This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json) Hash identifier: B54192pZvZpplB6syKeJBhfxKsy648wBfIeDzpX9bLU= Subject key identifier: BE:57:54:6E:F7:5A:B5:90:9A:C8:2E:97:94:71:B9:71:76:13:73:BA Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6 Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6 Certificate serial: 019AF276F1D1C8A53888DC7D07F0C72C1EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: erRTM1_91VtMTpdLg1tFc8DEnKQ.roa (hash: igv5stthjArSt6knKlRkVvpjhTI9/bVwYZs5FEOn1NI=) 2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: bV8ysWf0qDwS5k035h67o2LuYHgj+K/9fwW+TwEGmik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f1:d1:c8:a5:38:88:dc:7d:07:f0:c7:2c:1e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c833a0389592756e415cde348abbc24312b02df6 Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=be57546ef75ab5909ac82e979471b971761373ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:86:14:c8:98:97:38:8e:4e:10:6c:35:07: de:15:92:03:5f:8b:0a:1c:9e:d4:01:97:c2:a7:f3: 20:69:b0:0b:32:ee:e3:06:0f:0f:09:d9:16:d6:1e: 44:4e:85:0c:b1:97:de:21:23:c6:28:66:b0:18:0b: 38:63:8a:55:4d:c7:ab:db:79:19:76:51:52:f9:19: a0:07:1b:2d:ed:88:e8:0e:ae:99:21:d7:d0:0c:d7: e9:3e:e8:cb:43:d2:eb:7c:5c:67:b9:3c:34:9f:f3: 68:1d:c6:b0:93:8a:b2:8d:0c:27:6e:a2:c8:3a:3c: 1b:61:dc:d2:81:9a:2a:f5:04:c5:29:6d:00:20:3b: 21:72:3c:18:31:b6:b6:83:63:c0:32:8d:dd:f9:7f: ee:57:8c:d1:0b:76:21:9e:1d:cf:29:9c:1a:d4:d2: 90:9b:eb:3a:32:32:38:af:01:7a:12:14:08:74:32: f1:b2:8b:ba:75:10:fb:ec:ef:7d:7e:c1:79:2e:6e: f7:d8:a8:db:50:71:8a:20:13:b2:e5:b0:62:93:5f: 01:2f:c8:d5:ae:3b:ef:cb:83:14:51:e7:ca:75:ea: a3:b1:dc:28:6e:6e:0f:f7:94:0c:da:d3:99:23:d2: 1c:f3:fe:44:e6:75:0f:27:55:17:35:a6:2b:bb:40: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:57:54:6E:F7:5A:B5:90:9A:C8:2E:97:94:71:B9:71:76:13:73:BA X509v3 Authority Key Identifier: keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a0:63:10:c0:38:4f:74:f6:e6:68:6f:38:9c:88:25:53:a4: 93:4d:41:bd:96:90:66:48:8c:8c:d7:fe:c9:b1:da:e4:3f:e9: 6d:6a:5d:2d:75:3c:19:71:d8:d2:1f:c6:3e:db:60:10:82:fd: 0b:fa:b1:2e:60:b3:82:de:2e:a4:6f:18:02:28:34:48:ca:5d: 94:2f:3b:40:cf:f0:2e:b4:4e:60:a5:a1:80:0f:65:a3:a0:93: d0:87:56:22:62:04:63:ce:ad:29:84:d3:b8:af:8f:be:56:36: 28:bc:ac:72:c5:d5:2b:e2:9d:70:7e:6b:e4:18:6a:5b:e3:23: ab:40:f1:d4:e2:c3:58:bd:8c:5a:ee:99:90:d0:63:50:95:db: fd:e2:29:38:ee:b8:2a:8f:86:5d:7c:6c:05:87:36:97:ce:12: 15:7e:eb:5f:8c:fe:a6:54:43:72:3f:02:7b:94:92:7a:47:a7: d1:08:06:9c:78:3b:9d:7c:99:7a:45:f2:03:66:ac:59:19:34: 6c:93:32:fe:71:32:7f:15:fa:14:81:93:0b:e4:60:fd:84:81: 9f:7e:5b:25:ba:7b:6a:b2:4c:85:ce:1a:d7:7e:63:ac:2b:0a: 03:50:78:46:33:3e:93:c8:aa:eb:0d:3b:d7:51:87:18:ff:6e: e1:17:c8:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvHRyKU4iNx9B/DHLB68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzNhMDM4OTU5Mjc1NmU0MTVjZGUzNDhhYmJjMjQzMTJi MDJkZjYwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhiZTU3NTQ2ZWY3NWFiNTkwOWFjODJlOTc5NDcxYjk3MTc2MTM3M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyraGFMiYlziOThBsNQfeFZIDX4sK HJ7UAZfCp/MgabALMu7jBg8PCdkW1h5EToUMsZfeISPGKGawGAs4Y4pVTcer23kZ dlFS+RmgBxst7YjoDq6ZIdfQDNfpPujLQ9LrfFxnuTw0n/NoHcawk4qyjQwnbqLI OjwbYdzSgZoq9QTFKW0AIDshcjwYMba2g2PAMo3d+X/uV4zRC3Yhnh3PKZwa1NKQ m+s6MjI4rwF6EhQIdDLxsou6dRD77O99fsF5Lm732KjbUHGKIBOy5bBik18BL8jV rjvvy4MUUefKdeqjsdwobm4P95QM2tOZI9Ic8/5E5nUPJ1UXNaYru0DoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5XVG73WrWQmsgul5RxuXF2E3O6MB8GA1UdIwQY MBaAFMgzoDiVknVuQVzeNIq7wkMSsC32MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAt OWYzMDc1NzQwNTFlLzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jZWNkM2EtZTkyYS00NTA5LWI1OTAtOWYzMDc1NzQwNTFl LzEveURPZ09KV1NkVzVCWE40MGlydkNReEt3TGZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaBjEMA4 T3T25mhvOJyIJVOkk01BvZaQZkiMjNf+ybHa5D/pbWpdLXU8GXHY0h/GPttgEIL9 C/qxLmCzgt4upG8YAig0SMpdlC87QM/wLrROYKWhgA9lo6CT0IdWImIEY86tKYTT uK+PvlY2KLyscsXVK+KdcH5r5BhqW+Mjq0Dx1OLDWL2MWu6ZkNBjUJXb/eIpOO64 Ko+GXXxsBYc2l84SFX7rX4z+plRDcj8Ce5SSeken0QgGnHg7nXyZekXyA2asWRk0 bJMy/nEyfxX6FIGTC+Rg/YSBn35bJbp7arJMhc4a135jrCsKA1B4RjM+k8iq6w07 11GHGP9u4RfI1w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:21 2025 by rpki-client