This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft File: yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json) Hash identifier: O7QZ+pr8nMHSlW75l5n8MKNzA9EI08IBzJfVlG5H2sM= Subject key identifier: 2F:2A:3A:83:A9:4C:2F:A0:A7:8E:98:D0:74:15:A6:4D:E1:10:DF:FF Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF Certificate issuer: /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef Certificate serial: 019B19BC39E85AC8566BE1306FCBEB58757C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft Manifest number: 0932 Signing time: Sat 13 Dec 2025 22:02:04 +0000 Manifest this update: Sat 13 Dec 2025 22:02:04 +0000 Manifest next update: Sun 14 Dec 2025 22:02:04 +0000 Files and hashes: 1: rOX9zRwObaYZKZTR0WDKGvQYCI8.roa (hash: AVl8Cu7AhfVM1Wh1VdzrltPVEMOUXlEEy7ZTpT+wzAA=) 2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: oZgqtwnPE0l+B274h1qZZt87w/jOb0auvdthocCNHmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:39:e8:5a:c8:56:6b:e1:30:6f:cb:eb:58:75:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef Validity Not Before: Dec 13 22:02:04 2025 GMT Not After : Dec 14 22:02:04 2025 GMT Subject: CN=2f2a3a83a94c2fa0a78e98d07415a64de110dfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:70:30:bb:03:36:7d:63:33:c3:7b:70:11:b1: 67:11:e8:77:f9:0f:1e:1a:dd:63:ff:15:c8:e4:f6: a3:36:a2:d8:b5:e0:75:57:e9:0c:4a:3a:d7:94:4d: 86:07:18:1b:02:b2:ed:6b:bc:a0:d3:ff:35:95:6a: 6a:c2:c0:96:e5:8f:2a:0a:0f:73:d8:b7:12:89:32: b7:52:a6:6c:40:ce:a3:36:98:60:ef:af:f9:cd:31: 3f:99:39:0b:51:ec:0b:8a:3f:a4:a7:cf:e7:f9:3c: be:58:7b:1b:50:4a:6f:fe:27:ef:66:ff:9c:19:d5: 2b:35:bb:a0:7d:f9:94:dc:61:40:30:68:e8:9e:26: 4e:4d:1b:e3:73:a5:a1:21:67:2c:c1:3b:2c:2e:9b: a0:3a:c9:86:9c:60:66:b2:91:6f:33:63:2a:7b:1f: 4c:2c:9f:19:2c:ef:20:d5:3f:31:ae:fb:f8:62:12: b2:c6:72:44:ff:b3:82:49:64:27:35:35:36:61:4b: 2d:cc:68:2f:30:6d:d7:f3:03:8b:d3:ae:c8:7d:2e: c2:43:ff:17:12:26:de:51:ec:ca:81:f0:30:6d:7c: 54:13:f7:f6:09:1e:4b:d0:51:0b:6d:30:5f:99:26: cd:51:96:2a:4e:14:40:33:dd:fc:6f:58:f4:4e:ff: 68:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2A:3A:83:A9:4C:2F:A0:A7:8E:98:D0:74:15:A6:4D:E1:10:DF:FF X509v3 Authority Key Identifier: keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a5:8b:48:87:be:7f:52:1a:2e:a2:90:d9:5c:31:10:a9:ba: 6a:c8:07:59:ff:a0:de:c5:f6:31:b4:43:ee:b4:39:36:61:bb: 2c:ca:3b:86:4a:40:63:8f:58:eb:30:cc:f5:49:62:53:a8:53: a0:13:80:fa:8f:52:9d:2b:53:57:af:93:fb:5b:0f:8b:90:d3: c5:c5:dd:14:02:55:ee:b4:0f:94:ca:e1:4d:04:f1:f7:4b:71: f5:b2:0f:38:5e:76:23:53:25:e6:13:40:7c:e4:8b:7f:45:5c: 1a:80:a6:5f:fa:01:8f:4b:55:ea:55:bd:aa:dc:5c:6a:d4:aa: cb:43:87:8c:21:2a:f5:c2:ff:e5:58:ea:18:4e:c3:23:17:c9: ea:38:ab:c6:84:60:3c:aa:98:d3:b1:2d:8e:78:7c:6e:0f:10: f1:c2:a7:6b:71:c8:19:d1:3d:1d:e3:65:3b:dc:ea:64:3a:31: 94:be:cd:fa:78:66:d7:ee:b9:10:bc:c3:0c:03:5f:62:95:34: dd:88:f8:ba:db:17:6e:ed:62:76:f4:0e:ab:ed:09:35:c5:eb: d6:43:df:99:f0:18:80:6a:3e:bd:93:4b:b6:58:d0:f0:37:62: c5:fb:10:a3:f9:9a:1b:83:9e:6d:a0:3e:cc:ad:f6:4a:31:7e: d2:f4:65:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvDnoWshWa+Ewb8vrWHV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTM4MzQ3M2U4YWE4NzI3MDY4ZmM3NTJlMDYwZTNkYmY2 M2UwZWYwHhcNMjUxMjEzMjIwMjA0WhcNMjUxMjE0MjIwMjA0WjAzMTEwLwYDVQQD EygyZjJhM2E4M2E5NGMyZmEwYTc4ZTk4ZDA3NDE1YTY0ZGUxMTBkZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XAwuwM2fWMzw3twEbFnEeh3+Q8e Gt1j/xXI5PajNqLYteB1V+kMSjrXlE2GBxgbArLta7yg0/81lWpqwsCW5Y8qCg9z 2LcSiTK3UqZsQM6jNphg76/5zTE/mTkLUewLij+kp8/n+Ty+WHsbUEpv/ifvZv+c GdUrNbugffmU3GFAMGjoniZOTRvjc6WhIWcswTssLpugOsmGnGBmspFvM2Mqex9M LJ8ZLO8g1T8xrvv4YhKyxnJE/7OCSWQnNTU2YUstzGgvMG3X8wOL067IfS7CQ/8X EibeUezKgfAwbXxUE/f2CR5L0FELbTBfmSbNUZYqThRAM938b1j0Tv9otQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8qOoOpTC+gp46Y0HQVpk3hEN//MB8GA1UdIwQY MBaAFMsTg0c+iqhycGj8dS4GDj2/Y+DvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmIt ZDE4YjA5Y2YzYTFkLzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmItZDE4YjA5Y2YzYTFk LzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaWLSIe+ f1IaLqKQ2VwxEKm6asgHWf+g3sX2MbRD7rQ5NmG7LMo7hkpAY49Y6zDM9UliU6hT oBOA+o9SnStTV6+T+1sPi5DTxcXdFAJV7rQPlMrhTQTx90tx9bIPOF52I1Ml5hNA fOSLf0VcGoCmX/oBj0tV6lW9qtxcatSqy0OHjCEq9cL/5VjqGE7DIxfJ6jirxoRg PKqY07Etjnh8bg8Q8cKna3HIGdE9HeNlO9zqZDoxlL7N+nhm1+65ELzDDANfYpU0 3Yj4utsXbu1idvQOq+0JNcXr1kPfmfAYgGo+vZNLtljQ8DdixfsQo/maG4OebaA+ zK32SjF+0vRl+Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:35 2025 by rpki-client