This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json) Hash identifier: RTPnqkY79gN/4mesjs2NUXNwfC9suZACEl7jZUiDpw0= Subject key identifier: D1:86:65:A3:C0:76:83:9B:16:09:21:25:A4:C8:5D:88:C6:A6:60:1E Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31 Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31 Certificate serial: 019AF2773D6D47466F9E7E7CB3F8A934EB6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft Manifest number: 13A9 Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: jEodpdZnWqbkY03VjWiAaSlrt+4bFbkBXfIF63sKXrI=) 2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3d:6d:47:46:6f:9e:7e:7c:b3:f8:a9:34:eb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=d18665a3c076839b16092125a4c85d88c6a6601e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:3f:fb:0f:3c:f6:42:bd:eb:8d:ae:04:80: b7:d0:f3:20:2f:d4:e0:8d:ad:cc:ee:e2:be:9d:1e: c5:4c:e2:62:dc:8f:00:b6:31:44:cc:1d:01:84:b6: b5:18:8f:1e:65:4c:c2:32:96:a2:1b:bf:e9:35:c4: 52:0e:9c:6c:06:84:5e:3b:45:74:02:fe:d0:5c:52: 39:57:9f:f2:d2:31:a8:c2:b8:19:b7:35:63:68:da: 73:74:88:1c:c9:a3:54:34:95:56:a5:f5:56:19:11: c0:a8:11:ff:22:08:1e:a3:28:f1:0f:e5:b0:5e:59: b0:dc:3a:b9:f1:16:1b:e5:e4:70:5d:44:d3:57:2d: 04:82:a6:fa:24:2f:5e:c7:a0:9a:7b:a6:ce:76:b2: 82:02:42:2a:d5:11:a3:cd:7d:4f:c8:ab:44:69:ad: a4:24:3d:97:01:71:30:35:a9:c7:9f:31:2d:c4:1e: 01:3c:70:9d:6b:77:b5:0e:17:23:61:65:73:d4:57: 15:76:a9:73:8b:34:cb:bb:84:a3:00:aa:87:e5:f5: 39:79:1e:53:11:7e:bb:55:0b:14:fc:b0:dd:83:ca: 9a:e3:1e:8e:5c:26:90:3c:da:38:16:b4:63:85:38: 05:4d:d4:d7:86:be:7a:e5:82:59:00:b2:d0:66:29: 0a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:65:A3:C0:76:83:9B:16:09:21:25:A4:C8:5D:88:C6:A6:60:1E X509v3 Authority Key Identifier: keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dd:eb:f7:ba:83:b7:2c:da:b6:96:06:9a:07:fe:20:0c:1c: 42:31:df:4f:8c:46:a5:4c:ab:c6:a2:2f:b7:1d:44:0d:5c:a9: 16:ca:26:d1:29:1b:59:33:f6:f1:be:83:35:d4:3d:63:16:8f: d6:f6:32:11:df:e7:93:f7:d6:60:b1:3b:c6:56:78:03:c8:84: 5b:44:1e:9e:ae:f3:29:ca:74:2b:cb:f1:20:cc:b9:8f:eb:22: 3e:75:e9:5c:78:75:89:cb:4b:d4:09:af:a0:2b:04:da:43:2b: b9:26:3f:45:63:fe:e4:a1:21:85:18:a0:a2:3f:c1:8b:f0:7a: f7:bf:57:34:a6:1c:f4:3d:32:9f:ce:db:1b:0a:b5:09:15:d2: f5:31:1d:3d:c5:a4:ba:a9:75:0e:d4:17:a6:89:b5:e7:87:ed: 59:b9:0b:68:8d:f7:7e:a6:2b:9d:23:80:ef:d9:ad:c0:51:cc: 8e:09:66:e0:db:75:b2:cc:94:70:ae:57:9e:53:32:7a:24:35: f9:e9:d3:f5:52:f7:f7:bb:c0:46:bb:6d:8b:a9:bb:d3:8b:6e: 62:c8:7d:6a:83:4b:06:4b:02:78:98:d0:9b:6d:61:f3:f2:56: 5f:bd:51:7f:f6:43:58:47:a8:70:eb:ea:f6:5e:72:dd:cb:5e: 2c:69:03:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydz1tR0Zvnn58s/ipNOtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODhhODhkNTk1ZGMyZWQ4YzJmOTIzOTY0NWM0ZThjNWU3 MzdkMzEwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EyhkMTg2NjVhM2MwNzY4MzliMTYwOTIxMjVhNGM4NWQ4OGM2YTY2MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRU/+w889kK9642uBIC30PMgL9Tg ja3M7uK+nR7FTOJi3I8AtjFEzB0BhLa1GI8eZUzCMpaiG7/pNcRSDpxsBoReO0V0 Av7QXFI5V5/y0jGowrgZtzVjaNpzdIgcyaNUNJVWpfVWGRHAqBH/IggeoyjxD+Ww Xlmw3Dq58RYb5eRwXUTTVy0Egqb6JC9ex6Cae6bOdrKCAkIq1RGjzX1PyKtEaa2k JD2XAXEwNanHnzEtxB4BPHCda3e1DhcjYWVz1FcVdqlzizTLu4SjAKqH5fU5eR5T EX67VQsU/LDdg8qa4x6OXCaQPNo4FrRjhTgFTdTXhr565YJZALLQZikKNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGGZaPAdoObFgkhJaTIXYjGpmAeMB8GA1UdIwQY MBaAFNGIqI1ZXcLtjC+SOWRcToxec30xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAt ZDk1M2Y0ODU0NzU3LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wY2VlMTktYWYwZi00ZTkzLTgwMTAtZDk1M2Y0ODU0NzU3 LzEvMFlpb2pWbGR3dTJNTDVJNVpGeE9qRjV6ZlRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOt3r97qD tyzatpYGmgf+IAwcQjHfT4xGpUyrxqIvtx1EDVypFsom0SkbWTP28b6DNdQ9YxaP 1vYyEd/nk/fWYLE7xlZ4A8iEW0Qenq7zKcp0K8vxIMy5j+siPnXpXHh1ictL1Amv oCsE2kMruSY/RWP+5KEhhRigoj/Bi/B6979XNKYc9D0yn87bGwq1CRXS9TEdPcWk uql1DtQXpom154ftWbkLaI33fqYrnSOA79mtwFHMjglm4Nt1ssyUcK5XnlMyeiQ1 +enT9VL397vARrtti6m704tuYsh9aoNLBksCeJjQm21h8/JWX71Rf/ZDWEeocOvq 9l5y3cteLGkDxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:15 2025 by rpki-client