This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json) Hash identifier: lRv+ohVhGhmkUCXCyJx55wiaoIOgQdRFdwdbZJgplFs= Subject key identifier: B4:38:D7:88:EF:BD:BE:53:93:E1:F7:FA:BB:DA:FE:80:C0:DA:91:1F Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e Certificate serial: 019B66FA5D700F8DF4E8E57EE53CF3741969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft Manifest number: 0C29 Signing time: Sun 28 Dec 2025 22:00:42 +0000 Manifest this update: Sun 28 Dec 2025 22:00:42 +0000 Manifest next update: Mon 29 Dec 2025 22:00:42 +0000 Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=) 2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: J27Oqdd/K0COhlRyHEH88reHOKk+Af4gWkjAhoZd+rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:5d:70:0f:8d:f4:e8:e5:7e:e5:3c:f3:74:19:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e Validity Not Before: Dec 28 22:00:42 2025 GMT Not After : Dec 29 22:00:42 2025 GMT Subject: CN=b438d788efbdbe5393e1f7fabbdafe80c0da911f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cc:59:cd:b9:2d:38:2d:d4:73:0a:3b:d9:7e: 4f:fe:ff:27:d6:1b:80:a8:01:60:08:c4:90:5a:57: ec:2b:b0:59:de:18:e8:f3:93:06:26:c4:87:f0:9d: cd:89:98:2b:37:ad:52:ba:6e:c2:19:f7:fa:2a:72: 7d:54:19:10:e5:ab:fd:26:fc:81:73:09:cc:6f:37: 4b:4b:35:c1:32:29:2d:6c:08:09:da:64:20:f9:03: 5a:cd:6f:57:c1:50:8d:7c:d4:b7:87:a4:6b:69:3d: 99:fa:e8:12:c0:50:e2:4c:75:d0:fa:5c:a1:05:2b: 71:f1:e1:76:e7:73:ef:6a:51:ff:03:cf:4d:1b:94: fe:22:13:c3:db:75:d2:6d:49:8f:ab:49:08:47:3e: 44:3c:45:15:5d:6d:79:b5:5f:79:5e:09:c5:ef:98: 01:63:12:92:74:c4:fc:dd:c3:bb:86:f9:6c:2b:0c: c6:f7:f9:df:53:60:90:b4:5c:d9:f9:09:98:a1:f1: e1:f2:c5:b6:4e:62:06:c0:5b:01:6d:b7:fe:33:5d: 7d:7a:27:07:5c:16:22:1e:90:45:c2:00:2a:63:22: c1:df:85:35:76:0c:1a:9e:af:b0:50:28:69:1e:b5: 58:2b:a6:d4:01:4d:06:92:f0:39:d9:24:ab:2b:ae: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:D7:88:EF:BD:BE:53:93:E1:F7:FA:BB:DA:FE:80:C0:DA:91:1F X509v3 Authority Key Identifier: keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2e:a6:2b:40:7a:dd:5f:6d:78:35:c8:f7:24:9f:f7:b2:26: 01:4d:de:a7:bb:18:45:2b:97:3c:60:88:e7:b3:48:48:86:b1: be:f6:1e:62:23:5a:e4:89:9d:08:50:7c:ec:01:f2:73:05:b5: e4:bb:c3:bd:e6:c0:5e:a5:a4:70:fa:c1:4f:6e:79:1a:ce:41: 25:c3:ed:e3:c6:6b:05:52:03:4f:5e:b4:38:a4:89:11:9c:92: 62:d5:3f:8a:41:e7:1b:d6:5a:d0:13:4d:7a:9a:b4:cf:87:6f: 4f:23:d3:7a:c6:5c:c5:40:4a:3b:3d:76:32:7a:98:2e:40:1a: f2:99:4c:ed:ec:9e:a7:97:17:dc:b5:e8:57:09:20:55:e5:b7: 36:33:10:5b:92:8c:e8:b1:0a:05:de:20:68:7e:b1:61:2a:a4: 52:2c:1f:b5:33:39:1e:b1:2b:cc:ab:04:18:f2:43:09:ed:c9: 04:34:d7:6c:5d:5f:bc:0a:90:e6:86:87:46:99:e2:3e:e2:a0: a2:3f:7c:19:c5:8c:12:d4:fb:0b:9d:a1:3f:98:a7:af:db:e1: 58:2e:62:bc:20:76:90:24:76:0c:e5:fc:6e:6b:64:23:35:e5: 5d:8c:34:4f:bd:12:3a:26:4a:21:93:c8:6f:ce:73:ce:ce:ca: 68:1a:01:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+l1wD4306OV+5TzzdBlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDM4YjM3OTgwYTBkZmFlOWNmOWEyYzViNTZhZGU5N2Zh ZjUwMmUwHhcNMjUxMjI4MjIwMDQyWhcNMjUxMjI5MjIwMDQyWjAzMTEwLwYDVQQD EyhiNDM4ZDc4OGVmYmRiZTUzOTNlMWY3ZmFiYmRhZmU4MGMwZGE5MTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cxZzbktOC3Ucwo72X5P/v8n1huA qAFgCMSQWlfsK7BZ3hjo85MGJsSH8J3NiZgrN61Sum7CGff6KnJ9VBkQ5av9JvyB cwnMbzdLSzXBMiktbAgJ2mQg+QNazW9XwVCNfNS3h6RraT2Z+ugSwFDiTHXQ+lyh BStx8eF253PvalH/A89NG5T+IhPD23XSbUmPq0kIRz5EPEUVXW15tV95XgnF75gB YxKSdMT83cO7hvlsKwzG9/nfU2CQtFzZ+QmYofHh8sW2TmIGwFsBbbf+M119eicH XBYiHpBFwgAqYyLB34U1dgwanq+wUChpHrVYK6bUAU0GkvA52SSrK66GoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ414jvvb5Tk+H3+rva/oDA2pEfMB8GA1UdIwQY MBaAFGHTizeYCg366c+aLFtWrel/r1AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OTc0NmMtNTAxYS00M2U4LWI4ODct N2Q0NDhiMzk2Nzc2LzEvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OTc0NmMtNTAxYS00M2U4LWI4ODctN2Q0NDhiMzk2Nzc2 LzEvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi6mK0B6 3V9teDXI9ySf97ImAU3ep7sYRSuXPGCI57NISIaxvvYeYiNa5ImdCFB87AHycwW1 5LvDvebAXqWkcPrBT255Gs5BJcPt48ZrBVIDT160OKSJEZySYtU/ikHnG9Za0BNN epq0z4dvTyPTesZcxUBKOz12MnqYLkAa8plM7eyep5cX3LXoVwkgVeW3NjMQW5KM 6LEKBd4gaH6xYSqkUiwftTM5HrErzKsEGPJDCe3JBDTXbF1fvAqQ5oaHRpniPuKg oj98GcWMEtT7C52hP5inr9vhWC5ivCB2kCR2DOX8bmtkIzXlXYw0T70SOiZKIZPI b85zzs7KaBoBMQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:58:34 2025 by rpki-client