This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json) Hash identifier: bXXc/cW/jMZyt44PHsR6t9Y7ULHbrvBND/JGrVCHG1M= Subject key identifier: 48:72:1C:74:01:BE:BA:74:08:5F:A9:B5:83:C1:57:48:E6:6B:F5:46 Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Certificate serial: 019B42EE1364F6BC6541ED62AFB03663B598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft Manifest number: 1790 Signing time: Sun 21 Dec 2025 22:00:57 +0000 Manifest this update: Sun 21 Dec 2025 22:00:57 +0000 Manifest next update: Mon 22 Dec 2025 22:00:57 +0000 Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: 9Mp2qZDSURYWvtqXaC9teJQldSDTnxXE4WoFaB4/4bo=) 2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=) 3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=) 4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:13:64:f6:bc:65:41:ed:62:af:b0:36:63:b5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Validity Not Before: Dec 21 22:00:57 2025 GMT Not After : Dec 22 22:00:57 2025 GMT Subject: CN=48721c7401beba74085fa9b583c15748e66bf546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:c3:2a:7f:d0:b9:b1:60:a5:be:b7:c9:02: 56:eb:7c:28:2a:6e:0e:b2:29:84:79:47:e6:f8:ea: c2:6b:66:d2:a8:49:f2:b4:f7:50:ab:10:d5:5b:dc: f2:80:3b:9b:51:5a:8a:79:36:7b:64:b8:2a:4b:4a: 78:95:b2:41:7c:43:01:8f:91:fa:ed:84:47:be:42: b9:5d:8a:e9:de:5c:28:5c:cb:1c:06:55:e0:03:8c: ff:08:80:fb:99:81:d8:17:92:ba:57:19:37:f6:b1: 8d:99:16:b6:d3:c6:28:d2:65:ea:ee:77:2c:fd:b2: af:8d:d4:10:68:12:02:e9:d3:08:02:bd:e7:3b:95: 5d:5a:11:d2:30:c8:9c:21:26:78:29:e2:f0:46:02: 50:e0:8c:d9:90:03:37:bf:f7:b1:f2:1c:9a:eb:8b: a4:59:75:cb:6c:da:26:eb:5d:f8:b8:b0:b7:81:cf: 09:2c:22:16:7a:ea:61:da:1b:a2:fb:11:a1:41:a8: bc:4e:b1:66:3e:7a:ab:cc:c2:f5:2e:e8:71:af:f1: 36:52:bc:81:72:e2:2a:66:11:d8:c5:10:68:2c:51: b2:a4:87:6c:db:a0:bb:2d:3e:46:1c:a7:15:ad:e2: ff:8e:fc:f9:90:ba:14:43:c6:c3:ea:2e:a0:cf:ef: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:72:1C:74:01:BE:BA:74:08:5F:A9:B5:83:C1:57:48:E6:6B:F5:46 X509v3 Authority Key Identifier: keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:e5:7a:72:e4:55:d4:95:91:0c:f4:61:be:91:a8:45:46:b4: 4e:97:0e:b7:47:73:66:14:9e:73:11:71:b2:ca:cf:18:dc:5e: 41:17:b1:41:58:07:db:65:20:74:8f:3f:1e:21:78:37:14:52: 33:ae:a7:21:92:e0:36:44:91:7e:2e:40:54:61:71:62:ed:b6: 01:5c:7d:d9:25:36:e6:50:bd:d5:da:04:1c:73:2f:d9:5e:01: 15:fa:58:8e:9e:99:84:64:4b:22:15:28:33:73:aa:ca:c7:f3: 2b:2e:69:db:cf:e4:3b:a5:f8:1e:15:b6:6c:4b:0e:88:b7:f0: ed:54:58:e1:54:ca:7b:0a:2c:0e:9e:e0:19:0b:b5:1a:ea:fb: ba:6d:6a:b8:8f:74:49:05:9c:54:aa:c9:17:99:a3:3c:f3:64: 9e:3c:57:02:9b:b9:f2:ae:f7:3a:83:5d:86:1b:7c:1f:01:50: 05:50:a3:d4:0d:d0:4f:10:8e:4a:0c:fe:4b:3a:d2:d0:44:d0: 21:ad:61:62:31:8c:46:12:69:d1:88:f6:1a:bd:03:43:79:1d: f2:ff:4a:11:04:ba:c5:97:46:bc:62:7d:2d:7a:3a:32:ed:33: 79:08:21:de:19:3f:65:7a:5d:7b:07:ea:7f:4e:ff:7f:0d:a5: 79:38:2f:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7hNk9rxlQe1ir7A2Y7WYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1 MDkyMGUwHhcNMjUxMjIxMjIwMDU3WhcNMjUxMjIyMjIwMDU3WjAzMTEwLwYDVQQD Eyg0ODcyMWM3NDAxYmViYTc0MDg1ZmE5YjU4M2MxNTc0OGU2NmJmNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMvDKn/QubFgpb63yQJW63woKm4O simEeUfm+OrCa2bSqEnytPdQqxDVW9zygDubUVqKeTZ7ZLgqS0p4lbJBfEMBj5H6 7YRHvkK5XYrp3lwoXMscBlXgA4z/CID7mYHYF5K6Vxk39rGNmRa208Yo0mXq7ncs /bKvjdQQaBIC6dMIAr3nO5VdWhHSMMicISZ4KeLwRgJQ4IzZkAM3v/ex8hya64uk WXXLbNom6134uLC3gc8JLCIWeuph2hui+xGhQai8TrFmPnqrzML1Luhxr/E2UryB cuIqZhHYxRBoLFGypIds26C7LT5GHKcVreL/jvz5kLoUQ8bD6i6gz+/JRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhyHHQBvrp0CF+ptYPBV0jma/VGMB8GA1UdIwQY MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt Mzg4YjgxYzBjOTBjLzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2+V6cuRV 1JWRDPRhvpGoRUa0TpcOt0dzZhSecxFxssrPGNxeQRexQVgH22UgdI8/HiF4NxRS M66nIZLgNkSRfi5AVGFxYu22AVx92SU25lC91doEHHMv2V4BFfpYjp6ZhGRLIhUo M3OqysfzKy5p28/kO6X4HhW2bEsOiLfw7VRY4VTKewosDp7gGQu1Gur7um1quI90 SQWcVKrJF5mjPPNknjxXApu58q73OoNdhht8HwFQBVCj1A3QTxCOSgz+SzrS0ETQ Ia1hYjGMRhJp0Yj2Gr0DQ3kd8v9KEQS6xZdGvGJ9LXo6Mu0zeQgh3hk/ZXpdewfq f07/fw2leTgvqQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:02:10 2025 by rpki-client