This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json) Hash identifier: K3sKzmH3nGUuC1+Wu9DHlp8pYdbYfoIKRm7V2wu5Uj0= Subject key identifier: A1:94:B9:DE:68:BF:37:8D:7F:93:1C:0F:CF:E8:B3:7A:BF:EA:99:6E Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Certificate serial: 019B446E50371EC724A8C8E1B8A14D1CE0F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft Manifest number: 140D Signing time: Mon 22 Dec 2025 05:00:38 +0000 Manifest this update: Mon 22 Dec 2025 05:00:38 +0000 Manifest next update: Tue 23 Dec 2025 05:00:38 +0000 Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: A2KXo6fg6uZXzj8YTHGtMzNx7zepyPwwgpuMdh6VpXQ=) 2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:50:37:1e:c7:24:a8:c8:e1:b8:a1:4d:1c:e0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Validity Not Before: Dec 22 05:00:38 2025 GMT Not After : Dec 23 05:00:38 2025 GMT Subject: CN=a194b9de68bf378d7f931c0fcfe8b37abfea996e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:26:0d:2e:9f:1a:70:75:4c:40:f7:f8:7d: ac:55:cc:80:98:aa:1f:fe:f9:2e:7a:9d:c4:c9:ce: 75:6d:7a:ff:76:26:c7:de:a7:72:33:95:bd:87:6e: b1:a0:ea:b3:9e:d2:e3:82:5f:f6:c1:ee:c8:6a:23: 8d:65:70:de:41:19:0d:50:17:97:de:43:11:10:6e: 0e:f8:bc:7f:db:41:d3:55:2e:36:d6:93:57:a7:a2: 32:ed:fe:da:fb:c2:b6:75:66:68:76:57:b7:40:82: 00:c5:0e:56:0a:4b:6f:09:e9:9c:2f:a0:88:da:c4: 12:62:34:84:64:c6:73:3c:c5:9d:8e:64:24:6d:67: ec:bd:f8:f3:cb:e6:69:6a:28:b2:85:17:d2:1c:c4: bb:42:2f:89:73:ba:a7:4c:a4:cf:fb:d3:7b:b3:da: 58:aa:68:2d:9e:b2:6c:7b:a6:c6:3d:24:3f:9d:4d: 58:f4:6a:5f:b1:0b:e2:c9:72:06:5f:ec:07:93:e7: 8b:e0:a8:36:ec:5b:76:94:51:e3:b3:ff:e4:e8:73: b2:3b:35:48:64:09:ab:bc:08:47:85:1a:b0:79:3f: 4f:db:3b:a4:e0:5e:58:62:7d:1a:53:6d:a0:ea:db: c0:7c:04:57:32:10:2e:bd:e1:fc:78:dc:c9:d2:ed: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:B9:DE:68:BF:37:8D:7F:93:1C:0F:CF:E8:B3:7A:BF:EA:99:6E X509v3 Authority Key Identifier: keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b5:4f:14:79:3e:9a:dc:0d:64:82:0f:4d:87:38:fb:0e:6d: 18:c6:88:65:f4:a0:d4:a4:83:76:ad:ba:ae:6d:1a:9a:52:bc: fe:0c:1c:a6:d7:c5:66:66:a4:c2:49:dc:f9:b4:55:be:26:5d: bc:4e:67:66:0f:40:d8:0b:6d:ac:ac:5b:8c:0e:07:7b:2d:2e: d9:c7:05:0d:91:81:d2:b8:b0:3d:58:40:de:e1:18:6f:a5:61: 04:aa:c9:d4:f1:01:91:7e:1d:a9:11:d0:b0:31:65:07:b7:99: e8:15:66:df:75:9f:89:22:db:ba:97:90:f8:76:f8:d2:64:c6: e1:33:eb:b9:09:bb:84:58:3c:ab:b5:64:80:da:36:99:80:2d: d0:f8:dc:dd:95:d3:9f:74:81:47:ad:85:c8:91:3d:d4:3e:41: 26:34:47:71:c1:9b:c3:65:62:45:db:2d:85:9f:21:00:9a:9c: 4a:50:0b:3d:2f:99:41:99:5d:d6:e0:84:f2:46:71:a2:c8:20: 74:f0:12:fd:28:21:0e:3d:73:2c:5d:74:96:d7:f8:35:f6:6f: 84:bd:d3:0d:31:ba:10:b3:8e:b2:6a:1b:87:ea:5b:96:41:53: 5b:ce:75:3f:b2:e1:c5:fa:f6:f9:01:e6:db:c0:e0:95:15:10: 0d:6c:27:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEblA3HsckqMjhuKFNHODyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk NmIzOTAwHhcNMjUxMjIyMDUwMDM4WhcNMjUxMjIzMDUwMDM4WjAzMTEwLwYDVQQD EyhhMTk0YjlkZTY4YmYzNzhkN2Y5MzFjMGZjZmU4YjM3YWJmZWE5OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx0mDS6fGnB1TED3+H2sVcyAmKof /vkuep3Eyc51bXr/dibH3qdyM5W9h26xoOqzntLjgl/2we7IaiONZXDeQRkNUBeX 3kMREG4O+Lx/20HTVS421pNXp6Iy7f7a+8K2dWZodle3QIIAxQ5WCktvCemcL6CI 2sQSYjSEZMZzPMWdjmQkbWfsvfjzy+ZpaiiyhRfSHMS7Qi+Jc7qnTKTP+9N7s9pY qmgtnrJse6bGPSQ/nU1Y9GpfsQviyXIGX+wHk+eL4Kg27Ft2lFHjs//k6HOyOzVI ZAmrvAhHhRqweT9P2zuk4F5YYn0aU22g6tvAfARXMhAuveH8eNzJ0u2x7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGUud5ovzeNf5McD8/os3q/6pluMB8GA1UdIwQY MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4 LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLVPFHk+ mtwNZIIPTYc4+w5tGMaIZfSg1KSDdq26rm0amlK8/gwcptfFZmakwknc+bRVviZd vE5nZg9A2AttrKxbjA4Hey0u2ccFDZGB0riwPVhA3uEYb6VhBKrJ1PEBkX4dqRHQ sDFlB7eZ6BVm33WfiSLbupeQ+Hb40mTG4TPruQm7hFg8q7VkgNo2mYAt0Pjc3ZXT n3SBR62FyJE91D5BJjRHccGbw2ViRdsthZ8hAJqcSlALPS+ZQZld1uCE8kZxosgg dPAS/SghDj1zLF10ltf4NfZvhL3TDTG6ELOOsmobh+pblkFTW851P7Lhxfr2+QHm 28DglRUQDWwn1w== -----END CERTIFICATE-----Generated at Mon Dec 22 09:29:40 2025 by rpki-client