This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json) Hash identifier: TpJ85fRYYmRFk2x9I7ZeoKXf/wDg4iD7CNOLlDTUEeQ= Subject key identifier: AB:F5:63:15:29:97:47:D9:11:FB:F8:98:F0:FF:50:97:68:3F:2F:A9 Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8 Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8 Certificate serial: 019AF1D1D59FF5F39A10E3726799E1DC7C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft Manifest number: 146D Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=) 2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: xfzXmCvvaNkUDW391ztr9XqGS3kQ5aJ1NMFr/qug2Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d5:9f:f5:f3:9a:10:e3:72:67:99:e1:dc:7c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=abf56315299747d911fbf898f0ff5097683f2fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:41:4a:d0:82:f2:1a:21:c9:5c:f5:6d:47:95: e3:f4:83:13:43:9e:0f:31:d1:04:bf:5f:4b:c4:65: 21:7e:66:2f:60:c9:1e:00:d4:75:d1:4e:a0:5c:bb: 9e:56:5b:fc:60:85:7d:cb:2d:18:0a:5d:38:25:1c: 0a:c0:df:7d:5b:0d:c7:18:70:49:b0:f5:d6:2e:58: 01:1b:62:90:56:87:bc:98:d5:33:fb:df:83:94:c5: 83:84:69:bd:b3:9d:bd:fe:c6:7c:84:91:eb:2c:b4: 3f:e4:4b:cb:33:ef:c6:91:19:ba:ac:cf:c8:a8:7d: 61:c6:46:16:22:53:6d:0f:ac:a7:ad:50:52:3b:5c: 7b:0f:d5:1a:8f:60:f2:85:2b:dc:a5:6e:14:6c:7a: a4:b8:68:9c:fb:6d:87:40:95:27:fd:34:fc:a0:83: 0d:07:43:3d:fb:c8:2d:ec:c4:0b:94:8a:2b:90:07: ef:a3:7e:0c:25:61:12:1b:d3:ca:92:df:82:cf:96: 5e:ef:4e:54:c1:65:c7:62:46:f5:7a:39:a6:00:de: 28:3f:d7:1b:c2:d4:32:55:5e:ce:4d:3f:55:21:fc: 08:4b:34:5e:93:80:d6:0a:b1:0c:41:4d:2b:e4:9e: f5:5b:a6:c3:8d:df:08:da:32:32:9e:d1:f0:ea:d9: 0b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F5:63:15:29:97:47:D9:11:FB:F8:98:F0:FF:50:97:68:3F:2F:A9 X509v3 Authority Key Identifier: keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3a:d1:03:19:a2:56:6d:8c:28:75:9b:81:b3:6e:3b:5c:ae: 1d:98:7f:7d:f2:72:3c:36:a9:b4:11:59:86:f0:61:ee:26:9f: 8a:23:8c:d7:c2:54:04:f1:1a:a8:cd:45:11:2c:96:65:ff:94: 26:e7:35:fa:51:21:86:b8:f4:21:2f:5d:ca:7a:a6:e2:b5:17: ef:95:71:81:78:39:0c:b3:32:6c:04:b1:d4:dd:8b:1e:f5:4b: 8b:4f:a0:be:ca:20:c0:a4:55:ec:4d:cb:78:ee:10:8f:92:4c: 9c:d3:2d:c6:34:1e:04:b6:de:a7:99:f0:c3:ae:88:e1:c3:8f: 51:83:d0:2a:38:6e:6c:98:8a:32:a1:93:67:d8:61:3a:80:9d: b7:44:89:e0:7f:73:ab:cb:83:90:f8:8e:7b:e1:3c:d3:82:5f: 19:ed:52:a6:71:c7:de:e0:53:20:dd:d3:45:c9:8b:d4:5b:1b: bc:c3:82:6f:ca:6f:e4:3f:2c:24:fd:f2:33:f7:4b:e5:c2:87: 21:ff:d7:08:4f:aa:4c:1e:4f:26:fe:25:6e:13:77:09:8d:a0: f0:ff:15:dd:5e:17:64:c0:23:35:d5:c3:73:1f:44:fc:08:1b: 2b:20:47:90:6b:26:0e:ee:5e:06:49:69:44:2d:b0:f4:fb:56: 45:02:bd:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dWf9fOaEONyZ5nh3HxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj OTc3ZDgwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhhYmY1NjMxNTI5OTc0N2Q5MTFmYmY4OThmMGZmNTA5NzY4M2YyZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUFK0ILyGiHJXPVtR5Xj9IMTQ54P MdEEv19LxGUhfmYvYMkeANR10U6gXLueVlv8YIV9yy0YCl04JRwKwN99Ww3HGHBJ sPXWLlgBG2KQVoe8mNUz+9+DlMWDhGm9s529/sZ8hJHrLLQ/5EvLM+/GkRm6rM/I qH1hxkYWIlNtD6ynrVBSO1x7D9Uaj2DyhSvcpW4UbHqkuGic+22HQJUn/TT8oIMN B0M9+8gt7MQLlIorkAfvo34MJWESG9PKkt+Cz5Ze705UwWXHYkb1ejmmAN4oP9cb wtQyVV7OTT9VIfwISzRek4DWCrEMQU0r5J71W6bDjd8I2jIyntHw6tkLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv1YxUpl0fZEfv4mPD/UJdoPy+pMB8GA1UdIwQY MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzrRAxmi Vm2MKHWbgbNuO1yuHZh/ffJyPDaptBFZhvBh7iafiiOM18JUBPEaqM1FESyWZf+U Juc1+lEhhrj0IS9dynqm4rUX75VxgXg5DLMybASx1N2LHvVLi0+gvsogwKRV7E3L eO4Qj5JMnNMtxjQeBLbep5nww66I4cOPUYPQKjhubJiKMqGTZ9hhOoCdt0SJ4H9z q8uDkPiOe+E804JfGe1SpnHH3uBTIN3TRcmL1FsbvMOCb8pv5D8sJP3yM/dL5cKH If/XCE+qTB5PJv4lbhN3CY2g8P8V3V4XZMAjNdXDcx9E/AgbKyBHkGsmDu5eBklp RC2w9PtWRQK9Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:28 2025 by rpki-client