This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft File: yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json) Hash identifier: R29PH94s+MrQRaAau/6LrouOBr6gzempoMJ15Gvb6hw= Subject key identifier: 9F:5F:B4:29:F8:59:2F:72:99:65:E4:AE:87:32:93:30:FC:B3:3B:E8 Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A Certificate issuer: /CN=c83c4c9d2fce61665165c05a101e815047b64f6a Certificate serial: 019B3D59BFB365AE0C9937C08943FC85D87D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft Manifest number: 071B Signing time: Sat 20 Dec 2025 20:00:50 +0000 Manifest this update: Sat 20 Dec 2025 20:00:50 +0000 Manifest next update: Sun 21 Dec 2025 20:00:50 +0000 Files and hashes: 1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=) 2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: jLB3+OCl7ofdiWWGci7oedc8nVdKMImkybAi7K4KpCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:bf:b3:65:ae:0c:99:37:c0:89:43:fc:85:d8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a Validity Not Before: Dec 20 20:00:50 2025 GMT Not After : Dec 21 20:00:50 2025 GMT Subject: CN=9f5fb429f8592f729965e4ae87329330fcb33be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:7d:e8:6d:7b:19:f5:89:96:3b:3f:fe:99: 71:7c:de:bf:9f:2f:a3:36:d9:11:ec:d2:7c:05:51: 0e:42:4c:c2:c0:d0:d6:1b:30:e3:2b:5e:6a:b1:2c: fa:8c:39:2c:54:0c:65:c0:65:0e:e3:ed:91:66:8c: 66:67:4c:60:fa:03:fe:07:96:8a:62:f1:08:fa:1a: e6:d0:08:0a:88:e7:e5:f2:9b:e6:87:17:5f:84:d7: ce:da:47:53:c8:a3:98:7c:6a:27:78:63:a9:b7:60: 7f:66:0a:0e:cf:0f:07:db:ed:1b:93:19:ee:2d:50: 5c:0a:1d:07:c6:a4:54:04:79:87:d7:bf:40:c5:d0: 60:51:a1:f1:cf:62:9a:c0:ed:d6:0c:22:72:bb:67: 31:de:70:b3:46:4c:b4:ad:53:92:d0:ca:72:f3:79: 50:21:33:a6:20:f0:a2:f3:a9:36:a8:f8:7b:ca:62: 6b:7c:27:af:93:c5:41:87:c5:a1:2a:86:37:ca:6a: 66:0b:50:de:d0:31:b4:e4:71:47:c6:c2:1c:19:50: 55:68:8e:5d:6a:e5:03:24:96:26:47:27:6d:2a:61: 48:86:4c:c9:7e:64:71:89:1f:96:08:71:f4:ed:65: 68:23:b1:39:35:b4:c6:f7:a5:89:25:97:8e:b3:4f: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5F:B4:29:F8:59:2F:72:99:65:E4:AE:87:32:93:30:FC:B3:3B:E8 X509v3 Authority Key Identifier: keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6b:24:85:83:6a:8f:29:5f:4a:21:b9:d4:c9:2c:56:1d:cb: 53:c7:19:2e:e0:e6:1f:40:01:30:9f:8a:d8:ba:bc:77:71:f9: 7b:ac:97:3f:26:4b:d4:3b:94:9c:a4:85:01:08:fe:db:03:c5: 53:77:c5:12:0b:4b:54:ef:b3:4f:1b:e5:4b:2e:4b:53:6c:b7: 6c:ad:9f:11:a0:0f:9d:7a:68:2e:6e:89:5c:d5:17:99:df:c3: fc:14:54:0b:09:f9:21:e1:9a:f5:a8:38:c3:44:f0:0b:35:b1: e7:dc:dc:59:e8:0e:b9:d0:59:2e:09:09:1c:77:2f:33:48:7a: 03:6f:71:a0:e3:24:8f:b3:c8:70:e6:e5:43:bb:b4:8f:e6:bb: 89:a1:e5:b3:8a:a6:c0:22:0a:62:4e:f3:1c:e3:ef:9d:53:0e: 38:6e:58:b4:39:0d:8f:b4:b2:a9:2e:d9:bb:28:62:5c:f9:f0: 81:52:1b:9e:18:18:da:79:73:a0:c0:a2:ba:ae:13:33:75:c3: af:6b:4e:2d:46:b3:09:3a:36:bb:85:84:98:ba:f1:35:e1:dc: 0c:7b:37:42:03:ac:a6:cc:f0:bb:b2:b9:25:39:45:aa:24:dc: 90:a3:72:da:09:8d:8a:d4:67:ce:0f:f8:08:14:91:a8:5f:d7: 3f:44:ea:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wb+zZa4MmTfAiUP8hdh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi NjRmNmEwHhcNMjUxMjIwMjAwMDUwWhcNMjUxMjIxMjAwMDUwWjAzMTEwLwYDVQQD Eyg5ZjVmYjQyOWY4NTkyZjcyOTk2NWU0YWU4NzMyOTMzMGZjYjMzYmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupB96G17GfWJljs//plxfN6/ny+j NtkR7NJ8BVEOQkzCwNDWGzDjK15qsSz6jDksVAxlwGUO4+2RZoxmZ0xg+gP+B5aK YvEI+hrm0AgKiOfl8pvmhxdfhNfO2kdTyKOYfGoneGOpt2B/ZgoOzw8H2+0bkxnu LVBcCh0HxqRUBHmH179AxdBgUaHxz2KawO3WDCJyu2cx3nCzRky0rVOS0Mpy83lQ ITOmIPCi86k2qPh7ymJrfCevk8VBh8WhKoY3ympmC1De0DG05HFHxsIcGVBVaI5d auUDJJYmRydtKmFIhkzJfmRxiR+WCHH07WVoI7E5NbTG96WJJZeOs09MWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9ftCn4WS9ymWXkrocykzD8szvoMB8GA1UdIwQY MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2 LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGskhYNq jylfSiG51MksVh3LU8cZLuDmH0ABMJ+K2Lq8d3H5e6yXPyZL1DuUnKSFAQj+2wPF U3fFEgtLVO+zTxvlSy5LU2y3bK2fEaAPnXpoLm6JXNUXmd/D/BRUCwn5IeGa9ag4 w0TwCzWx59zcWegOudBZLgkJHHcvM0h6A29xoOMkj7PIcOblQ7u0j+a7iaHls4qm wCIKYk7zHOPvnVMOOG5YtDkNj7SyqS7ZuyhiXPnwgVIbnhgY2nlzoMCiuq4TM3XD r2tOLUazCTo2u4WEmLrxNeHcDHs3QgOspszwu7K5JTlFqiTckKNy2gmNitRnzg/4 CBSRqF/XP0TqrA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:52 2025 by rpki-client