This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json) Hash identifier: v9yhsyWCCCsyPlnBTNgqbZmhgY4ekFOad9TSupRmj/E= Subject key identifier: DB:B5:C3:E8:0F:B1:9F:2A:D8:3A:78:66:39:75:B7:4D:F4:11:FC:A5 Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e Certificate serial: 019AF31C738CF14B17D8B89A01A8DFC1AE21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft Manifest number: 0BED Signing time: Sat 06 Dec 2025 10:01:59 +0000 Manifest this update: Sat 06 Dec 2025 10:01:59 +0000 Manifest next update: Sun 07 Dec 2025 10:01:59 +0000 Files and hashes: 1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=) 2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: IGoC4m4wCvEybKLMUmF35sA9J8nF0MbB2eAZO2Xi/40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:73:8c:f1:4b:17:d8:b8:9a:01:a8:df:c1:ae:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e Validity Not Before: Dec 6 10:01:59 2025 GMT Not After : Dec 7 10:01:59 2025 GMT Subject: CN=dbb5c3e80fb19f2ad83a78663975b74df411fca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:e9:fd:8c:eb:f5:62:75:6d:92:f1:b1:e2: d9:59:e7:22:3c:fc:a6:31:b4:70:57:3e:f2:65:1e: 02:95:5f:1b:8b:97:2a:c6:12:0a:30:f1:95:7a:88: 8d:62:ae:fb:32:36:53:ae:60:9f:b9:b1:ea:cc:d5: 1d:30:d9:51:e1:54:b2:77:e3:a5:42:b4:a9:6e:5a: b7:06:f2:a4:27:f7:88:ea:c7:db:d3:f0:ee:98:b2: 92:5b:92:d7:c4:b0:4c:0a:e9:ff:85:da:9b:0d:9c: cb:14:72:31:41:e2:07:9e:fd:01:ca:a4:5e:3e:13: e9:a8:9f:60:74:2e:01:88:3f:9b:e5:dd:68:07:79: 94:70:f8:cb:f4:e9:60:94:26:1a:59:da:6b:c2:72: c9:46:0e:29:d0:cc:43:d3:35:d0:5a:b3:47:f7:28: 01:80:c2:a8:8a:bf:2a:d6:c8:b6:2c:94:33:a7:85: dd:22:74:9e:44:bf:68:51:62:4b:15:87:91:6d:c3: f1:9a:6b:c3:87:2d:e1:7c:f8:9b:15:a8:24:9e:2a: 93:3b:68:0c:77:12:74:73:03:53:25:54:ba:0e:39: 8d:b8:62:ff:45:fb:85:11:7a:00:9a:55:c7:72:fb: 2e:bd:7e:be:79:32:1a:2d:11:17:ec:a3:ea:12:b7: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B5:C3:E8:0F:B1:9F:2A:D8:3A:78:66:39:75:B7:4D:F4:11:FC:A5 X509v3 Authority Key Identifier: keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:da:53:51:e4:da:a2:dc:c6:61:c1:04:e0:6c:bd:50:6e:7f: 2b:6c:c8:bc:ef:0b:0b:3d:af:67:31:35:5c:34:74:2f:43:ac: 41:e0:26:df:fd:1e:a0:08:54:24:52:d5:2a:77:13:c5:9f:08: fa:42:22:af:1e:ab:c0:77:8b:ae:f8:7e:8c:63:f2:53:63:fc: 92:c5:a9:e4:2c:a1:18:2a:c8:9b:f1:61:b5:e3:9c:46:ee:54: 5c:f0:d7:a7:03:29:22:f1:7d:fa:de:40:41:11:bd:34:1b:51: 09:26:d2:6f:7d:1b:32:49:16:dc:dc:5a:d6:c8:b7:90:e1:fa: e0:23:f6:62:9b:55:47:8f:42:da:5c:9b:af:21:f5:f2:0e:f2: 4f:05:c3:1f:0c:80:9c:34:81:46:2b:a7:14:84:db:c9:cb:4a: 14:12:ac:0c:9f:ee:30:09:73:01:b2:08:c4:c8:d0:53:1b:33: 0f:62:f7:0c:a6:b3:c4:65:97:1d:a7:a3:d7:8a:ac:45:6f:28: e0:21:13:c4:ba:a8:1d:a8:49:f4:e5:ee:6a:c6:3e:0d:31:da: 88:47:b9:69:3b:d1:06:89:16:c7:98:0a:2a:08:10:b0:2e:0b: 69:d8:fc:95:c8:da:15:25:9f:98:d2:27:23:0e:f3:e2:d4:86: e9:a6:c4:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHOM8UsX2LiaAajfwa4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDM4YjM3OTgwYTBkZmFlOWNmOWEyYzViNTZhZGU5N2Zh ZjUwMmUwHhcNMjUxMjA2MTAwMTU5WhcNMjUxMjA3MTAwMTU5WjAzMTEwLwYDVQQD EyhkYmI1YzNlODBmYjE5ZjJhZDgzYTc4NjYzOTc1Yjc0ZGY0MTFmY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmfp/Yzr9WJ1bZLxseLZWeciPPym MbRwVz7yZR4ClV8bi5cqxhIKMPGVeoiNYq77MjZTrmCfubHqzNUdMNlR4VSyd+Ol QrSpblq3BvKkJ/eI6sfb0/DumLKSW5LXxLBMCun/hdqbDZzLFHIxQeIHnv0ByqRe PhPpqJ9gdC4BiD+b5d1oB3mUcPjL9OlglCYaWdprwnLJRg4p0MxD0zXQWrNH9ygB gMKoir8q1si2LJQzp4XdInSeRL9oUWJLFYeRbcPxmmvDhy3hfPibFagkniqTO2gM dxJ0cwNTJVS6DjmNuGL/RfuFEXoAmlXHcvsuvX6+eTIaLREX7KPqErf79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu1w+gPsZ8q2Dp4Zjl1t030EfylMB8GA1UdIwQY MBaAFGHTizeYCg366c+aLFtWrel/r1AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OTc0NmMtNTAxYS00M2U4LWI4ODct N2Q0NDhiMzk2Nzc2LzEvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OTc0NmMtNTAxYS00M2U4LWI4ODctN2Q0NDhiMzk2Nzc2 LzEvWWRPTE41Z0tEZnJwejVvc1cxYXQ2WC12VUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNpTUeTa otzGYcEE4Gy9UG5/K2zIvO8LCz2vZzE1XDR0L0OsQeAm3/0eoAhUJFLVKncTxZ8I +kIirx6rwHeLrvh+jGPyU2P8ksWp5CyhGCrIm/FhteOcRu5UXPDXpwMpIvF9+t5A QRG9NBtRCSbSb30bMkkW3Nxa1si3kOH64CP2YptVR49C2lybryH18g7yTwXDHwyA nDSBRiunFITbyctKFBKsDJ/uMAlzAbIIxMjQUxszD2L3DKazxGWXHaej14qsRW8o 4CETxLqoHahJ9OXuasY+DTHaiEe5aTvRBokWx5gKKggQsC4Ladj8lcjaFSWfmNIn Iw7z4tSG6abE1A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:39 2025 by rpki-client