This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json) Hash identifier: KhV+6gQa2OA+8iOgtv9O463ieTpCn9bS0iahR0nq6ls= Subject key identifier: 3F:47:21:12:43:9D:00:3D:7F:E2:40:E0:8C:63:7C:CC:18:7A:23:4E Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36 Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36 Certificate serial: 019AF1D181F47B2436F9F2A2DC243083FEEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft Manifest number: 1229 Signing time: Sat 06 Dec 2025 04:00:30 +0000 Manifest this update: Sat 06 Dec 2025 04:00:30 +0000 Manifest next update: Sun 07 Dec 2025 04:00:30 +0000 Files and hashes: 1: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: pHy344rggYxX2fdu2NtySL0T3KIPcvpMnUzyPwX9xH8=) 2: rs5a3rW2E-ThNoq2t8O4hGc6590.roa (hash: YMDJkD8/KCkGFvxJ1si+V/dSXJflYLlhdawvNihd//w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:81:f4:7b:24:36:f9:f2:a2:dc:24:30:83:fe:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36 Validity Not Before: Dec 6 04:00:30 2025 GMT Not After : Dec 7 04:00:30 2025 GMT Subject: CN=3f472112439d003d7fe240e08c637ccc187a234e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:a7:6b:16:51:97:0d:78:07:b5:09:81:87: 7d:2c:50:4f:bc:77:4a:0f:98:c7:c7:95:c2:50:64: ac:93:c2:8d:bb:4c:ce:1e:6f:cd:14:ce:f1:d5:24: 18:c7:cd:45:70:88:36:0e:b5:5d:59:04:b5:7b:df: c7:c5:8f:a5:b6:76:e2:78:5e:27:bd:4e:dd:61:d4: ee:af:98:94:73:58:a5:80:ec:19:17:e8:c6:a6:96: 1a:f7:b7:75:17:0a:7b:d8:b1:e6:60:ca:5d:2c:da: c4:ab:37:ff:bd:03:ee:b9:ff:6b:31:d4:94:e8:86: 83:33:81:96:73:65:f5:dd:6f:1e:85:85:d2:a0:ad: 2f:0e:ef:8f:22:c0:4c:e5:f6:6a:a1:3d:36:de:93: 37:d2:20:2f:0a:f9:43:35:28:4d:a5:66:97:53:db: 3b:2c:dc:45:6b:3f:bb:04:44:03:11:e9:f6:06:52: 69:ba:9f:3a:6a:4a:01:89:52:e4:c9:af:3a:17:ac: 67:48:4d:cc:ac:e3:92:44:9c:9e:45:ea:d4:1f:a9: 79:b3:e4:27:74:44:93:c7:37:54:e6:e2:ec:5f:f1: 0b:31:6a:92:79:9f:10:10:9d:24:77:0a:f2:c6:96: 89:4d:53:c1:9d:c4:51:dc:ef:d4:7b:6b:8f:a6:e0: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:47:21:12:43:9D:00:3D:7F:E2:40:E0:8C:63:7C:CC:18:7A:23:4E X509v3 Authority Key Identifier: keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:53:f7:bf:4f:b0:43:84:d1:eb:79:13:d8:84:25:5e:2d:fc: bb:d6:08:9b:d9:37:6c:af:e8:cb:c8:3b:39:ef:d9:59:ea:79: ab:c8:de:70:df:86:fb:0f:4e:43:cb:3b:c5:48:29:a3:b8:4c: 6e:fd:68:db:5b:82:c8:0d:2a:23:d7:25:e0:e3:de:9c:a0:df: 9a:0e:51:8b:ea:44:56:6e:5a:31:00:0c:ca:1f:e0:dd:10:54: 26:61:25:c5:d1:36:88:52:82:cd:a6:6d:06:03:c8:3a:77:11: b1:09:3f:ff:60:2f:c5:fe:a7:d4:a3:9e:5e:60:43:11:13:d0: 62:98:99:21:a3:8e:8e:27:da:c1:aa:95:e1:cb:c9:ef:8c:1c: df:af:26:0e:c1:e3:6b:f3:1a:d5:87:75:29:98:38:a1:b1:4d: 05:83:25:54:08:3b:24:cf:bb:a4:89:9d:bd:af:bb:56:ab:9c: 52:04:39:10:bd:a7:c4:ba:a5:aa:b3:24:04:87:d7:55:1e:14: 4d:4d:4f:a1:2e:6f:45:cf:c2:0a:fa:1b:0a:4d:48:ae:00:af: ab:72:0c:0e:e4:49:7f:99:0c:91:0c:3c:bc:51:80:c8:7c:99: 29:a2:b4:d4:3f:3b:f9:39:b4:f6:d0:fd:73:f7:78:28:13:5c: 8c:0e:98:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YH0eyQ2+fKi3CQwg/7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDM5ZDc0YjE3ZTY5MWRkMWIwNTIyMWM2MDk4Y2FmNWVl OTNhMzYwHhcNMjUxMjA2MDQwMDMwWhcNMjUxMjA3MDQwMDMwWjAzMTEwLwYDVQQD EygzZjQ3MjExMjQzOWQwMDNkN2ZlMjQwZTA4YzYzN2NjYzE4N2EyMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozCnaxZRlw14B7UJgYd9LFBPvHdK D5jHx5XCUGSsk8KNu0zOHm/NFM7x1SQYx81FcIg2DrVdWQS1e9/HxY+ltnbieF4n vU7dYdTur5iUc1ilgOwZF+jGppYa97d1Fwp72LHmYMpdLNrEqzf/vQPuuf9rMdSU 6IaDM4GWc2X13W8ehYXSoK0vDu+PIsBM5fZqoT023pM30iAvCvlDNShNpWaXU9s7 LNxFaz+7BEQDEen2BlJpup86akoBiVLkya86F6xnSE3MrOOSRJyeRerUH6l5s+Qn dESTxzdU5uLsX/ELMWqSeZ8QEJ0kdwryxpaJTVPBncRR3O/Ue2uPpuC8oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9HIRJDnQA9f+JA4IxjfMwYeiNOMB8GA1UdIwQY MBaAFGHTnXSxfmkd0bBSIcYJjK9e6To2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQt OTgwNTExZGMwNWFlLzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83Y2EyZjItYmYxMy00ZDE4LWE4ZGQtOTgwNTExZGMwNWFl LzEvWWRPZGRMRi1hUjNSc0ZJaHhnbU1yMTdwT2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVP3v0+w Q4TR63kT2IQlXi38u9YIm9k3bK/oy8g7Oe/ZWep5q8jecN+G+w9OQ8s7xUgpo7hM bv1o21uCyA0qI9cl4OPenKDfmg5Ri+pEVm5aMQAMyh/g3RBUJmElxdE2iFKCzaZt BgPIOncRsQk//2Avxf6n1KOeXmBDERPQYpiZIaOOjifawaqV4cvJ74wc368mDsHj a/Ma1Yd1KZg4obFNBYMlVAg7JM+7pImdva+7VqucUgQ5EL2nxLqlqrMkBIfXVR4U TU1PoS5vRc/CCvobCk1IrgCvq3IMDuRJf5kMkQw8vFGAyHyZKaK01D87+Tm09tD9 c/d4KBNcjA6YOg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:35 2025 by rpki-client