This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json) Hash identifier: sM1Yxdj23rQE37elDFArZZTkvBKHqHZVHnRjSLPVUao= Subject key identifier: BD:C1:A5:13:27:D7:0F:B7:C2:87:D3:2A:92:50:DA:D7:E7:CA:12:5C Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Certificate serial: 019B19BB0CD2311A765895671AB11EF3E19B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft Manifest number: 1260 Signing time: Sat 13 Dec 2025 22:00:47 +0000 Manifest this update: Sat 13 Dec 2025 22:00:47 +0000 Manifest next update: Sun 14 Dec 2025 22:00:47 +0000 Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: D86CkgcBFgcXDiYB0sjYdPIZqGDAc3W3EoEiBrXmK+A=) 2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:0c:d2:31:1a:76:58:95:67:1a:b1:1e:f3:e1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7 Validity Not Before: Dec 13 22:00:47 2025 GMT Not After : Dec 14 22:00:47 2025 GMT Subject: CN=bdc1a51327d70fb7c287d32a9250dad7e7ca125c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:3d:10:3d:85:ca:6a:ea:0d:8f:c3:bf:6d: bb:cd:cf:77:f3:b6:6a:a2:eb:57:84:fe:02:ee:77: 36:60:e1:02:ba:c6:8a:05:79:18:f5:76:29:1e:5c: d5:d3:c9:3c:31:67:e7:e5:3c:f7:4f:57:8f:86:d8: 63:e9:2d:f9:4a:39:20:6e:7e:0a:67:7f:f9:d8:c2: b4:80:82:e6:e6:bf:b7:c5:06:83:56:43:3c:75:d6: 4a:7c:3e:f8:2f:33:5f:ad:8c:4b:e8:5c:aa:c7:18: 8c:66:3f:05:87:0a:4a:e4:ec:22:f5:cb:f2:08:3b: f3:a8:e5:d9:42:66:34:8c:2d:f3:7a:1d:31:a2:e1: 60:86:2f:c2:1c:28:85:48:5d:62:53:63:40:ac:ff: d2:c5:9f:1b:e6:e3:2b:0a:a6:0d:db:48:7c:a1:97: f1:37:ba:d2:67:88:ee:0d:a7:43:e3:4c:18:02:8e: e0:7d:35:e1:bc:0c:05:ca:1e:94:66:fb:cd:49:82: a5:a2:35:99:ac:d0:ff:c9:b3:56:30:0e:b2:9e:ec: a8:c9:e7:b9:99:3a:11:9e:5b:57:4f:98:e8:7d:8a: 9f:67:52:9e:6d:8d:ba:c7:e3:a5:9e:ee:3c:95:89: 1e:5b:c4:4f:00:78:cc:60:0c:0b:16:eb:12:b7:a5: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C1:A5:13:27:D7:0F:B7:C2:87:D3:2A:92:50:DA:D7:E7:CA:12:5C X509v3 Authority Key Identifier: keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:6f:c2:54:66:7d:36:27:51:8a:07:72:92:eb:c3:8e:79:f4: 61:c8:52:3d:81:ba:34:08:df:d1:db:d9:ec:6b:90:5a:4e:13: e2:dd:fb:64:f7:35:eb:62:49:e9:39:6e:1a:e6:30:6f:8f:f0: f9:e0:b0:4e:14:9d:a2:02:41:3a:69:13:f4:d0:b9:9c:5b:11: 4a:20:6d:57:eb:87:ab:ff:d0:e7:be:82:30:82:59:3b:83:c7: 76:c7:d7:9e:33:78:84:66:5c:78:0c:dd:7f:62:49:7c:fc:38: d3:6a:36:98:8e:0b:40:17:35:e7:7c:c6:a9:92:f1:0e:c6:94: 34:6d:64:b4:d1:5c:78:3d:5a:f4:86:48:58:36:85:3d:79:1d: d0:9d:e4:8e:6d:f1:ea:6f:a6:87:6f:26:76:b5:e8:d8:17:e9: 45:a1:24:e7:9a:aa:1f:ff:82:61:ee:f1:55:40:50:f2:19:be: ed:87:14:ea:bd:85:ae:d9:cb:0a:45:90:ea:66:9a:83:23:94: 72:df:1f:3c:76:ba:31:22:dd:e8:f6:6f:48:29:5b:b8:49:c9: 09:69:7b:ae:03:28:d2:92:0a:8a:d9:b3:f8:5e:9c:ae:73:44: 8c:ad:9b:1c:5b:1a:cd:1f:88:d5:41:b1:b6:ba:f2:65:ad:98: 9c:9b:dd:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuwzSMRp2WJVnGrEe8+GbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0 MjE2YTcwHhcNMjUxMjEzMjIwMDQ3WhcNMjUxMjE0MjIwMDQ3WjAzMTEwLwYDVQQD EyhiZGMxYTUxMzI3ZDcwZmI3YzI4N2QzMmE5MjUwZGFkN2U3Y2ExMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMs9ED2FymrqDY/Dv227zc9387Zq outXhP4C7nc2YOECusaKBXkY9XYpHlzV08k8MWfn5Tz3T1ePhthj6S35Sjkgbn4K Z3/52MK0gILm5r+3xQaDVkM8ddZKfD74LzNfrYxL6FyqxxiMZj8FhwpK5Owi9cvy CDvzqOXZQmY0jC3zeh0xouFghi/CHCiFSF1iU2NArP/SxZ8b5uMrCqYN20h8oZfx N7rSZ4juDadD40wYAo7gfTXhvAwFyh6UZvvNSYKlojWZrND/ybNWMA6ynuyoyee5 mToRnltXT5jofYqfZ1KebY26x+Olnu48lYkeW8RPAHjMYAwLFusSt6UGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3BpRMn1w+3wofTKpJQ2tfnyhJcMB8GA1UdIwQY MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgW/CVGZ9 NidRigdykuvDjnn0YchSPYG6NAjf0dvZ7GuQWk4T4t37ZPc162JJ6TluGuYwb4/w +eCwThSdogJBOmkT9NC5nFsRSiBtV+uHq//Q576CMIJZO4PHdsfXnjN4hGZceAzd f2JJfPw402o2mI4LQBc153zGqZLxDsaUNG1ktNFceD1a9IZIWDaFPXkd0J3kjm3x 6m+mh28mdrXo2BfpRaEk55qqH/+CYe7xVUBQ8hm+7YcU6r2FrtnLCkWQ6maagyOU ct8fPHa6MSLd6PZvSClbuEnJCWl7rgMo0pIKitmz+F6crnNEjK2bHFsazR+I1UGx trryZa2YnJvd1Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:44 2025 by rpki-client