This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json) Hash identifier: qTZOkJOo2UWJKcGEaQy1yBTx0NKkp+3fQHdtelx5Qx0= Subject key identifier: CC:03:A0:9C:4F:14:66:CB:06:AF:C0:04:5F:95:82:7C:27:12:EC:E7 Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Certificate serial: 019B337B2FDF5503317F325E852E8A6D51C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft Manifest number: 1718 Signing time: Thu 18 Dec 2025 22:01:09 +0000 Manifest this update: Thu 18 Dec 2025 22:01:09 +0000 Manifest next update: Fri 19 Dec 2025 22:01:09 +0000 Files and hashes: 1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: vi4c4Scn9QT4BfC+0+JUbFJymRUMDEGHfFKgYODGStc=) 2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:2f:df:55:03:31:7f:32:5e:85:2e:8a:6d:51:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Validity Not Before: Dec 18 22:01:09 2025 GMT Not After : Dec 19 22:01:09 2025 GMT Subject: CN=cc03a09c4f1466cb06afc0045f95827c2712ece7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:a9:39:a6:13:78:87:76:56:b2:5d:a7:9b: ab:a5:71:e7:fd:4e:b0:6c:35:e4:9b:a6:c0:bf:49: 54:16:9e:01:e7:0d:54:8e:90:a2:b9:3b:18:b6:7a: 43:ba:e2:93:bf:36:bc:75:dd:27:fe:c1:b7:49:a2: 80:4a:a2:00:e4:5d:4d:a9:5d:35:69:f2:90:ff:e0: e4:78:06:61:91:87:49:b1:87:e4:bd:99:47:77:c8: 19:b2:48:52:d9:78:70:77:89:e7:2c:63:8a:1d:c4: 24:09:4b:ad:c9:c3:66:a5:8d:d6:69:54:25:cc:19: eb:5a:29:6f:cf:e0:a8:87:16:b7:46:a0:f0:3b:11: c1:7c:39:5f:a2:d5:7c:55:07:28:a4:30:53:57:0b: 5e:00:9d:28:f5:54:79:d6:2d:c7:a6:b7:0f:36:ad: 2f:ad:4a:f4:e3:aa:31:1f:c9:3a:e3:f6:fa:fa:c3: 0f:46:3a:41:17:62:bb:fc:f2:b8:6e:ab:ee:7e:8a: 16:db:74:b3:e1:d3:4b:de:e1:24:ba:48:88:e1:4d: ee:7e:48:48:7e:15:d7:aa:b8:38:ee:db:de:33:d6: c1:b1:3f:34:c2:1d:72:b7:95:df:82:ef:6a:20:88: 5c:8a:2f:7e:2c:77:17:7a:16:22:97:f2:c7:91:ef: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:03:A0:9C:4F:14:66:CB:06:AF:C0:04:5F:95:82:7C:27:12:EC:E7 X509v3 Authority Key Identifier: keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a7:14:de:00:10:2e:39:ae:98:7e:fb:fa:ac:d3:78:16:18: 90:33:a7:22:0e:68:9c:95:c7:86:69:bf:ac:3a:8d:de:5e:06: a7:41:33:a4:ef:8d:6f:44:bf:ea:0e:9d:a8:1b:5d:60:a6:6e: f8:50:36:99:7c:cd:59:7c:39:23:d8:a5:28:d7:9a:aa:06:b5: ce:4c:ba:16:71:94:db:21:7b:54:db:0b:ba:41:ce:61:d7:e6: 28:6e:16:62:bd:b1:b8:ce:eb:56:c9:12:7b:4e:ac:e8:98:68: a2:3e:e8:a8:23:58:a0:8d:21:50:6e:b7:4b:d1:f7:08:56:3c: 8d:68:d2:78:68:36:0d:c3:d9:d6:95:52:68:16:06:cf:db:4f: 8e:c4:91:1d:8b:12:ed:ac:27:6b:bf:01:69:e2:d8:94:d5:54: 1a:23:ad:0d:09:03:25:03:a0:94:56:de:49:72:6c:01:9b:e4: f4:7e:9c:8e:71:da:38:04:3e:fd:c6:c8:6f:f4:62:34:f9:8e: 59:a8:83:88:eb:fc:5d:e5:4c:40:09:5a:dd:0d:07:e0:a8:c2: cd:eb:95:d8:dd:34:35:35:3b:07:69:22:c3:d1:ca:78:04:81: 3a:a4:6b:b2:88:a5:eb:19:1e:07:e1:c8:26:6f:5c:50:3a:76: a2:3a:10:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszey/fVQMxfzJehS6KbVHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1 NjhjYjUwHhcNMjUxMjE4MjIwMTA5WhcNMjUxMjE5MjIwMTA5WjAzMTEwLwYDVQQD EyhjYzAzYTA5YzRmMTQ2NmNiMDZhZmMwMDQ1Zjk1ODI3YzI3MTJlY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSqpOaYTeId2VrJdp5urpXHn/U6w bDXkm6bAv0lUFp4B5w1UjpCiuTsYtnpDuuKTvza8dd0n/sG3SaKASqIA5F1NqV01 afKQ/+DkeAZhkYdJsYfkvZlHd8gZskhS2Xhwd4nnLGOKHcQkCUutycNmpY3WaVQl zBnrWilvz+Cohxa3RqDwOxHBfDlfotV8VQcopDBTVwteAJ0o9VR51i3HprcPNq0v rUr046oxH8k64/b6+sMPRjpBF2K7/PK4bqvufooW23Sz4dNL3uEkukiI4U3ufkhI fhXXqrg47tveM9bBsT80wh1yt5Xfgu9qIIhcii9+LHcXehYil/LHke+t7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwDoJxPFGbLBq/ABF+VgnwnEuznMB8GA1UdIwQY MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt Y2VlYzVhNzM5YzcyLzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAtY2VlYzVhNzM5Yzcy LzEvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6cU3gAQ LjmumH77+qzTeBYYkDOnIg5onJXHhmm/rDqN3l4Gp0EzpO+Nb0S/6g6dqBtdYKZu +FA2mXzNWXw5I9ilKNeaqga1zky6FnGU2yF7VNsLukHOYdfmKG4WYr2xuM7rVskS e06s6Jhooj7oqCNYoI0hUG63S9H3CFY8jWjSeGg2DcPZ1pVSaBYGz9tPjsSRHYsS 7awna78BaeLYlNVUGiOtDQkDJQOglFbeSXJsAZvk9H6cjnHaOAQ+/cbIb/RiNPmO WaiDiOv8XeVMQAla3Q0H4KjCzeuV2N00NTU7B2kiw9HKeASBOqRrsoil6xkeB+HI Jm9cUDp2ojoQPg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:30:38 2025 by rpki-client