This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json) Hash identifier: 1m39Dw1UtDjBZuh24PngQ4tg+yVuA1g366AIJc31RNk= Subject key identifier: FB:4F:EB:06:C2:EE:0B:D8:35:EA:C9:94:E8:CD:98:CD:2A:5B:8B:AB Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Certificate serial: 019B318CDBC367092216F0DC501E5DE9249D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft Manifest number: 1717 Signing time: Thu 18 Dec 2025 13:01:13 +0000 Manifest this update: Thu 18 Dec 2025 13:01:13 +0000 Manifest next update: Fri 19 Dec 2025 13:01:13 +0000 Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: phHBQo4iFnTsfl/RuLI4erP9VxvZnh+zmlinqiT/vgY=) 2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:db:c3:67:09:22:16:f0:dc:50:1e:5d:e9:24:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Validity Not Before: Dec 18 13:01:13 2025 GMT Not After : Dec 19 13:01:13 2025 GMT Subject: CN=fb4feb06c2ee0bd835eac994e8cd98cd2a5b8bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:8b:cd:15:f4:0e:de:82:40:69:e3:c8:33: e7:eb:af:1d:ea:17:42:24:58:fe:21:29:c7:31:c1: 31:df:6e:e2:3b:a1:8b:37:27:73:a1:90:ca:71:a0: 32:51:b6:26:30:f1:d1:1f:59:c9:31:b7:ba:e8:21: cd:76:17:3e:62:68:b4:51:4f:99:d8:e5:0c:fd:f8: 52:7e:f1:7f:c4:2f:cf:b7:2a:08:5e:a0:f2:b6:1a: d4:15:65:85:0c:d2:25:a1:45:b8:af:1b:7f:31:95: df:f1:11:50:7b:a3:91:7c:16:e6:4d:96:15:77:9b: 22:44:a7:d6:9d:8a:d7:64:0b:34:79:59:bc:90:f5: 48:d0:3c:dc:a8:00:69:62:90:31:30:72:35:25:98: 59:58:3c:63:68:95:f0:fb:30:d7:0a:3e:96:bf:65: 43:f1:15:94:57:03:ab:b1:1e:38:a3:10:55:3c:13: 6f:e7:41:cf:87:36:78:72:06:ea:51:59:6a:4a:41: d8:14:5d:75:6a:d7:3c:48:82:75:ff:ee:ac:b7:7f: 5d:30:5e:14:a5:2a:63:8e:c4:9c:fc:06:c4:9a:5f: 89:a8:ca:52:38:08:fe:2c:d0:55:36:4f:9b:29:fc: a9:37:e7:34:26:ca:0b:1f:60:13:55:69:06:60:16: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4F:EB:06:C2:EE:0B:D8:35:EA:C9:94:E8:CD:98:CD:2A:5B:8B:AB X509v3 Authority Key Identifier: keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b0:fc:be:9d:e5:29:68:d3:68:a8:78:71:30:7b:55:72:5a: a3:20:9e:76:b9:c5:e9:7b:2b:72:30:85:34:4a:92:a3:ab:86: 64:b1:4d:14:99:ce:1b:6e:36:d9:13:ff:35:bc:b6:77:4a:7e: cb:f8:8c:3b:c4:6c:7e:86:d7:d0:71:f2:4f:e7:5f:12:73:6b: 57:43:bf:43:11:71:76:57:23:d9:37:ff:c8:22:4c:df:ad:6c: 53:ed:85:41:51:67:a6:c2:28:93:06:70:f3:a1:b5:73:2f:0a: a4:29:a9:e9:98:63:6f:37:16:00:a0:b0:40:46:d6:5f:e1:83: 18:f6:cb:c4:e9:5a:3c:68:dc:3c:40:fc:0a:aa:46:b3:53:a6: c5:34:ac:e3:d0:21:40:11:b0:43:15:17:f0:d0:08:00:71:b1: a1:40:1b:ef:d8:5c:22:51:32:99:c5:c3:c2:b9:e1:4f:a6:07: 79:ab:3a:b4:bc:d0:c1:02:57:27:98:dd:a8:fb:2e:9b:a5:fb: 0d:97:8b:33:d9:79:78:35:d5:9c:37:58:c8:34:e3:f2:79:e0: 03:bd:b3:b4:1a:4c:1b:10:dc:17:02:c4:c4:99:12:3b:6f:7e: 8d:1d:46:8e:3c:a1:e1:43:6a:54:8d:cb:c1:12:68:1d:c2:fb: 7e:04:bc:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjNvDZwkiFvDcUB5d6SSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1 NjhjYjUwHhcNMjUxMjE4MTMwMTEzWhcNMjUxMjE5MTMwMTEzWjAzMTEwLwYDVQQD EyhmYjRmZWIwNmMyZWUwYmQ4MzVlYWM5OTRlOGNkOThjZDJhNWI4YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5GLzRX0Dt6CQGnjyDPn668d6hdC JFj+ISnHMcEx327iO6GLNydzoZDKcaAyUbYmMPHRH1nJMbe66CHNdhc+Ymi0UU+Z 2OUM/fhSfvF/xC/PtyoIXqDythrUFWWFDNIloUW4rxt/MZXf8RFQe6ORfBbmTZYV d5siRKfWnYrXZAs0eVm8kPVI0DzcqABpYpAxMHI1JZhZWDxjaJXw+zDXCj6Wv2VD 8RWUVwOrsR44oxBVPBNv50HPhzZ4cgbqUVlqSkHYFF11atc8SIJ1/+6st39dMF4U pSpjjsSc/AbEml+JqMpSOAj+LNBVNk+bKfypN+c0JsoLH2ATVWkGYBaSEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtP6wbC7gvYNerJlOjNmM0qW4urMB8GA1UdIwQY MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbD8vp3l KWjTaKh4cTB7VXJaoyCedrnF6XsrcjCFNEqSo6uGZLFNFJnOG2422RP/Nby2d0p+ y/iMO8RsfobX0HHyT+dfEnNrV0O/QxFxdlcj2Tf/yCJM361sU+2FQVFnpsIokwZw 86G1cy8KpCmp6ZhjbzcWAKCwQEbWX+GDGPbLxOlaPGjcPED8CqpGs1OmxTSs49Ah QBGwQxUX8NAIAHGxoUAb79hcIlEymcXDwrnhT6YHeas6tLzQwQJXJ5jdqPsum6X7 DZeLM9l5eDXVnDdYyDTj8nngA72ztBpMGxDcFwLExJkSO29+jR1Gjjyh4UNqVI3L wRJoHcL7fgS8hQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:17:23 2025 by rpki-client