This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json) Hash identifier: /vVdVgspJvFqOnPg2HSEswwOEfMRwshqiNeYYePa2T8= Subject key identifier: 01:57:0B:F9:24:E2:2B:8E:67:09:3F:2B:FB:16:D6:ED:D8:AF:E7:C4 Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd Certificate serial: 019B1871B388B1CCA68981FD27BA0C07686A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft Manifest number: 08A9 Signing time: Sat 13 Dec 2025 16:01:03 +0000 Manifest this update: Sat 13 Dec 2025 16:01:03 +0000 Manifest next update: Sun 14 Dec 2025 16:01:03 +0000 Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=) 2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: 8hZlWhW+7Jr5f6YXqRwhQU/06UoNKy0oBXGFZkj1gy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:b3:88:b1:cc:a6:89:81:fd:27:ba:0c:07:68:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd Validity Not Before: Dec 13 16:01:03 2025 GMT Not After : Dec 14 16:01:03 2025 GMT Subject: CN=01570bf924e22b8e67093f2bfb16d6edd8afe7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3c:ff:00:8e:f5:ec:56:ab:4b:1e:d7:69:89: 97:8d:88:eb:2b:d6:3b:e1:4c:d0:49:c5:06:6c:54: 66:93:02:dc:bc:2b:36:2f:60:b5:6c:87:63:2c:e1: 16:6c:67:0a:5c:36:8e:56:67:ae:73:1d:b0:41:6f: e3:2d:e6:33:12:34:47:61:4c:fb:e1:40:79:05:bf: 32:26:6a:8c:87:18:df:42:f4:f5:da:6f:16:2b:0a: c0:be:0f:71:be:2a:de:ba:b1:d6:ed:8f:f5:55:48: d4:4d:ae:c2:85:42:a3:59:7e:e7:97:49:83:0d:f0: 60:6c:9c:7b:b8:fb:e5:cf:c1:ec:94:8d:31:39:99: 6b:c0:16:fa:fe:2b:28:be:75:bc:34:fa:38:87:0d: 5e:4d:e7:49:15:fa:74:f7:a3:07:2e:84:05:07:50: df:38:b1:2e:f4:03:a3:81:86:e6:dd:20:af:60:81: 19:73:bc:58:75:b3:96:ba:11:dd:36:e8:71:79:19: a4:a2:e5:51:ab:ae:1d:ed:c4:db:02:19:6b:6b:ab: 86:77:47:95:3a:f5:e9:f8:40:d0:fc:cc:89:21:e5: 4e:f8:63:6d:ba:f2:52:63:83:81:e9:5b:36:22:31: c1:60:3a:0c:14:f6:32:a1:08:c5:9a:c3:a9:91:73: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:57:0B:F9:24:E2:2B:8E:67:09:3F:2B:FB:16:D6:ED:D8:AF:E7:C4 X509v3 Authority Key Identifier: keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c9:3e:6d:dd:13:b2:ae:e4:5b:6a:61:a8:11:cf:5a:7c:a6: f6:70:8f:94:3c:a4:57:0c:a9:6f:77:d8:c5:5a:48:d4:ac:91: 65:8e:d4:aa:a1:55:51:09:00:5d:64:6c:b1:e7:95:34:7a:0a: f0:be:35:09:76:1c:16:c1:d3:d8:41:ea:0f:ff:43:0c:96:6f: 9a:b5:08:ed:67:b8:ad:dd:ec:bd:c6:89:b1:f5:f0:8c:d2:94: f5:e8:35:27:b4:bd:8a:4d:88:9a:f1:81:3d:6d:87:0d:6d:7c: 5e:e0:96:d4:06:93:e1:82:c4:a1:48:6c:3c:7b:27:10:32:63: 6e:b6:80:f8:b3:5f:37:eb:a6:8c:f8:9f:23:e0:58:8a:44:0f: 8d:ce:49:9a:3a:43:4b:61:c2:5f:75:3a:09:78:e3:d8:d4:76: 94:e6:ad:d6:56:8a:8b:02:36:4c:78:89:93:69:75:45:74:bc: ed:fc:27:4f:a1:52:00:4e:6f:4e:a1:00:9c:27:17:af:ad:11: 0a:77:4c:73:ea:36:25:15:da:0e:37:53:83:45:15:76:4f:7e: 43:b3:03:3f:2d:77:ca:c9:4b:3f:90:80:dd:0d:8b:0f:50:bc: b0:b1:5b:79:9c:72:68:76:f1:9f:1f:ec:aa:49:28:10:61:0c: eb:cc:90:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcbOIscymiYH9J7oMB2hqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi ODBkYmQwHhcNMjUxMjEzMTYwMTAzWhcNMjUxMjE0MTYwMTAzWjAzMTEwLwYDVQQD EygwMTU3MGJmOTI0ZTIyYjhlNjcwOTNmMmJmYjE2ZDZlZGQ4YWZlN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjz/AI717FarSx7XaYmXjYjrK9Y7 4UzQScUGbFRmkwLcvCs2L2C1bIdjLOEWbGcKXDaOVmeucx2wQW/jLeYzEjRHYUz7 4UB5Bb8yJmqMhxjfQvT12m8WKwrAvg9xvireurHW7Y/1VUjUTa7ChUKjWX7nl0mD DfBgbJx7uPvlz8HslI0xOZlrwBb6/isovnW8NPo4hw1eTedJFfp096MHLoQFB1Df OLEu9AOjgYbm3SCvYIEZc7xYdbOWuhHdNuhxeRmkouVRq64d7cTbAhlra6uGd0eV OvXp+EDQ/MyJIeVO+GNtuvJSY4OB6Vs2IjHBYDoMFPYyoQjFmsOpkXNVMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFXC/kk4iuOZwk/K/sW1u3Yr+fEMB8GA1UdIwQY MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt YmMzNjJkMzc2OGJkLzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsk+bd0T sq7kW2phqBHPWnym9nCPlDykVwypb3fYxVpI1KyRZY7UqqFVUQkAXWRsseeVNHoK 8L41CXYcFsHT2EHqD/9DDJZvmrUI7We4rd3svcaJsfXwjNKU9eg1J7S9ik2ImvGB PW2HDW18XuCW1AaT4YLEoUhsPHsnEDJjbraA+LNfN+umjPifI+BYikQPjc5JmjpD S2HCX3U6CXjj2NR2lOat1laKiwI2THiJk2l1RXS87fwnT6FSAE5vTqEAnCcXr60R CndMc+o2JRXaDjdTg0UVdk9+Q7MDPy13yslLP5CA3Q2LD1C8sLFbeZxyaHbxnx/s qkkoEGEM68yQLQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:30 2025 by rpki-client