This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json) Hash identifier: 9mBgyoUM7Qd802ENWBgiJj2jB56iP5ERynqIGrsJUms= Subject key identifier: 34:06:F9:B6:02:31:75:E3:FB:69:36:36:14:73:42:54:CE:3D:FE:17 Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Certificate serial: 019AF1D1819F1F01EE2B7B14063F73CA7C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: ptvhe8/njOoXsWrXyN+sDVBZjzKLZa7HcyTcz7bBGUg=) 2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=) 3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=) 4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:81:9f:1f:01:ee:2b:7b:14:06:3f:73:ca:7c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=3406f9b6023175e3fb69363614734254ce3dfe17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:9f:a0:dd:62:56:b0:43:04:eb:25:1f:ef: 9e:e8:8b:7f:c7:a3:a3:8f:cd:b1:4c:4f:b2:1f:a4: e9:bf:2e:41:6d:18:1e:aa:a7:1e:a3:fe:12:67:9a: 95:19:65:b2:69:33:7e:68:91:bc:43:2a:2b:0d:25: 88:00:4b:a4:eb:a1:6e:fe:1d:12:01:a1:5f:f2:f6: 19:87:16:88:51:d9:26:18:4c:8c:1b:5a:50:d1:71: 73:a2:cb:94:e0:ad:c5:13:a6:5c:0d:ba:e2:2a:8f: 1a:61:6c:d8:ab:5f:4f:06:db:8b:d0:bc:f0:09:2b: 1f:c2:d4:dd:cb:0e:1e:f2:33:78:53:fd:8d:d8:51: a5:a0:da:71:c0:ea:3a:d9:a8:55:32:2c:4c:a7:b2: a9:c0:64:ad:ba:ef:b8:5e:e0:69:fe:2b:7d:a3:ad: 13:39:33:32:29:c1:c2:1a:66:7a:a0:0e:b0:c4:63: 67:94:84:ab:e1:46:39:fb:05:d1:1a:3b:b5:1f:c5: 79:1d:08:3e:32:ae:5c:1a:9b:f5:09:69:28:13:d6: 13:dd:a7:14:fe:40:53:d3:20:76:e2:2c:54:ea:25: 55:37:3f:87:c7:cc:a7:0f:54:32:87:b4:00:9b:d1: 6c:27:67:96:2c:d4:28:8a:c8:2e:45:c6:83:ef:57: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:06:F9:B6:02:31:75:E3:FB:69:36:36:14:73:42:54:CE:3D:FE:17 X509v3 Authority Key Identifier: keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2f:c0:cb:8d:04:2c:e5:6d:1a:cf:7c:33:ba:aa:22:cb:7e: 75:61:2f:e3:bf:e7:43:48:76:e8:cd:55:89:28:34:fc:fc:22: eb:3a:5c:75:da:28:f7:51:97:99:53:83:96:8e:25:f5:5d:be: b4:b2:32:bd:c2:5f:61:eb:85:dc:4b:16:16:dd:5a:dd:fe:e8: 35:ff:d0:bb:74:5a:5a:b6:7f:b1:82:e6:6d:d8:c1:5d:10:77: e4:64:f1:8f:38:c9:59:34:13:11:43:ce:53:10:ab:51:fa:57: 64:2a:28:6a:45:ca:e7:90:e6:ee:1c:dc:f8:d0:15:96:11:ce: 7d:2c:57:af:e4:20:16:e0:da:41:a1:7b:00:a3:01:83:42:69: ab:8b:21:c4:f4:53:3a:e8:b8:3e:2d:6d:f1:48:e8:55:d2:66: e6:d0:b2:9b:58:b6:ae:94:c1:8f:ec:f0:7c:ac:b5:ed:a1:6f: 2d:99:b7:13:66:93:20:50:d3:4c:8d:d2:66:06:1a:fd:a3:9d: 55:9e:34:ea:f5:85:05:6e:23:d5:ff:fc:64:0b:00:a0:88:36: e3:3c:f3:2c:87:ee:d6:e5:47:b1:29:60:7f:eb:08:f6:0a:45: b9:0e:d3:cb:f7:e6:9c:97:4a:6a:d1:da:72:5b:7e:17:23:1b: 8e:82:a0:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YGfHwHuK3sUBj9zynw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1 MDkyMGUwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD EygzNDA2ZjliNjAyMzE3NWUzZmI2OTM2MzYxNDczNDI1NGNlM2RmZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yqfoN1iVrBDBOslH++e6It/x6Oj j82xTE+yH6Tpvy5BbRgeqqceo/4SZ5qVGWWyaTN+aJG8QyorDSWIAEuk66Fu/h0S AaFf8vYZhxaIUdkmGEyMG1pQ0XFzosuU4K3FE6ZcDbriKo8aYWzYq19PBtuL0Lzw CSsfwtTdyw4e8jN4U/2N2FGloNpxwOo62ahVMixMp7KpwGStuu+4XuBp/it9o60T OTMyKcHCGmZ6oA6wxGNnlISr4UY5+wXRGju1H8V5HQg+Mq5cGpv1CWkoE9YT3acU /kBT0yB24ixU6iVVNz+Hx8ynD1Qyh7QAm9FsJ2eWLNQoisguRcaD71c5QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQG+bYCMXXj+2k2NhRzQlTOPf4XMB8GA1UdIwQY MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt Mzg4YjgxYzBjOTBjLzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZi/Ay40E LOVtGs98M7qqIst+dWEv47/nQ0h26M1ViSg0/Pwi6zpcddoo91GXmVODlo4l9V2+ tLIyvcJfYeuF3EsWFt1a3f7oNf/Qu3RaWrZ/sYLmbdjBXRB35GTxjzjJWTQTEUPO UxCrUfpXZCooakXK55Dm7hzc+NAVlhHOfSxXr+QgFuDaQaF7AKMBg0Jpq4shxPRT Oui4Pi1t8UjoVdJm5tCym1i2rpTBj+zwfKy17aFvLZm3E2aTIFDTTI3SZgYa/aOd VZ406vWFBW4j1f/8ZAsAoIg24zzzLIfu1uVHsSlgf+sI9gpFuQ7Ty/fmnJdKatHa clt+FyMbjoKgMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:51 2025 by rpki-client