This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json) Hash identifier: uFUcDM7Nt5tj9pjBOlRFzeTH8KFC9Pct7QL3j2q+VVM= Subject key identifier: 42:BD:73:27:95:BA:A1:F2:18:5C:9E:49:53:47:8D:2E:C2:66:73:ED Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4 Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4 Certificate serial: 019B405A9591E2E9390E6A9D4AB66E9930A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft Manifest number: 099B Signing time: Sun 21 Dec 2025 10:00:36 +0000 Manifest this update: Sun 21 Dec 2025 10:00:36 +0000 Manifest next update: Mon 22 Dec 2025 10:00:36 +0000 Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=) 2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=) 3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: c4SYM4466OWQFsis2KKtoL2S0BNVkWXZVgqWdHsxcMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:95:91:e2:e9:39:0e:6a:9d:4a:b6:6e:99:30:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4 Validity Not Before: Dec 21 10:00:36 2025 GMT Not After : Dec 22 10:00:36 2025 GMT Subject: CN=42bd732795baa1f2185c9e4953478d2ec26673ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:38:7c:43:ff:22:e2:5a:62:c5:bb:fa:e7: 47:4b:4e:68:e4:22:40:19:f5:6e:2f:16:9a:e6:df: 4f:0a:ea:0b:ae:cf:73:f4:4d:4d:5d:e7:47:a3:be: ed:67:36:84:78:54:fa:58:0e:86:3d:4d:3e:c6:3a: 33:9e:be:07:48:8a:4a:c3:16:84:a7:9f:3a:7a:e7: 47:c7:4c:a4:63:73:a5:5d:20:44:8f:63:26:6f:07: 45:8d:41:c3:12:76:a1:f9:9b:cd:90:27:28:eb:9d: 6f:bd:0e:17:8d:68:27:2a:ef:ea:cd:1e:1e:ed:17: d8:72:e5:39:c0:91:c6:8b:02:e1:0c:a9:2f:c9:ed: 7c:55:73:c4:a6:c1:fd:16:49:6f:31:26:64:ac:67: 60:0e:12:5b:e9:52:8c:99:7d:a3:ab:be:4c:c7:5d: bd:28:68:0e:c4:39:54:ff:bc:1d:af:cf:3f:75:fb: ed:6b:00:0d:fa:b9:c5:fe:a0:71:fb:55:36:40:c8: 0c:84:cb:ff:70:5c:fa:cb:05:21:39:11:15:03:8a: a1:06:3d:28:04:c8:5e:46:c6:c3:00:55:9f:ea:5b: 84:c6:a0:e0:5b:8c:be:d5:b5:23:9a:7d:4b:d9:1c: 70:61:50:53:f6:78:a9:54:95:dd:9e:d4:8d:d1:cf: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BD:73:27:95:BA:A1:F2:18:5C:9E:49:53:47:8D:2E:C2:66:73:ED X509v3 Authority Key Identifier: keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:d2:fa:26:5b:40:11:7d:76:24:dd:04:ef:b0:d6:4b:50:05: 83:dc:2b:42:f0:bc:ba:97:84:87:3e:75:e0:3d:fa:9f:17:66: ee:f2:76:fb:15:41:56:eb:5c:4a:46:82:c7:3d:c4:ac:95:48: aa:b9:55:82:87:0f:df:bd:d3:9c:84:8a:df:7a:3f:0a:b5:83: cf:73:27:72:73:a0:f5:7c:2a:e8:e3:36:ff:59:e0:c3:d4:9d: 20:94:aa:8f:5a:dc:9b:a2:16:62:80:87:8b:3e:25:6c:1d:33: 2e:80:38:db:a7:92:d5:a9:08:4d:59:6e:c1:a5:08:00:d8:32: 1a:97:15:fa:e7:6c:c2:1c:ad:06:0d:d3:b6:c8:8d:6c:14:77: ac:31:b6:7f:67:29:81:a6:72:88:88:c2:aa:03:b0:59:c1:df: 2b:8f:33:0c:e8:88:62:13:a0:7a:b1:21:39:1c:7f:ec:ed:39: cf:b3:ee:99:9b:db:b1:73:b7:ab:17:4a:07:65:45:9f:45:47: 62:26:85:b1:a1:37:02:79:d3:d3:f4:03:21:90:0b:3c:98:5a: 9b:ac:84:98:26:ea:d8:5e:a0:de:88:9a:7d:97:a9:06:ac:b2: 1f:83:34:0f:c2:bb:7d:05:4d:f2:21:91:04:9e:99:37:0b:a9: 1f:4d:8a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpWR4uk5DmqdSrZumTCpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh NTU2ZjQwHhcNMjUxMjIxMTAwMDM2WhcNMjUxMjIyMTAwMDM2WjAzMTEwLwYDVQQD Eyg0MmJkNzMyNzk1YmFhMWYyMTg1YzllNDk1MzQ3OGQyZWMyNjY3M2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzM4fEP/IuJaYsW7+udHS05o5CJA GfVuLxaa5t9PCuoLrs9z9E1NXedHo77tZzaEeFT6WA6GPU0+xjoznr4HSIpKwxaE p586eudHx0ykY3OlXSBEj2MmbwdFjUHDEnah+ZvNkCco651vvQ4XjWgnKu/qzR4e 7RfYcuU5wJHGiwLhDKkvye18VXPEpsH9FklvMSZkrGdgDhJb6VKMmX2jq75Mx129 KGgOxDlU/7wdr88/dfvtawAN+rnF/qBx+1U2QMgMhMv/cFz6ywUhOREVA4qhBj0o BMheRsbDAFWf6luExqDgW4y+1bUjmn1L2RxwYVBT9nipVJXdntSN0c/u8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK9cyeVuqHyGFyeSVNHjS7CZnPtMB8GA1UdIwQY MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2tL6JltA EX12JN0E77DWS1AFg9wrQvC8upeEhz514D36nxdm7vJ2+xVBVutcSkaCxz3ErJVI qrlVgocP373TnISK33o/CrWDz3MncnOg9Xwq6OM2/1ngw9SdIJSqj1rcm6IWYoCH iz4lbB0zLoA426eS1akITVluwaUIANgyGpcV+udswhytBg3TtsiNbBR3rDG2f2cp gaZyiIjCqgOwWcHfK48zDOiIYhOgerEhORx/7O05z7PumZvbsXO3qxdKB2VFn0VH YiaFsaE3AnnT0/QDIZALPJham6yEmCbq2F6g3oiafZepBqyyH4M0D8K7fQVN8iGR BJ6ZNwupH02Kgg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:56:01 2025 by rpki-client