This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json) Hash identifier: +yUggH85xiklZl7S30K87OImhDaykaA75k+av3ifXpI= Subject key identifier: 0D:D5:34:E7:24:CB:9A:3D:25:2A:9C:AC:AB:F7:E7:9C:55:CF:19:28 Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b Certificate serial: 019B20CF9F1F6BD768B5B6E529BE9CDBAAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft Manifest number: 11EA Signing time: Mon 15 Dec 2025 07:00:36 +0000 Manifest this update: Mon 15 Dec 2025 07:00:36 +0000 Manifest next update: Tue 16 Dec 2025 07:00:36 +0000 Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=) 2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: KYeEHAKWoYP2SLciTyTdMhwVuEsU8aODS+clokei0LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:9f:1f:6b:d7:68:b5:b6:e5:29:be:9c:db:aa:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b Validity Not Before: Dec 15 07:00:36 2025 GMT Not After : Dec 16 07:00:36 2025 GMT Subject: CN=0dd534e724cb9a3d252a9cacabf7e79c55cf1928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:0c:c3:ea:22:cc:79:e1:58:e2:41:18:24: d2:d2:e7:a3:4b:dc:3a:86:c3:1f:54:97:62:c7:e4: 47:b0:1d:62:56:c2:a7:51:d9:34:23:12:24:33:72: d1:ee:d1:1e:d2:39:a2:b9:ff:6b:35:1e:3f:e6:9f: 92:14:03:35:bc:f6:f3:c5:ac:27:1f:42:f2:a0:7f: fa:eb:12:f4:72:06:2b:0c:92:18:cd:35:f6:63:16: 71:f7:f8:2f:33:08:fb:b9:01:0b:a4:d3:8c:5e:99: ae:c9:b7:e2:98:09:66:e1:f2:1e:3e:e2:8c:26:6c: 56:61:45:65:34:a6:4e:e8:0e:d7:67:24:97:27:c5: aa:ad:ae:57:23:51:47:b2:36:2a:81:2e:cf:6d:4f: 3e:02:66:cc:0c:a9:55:aa:93:4a:55:79:7d:22:57: 7b:3a:ea:78:e9:ff:10:e4:45:34:3b:52:de:49:55: 1a:32:a0:4c:f3:af:46:84:91:4c:e0:c9:5f:9c:6a: 5f:0f:1f:7d:5e:ac:cc:84:81:ea:16:62:e8:c0:f7: e5:b3:2e:77:45:13:60:f1:ae:55:f4:fa:0f:fa:12: 54:fd:79:69:ff:d7:9e:f4:b7:af:ca:33:48:23:06: c4:b1:2d:4d:5b:21:c2:d0:88:1e:fa:98:18:33:cc: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D5:34:E7:24:CB:9A:3D:25:2A:9C:AC:AB:F7:E7:9C:55:CF:19:28 X509v3 Authority Key Identifier: keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:17:51:b3:2e:f9:39:16:be:91:d2:20:e3:38:42:86:71:3d: 64:ff:13:03:c1:0c:c5:97:93:51:70:d1:9a:11:d4:e8:7c:f3: b8:61:17:49:57:83:8e:9e:89:c5:70:c1:94:c8:15:b8:93:1d: 94:f2:a1:f0:66:94:a0:45:24:6e:4b:13:fc:22:2d:2e:9e:58: 71:b0:f5:1a:b9:3a:5d:41:3b:b8:2e:a9:5a:59:ca:d6:21:ac: ed:1a:3a:c2:00:33:fc:03:59:83:47:f9:72:b0:e6:fc:4e:9a: e2:3b:30:5d:ff:84:93:ff:73:ad:7e:46:9d:4b:a9:48:9f:6b: 69:54:34:4b:36:11:58:3b:93:dd:e4:2c:36:78:57:fb:43:5e: 98:79:5f:f1:ea:f6:44:e1:b8:ad:d2:27:29:6e:08:3b:96:b0: c7:b3:c0:d5:3b:6c:e7:7a:32:8d:9c:bd:1d:7f:e0:e9:37:a7: 63:92:33:98:86:95:a1:9f:8e:16:7c:c3:7e:aa:3c:47:ca:e4: e9:d4:00:a2:60:01:52:6a:43:b8:0c:b8:bb:29:38:a3:48:30: 66:b7:12:17:0b:99:99:84:9a:47:5a:49:3d:99:11:e3:75:c0: 21:27:62:a6:c0:0f:c8:74:07:dd:cd:a9:dc:bb:ba:19:64:5e: 70:13:5c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz58fa9dotbblKb6c26rXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MDBlZjNkZDVkZDFiZTE1ZDA4YmI5M2NiZGQ2M2I0YWM4 NjBlNmIwHhcNMjUxMjE1MDcwMDM2WhcNMjUxMjE2MDcwMDM2WjAzMTEwLwYDVQQD EygwZGQ1MzRlNzI0Y2I5YTNkMjUyYTljYWNhYmY3ZTc5YzU1Y2YxOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI4Mw+oizHnhWOJBGCTS0uejS9w6 hsMfVJdix+RHsB1iVsKnUdk0IxIkM3LR7tEe0jmiuf9rNR4/5p+SFAM1vPbzxawn H0LyoH/66xL0cgYrDJIYzTX2YxZx9/gvMwj7uQELpNOMXpmuybfimAlm4fIePuKM JmxWYUVlNKZO6A7XZySXJ8Wqra5XI1FHsjYqgS7PbU8+AmbMDKlVqpNKVXl9Ild7 Oup46f8Q5EU0O1LeSVUaMqBM869GhJFM4MlfnGpfDx99XqzMhIHqFmLowPflsy53 RRNg8a5V9PoP+hJU/Xlp/9ee9LevyjNIIwbEsS1NWyHC0Ige+pgYM8zUNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3VNOcky5o9JSqcrKv355xVzxkoMB8GA1UdIwQY MBaAFMkA7z3V3RvhXQi7k8vdY7Sshg5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hODljMDEtNmJiMS00NzdjLTk0YmMt NWFiZTkzYWZmNjQyLzEveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hODljMDEtNmJiMS00NzdjLTk0YmMtNWFiZTkzYWZmNjQy LzEveVFEdlBkWGRHLUZkQ0x1VHk5MWp0S3lHRG1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBdRsy75 ORa+kdIg4zhChnE9ZP8TA8EMxZeTUXDRmhHU6HzzuGEXSVeDjp6JxXDBlMgVuJMd lPKh8GaUoEUkbksT/CItLp5YcbD1Grk6XUE7uC6pWlnK1iGs7Ro6wgAz/ANZg0f5 crDm/E6a4jswXf+Ek/9zrX5GnUupSJ9raVQ0SzYRWDuT3eQsNnhX+0NemHlf8er2 ROG4rdInKW4IO5awx7PA1Tts53oyjZy9HX/g6TenY5IzmIaVoZ+OFnzDfqo8R8rk 6dQAomABUmpDuAy4uyk4o0gwZrcSFwuZmYSaR1pJPZkR43XAISdipsAPyHQH3c2p 3Lu6GWRecBNc8Q== -----END CERTIFICATE-----Generated at Mon Dec 15 16:55:18 2025 by rpki-client