE:87:51:E4:DB:3F:B4:2E:7C:A4:81:1A X509v3 Authority Key Identifier: keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2a:01:b0:c6:e0:b9:e2:87:69:07:26:72:fd:e6:64:1a:46: ce:d1:80:94:bb:58:04:98:3c:fc:06:68:f5:93:4e:29:bd:94: 45:d9:c0:d0:9c:93:22:62:b2:e7:7a:d6:2e:98:ea:07:05:df: d0:13:a9:c8:8f:f4:dd:dd:f6:02:fe:29:d9:63:a3:25:ff:62: d5:db:40:49:79:c9:de:2d:0e:98:9f:ff:b6:0c:68:a8:81:16: d8:d1:64:d8:7b:46:80:f8:10:72:2d:1c:ec:fd:29:3d:e5:d6: d0:c7:81:e1:6b:26:dc:51:58:07:98:86:da:5d:bd:1a:cb:88: 49:e9:8a:16:c2:d7:5c:e9:68:3c:ff:f3:2a:68:84:ef:29:54: 6d:3a:b1:c2:9b:fc:8a:63:61:9d:b6:cd:5d:64:03:1f:7c:00: fd:c7:e9:94:61:d3:1c:27:9d:9e:34:34:84:9d:34:47:23:66: 10:1a:ec:24:22:70:e7:da:18:0a:a0:e4:58:ce:15:2a:75:e7: b8:33:b4:9b:77:b7:22:55:a2:a7:14:8d:50:56:92:8f:47:4e: e5:1b:4a:21:82:de:7b:e5:f3:69:4e:59:c2:8b:9a:58:77:be: 74:df:68:ce:37:24:c6:04:5d:f4:26:83:78:b2:f3:7f:52:88: 4a:7e:13:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onWefBT3nMYq1Y8MZxPoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl ZTRjZTEwHhcNMjUxMjIwMTIwMTAxWhcNMjUxMjIxMTIwMTAxWjAzMTEwLwYDVQQD EyhiODU2OGYwODlmMzA2N2FmYmU4NzUxZTRkYjNmYjQyZTdjYTQ4MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqcwSRY7zK3LZ+i8eOsUunK9+KWN sU8c0WcEop1IoRrSBu/fCYVITy1LheHNyPS46gjFptzHnuyayW6pOiv3UAUM9I7W 4DjoQH8yoTMLDoya0MR4nOyx+wnKDapcNssIEQVxhm2d9w3wzrj/esUU0HFfyBkH cAoKbTS+Db1/uzXGhWAeBLX72ex4JC4n786I+6oz8gtSQJovwjeNKs0qz2S5nPd7 Ki5iCdZHd0EbnRTREB7Jdyhx6svunep9uHbqRzufYTMLZrGBP09GE2TZyiSaq1sN PuHkOft48TbrQOCC2PoFNlVYssZIAQqyxpUYdxADncvGSki0zk52NCzQiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhWjwifMGevvodR5Ns/tC58pIEaMB8GA1UdIwQY MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCoBsMbg ueKHaQcmcv3mZBpGztGAlLtYBJg8/AZo9ZNOKb2URdnA0JyTImKy53rWLpjqBwXf 0BOpyI/03d32Av4p2WOjJf9i1dtASXnJ3i0OmJ//tgxoqIEW2NFk2HtGgPgQci0c 7P0pPeXW0MeB4Wsm3FFYB5iG2l29GsuISemKFsLXXOloPP/zKmiE7ylUbTqxwpv8 imNhnbbNXWQDH3wA/cfplGHTHCednjQ0hJ00RyNmEBrsJCJw59oYCqDkWM4VKnXn uDO0m3e3IlWipxSNUFaSj0dO5RtKIYLee+XzaU5ZwouaWHe+dN9ozjckxgRd9CaD eLLzf1KISn4TvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:12:40 2025 by rpki-client