This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json) Hash identifier: p6g0zcIZY4uXqScRTfXvEEvLyYiuGhMkKkYpwMiUJ7w= Subject key identifier: 17:6F:83:2F:F1:A6:31:92:0C:32:8E:A5:49:0D:0E:F3:D4:6F:3D:54 Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Certificate serial: 019B3D22F1A76628AC769A373C498DD26F3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 19:00:58 +0000 Manifest this update: Sat 20 Dec 2025 19:00:58 +0000 Manifest next update: Sun 21 Dec 2025 19:00:58 +0000 Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: d+OlVTdRWRyUtjxdK39ioFhPaxWd8rJgic2HlHrMSnI=) 2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=) 3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=) 4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:f1:a7:66:28:ac:76:9a:37:3c:49:8d:d2:6f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Validity Not Before: Dec 20 19:00:58 2025 GMT Not After : Dec 21 19:00:58 2025 GMT Subject: CN=176f832ff1a631920c328ea5490d0ef3d46f3d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:ea:6c:51:fe:00:58:ec:9f:fe:fb:41:49: 51:fa:4f:c1:63:14:39:75:57:1f:88:2a:7e:b8:48: a2:9c:7c:54:8d:79:9f:0e:98:38:60:40:f4:6f:75: d2:c8:17:2c:08:1e:a2:59:ea:a2:6a:cd:08:fc:55: a2:17:a7:c8:98:52:b6:67:a4:d9:99:e2:1a:17:2a: db:a2:e9:c5:18:a0:31:4d:30:71:47:15:8c:79:fb: 72:e1:3b:4d:16:20:48:6b:d5:88:0d:13:12:96:ff: 49:b8:49:be:f9:43:1d:c2:4a:27:d1:54:72:ec:db: 2b:5e:d8:7f:2a:7c:0d:8e:77:5f:fb:4d:35:7c:79: ba:84:77:0c:7e:6a:20:6b:b4:48:66:25:86:0d:68: 2b:3b:3b:68:64:9a:55:f9:e3:16:ac:2b:cc:98:71: 69:3a:49:46:9d:39:b2:e4:fc:c3:7e:15:22:38:8c: 6d:b1:85:22:94:16:ca:6a:ad:5f:02:17:f1:d2:10: 5d:d7:31:b9:dd:6b:6c:b5:92:ae:4a:fe:3b:37:cd: c1:80:af:1b:a2:7f:0f:af:54:7d:02:22:72:3a:79: a1:e4:8d:cc:33:1b:92:0a:d9:35:03:bc:f5:67:ab: 40:1d:0b:0a:03:fd:05:e7:26:74:d4:1d:3a:1b:b8: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6F:83:2F:F1:A6:31:92:0C:32:8E:A5:49:0D:0E:F3:D4:6F:3D:54 X509v3 Authority Key Identifier: keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6a:5a:29:eb:21:6c:a5:8f:9e:54:c7:89:1f:bd:8d:14:df: 51:5e:95:f9:48:5d:91:e3:d9:ad:78:a5:da:c4:52:be:93:77: 6d:aa:83:c3:66:86:64:d2:8c:7c:ba:a9:01:f8:88:69:62:d5: ee:45:c9:33:84:13:1f:a9:ea:0e:6c:d9:f1:23:73:7e:12:67: ee:f2:19:64:14:49:99:0d:0f:6e:dd:af:40:e6:8b:0a:ae:3d: 11:5b:5e:b3:ae:cb:0b:eb:2a:e6:b2:32:05:5d:80:43:f4:f1: a4:a0:a4:f9:e0:c9:3f:57:5b:40:42:f4:4e:c2:11:2f:d9:0b: b4:35:04:6e:4e:cb:b6:87:7c:3f:b5:83:2a:db:8b:99:cb:98: 54:48:39:8a:d2:b3:ac:ed:3d:01:dc:9b:e4:ef:97:55:9f:09: b4:a7:49:2a:4e:62:9f:d1:03:05:c3:54:59:8c:a7:87:be:fd: 12:b8:c6:0b:dc:bc:c2:b4:dd:4b:cf:e5:ea:e9:6d:f0:87:85: 17:0e:cc:b6:84:2e:f9:ef:7a:31:25:84:ab:06:7f:6b:e9:b2: 1f:88:b7:07:f5:07:16:63:55:fe:55:90:98:9f:2a:40:fb:5a: a6:fa:a3:2c:74:33:88:36:e1:0f:46:56:d5:81:01:e8:1f:9a: 01:86:b4:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IvGnZiisdpo3PEmN0m8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1 MDkyMGUwHhcNMjUxMjIwMTkwMDU4WhcNMjUxMjIxMTkwMDU4WjAzMTEwLwYDVQQD EygxNzZmODMyZmYxYTYzMTkyMGMzMjhlYTU0OTBkMGVmM2Q0NmYzZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TbqbFH+AFjsn/77QUlR+k/BYxQ5 dVcfiCp+uEiinHxUjXmfDpg4YED0b3XSyBcsCB6iWeqias0I/FWiF6fImFK2Z6TZ meIaFyrbounFGKAxTTBxRxWMefty4TtNFiBIa9WIDRMSlv9JuEm++UMdwkon0VRy 7NsrXth/KnwNjndf+001fHm6hHcMfmoga7RIZiWGDWgrOztoZJpV+eMWrCvMmHFp OklGnTmy5PzDfhUiOIxtsYUilBbKaq1fAhfx0hBd1zG53WtstZKuSv47N83BgK8b on8Pr1R9AiJyOnmh5I3MMxuSCtk1A7z1Z6tAHQsKA/0F5yZ01B06G7hxBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdvgy/xpjGSDDKOpUkNDvPUbz1UMB8GA1UdIwQY MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt Mzg4YjgxYzBjOTBjLzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWpaKesh bKWPnlTHiR+9jRTfUV6V+UhdkePZrXil2sRSvpN3baqDw2aGZNKMfLqpAfiIaWLV 7kXJM4QTH6nqDmzZ8SNzfhJn7vIZZBRJmQ0Pbt2vQOaLCq49EVtes67LC+sq5rIy BV2AQ/TxpKCk+eDJP1dbQEL0TsIRL9kLtDUEbk7Ltod8P7WDKtuLmcuYVEg5itKz rO09Adyb5O+XVZ8JtKdJKk5in9EDBcNUWYynh779ErjGC9y8wrTdS8/l6ult8IeF Fw7MtoQu+e96MSWEqwZ/a+myH4i3B/UHFmNV/lWQmJ8qQPtapvqjLHQziDbhD0ZW 1YEB6B+aAYa00w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:54 2025 by rpki-client