This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft File: yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json) Hash identifier: yE8fIMD3OQuct83PEGct9Un5EwfJ2mHpKsqUVWJWGfU= Subject key identifier: DC:06:BB:40:CD:EC:F9:40:46:45:34:FA:9A:A7:69:E8:CD:31:DE:7D Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F Certificate issuer: /CN=cb2762070f12543f1b0ac71982ac71025810ff5f Certificate serial: 019AF208ABEE627190E8935ECD73D09853EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft Manifest number: 097D Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=) 2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: pLExh8hj1Hkh0kYL1wJNNgVwu+Oc7ZQai2N0lSbhNyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ab:ee:62:71:90:e8:93:5e:cd:73:d0:98:53:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=dc06bb40cdecf940464534fa9aa769e8cd31de7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:de:82:c0:f1:0b:7f:9f:10:c9:f7:e7:4c: bc:c2:9e:7f:4d:69:e3:de:94:d1:72:eb:a0:8a:95: 39:a7:fb:eb:fa:9d:e6:19:d3:91:d3:33:72:df:bd: a9:38:67:01:be:9a:12:da:51:8e:d8:05:aa:c4:8c: ce:4b:36:31:73:76:08:6d:4d:a1:72:fe:7d:63:c3: d6:79:03:21:d5:3b:74:ca:61:a5:3d:be:bb:aa:df: e3:bd:b1:1f:d0:93:a2:02:17:f6:50:30:e3:59:3c: 04:7a:62:2e:1b:fd:71:ff:93:f2:d9:10:b1:97:63: bd:44:1f:62:f2:11:88:a2:aa:32:47:14:c0:74:7a: 92:50:09:6d:54:8a:53:02:e3:38:cc:d5:85:6c:5d: 8f:15:7e:e9:58:8e:12:ee:ae:ae:0d:f7:70:21:90: 51:3c:be:dc:03:e9:79:84:0c:06:c9:74:b3:11:06: 07:0b:09:7e:7b:69:75:93:d5:14:d3:6b:79:15:cd: 46:f9:ce:75:0b:af:e7:4d:8e:37:88:a6:66:a1:13: dd:6b:1c:cd:65:ac:2f:a0:2e:fe:94:aa:22:6e:5a: ae:1f:23:28:e8:3f:4b:74:80:ae:19:43:15:ca:56: 58:95:f4:90:56:f9:6e:49:16:f5:c5:d4:48:7d:85: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:06:BB:40:CD:EC:F9:40:46:45:34:FA:9A:A7:69:E8:CD:31:DE:7D X509v3 Authority Key Identifier: keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:35:64:d8:f2:50:29:b9:0e:bd:96:d5:8a:32:44:10:81:65: e7:e3:3a:c1:f3:52:30:d2:8a:3c:e5:77:c8:9d:50:39:9c:06: dc:02:42:fa:ac:a2:bf:db:c7:b4:1f:51:40:dd:ff:a9:da:a9: 61:43:65:e3:3e:40:26:e0:bd:21:43:c9:8b:05:53:77:54:f1: 05:5c:85:d1:ca:20:d6:20:9d:1e:94:ae:76:7a:05:97:93:ca: 63:c2:47:4c:2e:ec:5f:bb:cc:f9:98:81:df:8c:d4:36:96:9d: c0:35:45:46:d7:8a:49:9f:8d:48:2d:17:9b:9c:57:42:93:d1: 26:ad:b6:25:0b:5d:13:21:c8:42:ab:99:22:10:4b:0d:65:90: 64:6b:63:dc:67:dd:85:3a:7e:17:a8:1e:45:e1:b7:b2:a9:d3: f8:3b:a1:0a:9f:fd:c6:06:46:96:ba:29:72:09:9e:8f:35:1a: 93:02:4c:61:eb:22:8f:46:b1:87:24:8e:cd:ff:44:fd:3b:29: 5d:9b:6f:06:2e:78:28:e7:d7:98:b1:f8:57:fc:95:e9:41:76: e1:8f:a3:3d:c0:07:2d:a1:47:08:91:49:da:16:58:1f:61:3b: 81:0b:22:3b:65:7c:98:57:1e:bc:72:68:0d:99:c6:8d:58:aa: ca:97:fc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKvuYnGQ6JNezXPQmFPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMjc2MjA3MGYxMjU0M2YxYjBhYzcxOTgyYWM3MTAyNTgx MGZmNWYwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EyhkYzA2YmI0MGNkZWNmOTQwNDY0NTM0ZmE5YWE3NjllOGNkMzFkZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vegsDxC3+fEMn350y8wp5/TWnj 3pTRcuugipU5p/vr+p3mGdOR0zNy372pOGcBvpoS2lGO2AWqxIzOSzYxc3YIbU2h cv59Y8PWeQMh1Tt0ymGlPb67qt/jvbEf0JOiAhf2UDDjWTwEemIuG/1x/5Py2RCx l2O9RB9i8hGIoqoyRxTAdHqSUAltVIpTAuM4zNWFbF2PFX7pWI4S7q6uDfdwIZBR PL7cA+l5hAwGyXSzEQYHCwl+e2l1k9UU02t5Fc1G+c51C6/nTY43iKZmoRPdaxzN ZawvoC7+lKoiblquHyMo6D9LdICuGUMVylZYlfSQVvluSRb1xdRIfYXicQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwGu0DN7PlARkU0+pqnaejNMd59MB8GA1UdIwQY MBaAFMsnYgcPElQ/GwrHGYKscQJYEP9fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMt ZWY0Y2RhNWY1MmNmLzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hZTZlM2EtOWNlYS00N2M3LWFiMTMtZWY0Y2RhNWY1MmNm LzEveXlkaUJ3OFNWRDhiQ3NjWmdxeHhBbGdRXzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijVk2PJQ KbkOvZbVijJEEIFl5+M6wfNSMNKKPOV3yJ1QOZwG3AJC+qyiv9vHtB9RQN3/qdqp YUNl4z5AJuC9IUPJiwVTd1TxBVyF0cog1iCdHpSudnoFl5PKY8JHTC7sX7vM+ZiB 34zUNpadwDVFRteKSZ+NSC0Xm5xXQpPRJq22JQtdEyHIQquZIhBLDWWQZGtj3Gfd hTp+F6geReG3sqnT+DuhCp/9xgZGlropcgmejzUakwJMYesij0axhySOzf9E/Tsp XZtvBi54KOfXmLH4V/yV6UF24Y+jPcAHLaFHCJFJ2hZYH2E7gQsiO2V8mFcevHJo DZnGjViqypf8Pw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:52 2025 by rpki-client