This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json) Hash identifier: Xzb1utfoVKnlTeR6ewM17pRzOoaxljcwynKGlV0z8zI= Subject key identifier: 70:02:9A:A8:17:5A:72:9F:83:DD:8A:1D:2E:5B:52:04:B7:8B:E8:24 Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Certificate serial: 019B3A8F8C029FA1470217B8A3D725C85BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft Manifest number: 1271 Signing time: Sat 20 Dec 2025 07:00:44 +0000 Manifest this update: Sat 20 Dec 2025 07:00:44 +0000 Manifest next update: Sun 21 Dec 2025 07:00:44 +0000 Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: FyEQ9SvlTtU5JW9VjRyjiEoSwsg5blj18eP5bk4ubm4=) 2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:8c:02:9f:a1:47:02:17:b8:a3:d7:25:c8:5b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Validity Not Before: Dec 20 07:00:44 2025 GMT Not After : Dec 21 07:00:44 2025 GMT Subject: CN=70029aa8175a729f83dd8a1d2e5b5204b78be824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:0f:4f:54:2d:cb:34:3c:8f:ba:22:13:6e: 55:55:14:73:23:09:bb:a4:fd:d2:c5:a9:89:8d:35: 20:30:39:cc:bb:3a:68:1a:96:42:1b:de:61:fe:36: a4:12:bb:ed:9b:f5:57:2e:94:8b:be:f8:6e:08:b9: 79:78:45:cb:db:43:40:a8:9a:94:b4:6d:f9:6e:e7: 4c:5c:9c:23:f3:aa:21:cb:a6:0f:53:ee:c8:63:1c: 95:dc:a0:ae:fe:2c:1a:c8:c1:84:a3:66:1f:48:0d: a8:61:fc:1b:d7:f8:27:19:cd:b2:9d:6b:98:51:7a: 3c:37:e7:e2:1c:cd:80:77:2c:0e:32:f8:33:f7:9d: 6c:70:b1:d7:50:3c:6c:2a:f7:e1:9f:9e:34:4b:58: 82:de:31:59:38:70:d5:77:16:e3:a4:5d:c7:83:ee: 5c:70:e4:61:d2:10:26:6a:c3:f9:ef:7e:52:2c:58: 44:21:e4:3c:4b:db:b7:9a:c8:00:09:02:a2:1b:79: dc:09:1c:54:f5:6a:ec:28:aa:49:aa:98:51:ec:7e: 5d:08:16:52:6b:86:fa:dc:42:82:40:27:96:b8:6a: 3e:24:a9:07:99:e5:a3:eb:9f:53:ca:5d:90:a8:81: 50:71:96:0b:a9:f4:c5:da:90:21:2a:e7:0c:20:cf: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:02:9A:A8:17:5A:72:9F:83:DD:8A:1D:2E:5B:52:04:B7:8B:E8:24 X509v3 Authority Key Identifier: keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f4:f1:ff:b2:3a:8a:2b:dd:d8:0c:ad:9d:fe:3e:31:3b:c5: 6c:fa:65:31:a5:5b:7f:43:c6:11:c5:f6:8a:f1:6a:01:f2:ba: a2:ee:26:ed:ba:be:79:1d:7a:a3:18:0c:91:9b:87:45:31:d7: 7b:26:f6:aa:45:68:50:19:1b:42:43:4a:79:71:d9:87:9b:60: 7c:91:0f:a7:a4:8b:b2:76:a8:12:50:32:de:a8:70:cb:8b:1c: 9c:a6:fb:99:11:9c:b7:74:85:4d:74:c1:d9:5f:39:d5:2b:e4: 29:af:e1:d4:e8:3c:52:45:c9:2c:3c:d1:49:16:8f:5d:3d:d6: 77:83:bc:74:07:fd:31:29:7d:ad:29:c5:af:4a:f6:51:d5:17: 5a:bb:d1:91:83:41:bf:16:10:25:8e:b9:84:57:66:ab:71:79: 11:9c:b1:7f:5f:80:cb:18:06:92:a3:96:34:de:4d:88:f0:68: fe:96:e4:c2:11:61:42:16:ba:25:34:c4:cb:2a:84:48:0a:58: 20:5a:a9:df:e5:8f:0a:26:59:86:70:f7:d5:5a:14:d3:c7:b3: 4b:d0:ad:2a:0f:86:1e:ac:02:dd:92:9d:e6:7a:a4:30:03:e4: 19:38:4e:6e:17:32:88:83:99:33:e0:31:59:3c:d4:f0:3e:31: cb:26:74:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j4wCn6FHAhe4o9clyFu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0 MjE2YTcwHhcNMjUxMjIwMDcwMDQ0WhcNMjUxMjIxMDcwMDQ0WjAzMTEwLwYDVQQD Eyg3MDAyOWFhODE3NWE3MjlmODNkZDhhMWQyZTViNTIwNGI3OGJlODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl8PT1QtyzQ8j7oiE25VVRRzIwm7 pP3SxamJjTUgMDnMuzpoGpZCG95h/jakErvtm/VXLpSLvvhuCLl5eEXL20NAqJqU tG35budMXJwj86ohy6YPU+7IYxyV3KCu/iwayMGEo2YfSA2oYfwb1/gnGc2ynWuY UXo8N+fiHM2AdywOMvgz951scLHXUDxsKvfhn540S1iC3jFZOHDVdxbjpF3Hg+5c cORh0hAmasP5735SLFhEIeQ8S9u3msgACQKiG3ncCRxU9WrsKKpJqphR7H5dCBZS a4b63EKCQCeWuGo+JKkHmeWj659Tyl2QqIFQcZYLqfTF2pAhKucMIM9oLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHACmqgXWnKfg92KHS5bUgS3i+gkMB8GA1UdIwQY MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvTx/7I6 iivd2Aytnf4+MTvFbPplMaVbf0PGEcX2ivFqAfK6ou4m7bq+eR16oxgMkZuHRTHX eyb2qkVoUBkbQkNKeXHZh5tgfJEPp6SLsnaoElAy3qhwy4scnKb7mRGct3SFTXTB 2V851SvkKa/h1Og8UkXJLDzRSRaPXT3Wd4O8dAf9MSl9rSnFr0r2UdUXWrvRkYNB vxYQJY65hFdmq3F5EZyxf1+AyxgGkqOWNN5NiPBo/pbkwhFhQha6JTTEyyqESApY IFqp3+WPCiZZhnD31VoU08ezS9CtKg+GHqwC3ZKd5nqkMAPkGThObhcyiIOZM+Ax WTzU8D4xyyZ04A== -----END CERTIFICATE-----Generated at Sat Dec 20 14:50:41 2025 by rpki-client