This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json) Hash identifier: SXsENt9pgamX84jQ4nbjboQeT0szWkGZ6B45tSEJM/I= Subject key identifier: 30:2A:87:43:BA:4D:23:ED:25:F1:1D:63:58:E5:CC:B1:62:D2:33:AE Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Certificate serial: 019AF19B5E3AADA6F587800AC7790393C99A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: 08KPrzvK2WRWpD6p5CJ-Ul7cl9I.roa (hash: sfh9qqw8GmrlQX4Jo45lPqyd4sncTsU6nFud/SZKyQU=) 2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=) 3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: bJFPY9QKXN7wslWcdf9QTc/Kt9iN6+xZQsNhrH3Jg/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5e:3a:ad:a6:f5:87:80:0a:c7:79:03:93:c9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=302a8743ba4d23ed25f11d6358e5ccb162d233ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1d:05:ad:3c:4e:ce:68:05:c3:83:36:a0:94: ed:20:40:0e:61:5e:49:09:a0:11:cc:eb:c2:67:59: 29:88:ce:41:71:9d:d8:d6:45:44:68:11:02:87:f4: 36:7b:5d:e7:62:af:41:bc:e8:6f:96:2c:62:76:83: 0d:49:7b:87:5e:4a:5f:09:91:1d:ce:16:c1:d2:a1: ad:7f:62:f2:fe:97:52:a1:b0:b7:ff:20:09:0f:b4: 57:b6:91:9b:32:07:2b:33:cb:c1:56:86:2e:29:55: ea:0d:77:4f:0a:95:c9:3a:d4:17:1e:b4:12:c8:d0: 1e:39:35:21:4e:aa:19:bb:46:e8:6e:b9:2e:fd:68: 53:fd:85:e7:9e:9c:8d:c8:86:4c:8a:c3:1f:77:ae: 0a:89:8a:d9:45:f3:25:3a:0c:86:20:ce:b3:78:1d: 2b:d4:24:ed:53:07:94:66:24:00:17:e6:ac:94:4d: 40:93:ee:ee:c8:72:02:ca:64:5a:a4:1a:75:77:6a: 85:ab:cd:aa:67:f4:25:22:41:d7:db:25:43:2d:08: aa:e1:74:8f:47:2b:12:68:4b:f0:30:11:ce:f3:07: 09:db:3e:4b:db:b4:8e:d9:55:a4:95:5b:08:ba:7d: 92:9a:c9:be:51:24:5b:b1:60:0f:f0:07:83:65:da: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2A:87:43:BA:4D:23:ED:25:F1:1D:63:58:E5:CC:B1:62:D2:33:AE X509v3 Authority Key Identifier: keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:76:5e:91:09:1d:e7:6c:e3:47:4d:c7:30:e7:5f:74:c2:d9: 07:9f:0e:d7:58:53:ac:7f:b8:51:d1:64:ec:58:a7:c1:ad:67: 3b:12:8d:fb:33:07:12:84:60:d6:2e:b7:90:be:77:25:16:e6: 66:c7:02:5f:3f:3a:cd:c7:be:a4:63:a5:9f:af:75:8b:46:37: 7c:2a:4e:a7:a5:9a:1a:fd:66:d6:f7:7c:c3:15:fc:d6:86:96: 41:1d:4a:aa:ef:03:80:63:c1:a3:c2:e2:00:9b:a5:7b:fd:48: 02:a6:2b:ef:3b:b8:f4:14:45:ab:ad:98:17:0a:6f:25:aa:a7: 84:5c:73:6d:00:1f:dd:23:70:cb:6f:05:e0:55:78:a6:c3:9a: 32:51:80:72:7f:6e:35:5d:e4:fa:44:54:07:ed:af:75:fd:a7: 6b:39:f9:f2:c9:d4:69:d5:c5:4a:3a:5b:69:cf:65:0a:5d:a9: b6:6d:ca:95:f8:bf:fb:c5:8e:56:f5:29:8d:be:74:64:3d:93: 3c:45:71:9d:7a:33:de:95:a2:fd:90:28:75:c9:36:ea:8e:54: a8:5a:6b:a1:c8:8c:be:35:99:cc:f6:06:13:56:07:4b:8e:c5: 7e:fd:3a:4c:8d:71:2b:44:3b:ab:7a:d6:01:39:b1:90:ad:ad: 24:80:77:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm146rab1h4AKx3kDk8maMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4 YTIxYTkwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EygzMDJhODc0M2JhNGQyM2VkMjVmMTFkNjM1OGU1Y2NiMTYyZDIzM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB0FrTxOzmgFw4M2oJTtIEAOYV5J CaARzOvCZ1kpiM5BcZ3Y1kVEaBECh/Q2e13nYq9BvOhvlixidoMNSXuHXkpfCZEd zhbB0qGtf2Ly/pdSobC3/yAJD7RXtpGbMgcrM8vBVoYuKVXqDXdPCpXJOtQXHrQS yNAeOTUhTqoZu0bobrku/WhT/YXnnpyNyIZMisMfd64KiYrZRfMlOgyGIM6zeB0r 1CTtUweUZiQAF+aslE1Ak+7uyHICymRapBp1d2qFq82qZ/QlIkHX2yVDLQiq4XSP RysSaEvwMBHO8wcJ2z5L27SO2VWklVsIun2Smsm+USRbsWAP8AeDZdrylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAqh0O6TSPtJfEdY1jlzLFi0jOuMB8GA1UdIwQY MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt ZWNhOTc4YzNjYjg1LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1 LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXZekQkd 52zjR03HMOdfdMLZB58O11hTrH+4UdFk7Finwa1nOxKN+zMHEoRg1i63kL53JRbm ZscCXz86zce+pGOln691i0Y3fCpOp6WaGv1m1vd8wxX81oaWQR1Kqu8DgGPBo8Li AJule/1IAqYr7zu49BRFq62YFwpvJaqnhFxzbQAf3SNwy28F4FV4psOaMlGAcn9u NV3k+kRUB+2vdf2nazn58snUadXFSjpbac9lCl2ptm3Klfi/+8WOVvUpjb50ZD2T PEVxnXoz3pWi/ZAodck26o5UqFprociMvjWZzPYGE1YHS47Ffv06TI1xK0Q7q3rW ATmxkK2tJIB3Ag== -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:17 2025 by rpki-client