This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft File: yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json) Hash identifier: oUVprt0BgKS/KytRUadcAGaidnDhsAtPQtXGTHoK7ck= Subject key identifier: 3C:F4:D8:E2:E6:48:FD:B2:D5:BE:0C:F0:69:19:B9:65:E6:DF:8C:86 Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A Certificate issuer: /CN=c83c4c9d2fce61665165c05a101e815047b64f6a Certificate serial: 019B2BF8709DF896BB1C57F5F1133C6307EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft Manifest number: 0712 Signing time: Wed 17 Dec 2025 11:01:00 +0000 Manifest this update: Wed 17 Dec 2025 11:01:00 +0000 Manifest next update: Thu 18 Dec 2025 11:01:00 +0000 Files and hashes: 1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=) 2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: bofPtt5R2tqisBcY1ZxkHfKSza5f1fw4TWuInZyY86c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:70:9d:f8:96:bb:1c:57:f5:f1:13:3c:63:07:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a Validity Not Before: Dec 17 11:01:00 2025 GMT Not After : Dec 18 11:01:00 2025 GMT Subject: CN=3cf4d8e2e648fdb2d5be0cf06919b965e6df8c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:12:27:28:da:f7:29:ec:34:fe:ec:bb:6b: 9e:20:a6:3c:e0:54:ad:84:0c:30:a6:fc:a5:1e:fc: f1:7a:da:d2:09:69:97:49:7d:69:fe:04:e2:1e:c2: c5:c0:a5:be:a1:3d:8b:d9:88:c0:03:f3:c7:73:11: 21:60:41:0e:90:be:eb:9a:b2:a0:3e:56:5f:8a:2b: 23:93:5e:35:47:91:d7:24:e9:f4:24:cb:5c:24:f0: 77:6f:b2:81:83:06:4b:04:46:42:dc:c9:d8:16:b5: cb:7d:20:01:f8:a9:1d:10:f1:ae:97:aa:05:df:28: af:44:f3:98:8e:52:26:68:2e:0c:bb:39:5d:24:cb: 63:46:1f:83:d6:46:c4:c2:8c:76:28:89:05:96:d4: a7:6e:2a:8b:dc:8a:55:3c:5e:f5:9b:c7:d8:a9:b1: d1:5a:6f:12:ba:88:b4:93:ea:12:2f:bb:61:41:6f: 2e:5b:85:b0:47:86:d4:b3:ca:e8:00:7d:a7:15:bf: 82:80:c1:e4:c0:55:ab:e0:f5:bc:17:c7:ed:2a:53: 83:e4:17:b6:93:5a:8c:de:74:d3:9c:7f:f4:77:63: 31:63:0b:f0:74:ae:5d:af:76:13:4f:4a:49:ab:2f: e2:e9:1d:79:47:e4:bc:a7:b5:ae:14:72:f2:73:a7: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:D8:E2:E6:48:FD:B2:D5:BE:0C:F0:69:19:B9:65:E6:DF:8C:86 X509v3 Authority Key Identifier: keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9c:7f:d8:1d:da:1b:9a:f9:fe:f0:01:9c:63:59:c5:e4:60: 5b:21:d1:6c:b0:55:93:f5:e2:a8:93:a8:05:04:1e:10:d9:5a: a2:78:ae:2e:2a:07:78:50:41:d5:00:18:99:af:1a:de:d9:96: d6:cc:18:80:51:9b:dd:a0:df:d0:17:37:e0:2c:21:3b:a5:9c: 01:c6:3f:77:e3:ac:60:15:db:8e:d8:e5:a6:d7:29:07:ac:7b: c6:54:5e:11:91:d4:1f:25:bf:6d:ef:9b:38:ac:a3:f0:7b:44: 17:cd:00:0f:e1:3f:9c:4e:2c:c2:cb:65:50:9f:98:18:00:ce: 89:1f:e5:4d:89:9b:2a:54:1b:4c:86:32:cb:9a:36:da:ce:23: 7a:ce:4a:9d:e6:e7:46:67:f6:22:df:35:60:37:6a:1c:ea:41: 51:08:d6:27:5d:33:69:e1:69:52:35:16:19:ad:4c:fb:bd:9c: 29:74:18:70:39:ac:44:73:a9:e5:0e:7c:dd:e0:f9:b8:52:57: b7:55:97:2e:f0:a4:ae:a0:7e:3b:c8:73:90:9f:5c:04:ae:99: e6:bd:05:8e:19:5f:34:26:8c:9f:5b:22:7b:51:0f:4b:db:8d: be:de:d3:6f:09:1f:42:34:2b:ef:82:6c:4f:63:5c:ea:70:a0: be:09:39:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+HCd+Ja7HFf18RM8YwfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi NjRmNmEwHhcNMjUxMjE3MTEwMTAwWhcNMjUxMjE4MTEwMTAwWjAzMTEwLwYDVQQD EygzY2Y0ZDhlMmU2NDhmZGIyZDViZTBjZjA2OTE5Yjk2NWU2ZGY4Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGESJyja9ynsNP7su2ueIKY84FSt hAwwpvylHvzxetrSCWmXSX1p/gTiHsLFwKW+oT2L2YjAA/PHcxEhYEEOkL7rmrKg PlZfiisjk141R5HXJOn0JMtcJPB3b7KBgwZLBEZC3MnYFrXLfSAB+KkdEPGul6oF 3yivRPOYjlImaC4MuzldJMtjRh+D1kbEwox2KIkFltSnbiqL3IpVPF71m8fYqbHR Wm8Suoi0k+oSL7thQW8uW4WwR4bUs8roAH2nFb+CgMHkwFWr4PW8F8ftKlOD5Be2 k1qM3nTTnH/0d2MxYwvwdK5dr3YTT0pJqy/i6R15R+S8p7WuFHLyc6f+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz02OLmSP2y1b4M8GkZuWXm34yGMB8GA1UdIwQY MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2 LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJx/2B3a G5r5/vABnGNZxeRgWyHRbLBVk/XiqJOoBQQeENlaoniuLioHeFBB1QAYma8a3tmW 1swYgFGb3aDf0Bc34CwhO6WcAcY/d+OsYBXbjtjlptcpB6x7xlReEZHUHyW/be+b OKyj8HtEF80AD+E/nE4swstlUJ+YGADOiR/lTYmbKlQbTIYyy5o22s4jes5Knebn Rmf2It81YDdqHOpBUQjWJ10zaeFpUjUWGa1M+72cKXQYcDmsRHOp5Q583eD5uFJX t1WXLvCkrqB+O8hzkJ9cBK6Z5r0FjhlfNCaMn1sie1EPS9uNvt7TbwkfQjQr74Js T2Nc6nCgvgk5Qg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:12:57 2025 by rpki-client