This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json) Hash identifier: AjKTQ51MpMmokKyvyuxLVRaKVShiKE3NrXMvX7VDyyM= Subject key identifier: BC:07:B0:55:88:95:EE:FF:50:86:AE:B2:BD:5E:94:E2:60:47:BF:00 Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Certificate serial: 019B21ABE7341F21248208B430F1F11BBCE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft Manifest number: 13FB Signing time: Mon 15 Dec 2025 11:01:12 +0000 Manifest this update: Mon 15 Dec 2025 11:01:12 +0000 Manifest next update: Tue 16 Dec 2025 11:01:12 +0000 Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: l8r/INenq+KV9qUuH2u7Vf6bWxVghDAs3cVbWLif0xc=) 2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:e7:34:1f:21:24:82:08:b4:30:f1:f1:1b:bc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390 Validity Not Before: Dec 15 11:01:12 2025 GMT Not After : Dec 16 11:01:12 2025 GMT Subject: CN=bc07b0558895eeff5086aeb2bd5e94e26047bf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:9a:da:0a:ec:3d:da:6e:c1:75:62:bc:00: cc:fb:00:76:cc:5a:00:c3:1f:2b:01:28:c0:f9:cf: 77:d9:c0:0b:a2:17:ae:e4:f9:cb:2d:9c:9a:df:68: 14:c3:1f:d1:ce:e1:8b:23:77:15:b5:69:e8:29:57: a2:49:29:54:fb:56:80:ec:8e:fe:4d:7c:2f:f9:dc: fd:a0:1e:b7:9e:9d:6d:b5:f3:b0:3d:d0:cf:e6:40: ac:42:79:e4:30:f2:95:fb:52:14:56:ec:d1:24:25: 57:c2:62:32:9a:61:b1:c7:2c:0a:f1:d4:5b:6a:ba: e2:2f:c5:7d:45:23:02:e8:71:c2:0f:5c:71:9c:81: ca:d8:ff:2c:14:3f:b0:24:27:f7:5f:dc:0b:94:1d: d8:be:ca:3a:ea:81:da:c2:01:56:c5:b9:24:d4:cc: 9a:2a:21:2b:de:64:ac:36:a8:f5:be:14:ad:46:e0: 61:5d:9a:ba:2a:ef:b0:d1:2c:99:cd:4d:94:51:b7: bf:45:5f:fb:53:8e:9d:10:f3:f9:4a:d2:f3:50:36: 5a:2c:3d:b2:eb:b3:b1:67:8e:87:ae:cd:35:ac:a0: f5:bc:fe:96:0d:66:31:56:f2:84:04:84:3f:ce:91: cf:dd:4b:7c:80:a8:72:8a:c0:77:58:d9:e1:8d:38: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:B0:55:88:95:EE:FF:50:86:AE:B2:BD:5E:94:E2:60:47:BF:00 X509v3 Authority Key Identifier: keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c8:45:e5:c9:e0:4a:21:1f:bb:2f:30:92:79:7a:02:ab:e4: 67:c9:ff:7a:ee:ac:af:23:af:53:1e:4d:19:40:42:bf:5a:c2: ea:43:ee:81:08:73:45:d4:6e:21:91:a9:4f:56:0d:f2:e2:5b: 7a:7e:7b:34:33:d2:25:a9:c3:e2:57:18:71:10:3b:89:c6:b5: e9:b0:b4:8b:a6:44:f9:0d:5e:c8:2c:4b:60:b9:67:4e:60:01: 8b:58:89:21:f5:76:16:3a:f0:fb:ee:4e:6a:24:8d:b4:b0:54: 3b:03:e8:0d:75:bb:78:0a:4e:c7:38:37:54:a6:30:24:ba:fe: 0c:03:18:ea:80:46:b2:c3:5e:15:69:5e:58:48:12:0c:a5:f4: 30:7a:48:7a:13:41:ab:50:82:52:d0:42:3f:74:73:59:9b:65: 76:08:71:aa:5a:33:5b:06:fb:7c:e2:73:a1:17:7c:07:04:51: 24:22:30:03:9e:c3:af:ab:63:86:d3:ed:7c:5a:d3:5b:8e:ae: d0:e1:8e:22:c5:86:9b:8f:cb:b6:e9:7b:5f:2e:cd:cd:ee:af: 42:05:ca:fd:ba:12:af:5a:33:97:85:4b:47:17:fb:fd:2d:92: 89:34:78:83:e6:95:2f:d0:4f:d2:71:e9:9a:7c:40:6d:d8:54: 4b:b2:cb:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq+c0HyEkggi0MPHxG7zmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVjMzQzNTM4MGU4YWUxNWZjODFjZGRjYzk0Y2VlNjdk NmIzOTAwHhcNMjUxMjE1MTEwMTEyWhcNMjUxMjE2MTEwMTEyWjAzMTEwLwYDVQQD EyhiYzA3YjA1NTg4OTVlZWZmNTA4NmFlYjJiZDVlOTRlMjYwNDdiZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxma2grsPdpuwXVivADM+wB2zFoA wx8rASjA+c932cALoheu5PnLLZya32gUwx/RzuGLI3cVtWnoKVeiSSlU+1aA7I7+ TXwv+dz9oB63np1ttfOwPdDP5kCsQnnkMPKV+1IUVuzRJCVXwmIymmGxxywK8dRb arriL8V9RSMC6HHCD1xxnIHK2P8sFD+wJCf3X9wLlB3Yvso66oHawgFWxbkk1Mya KiEr3mSsNqj1vhStRuBhXZq6Ku+w0SyZzU2UUbe/RV/7U46dEPP5StLzUDZaLD2y 67OxZ46Hrs01rKD1vP6WDWYxVvKEBIQ/zpHP3Ut8gKhyisB3WNnhjTgfBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwHsFWIle7/UIausr1elOJgR78AMB8GA1UdIwQY MBaAFP2Ow0NTgOiuFfyBzdzJTO5n1rOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYt Zjc2MjUyNjMwN2U4LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC83MGU2OWMtZGM0ZS00Yzk2LTg5ZGYtZjc2MjUyNjMwN2U4 LzEvX1k3RFExT0E2SzRWX0lITjNNbE03bWZXczVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8hF5cng SiEfuy8wknl6AqvkZ8n/eu6sryOvUx5NGUBCv1rC6kPugQhzRdRuIZGpT1YN8uJb en57NDPSJanD4lcYcRA7ica16bC0i6ZE+Q1eyCxLYLlnTmABi1iJIfV2Fjrw++5O aiSNtLBUOwPoDXW7eApOxzg3VKYwJLr+DAMY6oBGssNeFWleWEgSDKX0MHpIehNB q1CCUtBCP3RzWZtldghxqlozWwb7fOJzoRd8BwRRJCIwA57Dr6tjhtPtfFrTW46u 0OGOIsWGm4/Ltul7Xy7Nze6vQgXK/boSr1ozl4VLRxf7/S2SiTR4g+aVL9BP0nHp mnxAbdhUS7LLlg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:33 2025 by rpki-client