This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json) Hash identifier: 2wgd1ay45xj5o8z+qJlEpqpxXoOZNEqAhTeUUr76oCg= Subject key identifier: 02:08:F3:6B:92:39:57:EA:F1:3A:CC:5A:EE:A2:A3:2B:19:77:AE:85 Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Certificate serial: 019B3C0FF95FD16B1DBE144AA7F609E3C341 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft Manifest number: 05D7 Signing time: Sat 20 Dec 2025 14:00:38 +0000 Manifest this update: Sat 20 Dec 2025 14:00:38 +0000 Manifest next update: Sun 21 Dec 2025 14:00:38 +0000 Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=) 2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: ztXG4mz2Uy6dDvY21pUIEvvi1VQoWP3Gut9j/s/Bw2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f9:5f:d1:6b:1d:be:14:4a:a7:f6:09:e3:c3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Dec 21 14:00:38 2025 GMT Subject: CN=0208f36b923957eaf13acc5aeea2a32b1977ae85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:f4:af:ad:65:e9:6d:5d:75:6b:d6:d0:ee: 72:eb:04:3f:97:94:f2:fa:80:a2:08:88:54:14:e3: 6c:c0:6f:84:99:b3:c0:2d:f6:88:9e:4a:1d:fa:94: 88:e1:72:76:cf:b8:6a:cf:9c:cf:55:84:14:3e:0b: 61:d6:36:a1:a9:8f:49:a9:96:fe:54:70:dd:74:4c: 0f:70:80:eb:1e:7a:9c:5c:ae:77:31:59:09:a3:9c: 64:3c:5e:e6:c8:61:af:53:dc:c8:f3:8d:79:c0:68: 80:cd:8d:b5:9d:22:85:d2:bd:8e:5d:1c:fd:e2:ed: e0:a4:cc:19:dd:6b:9b:30:7c:41:3c:e8:8d:13:04: 7e:ab:59:e8:45:2c:fb:e8:4d:66:3f:71:b2:30:ed: 2b:7c:cd:ab:69:5c:db:92:07:cc:af:22:f1:40:e2: f3:7a:7b:fc:ce:79:f4:83:ce:b6:81:c9:16:ad:cd: 40:86:fb:80:6e:53:c3:97:90:aa:36:d9:87:b4:87: 06:aa:31:22:88:43:d9:6e:2b:8a:c3:5a:09:41:4a: 2e:b9:70:e4:43:0a:75:6c:82:30:97:3a:68:ab:de: a5:98:76:70:05:cc:5e:ff:bf:b7:52:f3:81:6f:f8: fa:57:fc:7c:86:da:b2:9d:59:c2:fa:55:0d:0a:3d: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:F3:6B:92:39:57:EA:F1:3A:CC:5A:EE:A2:A3:2B:19:77:AE:85 X509v3 Authority Key Identifier: keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:08:b2:41:2a:33:b6:ab:82:67:b8:34:f4:62:fa:00:01:74: f1:f3:ea:84:db:52:c4:4b:7c:ca:6f:59:aa:e5:c3:07:03:50: 75:5d:33:be:5e:f3:17:66:cb:ea:89:a1:76:21:b3:bd:de:36: 16:06:5c:9a:48:1b:63:88:6d:4b:50:1c:29:69:d9:2f:2a:66: f8:ba:ea:13:56:4d:44:d9:a9:64:bf:97:86:8a:80:e2:4f:b0: 30:a4:3a:f1:ba:7f:ba:50:f2:04:5b:d0:11:4f:b0:16:a7:b5: e8:cb:ea:79:23:94:52:16:e3:2f:d9:e5:d1:46:9b:ca:bc:c0: 39:e2:9f:02:f0:96:3c:27:1c:24:4a:95:30:76:fd:22:a8:40: a6:8e:b7:9f:ba:cb:a8:13:af:90:4a:41:01:c7:c8:4d:6a:1c: 2e:62:d1:16:7f:7e:9b:81:1c:d3:be:7b:82:9a:f1:cc:bf:23: 73:3a:12:fe:9c:f8:7d:7b:58:09:25:8c:a3:9d:31:0c:17:64: 6e:c9:59:1e:f3:0a:03:c6:7f:c7:59:fe:aa:d0:a7:de:19:e6: e8:46:d2:ff:26:c8:74:3b:4a:61:39:9e:c5:19:36:c3:46:9d: f8:97:cb:90:ca:c4:b3:de:64:a5:e9:0e:6a:98:fe:cf:fd:fa: bb:ee:65:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/lf0WsdvhRKp/YJ48NBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj NjI3MTUwHhcNMjUxMjIwMTQwMDM4WhcNMjUxMjIxMTQwMDM4WjAzMTEwLwYDVQQD EygwMjA4ZjM2YjkyMzk1N2VhZjEzYWNjNWFlZWEyYTMyYjE5NzdhZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMP0r61l6W1ddWvW0O5y6wQ/l5Ty +oCiCIhUFONswG+EmbPALfaInkod+pSI4XJ2z7hqz5zPVYQUPgth1jahqY9JqZb+ VHDddEwPcIDrHnqcXK53MVkJo5xkPF7myGGvU9zI8415wGiAzY21nSKF0r2OXRz9 4u3gpMwZ3WubMHxBPOiNEwR+q1noRSz76E1mP3GyMO0rfM2raVzbkgfMryLxQOLz env8znn0g862gckWrc1AhvuAblPDl5CqNtmHtIcGqjEiiEPZbiuKw1oJQUouuXDk Qwp1bIIwlzpoq96lmHZwBcxe/7+3UvOBb/j6V/x8htqynVnC+lUNCj3RhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAII82uSOVfq8TrMWu6ioysZd66FMB8GA1UdIwQY MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAiyQSoz tquCZ7g09GL6AAF08fPqhNtSxEt8ym9ZquXDBwNQdV0zvl7zF2bL6omhdiGzvd42 FgZcmkgbY4htS1AcKWnZLypm+LrqE1ZNRNmpZL+XhoqA4k+wMKQ68bp/ulDyBFvQ EU+wFqe16MvqeSOUUhbjL9nl0UabyrzAOeKfAvCWPCccJEqVMHb9IqhApo63n7rL qBOvkEpBAcfITWocLmLRFn9+m4Ec0757gprxzL8jczoS/pz4fXtYCSWMo50xDBdk bslZHvMKA8Z/x1n+qtCn3hnm6EbS/ybIdDtKYTmexRk2w0ad+JfLkMrEs95kpekO apj+z/36u+5l9A== -----END CERTIFICATE-----Generated at Sat Dec 20 16:22:10 2025 by rpki-client