This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json) Hash identifier: Pb9qImYcOmRh0dB2tqH+kl7fii/TRdyzjY08ghIqtS4= Subject key identifier: D0:C6:7A:BE:67:66:C3:92:6F:3C:93:E7:36:50:BA:67:F8:F9:6F:1B Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Certificate serial: 019B243F1275235057E9F15DB1BB757E0DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft Manifest number: 0874 Signing time: Mon 15 Dec 2025 23:01:11 +0000 Manifest this update: Mon 15 Dec 2025 23:01:11 +0000 Manifest next update: Tue 16 Dec 2025 23:01:11 +0000 Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: 4xiI5C2T/yZ/OtTbotyYNvIDpbqxbojTd4LA80htAF4=) 2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:12:75:23:50:57:e9:f1:5d:b1:bb:75:7e:0d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2 Validity Not Before: Dec 15 23:01:11 2025 GMT Not After : Dec 16 23:01:11 2025 GMT Subject: CN=d0c67abe6766c3926f3c93e73650ba67f8f96f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:a6:3c:6c:83:c0:a5:9e:f2:ae:d6:69:78: 18:f6:18:4a:16:16:e4:13:91:36:0a:ae:87:b2:08: 84:c1:c0:f7:a1:5b:59:60:64:f4:8b:ae:0b:39:1a: b5:8e:68:9a:b4:08:b6:d4:90:af:1d:36:70:55:80: 20:18:3d:94:74:6a:71:0d:1c:ac:44:76:7f:be:84: b0:dc:d3:dd:cc:f1:ec:35:00:c4:23:6d:9c:50:0d: 3b:24:1d:54:34:7d:01:48:da:bb:82:ac:f3:39:3b: 78:db:77:8c:c6:7c:30:72:f3:71:c9:7e:63:eb:d4: 32:3b:10:7f:f0:63:e6:d5:27:33:1f:f5:bb:0a:8f: c4:5f:57:48:e8:b0:c7:89:19:b0:45:a8:8a:e3:76: 2d:8b:2d:a4:05:a7:1a:7a:84:ca:a9:1a:f8:32:24: df:02:7b:60:57:4c:02:ae:a6:bf:f0:9b:5a:c5:aa: b0:34:96:d7:d2:9d:a8:bf:13:2e:24:0c:2d:77:33: f7:27:ec:8c:7c:f0:ff:da:c4:a0:ce:04:8d:9e:cd: 16:d5:a0:0a:19:ab:05:b7:d0:71:c1:7b:07:ca:9c: 51:55:08:de:37:51:97:0e:9d:ac:14:24:77:e6:80: 32:94:fa:3f:92:9f:37:bc:24:a6:8d:2b:7c:d2:4b: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C6:7A:BE:67:66:C3:92:6F:3C:93:E7:36:50:BA:67:F8:F9:6F:1B X509v3 Authority Key Identifier: keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:2b:70:ba:bf:98:1c:59:7c:20:26:55:ab:51:54:64:6d: 45:21:fd:f3:b2:0c:ff:5b:67:0d:e6:e1:ce:8b:66:41:0f:36: f7:a7:73:4d:e9:5a:d7:b1:84:b2:99:57:23:2e:6a:21:fc:e9: eb:46:2b:ed:9c:1f:2f:2c:74:45:88:d5:92:84:12:4d:1c:5e: 8b:85:29:5c:63:d4:86:14:5a:32:3f:e8:51:d0:de:db:19:f4: 51:a4:12:2c:69:d5:75:f7:eb:4c:0f:40:56:6e:7e:13:d2:a7: c3:ad:fd:3f:af:08:78:e1:82:d5:00:31:b6:14:a9:24:49:31: 9b:4b:8a:6e:f7:85:cc:60:0d:62:56:e2:f4:e9:8e:3c:5f:74: ab:a0:d3:86:8d:34:46:d4:9a:84:05:12:35:f9:9a:07:09:03: 81:d9:de:eb:9d:4f:45:e3:d1:a2:48:1c:c7:d5:b1:60:bd:ca: d3:2d:07:42:c0:43:b8:6f:4b:d6:e3:d3:83:aa:c9:2d:0f:df: 27:31:ae:c6:1b:12:90:b4:6e:1b:3d:b6:27:0c:85:c7:d8:95: 15:d3:3c:1e:b2:dd:e8:5e:a7:ec:1c:8b:bf:3c:a6:9e:b5:ca: a6:d8:ff:be:22:be:88:47:6d:2c:38:0b:fb:de:87:24:f7:bf: e0:6f:76:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPxJ1I1BX6fFdsbt1fg3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjYyOTE2MTk3Zjc3OTZjZWM1NzhlYTQzNTJmYWU0ZWY4 OWFlYzIwHhcNMjUxMjE1MjMwMTExWhcNMjUxMjE2MjMwMTExWjAzMTEwLwYDVQQD EyhkMGM2N2FiZTY3NjZjMzkyNmYzYzkzZTczNjUwYmE2N2Y4Zjk2ZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04CmPGyDwKWe8q7WaXgY9hhKFhbk E5E2Cq6HsgiEwcD3oVtZYGT0i64LORq1jmiatAi21JCvHTZwVYAgGD2UdGpxDRys RHZ/voSw3NPdzPHsNQDEI22cUA07JB1UNH0BSNq7gqzzOTt423eMxnwwcvNxyX5j 69QyOxB/8GPm1SczH/W7Co/EX1dI6LDHiRmwRaiK43Ytiy2kBacaeoTKqRr4MiTf AntgV0wCrqa/8JtaxaqwNJbX0p2ovxMuJAwtdzP3J+yMfPD/2sSgzgSNns0W1aAK GasFt9BxwXsHypxRVQjeN1GXDp2sFCR35oAylPo/kp83vCSmjSt80ksTeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDGer5nZsOSbzyT5zZQumf4+W8bMB8GA1UdIwQY MBaAFKf2KRYZf3eWzsV46kNS+uTvia7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQt ZWM5N2YxOGE3OTRhLzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNzFjYTctNTA3MC00YmNjLWEwMGQtZWM5N2YxOGE3OTRh LzEvcF9ZcEZobF9kNWJPeFhqcVExTDY1Ty1KcnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmIrcLq/ mBxZfCAmVatRVGRtRSH987IM/1tnDebhzotmQQ8296dzTela17GEsplXIy5qIfzp 60Yr7ZwfLyx0RYjVkoQSTRxei4UpXGPUhhRaMj/oUdDe2xn0UaQSLGnVdffrTA9A Vm5+E9Knw639P68IeOGC1QAxthSpJEkxm0uKbveFzGANYlbi9OmOPF90q6DTho00 RtSahAUSNfmaBwkDgdne651PRePRokgcx9WxYL3K0y0HQsBDuG9L1uPTg6rJLQ/f JzGuxhsSkLRuGz22JwyFx9iVFdM8HrLd6F6n7ByLvzymnrXKptj/viK+iEdtLDgL +96HJPe/4G92wg== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:34 2025 by rpki-client