This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft File: ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json) Hash identifier: taiSIOa2af/dccESjLFH4ltmWgxS0kv3+gXLvropyvg= Subject key identifier: BD:47:6B:88:57:33:E1:35:7F:CC:C2:31:B9:9C:9F:5B:99:23:79:46 Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64 Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164 Certificate serial: 019AF276BDACEE07D432312FD1BD00C2DF68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft Manifest number: 0ECF Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: qEif1mwOC+OBCk5WbSaujroNfMLhW6f428Y0d/4WS+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bd:ac:ee:07:d4:32:31:2f:d1:bd:00:c2:df:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=bd476b885733e1357fccc231b99c9f5b99237946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:9f:51:71:e7:bf:44:1c:4a:6e:3d:09:02: b4:80:ca:da:9f:48:83:1a:30:48:b6:5f:fb:67:2c: 93:64:ed:d7:5c:fc:80:ce:82:9e:c3:f9:2f:11:18: fe:88:0a:81:1b:df:97:d1:e3:50:c1:8f:70:3e:dd: 84:e3:05:5e:72:14:f1:d0:7d:3f:88:2d:d2:e7:ea: 35:41:40:f9:a0:dc:c0:62:cb:b2:d2:30:b4:73:21: 51:68:b5:46:71:4f:53:d5:ac:49:de:f5:be:22:6a: 30:70:cf:52:51:a0:58:e2:bb:17:75:3f:e8:e4:53: 0f:2e:85:7b:5b:c1:71:f1:c4:ff:a5:70:02:f4:f8: 9e:f6:da:5b:07:84:82:04:4b:b5:b8:90:0f:52:12: 04:50:42:f1:61:4f:3e:08:57:11:bd:eb:55:fb:7f: 94:40:1d:57:93:a1:69:6d:20:46:d6:d9:f6:d6:4c: 21:fd:86:63:d5:d2:dc:53:d1:0f:a1:a3:48:2f:5f: 3f:2b:06:2d:12:30:6f:a2:64:a7:52:1b:8a:bb:65: 01:b5:ae:03:e6:90:06:5f:a5:dd:42:52:74:f0:8e: 57:a3:be:a0:40:0e:c5:15:fc:55:3e:e5:b4:62:32: da:2f:ae:06:fa:39:88:82:7e:4c:4f:96:90:11:05: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:47:6B:88:57:33:E1:35:7F:CC:C2:31:B9:9C:9F:5B:99:23:79:46 X509v3 Authority Key Identifier: keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b6:a7:61:9c:79:f2:ff:ef:d2:21:06:3f:04:9a:5f:67:07: 9d:18:10:c9:d6:8a:be:fc:83:d1:31:75:8c:ee:0c:a7:22:f2: fa:3a:c5:a8:ba:12:b6:78:a8:5d:e6:51:cc:9d:cc:6b:c3:3b: 2c:ff:92:1a:09:2d:6f:c7:12:53:f4:e9:a2:30:bb:e2:39:f4: 35:a0:e3:b7:61:46:76:91:ce:6a:e0:c4:13:a4:e4:64:af:7b: 8c:16:bd:fb:9c:11:b8:6a:d7:54:24:36:9c:50:3b:51:69:fb: 86:a4:77:8f:e9:7c:8a:da:6d:06:c6:8c:93:1c:89:8d:9a:65: 34:32:98:56:2f:90:31:9f:54:79:98:ae:73:01:de:e4:76:29: 0c:a9:51:9d:d7:a3:34:98:b3:79:43:b0:0a:b2:f9:e2:41:6e: 18:0b:dd:5d:14:93:91:ca:d0:e5:ae:3f:d8:e2:45:a9:5c:4b: 6c:c9:eb:0d:16:e2:3c:f9:33:31:6e:34:40:83:d2:96:17:7c: 1e:26:a6:f2:4d:a5:b5:4d:8e:67:5d:7f:cb:10:b3:ba:d5:d2: 57:ec:33:42:9b:f2:95:5c:be:99:19:9a:64:e8:df:76:72:b2: 7b:d8:0d:7c:b9:24:60:26:d9:11:3c:01:3b:72:0d:ae:d6:2d: 36:15:26:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr2s7gfUMjEv0b0Awt9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl NTUxNjQwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EyhiZDQ3NmI4ODU3MzNlMTM1N2ZjY2MyMzFiOTljOWY1Yjk5MjM3OTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaifUXHnv0QcSm49CQK0gMran0iD GjBItl/7ZyyTZO3XXPyAzoKew/kvERj+iAqBG9+X0eNQwY9wPt2E4wVechTx0H0/ iC3S5+o1QUD5oNzAYsuy0jC0cyFRaLVGcU9T1axJ3vW+ImowcM9SUaBY4rsXdT/o 5FMPLoV7W8Fx8cT/pXAC9Pie9tpbB4SCBEu1uJAPUhIEUELxYU8+CFcRvetV+3+U QB1Xk6FpbSBG1tn21kwh/YZj1dLcU9EPoaNIL18/KwYtEjBvomSnUhuKu2UBta4D 5pAGX6XdQlJ08I5Xo76gQA7FFfxVPuW0YjLaL64G+jmIgn5MT5aQEQUuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1Ha4hXM+E1f8zCMbmcn1uZI3lGMB8GA1UdIwQY MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt NmMwNGE2ZWQxM2M1LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1 LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbanYZx5 8v/v0iEGPwSaX2cHnRgQydaKvvyD0TF1jO4MpyLy+jrFqLoStnioXeZRzJ3Ma8M7 LP+SGgktb8cSU/TpojC74jn0NaDjt2FGdpHOauDEE6TkZK97jBa9+5wRuGrXVCQ2 nFA7UWn7hqR3j+l8itptBsaMkxyJjZplNDKYVi+QMZ9UeZiucwHe5HYpDKlRndej NJizeUOwCrL54kFuGAvdXRSTkcrQ5a4/2OJFqVxLbMnrDRbiPPkzMW40QIPSlhd8 Hiam8k2ltU2OZ11/yxCzutXSV+wzQpvylVy+mRmaZOjfdnKye9gNfLkkYCbZETwB O3INrtYtNhUmng== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:09 2025 by rpki-client