This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json) Hash identifier: tCn6lkbDL5G+CCRliQiHbaXY8wiy14bdow1SHvofGmM= Subject key identifier: 91:EC:B9:80:F1:5C:69:E1:9B:D4:99:5F:17:54:B3:ED:78:F1:78:ED Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Certificate serial: 019B1CBC6558C1E7F165AC3238B743FD202B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft Manifest number: 0F3D Signing time: Sun 14 Dec 2025 12:01:07 +0000 Manifest this update: Sun 14 Dec 2025 12:01:07 +0000 Manifest next update: Mon 15 Dec 2025 12:01:07 +0000 Files and hashes: 1: E5pfM8_6xdfnWcd79wNvaskhDKo.roa (hash: y0Ll9TqNFCMXsaTQIESwVtfULWRNBlB/EyrKykV1sx8=) 2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: MU9krQMunoaxaBjwgqg2vKsHrBLr3aY7emKpMHFNEr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:65:58:c1:e7:f1:65:ac:32:38:b7:43:fd:20:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1 Validity Not Before: Dec 14 12:01:07 2025 GMT Not After : Dec 15 12:01:07 2025 GMT Subject: CN=91ecb980f15c69e19bd4995f1754b3ed78f178ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:45:9c:3b:85:ef:7f:b0:ca:92:c2:43:3d: ea:03:b5:66:c9:6a:ac:d3:0f:ca:de:d6:e4:3e:23: 90:86:ed:d9:c6:33:53:72:ac:b6:bf:32:8b:75:b1: 1a:78:17:3b:3d:6f:15:4e:52:e0:22:13:4f:45:e6: 3f:9d:99:30:88:ba:b5:b1:b9:f0:a0:75:2a:0f:fd: ff:fc:09:a6:ca:fb:11:32:3b:41:e3:25:77:2e:18: f8:54:54:10:f5:19:6f:6e:1a:3c:4c:d3:3d:70:eb: 63:8a:d5:61:41:f8:97:53:86:fb:dd:0d:4d:a5:c9: 48:c6:c0:13:e0:ea:34:1b:0c:57:bb:28:dc:d4:87: aa:42:d0:78:e8:f1:56:b7:c1:b9:17:5c:76:f3:5d: 68:93:f6:a9:b9:c0:6f:f6:85:0d:1f:10:a4:f4:09: 25:c9:09:f3:ec:75:c6:4d:d4:ba:17:61:96:9f:e4: 24:8f:6e:63:cf:a6:1f:fb:da:a9:6e:ab:f8:c9:09: af:ec:ff:5c:92:f7:86:35:5f:2b:b5:ce:2e:29:9f: 31:6c:4e:85:10:fe:59:cd:70:08:6a:0a:01:79:e2: a8:0e:28:b9:40:be:f4:d5:5b:1b:94:0e:15:58:96: ff:8c:4d:5d:2d:f6:08:4b:ce:08:ae:c4:c9:a5:9c: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:B9:80:F1:5C:69:E1:9B:D4:99:5F:17:54:B3:ED:78:F1:78:ED X509v3 Authority Key Identifier: keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:15:44:3d:fd:9d:15:eb:4f:b2:63:94:0a:03:42:71:11:04: 61:d0:dd:41:70:c4:30:69:c8:16:19:1a:0d:c6:85:e0:c1:41: c3:06:e5:5d:86:93:a1:3b:4e:02:4a:79:08:68:d0:a2:a4:e8: 00:8f:a6:ae:ad:77:43:72:b0:72:1b:48:f5:8f:ef:22:3c:3b: 78:85:c8:c5:59:c8:d0:42:3a:ed:51:95:84:cc:0a:0e:90:98: 83:15:51:97:2f:15:0e:4c:5a:d4:48:fa:66:d3:5e:06:dc:ff: cf:2e:de:8d:21:72:ef:af:eb:95:6a:1b:f5:b8:92:5f:67:86: 99:0d:f6:cd:3c:7c:73:09:a5:a8:4e:e1:b2:b3:1e:83:32:54: 62:b1:ad:78:c3:40:3e:d8:72:81:1e:64:4b:fe:ac:00:01:7a: df:d8:c1:60:48:9a:df:87:d1:49:36:25:ae:21:97:c5:e8:de: ba:6d:24:d7:14:15:cf:cc:2f:ab:96:e5:ef:1d:fa:6b:73:d5: 1a:36:cd:c5:2a:9d:41:97:3a:c6:a1:1a:e0:32:c6:ab:64:65: b1:34:9b:b8:8d:cf:24:22:4c:b3:33:e3:d8:94:b6:38:05:1c: cb:7b:79:fa:ab:f7:d6:02:3c:02:d8:c8:5a:bf:ad:af:30:55: 7f:41:45:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvGVYwefxZawyOLdD/SArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl ZTRjZTEwHhcNMjUxMjE0MTIwMTA3WhcNMjUxMjE1MTIwMTA3WjAzMTEwLwYDVQQD Eyg5MWVjYjk4MGYxNWM2OWUxOWJkNDk5NWYxNzU0YjNlZDc4ZjE3OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGVFnDuF73+wypLCQz3qA7VmyWqs 0w/K3tbkPiOQhu3ZxjNTcqy2vzKLdbEaeBc7PW8VTlLgIhNPReY/nZkwiLq1sbnw oHUqD/3//AmmyvsRMjtB4yV3Lhj4VFQQ9Rlvbho8TNM9cOtjitVhQfiXU4b73Q1N pclIxsAT4Oo0GwxXuyjc1IeqQtB46PFWt8G5F1x2811ok/apucBv9oUNHxCk9Akl yQnz7HXGTdS6F2GWn+Qkj25jz6Yf+9qpbqv4yQmv7P9ckveGNV8rtc4uKZ8xbE6F EP5ZzXAIagoBeeKoDii5QL701VsblA4VWJb/jE1dLfYIS84IrsTJpZxQWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHsuYDxXGnhm9SZXxdUs+148XjtMB8GA1UdIwQY MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt MmE2MGNjOThhOGQzLzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBVEPf2d FetPsmOUCgNCcREEYdDdQXDEMGnIFhkaDcaF4MFBwwblXYaToTtOAkp5CGjQoqTo AI+mrq13Q3KwchtI9Y/vIjw7eIXIxVnI0EI67VGVhMwKDpCYgxVRly8VDkxa1Ej6 ZtNeBtz/zy7ejSFy76/rlWob9biSX2eGmQ32zTx8cwmlqE7hsrMegzJUYrGteMNA PthygR5kS/6sAAF639jBYEia34fRSTYlriGXxejeum0k1xQVz8wvq5bl7x36a3PV GjbNxSqdQZc6xqEa4DLGq2RlsTSbuI3PJCJMszPj2JS2OAUcy3t5+qv31gI8AtjI Wr+trzBVf0FFZQ== -----END CERTIFICATE-----Generated at Sun Dec 14 14:38:04 2025 by rpki-client