This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json) Hash identifier: dJEnlPQgPzM/YEOFFLg/AaeXAmYFlVrj6C9vtJ3/QCo= Subject key identifier: 59:1B:0B:4E:EA:06:36:20:9B:A1:DA:67:E2:69:3B:D9:40:F0:AC:7E Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd Certificate serial: 019B0EC98B922275E298E33D0B4EBC41A05D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft Manifest number: 08A4 Signing time: Thu 11 Dec 2025 19:00:47 +0000 Manifest this update: Thu 11 Dec 2025 19:00:47 +0000 Manifest next update: Fri 12 Dec 2025 19:00:47 +0000 Files and hashes: 1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=) 2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: 2o3jvGYwJxOarpqZ2OMM9Sp7gSJhjdlsD4wkCsPIaIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:8b:92:22:75:e2:98:e3:3d:0b:4e:bc:41:a0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd Validity Not Before: Dec 11 19:00:47 2025 GMT Not After : Dec 12 19:00:47 2025 GMT Subject: CN=591b0b4eea0636209ba1da67e2693bd940f0ac7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:58:fe:81:ee:51:2d:a8:69:6f:ba:df:36: 7c:35:9c:fc:33:26:a5:56:06:80:6f:14:8a:cf:39: af:29:cb:b5:0c:32:75:9d:fe:cd:bb:3f:df:4e:93: 90:d8:6f:7d:5c:6a:be:24:b4:1e:e0:05:72:01:0a: 33:91:8c:65:8f:90:2f:f3:d7:d6:13:74:c8:48:1c: 22:68:b1:85:4d:76:6b:47:52:7b:aa:08:61:1d:86: a0:2b:3b:ac:40:d3:a6:30:15:51:02:da:54:a0:5d: d6:ac:57:05:5d:44:1f:76:2f:b6:2c:d9:96:cb:19: 95:c7:93:62:a2:62:ad:20:a5:3f:6f:28:5e:35:f7: 60:7f:ca:87:46:4f:a6:b1:ca:53:d5:a1:19:18:b2: ed:48:38:3c:0d:50:86:93:86:10:bf:26:f5:4a:eb: 68:56:70:bd:b7:75:c4:a6:fe:96:34:e7:fd:14:bc: 88:b4:04:97:57:fe:fc:34:5b:b2:34:d4:4a:aa:5b: 98:e8:c3:2f:ad:74:36:67:78:ed:42:80:27:a2:f9: 51:64:db:89:bf:ce:dd:60:9b:79:86:69:f3:44:26: ce:4a:90:8f:de:72:bd:ad:04:09:61:c4:bf:f2:94: 61:f2:f6:d4:89:c0:e5:2a:6d:91:27:f3:19:06:ef: ea:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1B:0B:4E:EA:06:36:20:9B:A1:DA:67:E2:69:3B:D9:40:F0:AC:7E X509v3 Authority Key Identifier: keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b0:12:a8:ca:e8:04:dd:fe:0e:b1:4a:4b:1a:5f:a9:b1:70: 03:52:c5:33:b3:8e:03:51:bb:24:55:a5:03:90:36:aa:c1:62: 1f:46:80:63:21:25:b1:10:54:30:69:1d:ab:a3:1a:b7:85:7c: 5c:c7:9f:7c:8e:47:9d:1c:7d:a5:5d:57:36:04:e5:f4:af:c2: 4e:af:b0:01:92:da:b1:f2:dd:3f:9e:f8:9f:c3:46:b3:ab:ed: 04:3a:70:fe:01:84:91:40:e2:ba:1a:46:d9:79:fa:8a:f2:5c: 33:4f:73:ea:92:0a:f1:e5:53:10:c5:86:30:f8:a7:77:8e:45: 49:cc:59:bf:a1:09:79:db:a9:7d:0c:1d:35:72:b7:78:33:bd: bd:60:e3:98:a6:07:81:3c:50:ff:42:7f:62:93:1f:5c:da:33: 03:17:85:d1:cb:66:66:32:6b:7e:39:ff:9d:44:6b:19:56:6d: 56:b2:96:32:b5:31:da:28:4d:79:be:4a:c1:79:2e:b2:5a:f1: 5f:03:23:81:3b:71:e3:0a:08:61:43:6b:c4:e0:3e:2c:b1:ec: 49:65:66:f4:3c:b1:54:be:cf:fb:ae:52:2b:d3:d3:9a:1f:cc: 1a:7d:6c:9b:20:75:d2:37:ac:18:f2:99:2f:cc:46:53:d8:46: f8:dd:b3:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyYuSInXimOM9C068QaBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGZlYWVjYTIyZDJkMjYxOGI0MzNjZjAwYWIxNDRiZDhi ODBkYmQwHhcNMjUxMjExMTkwMDQ3WhcNMjUxMjEyMTkwMDQ3WjAzMTEwLwYDVQQD Eyg1OTFiMGI0ZWVhMDYzNjIwOWJhMWRhNjdlMjY5M2JkOTQwZjBhYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoixY/oHuUS2oaW+63zZ8NZz8Myal VgaAbxSKzzmvKcu1DDJ1nf7Nuz/fTpOQ2G99XGq+JLQe4AVyAQozkYxlj5Av89fW E3TISBwiaLGFTXZrR1J7qghhHYagKzusQNOmMBVRAtpUoF3WrFcFXUQfdi+2LNmW yxmVx5NiomKtIKU/byheNfdgf8qHRk+mscpT1aEZGLLtSDg8DVCGk4YQvyb1Suto VnC9t3XEpv6WNOf9FLyItASXV/78NFuyNNRKqluY6MMvrXQ2Z3jtQoAnovlRZNuJ v87dYJt5hmnzRCbOSpCP3nK9rQQJYcS/8pRh8vbUicDlKm2RJ/MZBu/q1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkbC07qBjYgm6HaZ+JpO9lA8Kx+MB8GA1UdIwQY MBaAFMnf6uyiLS0mGLQzzwCrFEvYuA29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMt YmMzNjJkMzc2OGJkLzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdiMTUtZDVkYy00M2U1LTgwOWMtYmMzNjJkMzc2OGJk LzEveWRfcTdLSXRMU1lZdERQUEFLc1VTOWk0RGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrASqMro BN3+DrFKSxpfqbFwA1LFM7OOA1G7JFWlA5A2qsFiH0aAYyElsRBUMGkdq6Mat4V8 XMeffI5HnRx9pV1XNgTl9K/CTq+wAZLasfLdP574n8NGs6vtBDpw/gGEkUDiuhpG 2Xn6ivJcM09z6pIK8eVTEMWGMPind45FScxZv6EJedupfQwdNXK3eDO9vWDjmKYH gTxQ/0J/YpMfXNozAxeF0ctmZjJrfjn/nURrGVZtVrKWMrUx2ihNeb5KwXkuslrx XwMjgTtx4woIYUNrxOA+LLHsSWVm9DyxVL7P+65SK9PTmh/MGn1smyB10jesGPKZ L8xGU9hG+N2z/w== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:55 2025 by rpki-client