This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json) Hash identifier: j4bE+vEDasEz6XyVj0ByeBBvDu+wX40gRt1okHAeieg= Subject key identifier: 37:28:FA:49:F2:BA:2A:8E:35:C7:BE:3E:5E:70:F3:A1:CA:B8:D1:96 Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8 Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8 Certificate serial: 019B3F1144A50BD21F819F441AA19223D11E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft Manifest number: 1495 Signing time: Sun 21 Dec 2025 04:00:54 +0000 Manifest this update: Sun 21 Dec 2025 04:00:54 +0000 Manifest next update: Mon 22 Dec 2025 04:00:54 +0000 Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=) 2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: PZz9DGMs3M5JV/YhH4L352tHRkt1+rtk0/r7oMIGQqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:44:a5:0b:d2:1f:81:9f:44:1a:a1:92:23:d1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8 Validity Not Before: Dec 21 04:00:54 2025 GMT Not After : Dec 22 04:00:54 2025 GMT Subject: CN=3728fa49f2ba2a8e35c7be3e5e70f3a1cab8d196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:47:87:47:16:27:13:34:3b:d4:ee:44:3b: 6c:55:e9:3b:b6:32:55:fe:bb:13:ff:c1:85:ff:08: 9c:ae:7c:61:1d:ec:77:65:ce:0c:f7:24:62:3d:05: 09:c9:48:e5:64:b8:6c:42:4c:1a:37:c9:09:4d:d4: b1:d6:65:77:57:cb:d7:ea:ca:70:3e:a5:72:20:07: 88:7f:5e:31:31:e0:84:d8:b1:a8:63:3c:98:47:3f: d2:9a:25:77:a1:0b:ad:0b:67:a4:94:b0:bd:b7:23: 5e:5f:e3:12:27:b0:9a:33:7e:4d:94:cd:3a:fc:86: d1:4b:30:65:5d:af:6f:10:a6:7b:3b:bc:0a:14:94: 95:ce:60:75:b4:09:3f:57:af:68:4f:b7:c1:65:c4: 7f:31:c1:f1:13:ce:50:0c:19:40:2c:5f:08:48:92: a0:83:2f:06:e2:6e:e0:9d:84:a5:21:88:92:5d:1c: b0:b3:a3:b0:1c:56:26:c7:c9:44:a3:7b:a5:6b:d6: f6:34:13:08:c8:66:ef:f8:ac:17:01:db:e3:fd:44: 56:07:54:b9:c5:48:ea:31:0b:5f:f4:1d:58:7d:7c: 08:13:9f:5b:73:93:54:ff:fb:8e:be:f8:bb:c7:18: df:d9:5e:be:e7:88:60:a9:7c:c8:6d:65:50:cc:55: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:28:FA:49:F2:BA:2A:8E:35:C7:BE:3E:5E:70:F3:A1:CA:B8:D1:96 X509v3 Authority Key Identifier: keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:90:1e:fb:e5:7b:54:58:99:52:ae:bc:2d:1b:b7:8f:67:25: cb:70:e7:9e:b1:7d:e5:3e:3e:e8:e4:7c:07:1f:04:da:ff:ee: 7e:1d:92:fa:08:12:ad:d0:f7:e0:60:f2:9f:c0:ae:ae:f8:75: 35:46:85:f0:b0:d6:9e:37:21:c7:d9:53:1c:88:11:41:79:f9: 42:4b:cb:26:37:d6:48:de:08:ce:0e:0c:84:ab:27:b8:55:b4: ec:8a:15:f0:70:1c:81:c1:40:31:5d:d4:20:b5:58:66:9c:73: 53:8a:76:46:ce:f6:84:b7:df:8a:f5:a6:73:31:a4:42:d9:ad: 21:32:2e:1e:e5:54:6a:cd:fb:0b:7f:e7:d3:4a:c0:e5:6c:6c: d1:b8:86:1e:73:a9:c5:74:c8:2d:bb:41:7b:ec:f1:2d:be:eb: 8d:0d:87:ee:38:a7:41:29:58:c9:21:1d:61:96:08:55:23:99: 13:3f:75:f5:14:2a:b4:00:05:06:d4:3a:65:60:f4:0f:42:78: 58:5e:47:ef:90:02:a3:be:6d:70:e3:b6:ef:c9:08:88:25:16: 3a:47:6c:75:3a:fc:42:4b:42:90:7f:21:6b:fa:cd:d7:9b:22: e4:26:7e:4b:14:f1:d1:06:87:8c:ef:8d:d4:2e:f3:c7:c3:8b: 24:a5:c1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EUSlC9IfgZ9EGqGSI9EeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj OTc3ZDgwHhcNMjUxMjIxMDQwMDU0WhcNMjUxMjIyMDQwMDU0WjAzMTEwLwYDVQQD EygzNzI4ZmE0OWYyYmEyYThlMzVjN2JlM2U1ZTcwZjNhMWNhYjhkMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bJHh0cWJxM0O9TuRDtsVek7tjJV /rsT/8GF/wicrnxhHex3Zc4M9yRiPQUJyUjlZLhsQkwaN8kJTdSx1mV3V8vX6spw PqVyIAeIf14xMeCE2LGoYzyYRz/SmiV3oQutC2eklLC9tyNeX+MSJ7CaM35NlM06 /IbRSzBlXa9vEKZ7O7wKFJSVzmB1tAk/V69oT7fBZcR/McHxE85QDBlALF8ISJKg gy8G4m7gnYSlIYiSXRyws6OwHFYmx8lEo3ula9b2NBMIyGbv+KwXAdvj/URWB1S5 xUjqMQtf9B1YfXwIE59bc5NU//uOvvi7xxjf2V6+54hgqXzIbWVQzFUiOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDco+knyuiqONce+Pl5w86HKuNGWMB8GA1UdIwQY MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpAe++V7 VFiZUq68LRu3j2cly3DnnrF95T4+6OR8Bx8E2v/ufh2S+ggSrdD34GDyn8Curvh1 NUaF8LDWnjchx9lTHIgRQXn5QkvLJjfWSN4Izg4MhKsnuFW07IoV8HAcgcFAMV3U ILVYZpxzU4p2Rs72hLffivWmczGkQtmtITIuHuVUas37C3/n00rA5Wxs0biGHnOp xXTILbtBe+zxLb7rjQ2H7jinQSlYySEdYZYIVSOZEz919RQqtAAFBtQ6ZWD0D0J4 WF5H75ACo75tcOO278kIiCUWOkdsdTr8QktCkH8ha/rN15si5CZ+SxTx0QaHjO+N 1C7zx8OLJKXB+A== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:39 2025 by rpki-client