This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json) Hash identifier: vapke/UI+kVTvdUeiBkDUogIBVqiJXDt1cUIvRROBSc= Subject key identifier: BD:85:D0:47:4D:10:84:38:7B:E3:AD:7C:9C:EC:C4:32:A8:A3:20:16 Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55 Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55 Certificate serial: 019B36B31E5C39F6D938AB01EA94B3CE7C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft Manifest number: 0D09 Signing time: Fri 19 Dec 2025 13:01:06 +0000 Manifest this update: Fri 19 Dec 2025 13:01:06 +0000 Manifest next update: Sat 20 Dec 2025 13:01:06 +0000 Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: qj+Rw52tB4lptl9BuEwq4M5Zq0Du57Ak/z2t2QzkRkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:1e:5c:39:f6:d9:38:ab:01:ea:94:b3:ce:7c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55 Validity Not Before: Dec 19 13:01:06 2025 GMT Not After : Dec 20 13:01:06 2025 GMT Subject: CN=bd85d0474d1084387be3ad7c9cecc432a8a32016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:dc:40:60:74:53:68:d3:e5:38:e1:b6:41: 9f:4a:c8:5b:17:38:fa:44:93:cc:f1:fa:c6:ac:7e: e4:b3:8e:d6:10:0a:2f:fc:d6:f7:19:48:2f:06:b9: 37:72:2c:0e:3d:f9:63:f8:11:16:78:49:83:80:90: 5d:51:c0:86:d8:8b:1d:cc:2c:a9:96:61:a9:90:90: da:61:95:4f:5d:ba:ea:81:bc:8d:c2:ef:8e:ab:cc: f9:cb:07:d8:30:b1:47:d2:eb:81:4d:00:3a:80:1f: 52:d3:a6:e6:09:b4:a6:8e:1b:d2:1f:27:6f:61:cf: 92:4e:9d:9e:48:3e:09:5a:e2:3d:bd:9e:1b:a8:71: 6f:92:76:5f:85:5c:74:53:b9:ac:b8:be:97:6c:35: 66:7c:08:63:65:1f:ca:ae:fa:b3:59:ba:05:ca:6b: 77:20:5c:ff:ce:2a:a6:9d:f5:ba:5e:ae:58:36:38: 08:02:ec:0c:36:af:07:33:5a:ef:4f:9d:30:b0:14: c3:1e:36:a4:72:39:a2:94:0a:7b:58:7b:7e:e3:4f: ed:37:61:90:b1:84:ba:1d:f0:ce:b4:a1:5b:6f:38: 9b:df:0a:08:24:37:67:a0:ff:5b:0e:78:f0:bf:d8: 62:1b:92:d0:76:97:66:f7:ce:90:12:b7:82:f8:5f: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:D0:47:4D:10:84:38:7B:E3:AD:7C:9C:EC:C4:32:A8:A3:20:16 X509v3 Authority Key Identifier: keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fa:31:a3:06:54:dd:c0:bf:74:68:d7:b4:e7:0b:f1:67:db: ca:36:7b:06:a6:25:fb:01:c2:72:c5:69:44:e8:af:82:e9:dc: 3f:91:16:89:44:c0:f7:15:63:9d:f7:aa:70:31:01:e4:2b:ca: b0:24:36:19:76:48:ca:98:84:8a:a5:c4:2a:5b:f4:82:65:5c: a5:18:cd:df:94:ca:d1:36:38:f3:d6:41:6d:7e:03:ad:a7:84: e5:6e:52:5d:1f:20:2e:18:cb:0c:97:3e:cc:75:f2:67:1b:ca: b0:76:f8:9d:42:68:9b:3b:95:af:f1:7d:ca:77:91:62:bf:ce: 4c:e0:40:d5:1a:4d:b5:e0:b6:89:a1:bf:83:a1:ae:1c:f6:d6: 82:e9:ec:a7:56:f1:f4:af:a4:ee:b5:7c:9e:50:09:c5:30:66: f3:38:da:28:b3:87:3c:16:13:f7:b1:54:73:8d:84:4e:84:5b: 95:61:e2:18:a8:3b:f7:92:8d:bb:40:61:c9:7e:a4:e5:83:53: d2:42:da:9f:dd:a0:e3:cf:7e:37:77:36:1a:38:d5:a1:a2:cc: b5:40:1d:88:c4:0f:57:fe:2a:15:bf:53:1f:f0:a7:e6:5a:8f: 03:05:2c:a0:5c:16:ce:e6:bd:54:14:71:ed:ce:f3:6a:5a:df: eb:6e:bf:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sx5cOfbZOKsB6pSzznwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy N2FlNTUwHhcNMjUxMjE5MTMwMTA2WhcNMjUxMjIwMTMwMTA2WjAzMTEwLwYDVQQD EyhiZDg1ZDA0NzRkMTA4NDM4N2JlM2FkN2M5Y2VjYzQzMmE4YTMyMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi3cQGB0U2jT5TjhtkGfSshbFzj6 RJPM8frGrH7ks47WEAov/Nb3GUgvBrk3ciwOPflj+BEWeEmDgJBdUcCG2IsdzCyp lmGpkJDaYZVPXbrqgbyNwu+Oq8z5ywfYMLFH0uuBTQA6gB9S06bmCbSmjhvSHydv Yc+STp2eSD4JWuI9vZ4bqHFvknZfhVx0U7msuL6XbDVmfAhjZR/KrvqzWboFymt3 IFz/ziqmnfW6Xq5YNjgIAuwMNq8HM1rvT50wsBTDHjakcjmilAp7WHt+40/tN2GQ sYS6HfDOtKFbbzib3woIJDdnoP9bDnjwv9hiG5LQdpdm986QEreC+F9dTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2F0EdNEIQ4e+OtfJzsxDKooyAWMB8GA1UdIwQY MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvoxowZU 3cC/dGjXtOcL8WfbyjZ7BqYl+wHCcsVpROivguncP5EWiUTA9xVjnfeqcDEB5CvK sCQ2GXZIypiEiqXEKlv0gmVcpRjN35TK0TY489ZBbX4DraeE5W5SXR8gLhjLDJc+ zHXyZxvKsHb4nUJomzuVr/F9yneRYr/OTOBA1RpNteC2iaG/g6GuHPbWgunsp1bx 9K+k7rV8nlAJxTBm8zjaKLOHPBYT97FUc42EToRblWHiGKg795KNu0BhyX6k5YNT 0kLan92g489+N3c2GjjVoaLMtUAdiMQPV/4qFb9TH/Cn5lqPAwUsoFwWzua9VBRx 7c7zalrf626/GA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:42:06 2025 by rpki-client