This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json) Hash identifier: +lCasZJcZaaKcmX21iyLLHS7+ufcB8WBqIYUSLbsivg= Subject key identifier: AE:8C:A9:3B:8A:38:D0:A4:B7:91:AB:51:FD:24:F6:A4:B1:7B:29:B2 Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6 Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6 Certificate serial: 019AF540BE722245471BF978B610BB506918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft Manifest number: 0E9C Signing time: Sat 06 Dec 2025 20:00:52 +0000 Manifest this update: Sat 06 Dec 2025 20:00:52 +0000 Manifest next update: Sun 07 Dec 2025 20:00:52 +0000 Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=) 2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: n6TIbE8zeQVqXPbrzmK30Aes3jtGYdKq33gkYsrxkkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:be:72:22:45:47:1b:f9:78:b6:10:bb:50:69:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6 Validity Not Before: Dec 6 20:00:52 2025 GMT Not After : Dec 7 20:00:52 2025 GMT Subject: CN=ae8ca93b8a38d0a4b791ab51fd24f6a4b17b29b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:61:f4:82:5f:e7:8f:e2:11:85:f2:41:9b: c2:f0:57:56:54:6d:56:c1:f4:65:03:47:20:3c:a2: a9:57:29:6d:0d:ec:6d:e7:96:a3:c8:44:08:87:9f: 8d:b9:a3:28:cd:9e:d4:f3:bb:81:a9:9b:c9:8f:e3: 88:7e:90:43:c2:87:8b:14:78:41:29:e6:5e:03:06: 5e:24:15:ad:2c:7c:7c:b1:41:6e:21:0f:3d:8c:15: 4b:30:04:df:a8:ce:7d:fc:65:47:bc:93:8c:d1:d0: 2c:6d:3f:5e:4d:a8:88:e9:bc:b4:59:19:79:9d:70: 42:f1:9e:69:d8:ca:1e:61:0e:8d:95:6b:6f:e9:e8: 02:ca:eb:69:39:0c:ce:40:a9:54:6f:7f:66:04:ca: b3:eb:80:a4:3a:a8:68:d7:dc:13:fc:78:07:d7:b2: 19:dc:2a:6e:e5:77:5b:9c:ff:3b:aa:ab:df:34:d8: 0b:e9:04:80:ac:c0:6d:df:dd:7a:68:c4:01:92:15: 03:5e:6d:2a:65:b8:5f:b1:9a:16:9a:3d:b8:be:72: 12:04:7d:bf:69:67:2a:db:1f:5b:b2:f4:78:af:b3: b7:a7:b9:8e:87:af:05:74:a4:2f:ef:bd:17:24:c7: f9:8b:9b:21:5c:c9:b4:09:39:f4:9f:b6:ff:26:02: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:A9:3B:8A:38:D0:A4:B7:91:AB:51:FD:24:F6:A4:B1:7B:29:B2 X509v3 Authority Key Identifier: keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:28:0e:5f:1f:1e:6b:9c:e8:b9:1c:3d:40:0a:c8:0f:db:d6: 89:b1:e0:f9:db:d3:c3:56:6c:41:f4:95:8a:df:fb:c5:40:49: 59:26:1f:17:d5:2d:e2:91:9e:54:c5:a4:52:da:d9:b7:3c:b5: 7d:4c:de:ef:b3:34:19:8f:89:15:da:cb:8b:fd:17:85:b1:56: d1:91:f0:22:3a:b2:55:c9:f7:0e:5f:88:75:73:e8:f7:f0:ba: 0f:ba:40:16:13:fc:3e:72:6d:bf:21:b9:2e:6f:ed:b9:56:46: da:d9:fe:73:8b:a8:ea:05:d7:a7:7a:52:c0:e6:4d:ba:0d:2a: 35:f3:d5:c7:1f:a3:3e:c2:a3:5e:15:7c:7e:e6:b2:43:a1:c4: e3:00:97:d3:03:78:c0:9f:11:99:b2:bc:3b:31:ad:9d:80:df: 21:be:5d:54:78:1e:36:13:41:27:85:78:65:1f:41:c1:a3:82: 78:58:b2:49:ad:9d:7c:b3:fd:76:70:55:6d:b2:5f:12:80:22: b8:2c:04:e0:09:64:50:77:6f:e4:f4:2a:f9:55:d9:9b:07:6a: 11:11:38:07:c0:a1:0c:b3:7b:94:49:6e:f7:39:5c:51:4d:dc: 16:6b:aa:0a:10:51:77:db:c5:5c:57:f2:84:11:ba:89:74:66: 73:17:75:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QL5yIkVHG/l4thC7UGkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2 NTVlYjYwHhcNMjUxMjA2MjAwMDUyWhcNMjUxMjA3MjAwMDUyWjAzMTEwLwYDVQQD EyhhZThjYTkzYjhhMzhkMGE0Yjc5MWFiNTFmZDI0ZjZhNGIxN2IyOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRNh9IJf54/iEYXyQZvC8FdWVG1W wfRlA0cgPKKpVyltDext55ajyEQIh5+NuaMozZ7U87uBqZvJj+OIfpBDwoeLFHhB KeZeAwZeJBWtLHx8sUFuIQ89jBVLMATfqM59/GVHvJOM0dAsbT9eTaiI6by0WRl5 nXBC8Z5p2MoeYQ6NlWtv6egCyutpOQzOQKlUb39mBMqz64CkOqho19wT/HgH17IZ 3Cpu5XdbnP87qqvfNNgL6QSArMBt3916aMQBkhUDXm0qZbhfsZoWmj24vnISBH2/ aWcq2x9bsvR4r7O3p7mOh68FdKQv770XJMf5i5shXMm0CTn0n7b/JgJ33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6MqTuKONCkt5GrUf0k9qSxeymyMB8GA1UdIwQY MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcigOXx8e a5zouRw9QArID9vWibHg+dvTw1ZsQfSVit/7xUBJWSYfF9Ut4pGeVMWkUtrZtzy1 fUze77M0GY+JFdrLi/0XhbFW0ZHwIjqyVcn3Dl+IdXPo9/C6D7pAFhP8PnJtvyG5 Lm/tuVZG2tn+c4uo6gXXp3pSwOZNug0qNfPVxx+jPsKjXhV8fuayQ6HE4wCX0wN4 wJ8RmbK8OzGtnYDfIb5dVHgeNhNBJ4V4ZR9BwaOCeFiySa2dfLP9dnBVbbJfEoAi uCwE4AlkUHdv5PQq+VXZmwdqERE4B8ChDLN7lElu9zlcUU3cFmuqChBRd9vFXFfy hBG6iXRmcxd1Uw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:33 2025 by rpki-client