This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft File: yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json) Hash identifier: 0PxJAIGO2Z18KJPjcyfRC6LOIrcaClFzQWJPOiCkAdI= Subject key identifier: 66:A2:CD:BE:F7:E8:55:5C:03:37:CE:22:56:A0:93:B0:F6:38:4E:7A Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A Certificate issuer: /CN=c83c4c9d2fce61665165c05a101e815047b64f6a Certificate serial: 019B2061B7FACB96EC25D81680CA97C4FE1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft Manifest number: 070C Signing time: Mon 15 Dec 2025 05:00:33 +0000 Manifest this update: Mon 15 Dec 2025 05:00:33 +0000 Manifest next update: Tue 16 Dec 2025 05:00:33 +0000 Files and hashes: 1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=) 2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: sFerr9skC1pOIQjo0DsfJzUERwF4s63RqP6w9MQxOTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:b7:fa:cb:96:ec:25:d8:16:80:ca:97:c4:fe:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a Validity Not Before: Dec 15 05:00:33 2025 GMT Not After : Dec 16 05:00:33 2025 GMT Subject: CN=66a2cdbef7e8555c0337ce2256a093b0f6384e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:45:59:87:3d:17:9d:ad:65:bf:50:49:0d: 0c:89:2c:a9:e3:4d:72:7a:17:cb:aa:c2:23:e1:25: bc:d0:9c:3f:4f:08:9b:4e:9a:ee:82:01:f1:47:b6: 0e:4e:5c:5f:1c:fe:10:84:99:3e:8c:c2:a6:1c:ff: 64:b5:67:0b:8c:fe:11:b6:fc:74:1e:f1:9c:ed:46: 66:e3:89:ff:0c:f8:c5:88:10:f9:10:3c:16:3a:44: 31:48:9e:5f:7c:c0:27:52:18:d6:06:57:28:85:87: 8d:4d:68:9f:c7:91:8e:8b:ed:b4:a5:89:e4:a0:46: b5:8c:e2:b4:0c:16:71:53:0b:9a:fd:53:3c:c4:01: e1:4d:f4:be:5f:93:5d:55:be:87:71:96:55:db:a2: 1a:b4:e3:87:19:ba:a6:95:c7:e2:f8:d3:5f:13:60: 11:3c:78:ef:c8:2d:94:69:0e:71:92:c1:8b:29:84: 9a:0b:82:23:d7:87:e4:40:4b:b4:f8:23:c9:30:1b: 63:90:ab:17:da:b4:b4:a4:53:7c:61:f7:e7:0d:c5: 43:f7:c1:54:22:b4:a8:5d:8c:4d:da:fd:2e:65:49: f9:c5:18:e3:28:36:60:08:8a:85:52:a5:39:43:ca: 21:8e:b4:9c:37:e5:46:c6:c1:82:23:fc:d2:33:be: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:CD:BE:F7:E8:55:5C:03:37:CE:22:56:A0:93:B0:F6:38:4E:7A X509v3 Authority Key Identifier: keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:45:1b:94:0e:47:a3:c4:46:8a:29:5f:36:fc:21:81:2c: 09:9f:89:c8:83:2e:4a:61:96:0f:28:cf:dc:44:ad:82:6f:8e: cd:47:d0:dc:8d:8b:e2:91:28:8e:8b:43:05:e1:13:fc:72:22: be:57:7d:30:60:a9:d0:3a:b3:9f:2a:ed:5e:88:43:0b:fc:7c: ee:0f:7d:5e:c5:97:72:53:0a:de:3d:80:5b:ef:d4:ee:31:b6: d1:cf:d9:dc:6a:d6:76:9c:96:d2:6b:4b:dc:97:e9:15:ca:3e: 44:d4:80:29:1d:2f:19:6a:df:db:da:3a:32:35:ee:c0:30:1e: 4b:58:90:02:01:0a:13:38:31:d2:0b:85:71:73:cd:27:32:73: a5:67:bd:32:06:ad:ab:8b:fa:08:65:3d:ba:93:6c:2b:26:5b: ad:8b:34:7e:8e:37:f4:10:cf:58:81:70:61:00:86:1c:9e:59: 30:9b:24:51:d9:c3:68:fc:d9:4e:82:bc:d1:38:90:0c:10:d7: 9b:96:2a:dc:be:bd:a8:11:1f:6f:bb:35:3d:92:9a:5c:42:83: b2:ee:b5:8b:3c:5e:a4:20:b5:15:f3:01:64:b3:a7:c4:45:79: ef:4a:f7:ad:92:84:bd:29:64:27:f9:ed:e0:72:d3:6d:54:ed: 42:72:bf:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYbf6y5bsJdgWgMqXxP4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi NjRmNmEwHhcNMjUxMjE1MDUwMDMzWhcNMjUxMjE2MDUwMDMzWjAzMTEwLwYDVQQD Eyg2NmEyY2RiZWY3ZTg1NTVjMDMzN2NlMjI1NmEwOTNiMGY2Mzg0ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35BFWYc9F52tZb9QSQ0MiSyp401y ehfLqsIj4SW80Jw/TwibTpruggHxR7YOTlxfHP4QhJk+jMKmHP9ktWcLjP4Rtvx0 HvGc7UZm44n/DPjFiBD5EDwWOkQxSJ5ffMAnUhjWBlcohYeNTWifx5GOi+20pYnk oEa1jOK0DBZxUwua/VM8xAHhTfS+X5NdVb6HcZZV26IatOOHGbqmlcfi+NNfE2AR PHjvyC2UaQ5xksGLKYSaC4Ij14fkQEu0+CPJMBtjkKsX2rS0pFN8YffnDcVD98FU IrSoXYxN2v0uZUn5xRjjKDZgCIqFUqU5Q8ohjrScN+VGxsGCI/zSM76xGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaizb736FVcAzfOIlagk7D2OE56MB8GA1UdIwQY MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2 LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGptFG5QO R6PERoopXzb8IYEsCZ+JyIMuSmGWDyjP3EStgm+OzUfQ3I2L4pEojotDBeET/HIi vld9MGCp0DqznyrtXohDC/x87g99XsWXclMK3j2AW+/U7jG20c/Z3GrWdpyW0mtL 3JfpFco+RNSAKR0vGWrf29o6MjXuwDAeS1iQAgEKEzgx0guFcXPNJzJzpWe9Mgat q4v6CGU9upNsKyZbrYs0fo439BDPWIFwYQCGHJ5ZMJskUdnDaPzZToK80TiQDBDX m5Yq3L69qBEfb7s1PZKaXEKDsu61izxepCC1FfMBZLOnxEV570r3rZKEvSlkJ/nt 4HLTbVTtQnK/qg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:07:55 2025 by rpki-client