This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json) Hash identifier: HM7wZwOY1d3zMxSxSrzEdO76vRFJEHPYrutWz3txWcY= Subject key identifier: 31:51:57:2D:B1:8C:CC:E9:CF:7A:33:AA:13:27:5F:8D:FF:8F:9F:00 Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7 Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7 Certificate serial: 019B54BD7725E985B0BFD1444C3BA4520DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft Manifest number: 06D4 Signing time: Thu 25 Dec 2025 09:01:01 +0000 Manifest this update: Thu 25 Dec 2025 09:01:01 +0000 Manifest next update: Fri 26 Dec 2025 09:01:01 +0000 Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=) 2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=) 3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: wjtJAneJkBpRhAf5ABN/FbZDGBP+fGwX70t5xFA0X50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:77:25:e9:85:b0:bf:d1:44:4c:3b:a4:52:0d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7 Validity Not Before: Dec 25 09:01:01 2025 GMT Not After : Dec 26 09:01:01 2025 GMT Subject: CN=3151572db18ccce9cf7a33aa13275f8dff8f9f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:87:20:a2:65:f4:2c:ba:04:6c:1a:33:1d: ca:53:86:9a:34:81:de:d4:bd:78:db:82:0b:db:dd: e1:6b:8e:e4:db:17:eb:51:36:05:2f:b7:d8:8c:49: 3d:b4:2b:47:2f:e1:ad:9a:23:1a:64:30:2b:ee:f8: 27:02:0c:29:a8:04:df:96:f5:1b:bb:6b:1f:52:e0: f0:1d:a4:da:8d:0f:03:e5:dd:ea:81:46:23:98:47: 0d:37:02:5e:53:89:bb:a9:34:78:eb:b2:ae:5c:8a: 7b:db:ff:8f:c7:bf:6b:f8:f7:6a:22:45:8b:26:7a: 81:14:3c:e2:f7:d9:bb:cd:cc:c8:0e:ec:df:44:64: b3:98:aa:5e:e3:6c:1d:65:2b:31:09:6d:de:f7:f3: 5b:02:6e:1b:09:4c:61:dc:28:08:0f:6e:d1:0c:63: 17:e6:44:46:f7:6a:a9:bf:db:c9:da:cd:29:0e:d0: c3:c5:a4:32:5f:45:c1:a2:42:05:98:32:6b:e9:80: f5:be:71:a8:76:a0:cb:4a:93:a7:a9:c4:ad:26:17: 07:34:43:f4:f1:90:22:9b:fe:88:92:04:56:6b:e7: 71:37:91:d9:62:e4:37:93:b7:1f:18:26:68:9e:18: 49:a6:c3:98:fb:50:9e:53:f2:dd:76:cf:56:83:b0: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:51:57:2D:B1:8C:CC:E9:CF:7A:33:AA:13:27:5F:8D:FF:8F:9F:00 X509v3 Authority Key Identifier: keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4d:b5:59:fb:ae:e9:c4:4a:7a:29:e4:f2:0c:0a:87:1c:9a: ef:8d:fd:a5:9d:b5:7c:8a:0b:a7:c0:18:fa:b4:2b:c8:2d:bb: bb:4e:89:ea:45:ef:bf:ae:0b:6d:22:7f:bc:95:83:33:47:ee: 2c:e1:c2:3c:2e:11:04:13:66:57:62:b4:96:1f:33:ff:18:b8: 48:a0:88:5e:32:8e:41:9b:6e:65:65:12:05:fc:b6:a3:b2:c2: 52:57:cd:3f:fe:8d:f2:4e:d2:37:20:82:30:8d:2e:ef:1d:c9: 6c:56:67:e0:41:d5:46:69:f2:5e:67:89:15:9c:dd:57:7a:05: e7:3c:1f:6d:12:42:40:d9:f7:cd:f2:b2:71:36:3d:5c:a2:3c: 3e:5e:8b:a8:3f:4c:fa:a2:f6:7a:c6:77:23:13:c5:ef:a0:87: ac:de:23:49:7c:4c:59:57:7b:0a:66:53:3e:e7:14:a3:fe:94: 05:9f:26:5e:e4:a1:02:1a:c8:dc:e4:7f:5c:55:2d:a3:97:0f: 13:cc:ba:7f:5a:4b:c9:ca:9a:86:0d:7a:d3:f2:66:07:22:37: dc:b7:00:8e:0c:18:7a:4c:fc:0e:f8:1e:94:cf:91:e0:c7:12: 3d:99:b5:fd:d0:01:ca:ec:17:6c:94:e6:8f:e3:ad:48:f4:73: 9e:00:0e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvXcl6YWwv9FETDukUg2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4 NWVlYTcwHhcNMjUxMjI1MDkwMTAxWhcNMjUxMjI2MDkwMTAxWjAzMTEwLwYDVQQD EygzMTUxNTcyZGIxOGNjY2U5Y2Y3YTMzYWExMzI3NWY4ZGZmOGY5ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6eHIKJl9Cy6BGwaMx3KU4aaNIHe 1L1424IL293ha47k2xfrUTYFL7fYjEk9tCtHL+GtmiMaZDAr7vgnAgwpqATflvUb u2sfUuDwHaTajQ8D5d3qgUYjmEcNNwJeU4m7qTR467KuXIp72/+Px79r+PdqIkWL JnqBFDzi99m7zczIDuzfRGSzmKpe42wdZSsxCW3e9/NbAm4bCUxh3CgID27RDGMX 5kRG92qpv9vJ2s0pDtDDxaQyX0XBokIFmDJr6YD1vnGodqDLSpOnqcStJhcHNEP0 8ZAim/6IkgRWa+dxN5HZYuQ3k7cfGCZonhhJpsOY+1CeU/Ldds9Wg7Ae2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFRVy2xjMzpz3ozqhMnX43/j58AMB8GA1UdIwQY MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE21Wfuu 6cRKeink8gwKhxya7439pZ21fIoLp8AY+rQryC27u06J6kXvv64LbSJ/vJWDM0fu LOHCPC4RBBNmV2K0lh8z/xi4SKCIXjKOQZtuZWUSBfy2o7LCUlfNP/6N8k7SNyCC MI0u7x3JbFZn4EHVRmnyXmeJFZzdV3oF5zwfbRJCQNn3zfKycTY9XKI8Pl6LqD9M +qL2esZ3IxPF76CHrN4jSXxMWVd7CmZTPucUo/6UBZ8mXuShAhrI3OR/XFUto5cP E8y6f1pLycqahg160/JmByI33LcAjgwYekz8DvgelM+R4McSPZm1/dAByuwXbJTm j+OtSPRzngAOIg== -----END CERTIFICATE-----Generated at Thu Dec 25 11:18:11 2025 by rpki-client