This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft File: yPanLDQ-dkd2JEov8RJx_rIu3_k.mft (raw, json) Hash identifier: fDE+lseYCLi8LaxaC4yM3R6ofm7Iv8icIr9nlM6mGx0= Subject key identifier: 12:B4:5D:70:86:0A:EE:77:21:AF:CD:52:57:0F:AF:55:C5:36:01:C4 Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9 Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9 Certificate serial: 019B18719877617A661F85A98326B3C5080A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft Manifest number: 0780 Signing time: Sat 13 Dec 2025 16:00:56 +0000 Manifest this update: Sat 13 Dec 2025 16:00:56 +0000 Manifest next update: Sun 14 Dec 2025 16:00:56 +0000 Files and hashes: 1: Xt1bkdr_41bSzEpYi46vq9k5Pzk.roa (hash: zrah07M5AHpxInGTBwRwCoXtVHSq7IpVdG3YjkHSbbg=) 2: yPanLDQ-dkd2JEov8RJx_rIu3_k.crl (hash: h9Zi4pKHejqTmLZlasyhoEnLp7ae28F1TBV8OAREDY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:98:77:61:7a:66:1f:85:a9:83:26:b3:c5:08:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9 Validity Not Before: Dec 13 16:00:56 2025 GMT Not After : Dec 14 16:00:56 2025 GMT Subject: CN=12b45d70860aee7721afcd52570faf55c53601c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:5e:0f:98:87:55:32:a7:33:33:d2:ad:a6: 8e:16:26:1e:8b:d5:39:75:38:07:74:e8:c0:f6:f8: a8:e2:64:f4:c9:27:12:b4:a5:66:73:74:27:8e:4b: 67:ed:d3:17:da:02:f0:82:68:c3:d0:ea:91:57:09: 33:10:08:df:10:48:ce:02:a4:d0:7d:4c:e0:30:b9: ff:08:56:03:f4:f1:b9:87:30:2d:e6:68:93:cd:1d: 3e:b1:da:70:78:7f:2e:24:f7:67:51:72:a4:90:84: b8:84:41:29:9d:3e:dc:57:87:26:90:91:98:6f:5a: a8:a7:ec:ae:32:02:27:9e:93:89:36:86:c8:f9:01: 46:f8:32:37:b7:1e:9e:bf:98:21:3b:46:d2:99:a3: e6:f9:e8:8c:f9:11:ac:7e:e1:1d:c0:05:a6:f4:b9: 05:06:4f:bc:f3:fb:48:b7:66:1c:be:34:8e:89:b5: 36:16:4c:e9:b2:0a:6c:43:21:b1:e3:1f:8b:c1:7e: 33:05:5b:39:fc:4e:b8:f8:2b:07:fb:c9:d3:e8:ca: 1a:ab:87:a2:ee:55:75:20:30:05:9f:1f:92:e4:b2: 52:e4:b2:e6:57:ae:01:0d:57:a7:fc:09:26:29:59: 9d:7c:85:b4:fd:c9:54:a8:da:af:f3:4c:ef:cb:b8: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:5D:70:86:0A:EE:77:21:AF:CD:52:57:0F:AF:55:C5:36:01:C4 X509v3 Authority Key Identifier: keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:84:d7:e4:40:d0:f4:50:8c:94:69:6c:2e:75:ec:bb:83:8d: 32:29:d7:2f:f1:6e:66:1f:ab:83:e3:5b:99:58:03:fe:a9:e2: 34:dc:12:71:f8:ae:5c:64:67:a7:10:63:dc:c9:76:e7:27:0e: 9d:c9:2d:17:eb:8c:1e:25:4f:0a:ff:e8:19:3d:6b:45:dd:a3: be:46:d2:83:e7:21:f6:fa:fb:bb:9a:c1:f3:8c:57:50:1e:91: 02:34:8e:ee:ab:5a:c1:1c:b4:fe:d7:77:e4:0c:2c:6e:9a:36: 1e:8f:6b:2c:6e:07:4c:a3:78:f6:07:30:2a:0d:b0:c0:c1:40: ab:41:97:06:3d:c8:13:b5:7a:7c:5e:f5:bd:54:2c:ca:f9:39: cc:dd:a4:0b:8e:2d:d1:c8:37:df:7a:ea:fb:76:38:a9:6c:09: e3:f9:f0:1e:a7:f3:a3:7a:f5:95:4d:22:5d:76:82:14:5d:5d: 1d:1f:bc:e3:12:d2:17:82:2b:79:3e:18:2c:f5:f9:2f:2c:d4: b5:a9:c6:da:66:70:bc:43:81:5f:00:f1:82:13:28:bd:32:b5: 18:2d:31:cc:a9:ea:af:93:ae:cb:5c:85:e2:a3:19:bf:bb:d5: 15:98:c6:e6:99:f0:bf:95:6c:80:d8:7a:4f:a5:29:e5:0d:fa: a4:12:11:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcZh3YXpmH4WpgyazxQgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjZhNzJjMzQzZTc2NDc3NjI0NGEyZmYxMTI3MWZlYjIy ZWRmZjkwHhcNMjUxMjEzMTYwMDU2WhcNMjUxMjE0MTYwMDU2WjAzMTEwLwYDVQQD EygxMmI0NWQ3MDg2MGFlZTc3MjFhZmNkNTI1NzBmYWY1NWM1MzYwMWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjheD5iHVTKnMzPSraaOFiYei9U5 dTgHdOjA9vio4mT0yScStKVmc3Qnjktn7dMX2gLwgmjD0OqRVwkzEAjfEEjOAqTQ fUzgMLn/CFYD9PG5hzAt5miTzR0+sdpweH8uJPdnUXKkkIS4hEEpnT7cV4cmkJGY b1qop+yuMgInnpOJNobI+QFG+DI3tx6ev5ghO0bSmaPm+eiM+RGsfuEdwAWm9LkF Bk+88/tIt2YcvjSOibU2FkzpsgpsQyGx4x+LwX4zBVs5/E64+CsH+8nT6Moaq4ei 7lV1IDAFnx+S5LJS5LLmV64BDVen/AkmKVmdfIW0/clUqNqv80zvy7gQwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK0XXCGCu53Ia/NUlcPr1XFNgHEMB8GA1UdIwQY MBaAFMj2pyw0PnZHdiRKL/EScf6yLt/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2It YWRhNmU2NDMwN2M5LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2ItYWRhNmU2NDMwN2M5 LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4TX5EDQ 9FCMlGlsLnXsu4ONMinXL/FuZh+rg+NbmVgD/qniNNwScfiuXGRnpxBj3Ml25ycO ncktF+uMHiVPCv/oGT1rRd2jvkbSg+ch9vr7u5rB84xXUB6RAjSO7qtawRy0/td3 5Awsbpo2Ho9rLG4HTKN49gcwKg2wwMFAq0GXBj3IE7V6fF71vVQsyvk5zN2kC44t 0cg333rq+3Y4qWwJ4/nwHqfzo3r1lU0iXXaCFF1dHR+84xLSF4IreT4YLPX5LyzU tanG2mZwvEOBXwDxghMovTK1GC0xzKnqr5Ouy1yF4qMZv7vVFZjG5pnwv5VsgNh6 T6Up5Q36pBIRmg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:30 2025 by rpki-client