This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json) Hash identifier: 2O29GQPNWe0Qr8GHjHvM+PTHPr+krJw5PgOoxYTLE5o= Subject key identifier: 39:32:DD:C5:C3:AD:69:AC:51:6A:7A:BE:5D:54:CC:F1:2D:E4:E6:83 Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Certificate serial: 019AF35277DE8DFDD2EA45115B6094FA0651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft Manifest number: 13E3 Signing time: Sat 06 Dec 2025 11:00:59 +0000 Manifest this update: Sat 06 Dec 2025 11:00:59 +0000 Manifest next update: Sun 07 Dec 2025 11:00:59 +0000 Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: JQA0mYBjYyWOI7MOTfqe1a0IpHPfRrUlZiJlSQ7Xsgo=) 2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:77:de:8d:fd:d2:ea:45:11:5b:60:94:fa:06:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Validity Not Before: Dec 6 11:00:59 2025 GMT Not After : Dec 7 11:00:59 2025 GMT Subject: CN=3932ddc5c3ad69ac516a7abe5d54ccf12de4e683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:5b:ab:76:d6:fd:75:74:90:2e:8f:c5:51: 52:97:e7:14:1a:64:d2:e7:80:f5:17:95:17:c8:63: d1:2b:cf:64:0c:ad:d9:0d:8a:6b:13:8a:f3:17:34: 16:8c:6e:36:c3:81:5e:bd:7f:a4:f8:01:6e:29:bd: 77:b6:30:96:7b:af:1a:a6:f6:ae:a4:df:45:56:e4: 80:64:85:9e:42:32:2c:80:32:96:ac:fb:25:30:a8: d9:1c:85:00:ae:be:84:76:45:c0:0c:2a:b6:c7:f6: b6:83:20:80:34:91:0f:20:90:e5:94:5c:e7:8f:5a: 38:e3:ac:f5:d5:51:e9:42:08:e6:db:54:f1:47:78: 52:a0:d4:01:60:d8:3b:35:e7:57:8b:8f:56:02:a1: ea:a2:75:0c:3b:1e:dd:6f:8e:08:57:42:8f:20:f1: e8:0d:8a:f1:dc:f4:df:4b:b5:fa:ad:ad:ce:e7:22: 6f:cf:55:8b:1e:e6:5e:49:26:f5:83:16:d2:46:8e: 0f:e6:3e:26:0f:16:87:ab:08:d4:a0:e5:22:c0:5c: 80:72:86:94:78:5a:0d:a0:45:e1:2d:83:bb:0e:22: ee:83:c3:f0:8f:53:45:7d:37:5c:d9:d5:ce:1d:18: ca:7b:3c:ea:68:50:4e:ab:b7:7f:35:14:7d:ac:b1: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:32:DD:C5:C3:AD:69:AC:51:6A:7A:BE:5D:54:CC:F1:2D:E4:E6:83 X509v3 Authority Key Identifier: keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:42:3c:67:82:72:c2:d8:9a:eb:94:b0:7b:74:c6:4c:f6:d5: 5b:99:90:a7:ea:c7:43:7d:df:e2:e7:1a:cd:a4:0d:79:f0:e5: 7b:53:90:82:5a:c3:bf:e6:d9:2b:89:81:e6:a3:a4:24:39:d9: e7:84:64:c9:cd:88:31:8c:50:14:87:80:da:94:66:8d:ad:e4: c9:27:11:1f:39:d3:44:88:8e:4c:f3:40:a6:2e:6f:92:5f:71: 54:50:ca:1f:de:52:58:56:8e:10:79:28:2a:9f:66:5a:25:1f: 48:c2:55:a3:d6:91:d3:3e:2c:38:27:fe:b4:b3:86:90:7b:39: ec:61:36:58:39:36:fe:f9:16:b2:47:f5:f7:30:a4:62:30:99: fa:a7:19:4e:13:10:69:29:99:74:ca:97:1a:57:a0:40:f2:2b: 10:a6:62:ab:d9:55:9a:b1:85:18:2c:32:e7:63:f9:b2:b6:79: 50:04:f4:68:93:57:a9:42:18:8e:b0:9a:7f:6c:21:f5:e4:a9: 0e:6a:d6:dd:55:10:4b:44:9a:70:ac:7e:53:86:4e:a7:54:dc: e8:a2:de:c2:cc:b7:b7:4c:83:3e:a2:92:da:9b:1a:ad:90:07: 65:44:0f:08:2c:da:a9:3f:c2:20:39:48:b5:2a:3c:0a:2f:88: 77:0b:1e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnfejf3S6kURW2CU+gZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk NmIzOTAwHhcNMjUxMjA2MTEwMDU5WhcNMjUxMjA3MTEwMDU5WjAzMTEwLwYDVQQD EygzOTMyZGRjNWMzYWQ2OWFjNTE2YTdhYmU1ZDU0Y2NmMTJkZTRlNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUxbq3bW/XV0kC6PxVFSl+cUGmTS 54D1F5UXyGPRK89kDK3ZDYprE4rzFzQWjG42w4FevX+k+AFuKb13tjCWe68apvau pN9FVuSAZIWeQjIsgDKWrPslMKjZHIUArr6EdkXADCq2x/a2gyCANJEPIJDllFzn j1o446z11VHpQgjm21TxR3hSoNQBYNg7NedXi49WAqHqonUMOx7db44IV0KPIPHo DYrx3PTfS7X6ra3O5yJvz1WLHuZeSSb1gxbSRo4P5j4mDxaHqwjUoOUiwFyAcoaU eFoNoEXhLYO7DiLug8Pwj1NFfTdc2dXOHRjKezzqaFBOq7d/NRR9rLG2EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDky3cXDrWmsUWp6vl1UzPEt5OaDMB8GA1UdIwQY MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4 LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkI8Z4Jy wtia65Swe3TGTPbVW5mQp+rHQ33f4ucazaQNefDle1OQglrDv+bZK4mB5qOkJDnZ 54Rkyc2IMYxQFIeA2pRmja3kyScRHznTRIiOTPNApi5vkl9xVFDKH95SWFaOEHko Kp9mWiUfSMJVo9aR0z4sOCf+tLOGkHs57GE2WDk2/vkWskf19zCkYjCZ+qcZThMQ aSmZdMqXGlegQPIrEKZiq9lVmrGFGCwy52P5srZ5UAT0aJNXqUIYjrCaf2wh9eSp DmrW3VUQS0SacKx+U4ZOp1Tc6KLewsy3t0yDPqKS2psarZAHZUQPCCzaqT/CIDlI tSo8Ci+Idwsecw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:42 2025 by rpki-client