This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json) Hash identifier: DRz569LivzoKPcRqW7uf0EXXd+cxXzuj2rpr7YpgcO0= Subject key identifier: 76:96:06:91:FA:04:26:18:32:69:80:00:C5:47:F3:F7:D0:39:21:AD Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Certificate serial: 019B1E3CC45AC8160CA8A94372B71A1E0AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft Manifest number: 170D Signing time: Sun 14 Dec 2025 19:00:57 +0000 Manifest this update: Sun 14 Dec 2025 19:00:57 +0000 Manifest next update: Mon 15 Dec 2025 19:00:57 +0000 Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: WX7nn+/kpZw7tU+zObMAifqawtqsEVx8uwZ4kcJClVA=) 2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:c4:5a:c8:16:0c:a8:a9:43:72:b7:1a:1e:0a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Validity Not Before: Dec 14 19:00:57 2025 GMT Not After : Dec 15 19:00:57 2025 GMT Subject: CN=76960691fa04261832698000c547f3f7d03921ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a8:da:10:67:72:cf:bf:1a:d6:d9:ae:5d:27: de:72:99:aa:a8:8a:a6:f5:b7:2c:c2:29:e5:9a:55: 35:50:e2:50:bf:49:12:b6:89:8e:3c:76:d0:f9:46: dd:f1:14:71:ec:df:ca:bf:7d:25:67:a2:67:63:b6: cd:18:82:2c:ec:ff:0c:94:ae:3b:7e:ed:90:21:21: ca:7f:93:f0:69:23:33:b9:cb:de:ef:fc:eb:69:e3: 97:aa:a3:39:0f:70:50:31:70:50:a9:2c:50:56:04: ab:aa:5b:86:63:3e:f4:23:f6:1b:6b:43:c1:a8:7e: 24:6c:fe:ad:9a:36:0e:9f:76:ae:f6:85:92:9a:06: 8a:ff:ea:47:db:6f:d9:f7:5d:8a:26:a7:33:20:6a: af:d4:7a:56:8b:ce:b6:94:1a:96:0d:89:7f:93:0c: a9:6c:eb:90:ad:c6:84:55:34:15:45:3c:50:85:22: e0:04:b6:16:ca:02:b4:3e:cf:a8:d8:f3:31:1e:1b: 37:23:13:57:8b:d0:17:ac:b4:d6:c3:08:f6:ea:12: 12:c3:0b:06:32:12:d6:56:06:6c:52:4f:1a:c9:12: 4a:b1:4f:5b:7d:c1:52:04:f8:6b:11:93:0d:f7:87: 7a:c7:f3:79:48:92:ee:2a:32:1a:7c:17:a5:62:f6: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:06:91:FA:04:26:18:32:69:80:00:C5:47:F3:F7:D0:39:21:AD X509v3 Authority Key Identifier: keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0f:54:61:af:eb:27:35:94:fe:7f:2a:b2:b8:d3:42:dd:42: 5c:44:69:f5:af:f0:48:e7:e1:7f:dd:00:85:4f:f6:74:39:b9: 25:f5:0d:9c:e6:c5:21:09:49:2f:39:87:8f:1b:68:07:16:5d: 67:92:86:83:5f:54:e6:00:f8:cc:05:78:ce:51:ab:ef:db:0d: 33:cf:5a:5f:93:54:2b:ce:69:0b:d1:43:60:8e:4c:78:c9:ed: 02:c9:0c:0b:06:dd:2a:d1:b2:0b:f5:8d:b1:f7:da:0c:7f:c3: 67:18:b1:a7:73:9e:9e:62:c7:03:db:10:6f:9e:4e:a2:0e:69: 86:80:8a:5e:9e:f3:44:d4:84:be:ba:0d:51:b6:57:07:7b:c9: dd:e6:0b:4a:00:6b:0b:7e:7f:3d:68:ac:9e:e3:0b:5b:4d:7f: 71:e9:9d:90:ae:e2:7d:f4:ae:15:45:96:f8:9f:d1:d1:e4:f1: 76:87:aa:11:7e:29:0c:fe:8b:71:1b:79:56:27:51:54:17:45: 90:2e:b9:7c:48:54:94:c4:33:9a:09:1c:97:94:92:f0:37:08: a8:4d:f1:d8:91:99:9d:f8:61:b0:40:0e:c8:d6:e4:64:32:bb: aa:cc:fe:c4:20:60:68:24:51:51:7a:af:47:55:2d:ed:09:25: be:cc:13:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePMRayBYMqKlDcrcaHgq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1 NjhjYjUwHhcNMjUxMjE0MTkwMDU3WhcNMjUxMjE1MTkwMDU3WjAzMTEwLwYDVQQD Eyg3Njk2MDY5MWZhMDQyNjE4MzI2OTgwMDBjNTQ3ZjNmN2QwMzkyMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKjaEGdyz78a1tmuXSfecpmqqIqm 9bcswinlmlU1UOJQv0kStomOPHbQ+Ubd8RRx7N/Kv30lZ6JnY7bNGIIs7P8MlK47 fu2QISHKf5PwaSMzucve7/zraeOXqqM5D3BQMXBQqSxQVgSrqluGYz70I/Yba0PB qH4kbP6tmjYOn3au9oWSmgaK/+pH22/Z912KJqczIGqv1HpWi862lBqWDYl/kwyp bOuQrcaEVTQVRTxQhSLgBLYWygK0Ps+o2PMxHhs3IxNXi9AXrLTWwwj26hISwwsG MhLWVgZsUk8ayRJKsU9bfcFSBPhrEZMN94d6x/N5SJLuKjIafBelYvYuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaWBpH6BCYYMmmAAMVH8/fQOSGtMB8GA1UdIwQY MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQ9UYa/r JzWU/n8qsrjTQt1CXERp9a/wSOfhf90AhU/2dDm5JfUNnObFIQlJLzmHjxtoBxZd Z5KGg19U5gD4zAV4zlGr79sNM89aX5NUK85pC9FDYI5MeMntAskMCwbdKtGyC/WN sffaDH/DZxixp3OenmLHA9sQb55Oog5phoCKXp7zRNSEvroNUbZXB3vJ3eYLSgBr C35/PWisnuMLW01/cemdkK7iffSuFUWW+J/R0eTxdoeqEX4pDP6LcRt5VidRVBdF kC65fEhUlMQzmgkcl5SS8DcIqE3x2JGZnfhhsEAOyNbkZDK7qsz+xCBgaCRRUXqv R1Ut7QklvswTdQ== -----END CERTIFICATE-----Generated at Mon Dec 15 01:20:30 2025 by rpki-client