This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json) Hash identifier: afWdjDGEb6s25WPxrtlK3pYtVYafn3qxIvyIWK0aDwQ= Subject key identifier: 32:0A:E0:F3:28:27:36:F1:30:D1:A5:3B:99:8D:DB:C6:43:7C:DF:B5 Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6 Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6 Certificate serial: 019B6E0EE95801C7B9C0024E7D264C2FB955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 07:00:29 +0000 Manifest this update: Tue 30 Dec 2025 07:00:29 +0000 Manifest next update: Wed 31 Dec 2025 07:00:29 +0000 Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=) 2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: T5y49/bAi8zjol6fhvMUtfTnSlpFMv1pDab8B+bdDLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0e:e9:58:01:c7:b9:c0:02:4e:7d:26:4c:2f:b9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c833a0389592756e415cde348abbc24312b02df6 Validity Not Before: Dec 30 07:00:29 2025 GMT Not After : Dec 31 07:00:29 2025 GMT Subject: CN=320ae0f3282736f130d1a53b998ddbc6437cdfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:e8:ff:01:0d:34:72:71:c7:b3:77:0f:c3: ff:3e:0c:f0:87:39:ed:a4:7c:11:3f:90:7d:0c:ad: eb:9c:6f:07:93:f5:90:28:d9:ac:dc:96:b1:53:2d: 9e:15:21:75:86:17:ea:79:77:ab:a9:ef:74:b7:df: 6c:4a:0c:86:71:56:61:47:6a:ca:fb:9f:da:0c:a0: c4:66:a9:c4:2d:47:d8:d9:4e:63:48:4a:3f:01:24: 44:17:c5:00:c3:f7:98:59:e6:a2:ec:7c:db:25:62: d0:d8:0e:d7:0d:3c:75:cb:ab:dd:c1:92:2c:1a:0f: e8:cb:4f:c3:6c:ab:f6:ed:b6:60:b0:d9:f3:fc:b6: 6d:2a:b8:d9:6c:18:3d:c9:11:62:80:3b:0c:91:da: 59:7f:95:11:1d:2d:61:a8:af:f2:b8:82:f4:25:ee: d6:a1:f6:62:d2:ee:c1:d4:bd:13:b7:ac:c6:5b:0f: 1c:e0:59:a3:f5:1f:f2:d0:99:e7:d6:ab:e6:ad:eb: 58:91:9b:c8:c4:85:59:cd:0c:4b:a2:73:55:87:09: 2c:85:47:eb:0f:bb:e6:c6:20:87:42:6d:e7:b9:e0: 44:95:9a:0c:60:cb:4a:89:41:55:bb:9d:93:74:52: f2:c2:fc:f8:39:bc:ed:8e:94:b7:47:fd:38:ee:ac: 4a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0A:E0:F3:28:27:36:F1:30:D1:A5:3B:99:8D:DB:C6:43:7C:DF:B5 X509v3 Authority Key Identifier: keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7c:55:45:fd:4d:55:ac:11:6d:89:3b:68:8c:5a:d9:af:2a: 6d:ef:11:cf:ef:fd:88:be:01:f4:f2:e2:70:23:42:9f:f5:3f: 46:33:8c:59:ca:95:63:34:ef:63:fa:82:5e:29:e5:9b:f7:54: 37:cf:03:3a:25:bc:5e:c4:bf:2b:c8:db:6a:ed:24:f4:80:e7: d8:9e:9e:3b:f3:a4:70:67:39:ec:c8:d9:6a:c6:e7:2e:18:a2: 35:29:e6:1b:b2:92:1f:32:16:c6:79:15:6b:5b:ea:f0:04:e0: 85:88:ee:05:20:cd:b2:be:97:55:f5:5f:b4:f6:eb:e2:d5:42: 8f:16:2c:fe:76:0f:d4:fc:9c:b5:d3:d8:d5:0b:36:7f:8b:fc: ab:74:89:a3:47:cd:80:a4:3a:48:be:56:17:e6:56:58:01:a6: cf:3b:aa:05:57:51:64:d5:3d:e3:40:db:67:66:f6:6f:5d:e7: 2c:f2:1e:fe:3d:7b:87:2f:d7:49:50:44:49:ba:4a:30:9f:3e: d3:8b:00:99:9e:f9:35:6e:c7:3b:6f:26:27:bb:9a:e8:d4:10: 2a:a5:6d:aa:7d:43:4c:25:84:8e:e0:5b:02:1e:8e:7c:59:32: 14:80:2d:96:ef:f8:90:17:f7:2f:24:bd:21:2c:ad:0e:32:cc: 2a:02:2e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDulYAce5wAJOfSZML7lVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzNhMDM4OTU5Mjc1NmU0MTVjZGUzNDhhYmJjMjQzMTJi MDJkZjYwHhcNMjUxMjMwMDcwMDI5WhcNMjUxMjMxMDcwMDI5WjAzMTEwLwYDVQQD EygzMjBhZTBmMzI4MjczNmYxMzBkMWE1M2I5OThkZGJjNjQzN2NkZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNzo/wENNHJxx7N3D8P/Pgzwhznt pHwRP5B9DK3rnG8Hk/WQKNms3JaxUy2eFSF1hhfqeXerqe90t99sSgyGcVZhR2rK +5/aDKDEZqnELUfY2U5jSEo/ASREF8UAw/eYWeai7HzbJWLQ2A7XDTx1y6vdwZIs Gg/oy0/DbKv27bZgsNnz/LZtKrjZbBg9yRFigDsMkdpZf5URHS1hqK/yuIL0Je7W ofZi0u7B1L0Tt6zGWw8c4Fmj9R/y0Jnn1qvmretYkZvIxIVZzQxLonNVhwkshUfr D7vmxiCHQm3nueBElZoMYMtKiUFVu52TdFLywvz4ObztjpS3R/047qxKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIK4PMoJzbxMNGlO5mN28ZDfN+1MB8GA1UdIwQY MBaAFMgzoDiVknVuQVzeNIq7wkMSsC32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAt OWYzMDc1NzQwNTFlLzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAtOWYzMDc1NzQwNTFl LzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXxVRf1N VawRbYk7aIxa2a8qbe8Rz+/9iL4B9PLicCNCn/U/RjOMWcqVYzTvY/qCXinlm/dU N88DOiW8XsS/K8jbau0k9IDn2J6eO/OkcGc57MjZasbnLhiiNSnmG7KSHzIWxnkV a1vq8ATghYjuBSDNsr6XVfVftPbr4tVCjxYs/nYP1PyctdPY1Qs2f4v8q3SJo0fN gKQ6SL5WF+ZWWAGmzzuqBVdRZNU940DbZ2b2b13nLPIe/j17hy/XSVBESbpKMJ8+ 04sAmZ75NW7HO28mJ7ua6NQQKqVtqn1DTCWEjuBbAh6OfFkyFIAtlu/4kBf3LyS9 ISytDjLMKgIudw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:29:31 2025 by rpki-client