This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json) Hash identifier: JELPrcvUIrYJHIStjYzLm4YNmLESBKQ+dpvGuNLfoLg= Subject key identifier: D0:88:0B:5A:12:52:AD:AB:E8:5D:08:09:37:1B:A5:D3:C3:18:DE:C6 Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4 Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4 Certificate serial: 019B4A038D135E646CFBD38EB74F562FD4D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft Manifest number: 09A0 Signing time: Tue 23 Dec 2025 07:01:45 +0000 Manifest this update: Tue 23 Dec 2025 07:01:45 +0000 Manifest next update: Wed 24 Dec 2025 07:01:45 +0000 Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=) 2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=) 3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: r0cgxMQdunazXWpYRWvv3ByQGHPUilkfEcXVR72JA38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:8d:13:5e:64:6c:fb:d3:8e:b7:4f:56:2f:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4 Validity Not Before: Dec 23 07:01:45 2025 GMT Not After : Dec 24 07:01:45 2025 GMT Subject: CN=d0880b5a1252adabe85d0809371ba5d3c318dec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:b2:43:71:52:08:8a:79:3e:04:5c:63:7f: d4:5c:d9:b6:fb:aa:64:20:e5:0f:c3:88:03:9d:9c: a7:9a:bc:8f:e2:fb:78:8a:6c:64:1d:83:cc:ae:6a: 42:3e:d8:5b:fe:dd:64:46:4f:36:49:0b:98:f8:39: 46:4b:03:a4:61:f3:ff:9c:e4:7a:e4:da:c3:34:b6: 9d:b9:7c:cc:2f:ea:50:83:59:96:9d:23:2f:fe:04: 8d:b1:43:0a:5f:73:78:72:e1:62:33:98:ce:ad:bd: fc:fa:e7:85:c6:ba:68:61:c4:f2:83:18:48:f4:a8: aa:76:ac:75:6f:24:66:3d:a0:9a:ce:d2:30:e0:8b: 47:99:41:2f:4f:65:ee:72:80:8d:6e:01:59:dc:75: f7:4c:3d:1b:b0:1e:fc:e6:cb:80:6f:f1:97:48:da: a1:8a:c3:98:41:e8:44:37:15:e5:38:c9:5a:c7:73: c8:b1:62:6a:db:64:2c:18:44:65:2f:f8:a9:09:86: f7:67:2c:8a:b6:56:e1:19:fb:1b:b6:60:56:38:2a: 7a:c0:13:af:b1:54:88:02:87:4d:99:ea:55:57:fd: de:f3:1d:33:3f:03:5d:1a:5d:3a:7f:eb:64:10:f7: d9:25:4b:6d:31:b8:2f:88:a7:f6:65:bd:aa:5a:9f: 80:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:88:0B:5A:12:52:AD:AB:E8:5D:08:09:37:1B:A5:D3:C3:18:DE:C6 X509v3 Authority Key Identifier: keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9c:51:a1:fc:26:11:f6:f6:82:fc:f6:05:9f:88:12:ab:65: a2:a5:ed:26:d7:69:92:5e:7d:77:48:1f:e9:d6:8b:75:50:6f: d8:7a:5d:b7:f2:cd:4f:10:aa:ae:e9:5c:e1:db:b1:c4:10:6d: e0:47:27:35:92:6b:a3:e5:a2:4e:c7:8a:14:36:99:7a:af:a8: a6:3a:c3:38:22:95:3d:d6:3e:a7:6e:67:9f:b2:e6:b9:8d:8c: 87:33:76:d5:7d:dd:4a:19:db:60:41:39:e9:08:64:2b:a5:f2: cc:d8:87:e6:e7:f5:04:71:21:f6:47:de:de:5f:d6:a4:6e:5d: 26:13:2f:9f:5b:90:4a:c2:f5:b4:c6:1d:38:e3:a1:bb:20:69: ab:45:15:6d:48:4e:a7:3c:09:b0:b1:0a:5f:59:21:00:b4:66: e2:a5:02:d5:11:d1:19:23:d5:aa:16:50:af:cc:72:71:a4:9b: 23:bb:05:34:c1:41:4e:c5:98:fe:5a:f3:58:23:8e:44:3e:96: ca:5b:93:e6:11:1a:af:97:e4:27:82:76:15:ad:a5:5b:7e:b8: 72:18:ac:2a:8f:9a:97:ef:5c:04:61:d8:6d:97:b8:22:3c:42: 21:86:a2:5a:03:c0:0b:e3:ea:04:e8:b2:73:db:28:7f:c0:35: 77:7c:c6:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA40TXmRs+9OOt09WL9TUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDExYjcwNzg3OGJkNzdmYmZmMTVmMjc3NTJjMDhhNGFh NTU2ZjQwHhcNMjUxMjIzMDcwMTQ1WhcNMjUxMjI0MDcwMTQ1WjAzMTEwLwYDVQQD EyhkMDg4MGI1YTEyNTJhZGFiZTg1ZDA4MDkzNzFiYTVkM2MzMThkZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG2yQ3FSCIp5PgRcY3/UXNm2+6pk IOUPw4gDnZynmryP4vt4imxkHYPMrmpCPthb/t1kRk82SQuY+DlGSwOkYfP/nOR6 5NrDNLaduXzML+pQg1mWnSMv/gSNsUMKX3N4cuFiM5jOrb38+ueFxrpoYcTygxhI 9Kiqdqx1byRmPaCaztIw4ItHmUEvT2XucoCNbgFZ3HX3TD0bsB785suAb/GXSNqh isOYQehENxXlOMlax3PIsWJq22QsGERlL/ipCYb3ZyyKtlbhGfsbtmBWOCp6wBOv sVSIAodNmepVV/3e8x0zPwNdGl06f+tkEPfZJUttMbgviKf2Zb2qWp+AMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCIC1oSUq2r6F0ICTcbpdPDGN7GMB8GA1UdIwQY MBaAFMnRG3B4eL13+/8V8ndSwIpKpVb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDkt NWVhYmZiMWU1MTMwLzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kY2RkZmEtYTA1OS00ZmYwLWE4MDktNWVhYmZiMWU1MTMw LzEveWRFYmNIaDR2WGY3X3hYeWQxTEFpa3FsVnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepxRofwm Efb2gvz2BZ+IEqtloqXtJtdpkl59d0gf6daLdVBv2Hpdt/LNTxCqrulc4duxxBBt 4EcnNZJro+WiTseKFDaZeq+opjrDOCKVPdY+p25nn7LmuY2MhzN21X3dShnbYEE5 6QhkK6XyzNiH5uf1BHEh9kfe3l/WpG5dJhMvn1uQSsL1tMYdOOOhuyBpq0UVbUhO pzwJsLEKX1khALRm4qUC1RHRGSPVqhZQr8xycaSbI7sFNMFBTsWY/lrzWCOORD6W yluT5hEar5fkJ4J2Fa2lW364chisKo+al+9cBGHYbZe4IjxCIYaiWgPAC+PqBOiy c9sof8A1d3zGHQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:08 2025 by rpki-client