This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json) Hash identifier: OK70HAgalcbCU8X9GGVIOr+h/esUARn6TUwEbgTtbOA= Subject key identifier: A1:C9:EA:FA:93:85:84:9E:EF:C2:B0:BD:12:B4:6A:75:8A:A0:FC:AA Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Certificate serial: 019B4D716E1C322B93A13904EA41E81C7E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft Manifest number: 05E0 Signing time: Tue 23 Dec 2025 23:00:37 +0000 Manifest this update: Tue 23 Dec 2025 23:00:37 +0000 Manifest next update: Wed 24 Dec 2025 23:00:37 +0000 Files and hashes: 1: qzWk5-tX1dtfAmhnDDRvZojGxVg.roa (hash: YU+z/z5QXW9h6ddAKutU3rUI45hV42wPHKYxAfH9OjY=) 2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: 0QqegxCezVOdqYjHNHFYU8OByq57KPBRihT4FDjZjHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:6e:1c:32:2b:93:a1:39:04:ea:41:e8:1c:7e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715 Validity Not Before: Dec 23 23:00:37 2025 GMT Not After : Dec 24 23:00:37 2025 GMT Subject: CN=a1c9eafa9385849eefc2b0bd12b46a758aa0fcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:e2:41:be:0a:ff:11:7b:a3:dd:8a:34:28: 6b:3b:a9:a5:2b:74:54:95:5e:df:0b:fb:e9:e2:d5: c4:e3:17:77:be:36:22:de:60:25:08:54:28:9e:1f: f0:8b:3e:38:90:3e:77:80:cc:ec:30:5c:94:2a:2d: ad:c8:fc:a0:2d:63:06:b8:ca:35:72:a8:05:f0:23: 66:83:21:f7:d3:14:22:5a:d1:04:8b:1e:72:fd:18: ab:ba:12:79:a9:78:4a:f7:7f:2a:b3:c4:a9:75:11: a7:ef:dc:4a:16:18:07:52:1e:ad:7c:11:8b:2b:14: ac:92:88:ba:96:ca:1e:13:b3:f8:94:4c:8a:05:90: d5:5c:08:b2:d4:c2:a0:d7:1e:01:22:da:eb:68:00: 9c:d5:d5:09:b4:eb:d1:7e:d5:99:b3:7e:fd:b2:6c: 40:ed:ac:bc:0b:48:61:65:b1:7a:e2:d3:c7:41:1d: 39:c3:4d:8e:cd:a9:88:e1:6e:c4:96:4f:17:f6:a5: 72:a2:a9:a7:2e:6d:1d:71:41:42:73:27:0c:b6:53: e9:67:eb:fd:e9:2b:c8:4f:70:bc:a8:79:62:51:10: 4a:68:e5:09:50:52:31:60:47:01:5c:f3:0d:13:67: f9:3c:d8:41:69:51:2f:a1:d1:c1:87:26:be:a9:c0: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:EA:FA:93:85:84:9E:EF:C2:B0:BD:12:B4:6A:75:8A:A0:FC:AA X509v3 Authority Key Identifier: keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:24:ad:01:77:da:db:0b:41:e4:bb:8a:b9:21:e8:2d:e6:f4: f3:2b:53:00:0c:c3:f3:14:33:c7:1b:4d:47:c4:be:90:01:a9: 2b:c9:d7:89:18:1a:51:3c:ed:9a:af:f0:33:b5:7d:12:48:bb: 68:61:97:89:c8:28:ea:78:45:82:16:19:a2:22:3e:df:58:ce: 40:17:d0:ae:ee:8a:01:fe:d1:ab:f4:3f:2d:da:5a:e6:4a:52: a9:04:59:71:db:9b:1f:e6:2a:44:36:4b:84:d8:c7:fa:ed:ae: f8:e5:b7:e4:8e:8c:b2:dc:8b:fa:6f:38:01:2e:5c:fe:b7:54: c7:7d:19:9c:6f:a9:2c:4f:73:8e:52:13:e4:f3:3d:c0:29:8f: 17:4f:df:db:04:20:d9:fc:c8:43:06:ef:3d:e6:e5:40:55:7e: 12:f5:e6:c6:da:98:e8:58:9c:35:13:cf:01:d0:0c:c8:d5:81: 3d:5c:ea:74:63:e1:52:65:60:e4:4e:0d:87:74:a4:46:8f:c5: 04:13:88:30:d4:45:c4:16:0c:9a:9b:65:cb:10:3a:17:1b:7b: f1:8f:06:b6:e0:e5:9b:b7:55:a1:de:70:88:34:99:bf:ed:c1: 72:f8:c1:49:da:ad:31:5a:22:e0:38:b9:24:0b:ff:9f:53:83: e9:d7:b1:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcW4cMiuToTkE6kHoHH4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzBlYjQzNTNlZDc1MGZhZjIzZjJmMWUxNDAxOGM2Y2Zj NjI3MTUwHhcNMjUxMjIzMjMwMDM3WhcNMjUxMjI0MjMwMDM3WjAzMTEwLwYDVQQD EyhhMWM5ZWFmYTkzODU4NDllZWZjMmIwYmQxMmI0NmE3NThhYTBmY2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq73iQb4K/xF7o92KNChrO6mlK3RU lV7fC/vp4tXE4xd3vjYi3mAlCFQonh/wiz44kD53gMzsMFyUKi2tyPygLWMGuMo1 cqgF8CNmgyH30xQiWtEEix5y/RiruhJ5qXhK938qs8SpdRGn79xKFhgHUh6tfBGL KxSskoi6lsoeE7P4lEyKBZDVXAiy1MKg1x4BItrraACc1dUJtOvRftWZs379smxA 7ay8C0hhZbF64tPHQR05w02OzamI4W7Elk8X9qVyoqmnLm0dcUFCcycMtlPpZ+v9 6SvIT3C8qHliURBKaOUJUFIxYEcBXPMNE2f5PNhBaVEvodHBhya+qcA7QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHJ6vqThYSe78KwvRK0anWKoPyqMB8GA1UdIwQY MBaAFMsw60NT7XUPryPy8eFAGMbPxicVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgt MWI5YTMyM2M1NzBiLzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9mMDk3NDQtOGY1Yi00NWFkLTk1YTgtMWI5YTMyM2M1NzBi LzEveXpEclExUHRkUS12SV9MeDRVQVl4c19HSnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2yStAXfa 2wtB5LuKuSHoLeb08ytTAAzD8xQzxxtNR8S+kAGpK8nXiRgaUTztmq/wM7V9Eki7 aGGXicgo6nhFghYZoiI+31jOQBfQru6KAf7Rq/Q/Ldpa5kpSqQRZcdubH+YqRDZL hNjH+u2u+OW35I6MstyL+m84AS5c/rdUx30ZnG+pLE9zjlIT5PM9wCmPF0/f2wQg 2fzIQwbvPeblQFV+EvXmxtqY6FicNRPPAdAMyNWBPVzqdGPhUmVg5E4Nh3SkRo/F BBOIMNRFxBYMmptlyxA6Fxt78Y8GtuDlm7dVod5wiDSZv+3BcvjBSdqtMVoi4Di5 JAv/n1OD6dex3A== -----END CERTIFICATE-----Generated at Wed Dec 24 02:21:18 2025 by rpki-client