This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json) Hash identifier: 5LdwB5lh+pLZ/PaheTsp9qXCqv+8Gck8wO4yy7yhaGs= Subject key identifier: DC:A7:DC:DF:07:86:01:0A:20:E2:C9:C3:9D:56:45:A2:A8:C1:19:20 Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64 Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264 Certificate serial: 019B39EB185C47C053BF15B522AE1B8DD997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft Manifest number: 15CD Signing time: Sat 20 Dec 2025 04:01:07 +0000 Manifest this update: Sat 20 Dec 2025 04:01:07 +0000 Manifest next update: Sun 21 Dec 2025 04:01:07 +0000 Files and hashes: 1: Iq8sBOoYl2FdEDuOs7ZjqubA0mo.roa (hash: cKH71Gw8ENbKfDC7hsHD0Ixm5ykhTLruun3w+xwHV3U=) 2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: LZO5V+Be/LoXf9MGHo/YMNgb8efw1xhF0VaGLKOFH7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:18:5c:47:c0:53:bf:15:b5:22:ae:1b:8d:d9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264 Validity Not Before: Dec 20 04:01:07 2025 GMT Not After : Dec 21 04:01:07 2025 GMT Subject: CN=dca7dcdf0786010a20e2c9c39d5645a2a8c11920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:69:39:49:31:5d:d6:25:49:0d:da:6d:7e: ca:41:e0:36:92:00:af:3b:2d:94:73:37:c3:a7:ad: a5:c7:08:35:64:70:0e:0a:30:53:e6:19:d6:2f:e9: 13:e9:12:3c:a5:85:49:00:30:77:99:54:ac:1d:2b: 92:ff:dd:81:b1:d4:b1:a8:0d:7c:b7:d7:59:1e:e4: 95:4a:29:48:7c:0c:4b:cf:aa:1c:a4:09:03:d0:a6: 4a:34:4d:67:30:71:96:70:06:58:6a:c3:30:07:6e: 55:98:f2:6a:50:e5:41:9c:41:1a:0e:b9:af:01:8c: 8a:26:9a:14:e8:4f:5d:d4:5e:b1:5c:ba:f0:6e:d2: 53:b9:c4:b1:64:c5:0b:75:5f:2c:c7:41:76:ad:9a: 66:63:fe:74:d3:53:f0:ee:e6:72:91:27:7a:a6:a7: 31:55:b1:25:88:a8:05:a1:a4:9a:17:8a:81:36:3e: 2d:9c:b5:d4:ec:65:3c:c7:aa:47:b6:cc:f5:e9:49: 43:82:36:57:c3:8e:31:b7:37:ba:43:a0:5e:13:fe: c0:34:a4:82:9a:98:03:ec:25:54:6e:c5:5c:c8:1b: 92:b4:d5:af:1a:2b:b8:8a:e8:f2:37:7a:32:dd:2e: 91:db:84:2f:fd:ca:0f:e6:51:e3:66:a7:7f:8b:44: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A7:DC:DF:07:86:01:0A:20:E2:C9:C3:9D:56:45:A2:A8:C1:19:20 X509v3 Authority Key Identifier: keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:15:7f:e8:5c:74:6f:16:e2:3e:05:c7:d9:fa:f5:22:e0:a9: 96:4f:84:56:9d:29:19:60:fc:b7:e4:1e:50:7c:72:ed:1d:0b: 56:13:fe:61:a2:b9:fd:0a:19:7f:97:59:93:dc:77:66:19:9e: 9d:46:66:75:e4:86:44:a4:24:e1:94:cf:57:30:07:28:23:3c: 28:7b:5f:5a:2c:da:2e:54:32:8c:fd:2f:f6:48:86:79:4b:cf: 9b:56:dc:4d:4a:42:ab:f3:29:ea:2b:ce:92:07:39:90:15:8c: 27:65:13:2e:8a:8a:22:29:f9:b0:03:22:41:4f:df:ba:cf:88: eb:e6:12:10:d3:0e:6e:d8:c7:e9:4e:78:3d:5d:9f:be:c1:22: ef:73:f2:1a:31:fa:ce:16:f1:08:a9:e8:6b:9b:0c:6c:67:f0: cd:02:de:c6:e4:e7:c9:eb:5e:3f:f5:c3:c5:cc:92:fc:34:5e: 84:ec:68:24:88:98:3e:dd:ad:3e:ae:5d:64:c5:24:5a:70:29: 32:5b:b6:5d:58:d0:84:02:1a:25:40:a6:1a:c0:5d:5e:d4:24: ad:1c:c9:d8:85:69:b8:cf:4e:e3:1b:35:12:6c:55:ce:6e:54: cc:01:4f:81:6d:9a:45:1e:14:44:34:25:f1:98:46:2b:b4:fc: d5:17:34:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xhcR8BTvxW1Iq4bjdmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzYxODBhYjQ1NDJkNmVlZTY2ZDlmOTkwMzBkZjcxMjM2 Y2UyNjQwHhcNMjUxMjIwMDQwMTA3WhcNMjUxMjIxMDQwMTA3WjAzMTEwLwYDVQQD EyhkY2E3ZGNkZjA3ODYwMTBhMjBlMmM5YzM5ZDU2NDVhMmE4YzExOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1whpOUkxXdYlSQ3abX7KQeA2kgCv Oy2UczfDp62lxwg1ZHAOCjBT5hnWL+kT6RI8pYVJADB3mVSsHSuS/92BsdSxqA18 t9dZHuSVSilIfAxLz6ocpAkD0KZKNE1nMHGWcAZYasMwB25VmPJqUOVBnEEaDrmv AYyKJpoU6E9d1F6xXLrwbtJTucSxZMULdV8sx0F2rZpmY/5001Pw7uZykSd6pqcx VbEliKgFoaSaF4qBNj4tnLXU7GU8x6pHtsz16UlDgjZXw44xtze6Q6BeE/7ANKSC mpgD7CVUbsVcyBuStNWvGiu4iujyN3oy3S6R24Qv/coP5lHjZqd/i0T8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyn3N8HhgEKIOLJw51WRaKowRkgMB8GA1UdIwQY MBaAFMs2GAq0VC1u7mbZ+ZAw33EjbOJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWIt NjY3ZGIxZGMxYjg2LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wNzk3ZDQtOGIyYy00MGFjLTljYWItNjY3ZGIxZGMxYjg2 LzEveXpZWUNyUlVMVzd1WnRuNWtERGZjU05zNG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRV/6Fx0 bxbiPgXH2fr1IuCplk+EVp0pGWD8t+QeUHxy7R0LVhP+YaK5/QoZf5dZk9x3Zhme nUZmdeSGRKQk4ZTPVzAHKCM8KHtfWizaLlQyjP0v9kiGeUvPm1bcTUpCq/Mp6ivO kgc5kBWMJ2UTLoqKIin5sAMiQU/fus+I6+YSENMObtjH6U54PV2fvsEi73PyGjH6 zhbxCKnoa5sMbGfwzQLexuTnyeteP/XDxcyS/DRehOxoJIiYPt2tPq5dZMUkWnAp Mlu2XVjQhAIaJUCmGsBdXtQkrRzJ2IVpuM9O4xs1EmxVzm5UzAFPgW2aRR4URDQl 8ZhGK7T81Rc0aA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:45 2025 by rpki-client