This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json) Hash identifier: HzsvYfTvhW6thwLnMTUE2+LnFTcDlNBNHzzIIrsAUzU= Subject key identifier: 0F:15:90:CB:45:C0:A1:46:3D:77:91:41:24:C7:F1:F3:92:88:C6:5C Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10 Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510 Certificate serial: 019B427FDBFA4CDB63F859365CCAB89AA7C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 20:00:34 +0000 Manifest this update: Sun 21 Dec 2025 20:00:34 +0000 Manifest next update: Mon 22 Dec 2025 20:00:34 +0000 Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: ICkx9Gfb+8Jcwx+jfodD54LC7hpx95bX7PIYZbg6MWo=) 2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:db:fa:4c:db:63:f8:59:36:5c:ca:b8:9a:a7:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510 Validity Not Before: Dec 21 20:00:34 2025 GMT Not After : Dec 22 20:00:34 2025 GMT Subject: CN=0f1590cb45c0a1463d77914124c7f1f39288c65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:10:ad:c5:0c:58:74:0c:c3:1b:3f:c6:37: d6:f1:08:a0:1d:8a:de:75:e8:59:84:ce:a0:43:c0: b0:28:d4:d2:b8:bb:a7:1c:01:7e:ad:b4:4f:42:46: 4d:cf:d8:50:ea:9b:96:0a:85:6c:1c:ec:ea:ec:f5: 67:7b:89:41:9c:1b:47:35:e9:17:6a:b7:28:06:d3: 9c:c3:f1:ac:36:f0:50:1a:47:51:6a:bd:64:64:a7: 1d:67:52:13:2b:4e:22:40:61:3e:0a:81:6e:bd:e7: 31:99:ae:a1:ba:40:f9:24:76:8a:c1:b9:fa:52:24: ee:f7:73:ea:43:91:a1:3f:5d:65:74:00:46:d0:c1: 0e:ca:0a:bb:c4:f1:b3:50:93:dd:80:ae:6c:b3:b1: f7:f3:b8:68:b0:ab:ac:c1:81:64:b1:df:31:dc:c7: cd:a5:7b:34:b4:5c:ac:c5:4b:09:4e:21:c3:6a:ce: bc:a7:d9:17:89:c2:df:5e:1b:eb:35:b0:db:ba:c6: 1d:de:b8:8b:7f:77:c3:99:54:97:99:07:a6:70:08: 24:46:63:28:48:e4:34:fd:a3:e8:26:c8:30:89:90: 78:91:e4:53:83:ab:34:e0:4d:98:d9:e3:6b:df:07: 9e:e6:c5:d5:73:51:e4:92:3a:8c:f2:e1:0b:be:a6: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:15:90:CB:45:C0:A1:46:3D:77:91:41:24:C7:F1:F3:92:88:C6:5C X509v3 Authority Key Identifier: keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:36:66:0f:ae:29:63:5f:5a:43:f2:ce:da:d8:86:c9:af: b6:9f:1f:0a:79:fb:a1:08:95:60:91:d6:dd:f9:73:ea:4c:63: 11:08:d3:9b:13:67:59:88:fb:6f:c7:d3:8b:7c:ae:1c:bf:fb: 3e:96:83:c0:87:64:f4:89:23:cf:88:14:71:7d:08:a0:6f:72: f5:47:7b:3f:53:83:fa:cc:87:a1:1d:62:64:f1:80:8f:e8:d3: 63:13:17:12:c9:4b:a1:6b:6e:06:c0:c2:43:cb:65:41:1b:ec: 32:a0:9f:f6:68:a9:20:2c:eb:10:3e:6c:e6:ae:a7:7a:df:4c: 66:18:ba:3d:6d:e3:97:e8:61:49:69:54:c7:9c:03:fa:1d:44: f8:93:f5:4b:3b:c8:48:9d:82:1e:91:be:e7:4c:13:e9:4a:52: 72:cb:77:df:fe:00:61:d2:ff:75:33:ef:7b:2d:73:39:b5:86: 7c:97:3e:46:a4:82:f3:40:2a:60:bd:83:a8:a1:bc:9f:7f:69: bf:8a:cd:3f:12:79:e7:80:bf:c1:64:96:61:df:c5:39:b3:f1: 91:03:6b:71:7d:92:51:ae:d8:85:27:48:9e:93:f3:84:62:3f: b6:29:06:22:88:37:6f:72:77:88:a4:c3:49:e7:de:7b:f5:f9: c0:fd:ec:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf9v6TNtj+Fk2XMq4mqfCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh YTc1MTAwHhcNMjUxMjIxMjAwMDM0WhcNMjUxMjIyMjAwMDM0WjAzMTEwLwYDVQQD EygwZjE1OTBjYjQ1YzBhMTQ2M2Q3NzkxNDEyNGM3ZjFmMzkyODhjNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9oQrcUMWHQMwxs/xjfW8QigHYre dehZhM6gQ8CwKNTSuLunHAF+rbRPQkZNz9hQ6puWCoVsHOzq7PVne4lBnBtHNekX arcoBtOcw/GsNvBQGkdRar1kZKcdZ1ITK04iQGE+CoFuvecxma6hukD5JHaKwbn6 UiTu93PqQ5GhP11ldABG0MEOygq7xPGzUJPdgK5ss7H387hosKuswYFksd8x3MfN pXs0tFysxUsJTiHDas68p9kXicLfXhvrNbDbusYd3riLf3fDmVSXmQemcAgkRmMo SOQ0/aPoJsgwiZB4keRTg6s04E2Y2eNr3wee5sXVc1HkkjqM8uELvqaJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8VkMtFwKFGPXeRQSTH8fOSiMZcMB8GA1UdIwQY MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4 LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe02Zg+u KWNfWkPyztrYhsmvtp8fCnn7oQiVYJHW3flz6kxjEQjTmxNnWYj7b8fTi3yuHL/7 PpaDwIdk9Ikjz4gUcX0IoG9y9Ud7P1OD+syHoR1iZPGAj+jTYxMXEslLoWtuBsDC Q8tlQRvsMqCf9mipICzrED5s5q6net9MZhi6PW3jl+hhSWlUx5wD+h1E+JP1SzvI SJ2CHpG+50wT6UpScst33/4AYdL/dTPvey1zObWGfJc+RqSC80AqYL2DqKG8n39p v4rNPxJ554C/wWSWYd/FObPxkQNrcX2SUa7YhSdInpPzhGI/tikGIog3b3J3iKTD Sefee/X5wP3svg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:05:57 2025 by rpki-client