This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json) Hash identifier: 5tDspu/qBQq9DsiNACPlhZSovYPTB15HIUpIQW3EDR0= Subject key identifier: 00:E2:65:80:F7:BD:44:6D:89:BC:26:59:A3:47:10:77:94:B2:BD:7C Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10 Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510 Certificate serial: 019AF3529C4404F04EE6DA0F22E371D9E621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 11:01:08 +0000 Manifest this update: Sat 06 Dec 2025 11:01:08 +0000 Manifest next update: Sun 07 Dec 2025 11:01:08 +0000 Files and hashes: 1: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: /NRHHJDyHzDLgQ0o5btqA+wmKBR+4GEj/g4fMxVtqwc=) 2: ytmASWO-QKILd5rnuuSzVSLNI5E.roa (hash: tETrgwolkFpG3feggXgRkY5gabUm+sqdabBiUwH4GeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9c:44:04:f0:4e:e6:da:0f:22:e3:71:d9:e6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510 Validity Not Before: Dec 6 11:01:08 2025 GMT Not After : Dec 7 11:01:08 2025 GMT Subject: CN=00e26580f7bd446d89bc2659a347107794b2bd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:bb:f3:10:ac:9d:6c:b1:62:53:62:90:5c: f7:64:3c:22:fe:ff:70:c0:c5:d1:70:f6:ad:11:a5: 26:ec:30:0d:5c:bd:7e:2c:6f:79:1a:d3:df:69:4e: c0:b8:71:f6:f8:96:ef:9a:e7:9a:0b:77:54:7c:1c: 15:4f:17:97:9f:0d:19:c5:38:5f:51:48:08:e9:46: 23:42:b5:96:8b:0e:23:da:27:a4:97:75:23:b9:3a: 07:ba:1d:62:fc:f0:90:a7:a5:ab:b8:66:5b:c4:b3: 87:d2:f3:7b:85:09:1d:60:6b:61:e6:56:01:05:82: cf:d5:0b:33:b3:2e:ef:9f:53:96:4e:5f:6c:14:d6: 37:e7:a5:72:6b:d4:fa:51:04:d9:96:2b:88:c7:15: a5:fb:53:54:93:c4:7f:2d:ba:eb:44:64:95:7f:4a: 57:8e:63:39:a6:b4:a2:ca:cf:b2:fc:5f:b4:fd:9f: df:dc:11:b7:80:94:1b:7f:37:23:3f:ac:13:ee:11: 73:78:87:a8:28:85:da:f0:71:fd:eb:64:8a:2b:b0: 91:77:86:d5:51:45:38:a7:a9:60:56:c3:1d:d0:27: 67:f8:82:bd:8b:21:2d:3d:fe:82:95:63:26:24:da: 09:b6:53:d0:09:a5:e7:10:fc:f8:2f:d6:2e:04:3e: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:65:80:F7:BD:44:6D:89:BC:26:59:A3:47:10:77:94:B2:BD:7C X509v3 Authority Key Identifier: keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:25:97:a2:04:53:7e:46:a3:83:09:db:39:87:d9:56:fe:0b: 35:1c:0f:07:0d:5f:a7:b0:bf:e3:b4:0a:9d:bd:60:3f:2b:03: c6:08:7b:08:10:33:40:c6:56:b3:6f:f0:2d:b7:73:4e:8c:ad: 4e:34:2b:6d:79:c7:c2:a4:d6:25:c2:0b:72:8e:47:e5:9d:73: b3:c4:88:95:71:cb:0c:9b:29:9d:d1:d5:2c:99:d2:fd:54:ca: dc:4e:2b:4d:7c:28:77:59:5a:b0:75:08:4b:ed:f2:76:9f:f9: 97:e9:3a:65:d6:ea:da:a7:7c:4c:d8:10:3d:0d:b2:41:55:3e: 75:bb:af:f3:26:04:07:74:07:74:30:02:a3:91:ea:89:e8:e0: f5:0f:bc:7c:4e:26:07:0c:53:75:25:c4:e6:ff:2d:68:5c:ed: 5b:d5:a8:41:ee:dc:e9:8f:73:73:8d:83:bf:c5:f7:a3:40:24: f6:b7:1e:f0:6c:41:2c:6f:3f:7a:7f:d4:9c:c6:6d:9d:b8:71: 31:27:e3:7b:cf:82:05:07:cf:3f:07:b2:8c:3a:f3:67:f7:9d: c5:75:42:75:16:00:a5:b2:b3:a3:2a:45:68:55:70:3b:8b:f1: 9e:b4:0b:f1:dc:94:3b:7c:0c:90:80:bc:7f:33:91:9f:3c:ff: 62:6c:3f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpxEBPBO5toPIuNx2eYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh YTc1MTAwHhcNMjUxMjA2MTEwMTA4WhcNMjUxMjA3MTEwMTA4WjAzMTEwLwYDVQQD EygwMGUyNjU4MGY3YmQ0NDZkODliYzI2NTlhMzQ3MTA3Nzk0YjJiZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIe78xCsnWyxYlNikFz3ZDwi/v9w wMXRcPatEaUm7DANXL1+LG95GtPfaU7AuHH2+JbvmueaC3dUfBwVTxeXnw0ZxThf UUgI6UYjQrWWiw4j2iekl3UjuToHuh1i/PCQp6WruGZbxLOH0vN7hQkdYGth5lYB BYLP1Qszsy7vn1OWTl9sFNY356Vya9T6UQTZliuIxxWl+1NUk8R/LbrrRGSVf0pX jmM5prSiys+y/F+0/Z/f3BG3gJQbfzcjP6wT7hFzeIeoKIXa8HH962SKK7CRd4bV UUU4p6lgVsMd0Cdn+IK9iyEtPf6ClWMmJNoJtlPQCaXnEPz4L9YuBD46bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADiZYD3vURtibwmWaNHEHeUsr18MB8GA1UdIwQY MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4 LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiWXogRT fkajgwnbOYfZVv4LNRwPBw1fp7C/47QKnb1gPysDxgh7CBAzQMZWs2/wLbdzToyt TjQrbXnHwqTWJcILco5H5Z1zs8SIlXHLDJspndHVLJnS/VTK3E4rTXwod1lasHUI S+3ydp/5l+k6Zdbq2qd8TNgQPQ2yQVU+dbuv8yYEB3QHdDACo5Hqiejg9Q+8fE4m BwxTdSXE5v8taFztW9WoQe7c6Y9zc42Dv8X3o0Ak9rce8GxBLG8/en/UnMZtnbhx MSfje8+CBQfPPweyjDrzZ/edxXVCdRYApbKzoypFaFVwO4vxnrQL8dyUO3wMkIC8 fzORnzz/Ymw/yw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:32 2025 by rpki-client