This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json) Hash identifier: x1kisSXuMoRJL9Vz0iU1xEerMIvOkMPDW29j5D6CsBQ= Subject key identifier: 3B:98:2E:07:23:04:F6:B5:EA:43:12:D2:B9:A6:EF:B3:2D:2D:99:64 Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7 Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7 Certificate serial: 019AF61C5BF3BD4C1AE3D701312DE9EC06CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft Manifest number: 06A3 Signing time: Sun 07 Dec 2025 00:00:44 +0000 Manifest this update: Sun 07 Dec 2025 00:00:44 +0000 Manifest next update: Mon 08 Dec 2025 00:00:44 +0000 Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=) 2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=) 3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: pRReNlcnbG3Domx1tRfyGcyTHUcmSMp/gJ7w7cFS8L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:5b:f3:bd:4c:1a:e3:d7:01:31:2d:e9:ec:06:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7 Validity Not Before: Dec 7 00:00:44 2025 GMT Not After : Dec 8 00:00:44 2025 GMT Subject: CN=3b982e072304f6b5ea4312d2b9a6efb32d2d9964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:e8:20:ec:09:8f:53:22:01:20:bc:1f:e0: a2:f9:d8:1f:f4:bb:ad:30:3d:e7:63:c1:b2:28:a1: b4:9d:55:1a:08:0a:14:8f:dc:7d:ac:68:df:e6:a5: 99:ea:ca:7c:e9:90:f2:b9:a3:12:56:e5:3d:a9:89: 14:84:7c:b3:09:d0:7a:5d:f1:bc:a4:87:45:5c:6e: 81:35:f0:ee:22:e5:9a:fc:89:b1:df:fa:93:0e:44: ac:6b:1c:d3:a5:63:c0:d8:01:99:9c:9f:51:c7:ed: f1:2a:d6:70:73:f2:6a:3e:7f:bf:eb:33:65:10:a1: 57:0d:76:4a:ac:d4:28:70:59:8a:7d:a7:f1:b3:41: 8a:f5:60:ef:ca:78:78:21:f8:dd:b7:30:98:7f:e8: e9:7d:65:d8:12:ea:2d:88:a1:aa:2f:8f:11:60:18: 41:5e:a4:dc:1e:49:61:92:be:12:78:01:5a:cb:2c: 62:9c:a2:ba:05:2d:ad:38:8b:58:0e:5f:09:18:d5: 96:9e:a2:74:88:3c:2f:ea:9d:79:9c:65:e8:88:22: 86:76:d1:83:81:1f:ab:1c:31:63:57:99:ca:ce:4d: 38:ee:26:48:c1:ee:1a:27:41:dc:a7:3d:fc:1d:e4: 5a:39:0b:0c:be:52:c8:73:97:e0:37:ef:78:49:e8: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:2E:07:23:04:F6:B5:EA:43:12:D2:B9:A6:EF:B3:2D:2D:99:64 X509v3 Authority Key Identifier: keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:64:7d:b6:b2:5c:25:f4:8f:11:ed:60:a7:ef:7b:b9:66:c1: 9d:3f:4b:6e:46:d6:d7:a6:81:8b:e0:d7:a3:c9:7d:31:0a:bd: 5d:2a:41:49:58:c6:04:5a:bd:77:ce:72:fe:7b:08:d9:81:18: 42:e8:40:52:21:7e:a6:1d:16:75:9c:b2:39:0b:1d:19:ce:40: 60:1e:9c:26:fc:b5:06:18:a4:d0:c7:cb:f4:cb:b2:bd:8d:d1: cf:84:09:d5:9d:53:6b:ac:e0:7c:ba:2b:e2:47:39:82:c7:81: 11:c0:bc:e7:d3:40:8a:b7:5b:46:aa:c0:63:aa:c9:44:6c:f6: 3b:01:ba:ad:d4:d5:91:01:4c:bc:03:81:ac:ec:7c:ae:38:77: fd:9d:ec:58:63:75:c4:08:60:d9:c9:f2:42:40:05:4d:57:da: 53:52:e5:94:b4:c9:ac:b6:4c:69:b8:39:8c:ed:8b:d8:7d:d5: 43:59:a3:63:94:8b:b3:bc:5d:68:06:81:e4:a9:ab:36:a7:54: 26:f0:3b:33:1e:4c:0e:8f:00:1f:7a:ae:47:2a:dc:41:e0:b4: e3:ee:c7:9d:72:94:df:a3:10:3a:98:9a:f5:6e:d1:1d:b7:7e: c5:4b:24:fc:71:0d:15:56:ea:e0:c2:81:c3:28:91:85:b1:8d: ba:34:e4:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HFvzvUwa49cBMS3p7AbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDBlOTIzNGNjNjcyMTk1N2E0YWMyMTNlYWM2NzUzZWQ4 NWVlYTcwHhcNMjUxMjA3MDAwMDQ0WhcNMjUxMjA4MDAwMDQ0WjAzMTEwLwYDVQQD EygzYjk4MmUwNzIzMDRmNmI1ZWE0MzEyZDJiOWE2ZWZiMzJkMmQ5OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnoIOwJj1MiASC8H+Ci+dgf9Lut MD3nY8GyKKG0nVUaCAoUj9x9rGjf5qWZ6sp86ZDyuaMSVuU9qYkUhHyzCdB6XfG8 pIdFXG6BNfDuIuWa/Imx3/qTDkSsaxzTpWPA2AGZnJ9Rx+3xKtZwc/JqPn+/6zNl EKFXDXZKrNQocFmKfafxs0GK9WDvynh4IfjdtzCYf+jpfWXYEuotiKGqL48RYBhB XqTcHklhkr4SeAFayyxinKK6BS2tOItYDl8JGNWWnqJ0iDwv6p15nGXoiCKGdtGD gR+rHDFjV5nKzk047iZIwe4aJ0Hcpz38HeRaOQsMvlLIc5fgN+94SegpgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuYLgcjBPa16kMS0rmm77MtLZlkMB8GA1UdIwQY MBaAFMnQ6SNMxnIZV6SsIT6sZ1Pthe6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt OWEzMDBiMGE3ZWQyLzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy LzEveWREcEkwekdjaGxYcEt3aFBxeG5VLTJGN3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemR9trJc JfSPEe1gp+97uWbBnT9LbkbW16aBi+DXo8l9MQq9XSpBSVjGBFq9d85y/nsI2YEY QuhAUiF+ph0WdZyyOQsdGc5AYB6cJvy1Bhik0MfL9MuyvY3Rz4QJ1Z1Ta6zgfLor 4kc5gseBEcC859NAirdbRqrAY6rJRGz2OwG6rdTVkQFMvAOBrOx8rjh3/Z3sWGN1 xAhg2cnyQkAFTVfaU1LllLTJrLZMabg5jO2L2H3VQ1mjY5SLs7xdaAaB5KmrNqdU JvA7Mx5MDo8AH3quRyrcQeC04+7HnXKU36MQOpia9W7RHbd+xUsk/HENFVbq4MKB wyiRhbGNujTkOA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:52:57 2025 by rpki-client