This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json) Hash identifier: zTPj776dJ6Iz04nk1fySfXM7bU/DphnemiAcBD+wu0Y= Subject key identifier: 0D:A1:D3:5E:72:2E:6A:E5:6C:08:6F:EB:5E:E1:58:A5:45:39:4A:13 Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Certificate serial: 019AF42E55F866CC77AA20E00E5CF8E6AF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft Manifest number: 0F28 Signing time: Sat 06 Dec 2025 15:01:08 +0000 Manifest this update: Sat 06 Dec 2025 15:01:08 +0000 Manifest next update: Sun 07 Dec 2025 15:01:08 +0000 Files and hashes: 1: E5pfM8_6xdfnWcd79wNvaskhDKo.roa (hash: y0Ll9TqNFCMXsaTQIESwVtfULWRNBlB/EyrKykV1sx8=) 2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: gM7GCfiQZ/U6jrwNWRkV81uPvfSdZchy1jpDZESag4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:55:f8:66:cc:77:aa:20:e0:0e:5c:f8:e6:af:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Validity Not Before: Dec 6 15:01:08 2025 GMT Not After : Dec 7 15:01:08 2025 GMT Subject: CN=0da1d35e722e6ae56c086feb5ee158a545394a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:ab:4d:13:af:ba:09:54:c3:02:6f:56:28: 30:75:58:ee:52:7f:54:a6:6b:6e:5a:6a:2c:fe:fd: 43:89:a6:ca:b0:10:a0:d0:27:f6:61:9e:e2:8c:ce: c5:f5:18:d0:d0:b3:7e:3e:4c:77:2d:6e:7d:8e:ae: 20:fa:f7:90:18:ec:b4:c1:62:b0:13:a1:2e:9a:13: 7f:71:1c:75:e5:a0:53:ce:3a:ad:2c:54:86:bf:e5: 02:d8:ea:d7:b6:a8:6e:37:13:d0:5f:9f:c4:30:76: d0:14:b6:3c:8d:b4:8c:b8:7e:dd:ff:d0:a4:0d:59: af:0d:50:42:31:fa:10:47:52:c2:69:0e:34:92:35: 71:b4:d4:4c:d1:a2:14:f1:e5:2b:ee:35:b8:43:f7: 0d:5b:45:81:a9:29:c5:00:77:81:e4:07:bf:5b:ba: f2:37:e8:c1:22:c5:71:d1:f9:34:bc:f3:95:29:6e: ea:54:9c:5c:7f:67:11:62:30:5f:a8:ac:06:15:80: 6a:6e:50:26:3c:21:cc:ee:9b:05:6d:d8:a5:32:c8: 0a:20:d9:93:97:fc:4f:04:fd:a8:a2:77:80:eb:75: b5:18:7f:bf:ca:cc:1e:77:17:a2:80:33:c3:5d:e5: df:ac:c4:c4:dc:a4:e0:79:73:2d:88:d3:e0:cd:17: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A1:D3:5E:72:2E:6A:E5:6C:08:6F:EB:5E:E1:58:A5:45:39:4A:13 X509v3 Authority Key Identifier: keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2c:41:7b:ba:8c:81:6b:e2:81:a3:b5:ce:43:11:4a:16:c2: 36:93:b7:f1:80:35:a3:f4:90:7c:41:00:f7:37:e2:a4:96:6d: 63:87:bc:c2:c6:e8:fd:dc:4f:fd:03:4f:05:64:d5:c4:74:ff: 19:98:f5:7a:ad:80:87:32:8e:ab:7e:fb:1b:17:c9:87:5d:96: 32:cd:cb:19:69:53:62:1f:78:cb:c5:20:5e:99:cd:6f:95:94: fc:fa:af:17:12:a7:9d:cc:eb:b9:58:a0:5d:ac:73:8c:7e:f2: a6:37:87:e9:3a:6c:49:7e:a7:f2:d5:cf:8c:49:4e:80:91:12: a8:12:0b:76:36:1d:6f:aa:29:69:a3:fd:8d:74:65:92:96:1c: 7e:d4:a8:c2:c5:20:b9:ef:e7:46:53:10:9a:09:33:b5:d3:d5: 96:c2:21:6d:07:c7:ca:73:8a:31:6a:6e:88:6c:5a:c1:c7:67: 2a:fc:ae:0c:84:7e:fa:66:b5:ba:36:ed:16:05:ed:01:37:c8: 58:b3:3f:6c:c1:83:b9:d1:a6:21:5c:62:47:74:ad:74:b0:02: 44:12:4d:77:a9:cc:67:99:06:cb:1b:0b:1d:c8:c5:75:d0:5a: 99:21:15:b4:fa:ab:8a:42:40:ae:56:54:fc:57:81:4f:f9:91: 03:78:4c:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlX4Zsx3qiDgDlz45q+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl ZTRjZTEwHhcNMjUxMjA2MTUwMTA4WhcNMjUxMjA3MTUwMTA4WjAzMTEwLwYDVQQD EygwZGExZDM1ZTcyMmU2YWU1NmMwODZmZWI1ZWUxNThhNTQ1Mzk0YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/SrTROvuglUwwJvVigwdVjuUn9U pmtuWmos/v1DiabKsBCg0Cf2YZ7ijM7F9RjQ0LN+Pkx3LW59jq4g+veQGOy0wWKw E6EumhN/cRx15aBTzjqtLFSGv+UC2OrXtqhuNxPQX5/EMHbQFLY8jbSMuH7d/9Ck DVmvDVBCMfoQR1LCaQ40kjVxtNRM0aIU8eUr7jW4Q/cNW0WBqSnFAHeB5Ae/W7ry N+jBIsVx0fk0vPOVKW7qVJxcf2cRYjBfqKwGFYBqblAmPCHM7psFbdilMsgKINmT l/xPBP2ooneA63W1GH+/yswedxeigDPDXeXfrMTE3KTgeXMtiNPgzRdtIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2h015yLmrlbAhv617hWKVFOUoTMB8GA1UdIwQY MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyxBe7qM gWvigaO1zkMRShbCNpO38YA1o/SQfEEA9zfipJZtY4e8wsbo/dxP/QNPBWTVxHT/ GZj1eq2AhzKOq377GxfJh12WMs3LGWlTYh94y8UgXpnNb5WU/PqvFxKnnczruVig XaxzjH7ypjeH6TpsSX6n8tXPjElOgJESqBILdjYdb6opaaP9jXRlkpYcftSowsUg ue/nRlMQmgkztdPVlsIhbQfHynOKMWpuiGxawcdnKvyuDIR++ma1ujbtFgXtATfI WLM/bMGDudGmIVxiR3StdLACRBJNd6nMZ5kGyxsLHcjFddBamSEVtPqrikJArlZU /FeBT/mRA3hMkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:01:36 2025 by rpki-client