This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json) Hash identifier: IKYVdPrTlDovm1AkZJrakHHj9v/mM+Lr/wE5379sMJw= Subject key identifier: 7E:F1:03:E5:EA:11:E8:9A:99:BB:14:0D:B3:06:3E:95:44:6E:93:47 Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Certificate serial: 019B2174ECD98E206486645858CE6E284EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft Manifest number: 13ED Signing time: Mon 15 Dec 2025 10:01:09 +0000 Manifest this update: Mon 15 Dec 2025 10:01:09 +0000 Manifest next update: Tue 16 Dec 2025 10:01:09 +0000 Files and hashes: 1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=) 2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=) 3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=) 4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: wgXhjKrWXmQA/7FQx3/UGXNuXzgkJ03njAHGYMuZ+3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:ec:d9:8e:20:64:86:64:58:58:ce:6e:28:4e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94 Validity Not Before: Dec 15 10:01:09 2025 GMT Not After : Dec 16 10:01:09 2025 GMT Subject: CN=7ef103e5ea11e89a99bb140db3063e95446e9347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:8e:ce:78:28:39:f9:e8:e9:63:b5:67:83: a1:c7:87:eb:c6:5f:26:44:12:c2:41:d6:1a:c0:f5: 77:de:45:0c:6c:6f:19:86:2c:ad:95:f9:3a:05:ed: 8d:a8:94:18:52:69:e2:61:c6:66:85:80:e3:92:74: 2d:04:1d:c2:37:cd:35:0b:34:ac:89:0b:7e:27:ff: fd:8a:08:4d:6b:bf:54:c4:e4:25:ea:12:31:82:8b: b5:e4:95:bb:ad:10:ce:5c:03:03:2d:82:b0:bd:55: 57:87:b6:67:9b:d9:2a:89:d8:c6:45:f9:78:f8:a8: af:cc:5d:a1:a9:e2:fd:c9:ed:62:36:ed:18:32:1c: a0:5c:47:48:9a:2e:72:ae:f7:50:bf:28:2b:de:99: e5:69:21:0c:e5:d6:5a:0f:e7:ab:12:e4:f8:84:56: 93:02:42:bd:ae:c8:6e:7e:77:64:9c:79:58:d2:15: 7e:56:74:88:a8:b0:f0:ea:e3:1b:4a:53:fd:d6:71: 2f:66:a3:6c:80:64:e3:03:2d:9a:01:50:9f:dc:c5: a1:20:8f:4b:ff:2f:d0:0d:8d:02:26:84:dd:57:07: f8:89:a7:0b:50:63:45:50:73:7b:7b:1f:38:c7:35: 02:06:9c:b7:64:21:57:a4:31:dc:7d:bf:dd:7a:85: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:03:E5:EA:11:E8:9A:99:BB:14:0D:B3:06:3E:95:44:6E:93:47 X509v3 Authority Key Identifier: keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:02:b5:d7:6a:ea:96:4f:2a:c6:57:ed:dd:67:95:0b:75:03: 2f:47:24:d1:1f:3b:83:c5:16:7a:df:c1:69:e8:31:01:3d:ba: b9:f4:fb:9d:4c:14:8b:6c:52:cd:69:ef:20:1d:48:af:0a:7c: 90:6d:6e:70:44:c6:a6:f4:6c:2a:c6:79:b6:7a:c2:80:4f:d6: f4:1e:65:b9:e5:12:af:9c:36:d0:34:6a:b7:03:b5:06:8b:4e: fa:e2:b1:22:93:17:73:64:9d:68:db:bc:68:fa:07:3a:e0:58: f3:d5:4b:1f:ac:85:bf:a0:ed:8e:a6:e8:1a:d0:fb:66:bb:62: 87:1c:c0:1d:88:50:a1:9a:1a:24:36:ed:80:50:af:9e:eb:b2: 3a:b1:ec:36:02:26:84:97:0c:41:65:40:51:12:59:b5:26:28: 6b:0a:a9:ba:c9:67:30:e6:a4:b8:0b:8b:ea:2f:35:7a:8c:68: 5b:d0:48:ad:08:0e:1b:cc:1f:ee:c0:36:52:a4:28:17:1b:13: fe:d7:56:c4:e1:5a:79:14:a2:1a:8d:27:dd:4f:a3:22:82:1b: 67:d3:81:00:d8:b8:6c:00:f9:a8:66:ba:c2:51:5d:c2:cb:70: 1b:4f:81:ce:75:c4:90:7e:62:d5:34:41:93:65:18:93:3d:d2: 3b:5c:b3:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdOzZjiBkhmRYWM5uKE68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NTBkN2IxOTc1YTM3MDNhZTI3YjMxYWQyZjkzMmFlNDZh NGNjOTQwHhcNMjUxMjE1MTAwMTA5WhcNMjUxMjE2MTAwMTA5WjAzMTEwLwYDVQQD Eyg3ZWYxMDNlNWVhMTFlODlhOTliYjE0MGRiMzA2M2U5NTQ0NmU5MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthmOzngoOfno6WO1Z4Ohx4frxl8m RBLCQdYawPV33kUMbG8Zhiytlfk6Be2NqJQYUmniYcZmhYDjknQtBB3CN801CzSs iQt+J//9ighNa79UxOQl6hIxgou15JW7rRDOXAMDLYKwvVVXh7Znm9kqidjGRfl4 +KivzF2hqeL9ye1iNu0YMhygXEdImi5yrvdQvygr3pnlaSEM5dZaD+erEuT4hFaT AkK9rshufndknHlY0hV+VnSIqLDw6uMbSlP91nEvZqNsgGTjAy2aAVCf3MWhII9L /y/QDY0CJoTdVwf4iacLUGNFUHN7ex84xzUCBpy3ZCFXpDHcfb/deoWLFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7xA+XqEeiambsUDbMGPpVEbpNHMB8GA1UdIwQY MBaAFMlQ17GXWjcDriezGtL5Mq5GpMyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUt YzZhODgyMWFkZWE5LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wYzczMTgtYjM0OC00YjI0LWI5ZTUtYzZhODgyMWFkZWE5 LzEveVZEWHNaZGFOd091SjdNYTB2a3lya2FrekpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQK112rq lk8qxlft3WeVC3UDL0ck0R87g8UWet/BaegxAT26ufT7nUwUi2xSzWnvIB1Irwp8 kG1ucETGpvRsKsZ5tnrCgE/W9B5lueUSr5w20DRqtwO1BotO+uKxIpMXc2SdaNu8 aPoHOuBY89VLH6yFv6DtjqboGtD7ZrtihxzAHYhQoZoaJDbtgFCvnuuyOrHsNgIm hJcMQWVAURJZtSYoawqpuslnMOakuAuL6i81eoxoW9BIrQgOG8wf7sA2UqQoFxsT /tdWxOFaeRSiGo0n3U+jIoIbZ9OBANi4bAD5qGa6wlFdwstwG0+BznXEkH5i1TRB k2UYkz3SO1yzRA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:10 2025 by rpki-client