This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json) Hash identifier: mGnZu3a8QC47iysnhXvTT3tM+1tDtfiD0sdkQT0gVeU= Subject key identifier: 04:61:A2:BF:88:4C:EB:AB:2E:06:FA:CA:56:E5:52:F7:51:9D:7B:42 Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6 Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6 Certificate serial: 019B0E5B97D245A74076D6A5C2C8F91CAF78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft Manifest number: 0EA9 Signing time: Thu 11 Dec 2025 17:00:42 +0000 Manifest this update: Thu 11 Dec 2025 17:00:42 +0000 Manifest next update: Fri 12 Dec 2025 17:00:42 +0000 Files and hashes: 1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=) 2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: EHtwQRs8Rmx+2Uv3ix9+PMdIaYa8R2+O6BXYWyWfTRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:97:d2:45:a7:40:76:d6:a5:c2:c8:f9:1c:af:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6 Validity Not Before: Dec 11 17:00:42 2025 GMT Not After : Dec 12 17:00:42 2025 GMT Subject: CN=0461a2bf884cebab2e06faca56e552f7519d7b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:84:23:b1:4b:a1:4f:e5:96:65:8d:f7:d0: b6:73:a8:34:c4:8a:7a:d5:6d:a3:69:8e:28:b7:62: d9:c5:da:7d:cc:44:59:36:0e:4f:48:fd:17:fe:67: d9:dc:6d:25:1f:91:7e:ee:6e:d3:94:8b:62:85:86: ff:2a:6f:e9:87:06:6a:bc:34:d4:4a:76:5f:0a:dd: e8:68:93:b8:c0:e3:d1:7b:88:98:87:97:03:a3:50: 09:13:9a:55:ce:92:cf:b9:a7:ff:10:5b:b3:cc:db: 30:6f:e6:0f:94:e9:fa:37:35:d3:a2:5e:90:25:7f: 89:56:1a:af:d1:f1:5d:97:7f:45:f6:11:51:99:8e: 61:56:b0:00:75:b4:46:49:66:65:d2:9e:4f:9b:ec: de:21:69:34:70:2d:70:c7:ec:75:74:6e:89:d4:d6: 84:86:19:5d:a2:1c:23:46:b4:f4:9d:17:f7:59:2e: af:ab:65:aa:75:b4:dc:47:63:04:72:50:57:1d:68: 4d:a7:7b:c0:13:e0:09:26:2e:e4:30:15:21:7f:a4: a8:f3:a6:e6:3d:5d:7d:f4:5b:ff:fe:59:b7:7f:b4: f7:b9:76:15:fa:69:0d:c6:c5:dd:d7:a8:26:37:35: 17:49:73:3b:82:d9:06:16:a8:49:4d:54:bc:a9:b7: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:61:A2:BF:88:4C:EB:AB:2E:06:FA:CA:56:E5:52:F7:51:9D:7B:42 X509v3 Authority Key Identifier: keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a6:f0:2e:20:e9:4d:52:0d:e8:ef:e6:20:91:db:a1:b0:6c: 52:77:6a:12:3d:6a:2a:43:b4:3f:73:f5:e7:43:f3:24:90:02: de:ac:dc:02:64:d3:66:42:2c:67:65:4e:18:c6:64:d8:f9:6b: e3:eb:4d:a7:01:3c:4e:da:7e:7c:60:c9:82:db:2d:1f:f9:88: f6:85:1c:17:15:7b:60:c6:a7:8b:b5:3e:c7:6c:3a:1b:8d:63: 14:be:9c:3e:b0:d5:e2:82:10:2a:2a:a9:79:6a:4a:13:0c:76: 48:61:77:0e:95:5d:79:25:98:e8:df:c9:af:8f:4b:72:9c:19: 64:29:71:71:90:88:86:d7:59:79:20:89:90:eb:b4:df:30:cd: ef:b4:16:52:61:f2:a4:61:a2:04:c0:71:87:94:dd:1b:d6:39: 70:bc:11:86:36:d9:f1:57:8b:ac:3b:97:0d:6c:aa:d9:a7:30: 64:20:59:ab:d3:58:da:78:4e:4d:be:de:6d:69:0a:d9:c8:d0: 34:bc:f2:32:8e:0f:49:e2:e8:db:2a:5f:e5:dd:a9:da:ed:91: b7:8d:62:c0:84:6b:c4:8b:20:e3:77:19:04:fb:6c:07:99:c4: 00:ad:6d:35:be:79:21:26:4c:24:4d:f1:ba:1b:fa:59:86:3d: a9:c9:bb:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW5fSRadAdtalwsj5HK94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZTc0ZmNjZTQxOTMzZjQyN2M1MzdkMzY1ZDVlNzYxZDI2 NTVlYjYwHhcNMjUxMjExMTcwMDQyWhcNMjUxMjEyMTcwMDQyWjAzMTEwLwYDVQQD EygwNDYxYTJiZjg4NGNlYmFiMmUwNmZhY2E1NmU1NTJmNzUxOWQ3YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS6EI7FLoU/llmWN99C2c6g0xIp6 1W2jaY4ot2LZxdp9zERZNg5PSP0X/mfZ3G0lH5F+7m7TlItihYb/Km/phwZqvDTU SnZfCt3oaJO4wOPRe4iYh5cDo1AJE5pVzpLPuaf/EFuzzNswb+YPlOn6NzXTol6Q JX+JVhqv0fFdl39F9hFRmY5hVrAAdbRGSWZl0p5Pm+zeIWk0cC1wx+x1dG6J1NaE hhldohwjRrT0nRf3WS6vq2WqdbTcR2MEclBXHWhNp3vAE+AJJi7kMBUhf6So86bm PV199Fv//lm3f7T3uXYV+mkNxsXd16gmNzUXSXM7gtkGFqhJTVS8qbeXEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARhor+ITOurLgb6ylblUvdRnXtCMB8GA1UdIwQY MBaAFMrnT8zkGTP0J8U302XV52HSZV62MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAt YzM1NDEwYjViNjkxLzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC83ZDBiYTItOTdmNS00MjBiLThkYzAtYzM1NDEwYjViNjkx LzEveXVkUHpPUVpNX1FueFRmVFpkWG5ZZEpsWHJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqbwLiDp TVIN6O/mIJHbobBsUndqEj1qKkO0P3P150PzJJAC3qzcAmTTZkIsZ2VOGMZk2Plr 4+tNpwE8Ttp+fGDJgtstH/mI9oUcFxV7YMani7U+x2w6G41jFL6cPrDV4oIQKiqp eWpKEwx2SGF3DpVdeSWY6N/Jr49LcpwZZClxcZCIhtdZeSCJkOu03zDN77QWUmHy pGGiBMBxh5TdG9Y5cLwRhjbZ8VeLrDuXDWyq2acwZCBZq9NY2nhOTb7ebWkK2cjQ NLzyMo4PSeLo2ypf5d2p2u2Rt41iwIRrxIsg43cZBPtsB5nEAK1tNb55ISZMJE3x uhv6WYY9qcm7+w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:54 2025 by rpki-client