This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft File: YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json) Hash identifier: lUoejH8BJ8v+x8lCuGpvyx9uYhqiRfnPiJtLWdL90eY= Subject key identifier: C2:DF:85:E1:B0:FD:71:6F:8B:97:70:31:EC:42:3F:A8:D1:AF:C3:79 Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f Certificate serial: 019AF164796FB3A7D177F24676EEF7C61B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft Manifest number: 16B9 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=) 2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: ecojKLT6OWTkVtr9G9v88mWnrynoIMXDyAFwNhxX/uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:79:6f:b3:a7:d1:77:f2:46:76:ee:f7:c6:1b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=c2df85e1b0fd716f8b977031ec423fa8d1afc379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:18:86:0b:fe:e5:da:0d:00:95:2d:c7:6a: a6:73:fc:91:15:d2:2c:81:f2:17:66:8d:bf:86:5b: 08:50:7c:63:ee:3f:90:98:bb:4e:0d:88:8b:18:03: 2e:86:a4:55:f4:c9:d7:21:ba:f0:fe:c9:fc:df:0e: ed:db:61:4d:09:1c:b3:6c:7b:6b:27:73:8b:74:e1: f3:03:b6:8b:f2:ca:ae:04:1a:61:3b:89:97:70:11: 64:38:c4:30:0d:63:59:d1:0d:2a:54:4c:a9:e3:e3: 4a:c7:12:94:de:d4:c4:d3:ed:97:d5:03:f8:0f:9f: 6d:3b:88:b0:36:48:72:b9:f1:30:0b:ea:b6:f6:87: b6:e9:85:d6:57:d5:8a:c4:2f:81:b5:12:dd:a5:cd: b5:53:43:98:0b:61:88:48:ea:97:92:5e:d3:ca:ff: d0:bf:51:e2:bf:84:56:f0:13:4c:ae:f2:f7:5e:6a: c3:f3:eb:b9:f8:21:1b:7e:e0:e8:a4:4c:57:2d:40: c6:76:de:3d:77:fe:8e:af:d5:b4:12:c0:b2:f3:15: 14:6a:d6:b1:be:b5:5b:ed:58:8b:ed:76:7f:37:9a: c7:4d:07:8e:06:e5:d1:7d:72:33:c7:9a:f0:8c:b5: e5:62:46:c5:5f:03:24:d1:5d:27:1f:3f:48:ea:6f: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:85:E1:B0:FD:71:6F:8B:97:70:31:EC:42:3F:A8:D1:AF:C3:79 X509v3 Authority Key Identifier: keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:42:20:31:30:33:a0:b4:b4:28:df:37:8b:05:7e:3f:11:b5: 30:c4:e5:76:7d:9a:6d:e7:02:3c:1a:d5:53:36:0b:16:16:54: 20:dc:88:14:f8:6e:60:eb:46:16:6b:6b:a4:28:da:b2:a2:35: 36:2d:95:f5:e4:a6:37:2b:43:f0:8a:1f:29:86:39:3a:4d:09: a2:23:e0:4c:f7:5c:01:25:58:4b:e9:6a:52:1b:7f:18:3f:c6: 25:25:2f:24:72:1c:76:f0:14:a8:ba:52:fc:2d:be:a5:2f:18: 8d:33:85:24:4f:66:a4:5d:a3:2f:f0:a2:57:fc:b7:36:ee:29: bb:2f:9b:89:5a:5d:88:63:b4:c6:64:98:46:e3:31:1e:3d:c2: 60:aa:bd:8f:0f:9b:ef:77:ff:cd:b4:f1:55:66:0d:28:e5:77: 2c:1c:66:00:ae:5f:33:62:aa:0e:57:0f:0e:d2:ff:c8:17:c6: 60:c2:6c:42:84:86:b1:5a:46:1a:be:d9:58:c6:93:67:6e:8b: 8d:6b:32:da:17:52:93:f6:9f:53:53:f9:66:08:f9:47:27:44: 82:69:d7:42:7d:80:07:4d:52:ec:52:fd:39:92:37:98:f6:af: b6:b1:10:97:77:cd:3c:e9:71:bc:32:46:d7:ef:e1:44:80:7e: 8d:a6:b9:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHlvs6fRd/JGdu73xhtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm MjIyOGYwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EyhjMmRmODVlMWIwZmQ3MTZmOGI5NzcwMzFlYzQyM2ZhOGQxYWZjMzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23AYhgv+5doNAJUtx2qmc/yRFdIs gfIXZo2/hlsIUHxj7j+QmLtODYiLGAMuhqRV9MnXIbrw/sn83w7t22FNCRyzbHtr J3OLdOHzA7aL8squBBphO4mXcBFkOMQwDWNZ0Q0qVEyp4+NKxxKU3tTE0+2X1QP4 D59tO4iwNkhyufEwC+q29oe26YXWV9WKxC+BtRLdpc21U0OYC2GISOqXkl7Tyv/Q v1Hiv4RW8BNMrvL3XmrD8+u5+CEbfuDopExXLUDGdt49d/6Or9W0EsCy8xUUatax vrVb7ViL7XZ/N5rHTQeOBuXRfXIzx5rwjLXlYkbFXwMk0V0nHz9I6m/NcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLfheGw/XFvi5dwMexCP6jRr8N5MB8GA1UdIwQY MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt MmM3ZWY5ZmYwM2Y1LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYtMmM3ZWY5ZmYwM2Y1 LzEvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0IgMTAz oLS0KN83iwV+PxG1MMTldn2abecCPBrVUzYLFhZUINyIFPhuYOtGFmtrpCjasqI1 Ni2V9eSmNytD8IofKYY5Ok0JoiPgTPdcASVYS+lqUht/GD/GJSUvJHIcdvAUqLpS /C2+pS8YjTOFJE9mpF2jL/CiV/y3Nu4puy+biVpdiGO0xmSYRuMxHj3CYKq9jw+b 73f/zbTxVWYNKOV3LBxmAK5fM2KqDlcPDtL/yBfGYMJsQoSGsVpGGr7ZWMaTZ26L jWsy2hdSk/afU1P5Zgj5RydEgmnXQn2AB01S7FL9OZI3mPavtrEQl3fNPOlxvDJG 1+/hRIB+jaa5Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:36 2025 by rpki-client