This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft File: yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json) Hash identifier: 9zW61TiVKypkdA65KjLJb7bliXENzVmP1cxNHK39yi0= Subject key identifier: E7:74:E6:11:9F:E1:BA:EA:AC:C4:BC:D4:04:BD:F6:AD:F4:C7:05:C8 Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f Certificate serial: 019B3F483DA0D1535D02719F1836E5896556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft Manifest number: 09A5 Signing time: Sun 21 Dec 2025 05:00:57 +0000 Manifest this update: Sun 21 Dec 2025 05:00:57 +0000 Manifest next update: Mon 22 Dec 2025 05:00:57 +0000 Files and hashes: 1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=) 2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: UWmgFWzbD2VBl8xEubXq4qsjBzODZKIR/FExTJ6k7pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:3d:a0:d1:53:5d:02:71:9f:18:36:e5:89:65:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f Validity Not Before: Dec 21 05:00:57 2025 GMT Not After : Dec 22 05:00:57 2025 GMT Subject: CN=e774e6119fe1baeaacc4bcd404bdf6adf4c705c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:28:fb:ef:51:0f:2f:0b:fe:a1:80:d7:29: f4:19:7e:75:17:5d:f4:5a:b6:9b:a8:b5:1c:44:f2: 51:46:73:69:d3:12:7c:ad:f9:47:f5:89:9d:d1:34: 7d:13:83:28:56:57:75:06:5d:c8:3d:1c:8f:3c:03: 74:37:e8:81:14:d1:2d:4f:92:dd:dc:d4:92:71:74: a2:13:05:c7:83:23:d6:75:9a:da:31:56:b7:f1:57: 03:42:2e:ab:12:9c:4d:5f:5f:ed:99:f3:47:03:51: ed:9c:10:18:b5:df:7b:3d:1a:e1:63:d6:2e:42:31: d5:be:94:c5:31:c9:09:7a:d7:0c:67:93:dc:04:99: d2:de:4e:38:f9:44:5b:ea:3d:7d:cf:6a:45:00:34: 44:73:b3:66:2d:0d:36:94:0c:78:f9:9f:41:7c:3e: cc:87:fc:f0:f4:0d:b8:7d:b8:87:cc:2d:f1:07:15: 7e:c9:a0:83:61:cf:ae:f1:81:d0:02:ea:53:67:0f: ab:56:9c:9f:3e:cd:0e:28:60:92:e3:ff:44:c2:3b: 8a:4e:00:9c:c5:44:2d:6a:13:f8:13:50:06:8d:a4: a6:f0:ef:cd:d9:71:62:14:6c:cc:d2:cd:ac:6e:0f: 24:ed:9d:cb:7e:c8:8c:e4:04:07:96:e0:b5:73:67: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:74:E6:11:9F:E1:BA:EA:AC:C4:BC:D4:04:BD:F6:AD:F4:C7:05:C8 X509v3 Authority Key Identifier: keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ef:d0:75:57:85:b6:9f:08:0d:f1:9c:2e:8a:6f:83:73:4d: 4e:ae:24:17:8e:df:20:b4:2b:a5:b6:68:e6:ef:40:3e:e7:83: 51:49:2a:4c:2f:75:c0:6f:91:52:92:55:25:50:5d:39:9c:49: 76:d5:44:00:54:05:77:af:c4:0b:3f:ed:3b:f0:5f:45:53:e8: 73:48:2f:14:2c:90:49:9f:37:4e:23:c2:a0:3c:07:cb:32:f1: af:3a:13:a4:36:85:9c:47:c5:d8:6e:e9:0b:69:5e:ee:42:c1: 30:3c:56:09:e9:6f:89:3b:c2:11:c4:a1:40:8f:df:6a:19:78: a6:cb:48:c0:1e:bf:ae:20:7f:2a:d9:19:d0:cf:4c:cc:29:48: 70:3d:9e:f8:f5:c1:6a:98:0d:1e:38:3f:45:41:54:93:66:63: 0a:08:b3:2d:4f:5f:12:24:f3:36:f3:76:a0:7e:88:ff:18:d5: 4a:8f:6a:c8:58:e7:42:ba:4a:da:b6:7a:be:c1:9c:b6:07:ef: 51:41:3f:e8:90:04:65:24:b1:44:68:f5:11:a8:1a:3a:2a:c3: 62:fa:43:38:c2:40:ff:9b:33:2a:a9:4c:c6:c7:d1:a6:5f:aa: a5:76:f7:c8:6d:cc:e8:75:48:9f:2f:96:cd:aa:32:de:71:46: 13:79:13:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SD2g0VNdAnGfGDbliWVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjc2MjA3MGYxMjU0M2YxYjBhYzcxOTgyYWM3MTAyNTgx MGZmNWYwHhcNMjUxMjIxMDUwMDU3WhcNMjUxMjIyMDUwMDU3WjAzMTEwLwYDVQQD EyhlNzc0ZTYxMTlmZTFiYWVhYWNjNGJjZDQwNGJkZjZhZGY0YzcwNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Eo++9RDy8L/qGA1yn0GX51F130 WrabqLUcRPJRRnNp0xJ8rflH9Ymd0TR9E4MoVld1Bl3IPRyPPAN0N+iBFNEtT5Ld 3NSScXSiEwXHgyPWdZraMVa38VcDQi6rEpxNX1/tmfNHA1HtnBAYtd97PRrhY9Yu QjHVvpTFMckJetcMZ5PcBJnS3k44+URb6j19z2pFADREc7NmLQ02lAx4+Z9BfD7M h/zw9A24fbiHzC3xBxV+yaCDYc+u8YHQAupTZw+rVpyfPs0OKGCS4/9EwjuKTgCc xUQtahP4E1AGjaSm8O/N2XFiFGzM0s2sbg8k7Z3LfsiM5AQHluC1c2cdswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd05hGf4brqrMS81AS99q30xwXIMB8GA1UdIwQY MBaAFMsnYgcPElQ/GwrHGYKscQJYEP9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMt ZWY0Y2RhNWY1MmNmLzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMtZWY0Y2RhNWY1MmNm LzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce/QdVeF tp8IDfGcLopvg3NNTq4kF47fILQrpbZo5u9APueDUUkqTC91wG+RUpJVJVBdOZxJ dtVEAFQFd6/ECz/tO/BfRVPoc0gvFCyQSZ83TiPCoDwHyzLxrzoTpDaFnEfF2G7p C2le7kLBMDxWCelviTvCEcShQI/fahl4pstIwB6/riB/KtkZ0M9MzClIcD2e+PXB apgNHjg/RUFUk2ZjCgizLU9fEiTzNvN2oH6I/xjVSo9qyFjnQrpK2rZ6vsGctgfv UUE/6JAEZSSxRGj1EagaOirDYvpDOMJA/5szKqlMxsfRpl+qpXb3yG3M6HVIny+W zaoy3nFGE3kTKA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:11 2025 by rpki-client