This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json) Hash identifier: 3ra4/uBiWJzV0GruelbHzT2puljEsiBmF/ITfEH94S4= Subject key identifier: 70:3D:8B:3B:AA:C9:CD:39:6A:78:C4:E8:40:51:E8:C1:D2:B6:E2:3C Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8 Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8 Certificate serial: 019B5A1A500CF8E74A1DB574175DE87CF622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft Manifest number: 14A3 Signing time: Fri 26 Dec 2025 10:00:32 +0000 Manifest this update: Fri 26 Dec 2025 10:00:32 +0000 Manifest next update: Sat 27 Dec 2025 10:00:32 +0000 Files and hashes: 1: U4vaCvPLPsQcc8vg3OnlcW0vL4Y.roa (hash: xLSfBPsPVVtJayn5a9gdOa8vAATFWP5bOqFbdCJ7ilk=) 2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: CpWylGPdxRuuby7kA8Xiws5qM91ylHMXzzKk7RH/Naw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:50:0c:f8:e7:4a:1d:b5:74:17:5d:e8:7c:f6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8 Validity Not Before: Dec 26 10:00:32 2025 GMT Not After : Dec 27 10:00:32 2025 GMT Subject: CN=703d8b3baac9cd396a78c4e84051e8c1d2b6e23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:de:dd:1b:7f:8d:a0:eb:49:32:82:b4:e2: b1:2e:a1:88:ea:65:d0:55:ec:5e:0a:38:ec:09:a2: 50:8d:b2:bf:cf:2c:45:b9:99:cd:b6:0a:27:a7:a6: 7d:d6:31:05:16:dc:e6:b2:d6:43:f5:30:04:78:79: 57:22:a3:49:2e:74:92:ee:8e:8d:b4:a7:f9:b7:27: fc:87:07:9b:2b:17:e6:0a:b2:85:d3:45:ad:2b:6e: d0:ee:12:76:14:9e:f3:cc:1b:74:e6:ee:b1:a8:70: d2:6c:fa:10:25:8c:86:3d:94:14:7a:b0:bc:ef:74: 6d:39:c7:3a:1d:d3:d3:2b:fd:e4:4e:d4:51:cf:2f: 85:0e:32:44:0c:b6:07:88:1c:2c:80:1f:9f:fc:0c: 28:a2:53:2e:47:c2:85:6e:eb:92:c2:76:4a:df:ce: 54:49:5f:e6:b6:96:5b:06:84:52:06:06:1d:d7:ce: 80:89:69:00:bb:6f:21:86:d3:aa:e3:9f:e2:1e:b5: 4a:ca:97:ac:26:dc:3f:92:da:96:9b:a4:3c:c4:49: 39:4c:e9:45:6a:12:bc:22:a4:c0:3c:a6:89:2f:6b: d5:d3:3f:e4:8d:8c:0e:c5:9e:97:be:28:86:4e:5b: 59:c0:df:67:c9:ec:08:5f:b2:5e:fe:bb:7d:01:2d: a4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:8B:3B:AA:C9:CD:39:6A:78:C4:E8:40:51:E8:C1:D2:B6:E2:3C X509v3 Authority Key Identifier: keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0d:a5:79:ad:f1:64:28:64:07:5e:95:1c:e0:2c:1f:54:6a: d1:64:d4:53:fc:51:51:54:d1:51:d7:8a:0a:c6:25:3b:15:70: 55:f6:9f:98:f0:1e:f4:fa:78:83:e2:6b:c4:6b:97:39:07:4b: 02:dc:4b:14:81:28:0b:6c:09:03:bd:03:59:8e:2b:bf:71:3e: da:5c:bc:51:42:d3:46:99:ec:34:2c:80:ad:70:9a:28:58:54: d3:24:71:c0:77:bd:6f:e8:77:2d:21:e4:2e:1c:10:96:c9:d1: 1e:34:9a:2c:f6:c0:5c:1c:f0:88:d1:1e:ee:87:8d:a6:c7:24: 43:17:41:41:5d:a0:08:54:33:f7:a3:6b:b6:f5:2a:b2:ea:dd: fc:43:0b:8a:0e:28:94:7d:11:61:8d:73:b7:bd:d4:4d:ee:45: 5b:3b:5f:64:0f:d3:49:b6:84:da:27:50:23:ab:d3:b8:8e:a7: e0:48:ca:b4:52:05:85:fb:7a:0e:aa:90:d9:f7:8e:3d:dc:c6: ff:a6:47:63:b7:c9:8d:cd:c6:3f:3f:52:ed:28:9b:a6:b8:b8: 0e:92:c7:a8:bc:29:eb:1b:0e:76:77:c8:e2:61:b9:13:64:f7: 3b:d4:48:82:69:8e:47:ad:7c:69:55:32:5e:a2:87:fc:c0:44: a3:48:2b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlAM+OdKHbV0F13ofPYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj OTc3ZDgwHhcNMjUxMjI2MTAwMDMyWhcNMjUxMjI3MTAwMDMyWjAzMTEwLwYDVQQD Eyg3MDNkOGIzYmFhYzljZDM5NmE3OGM0ZTg0MDUxZThjMWQyYjZlMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAture3Rt/jaDrSTKCtOKxLqGI6mXQ VexeCjjsCaJQjbK/zyxFuZnNtgonp6Z91jEFFtzmstZD9TAEeHlXIqNJLnSS7o6N tKf5tyf8hwebKxfmCrKF00WtK27Q7hJ2FJ7zzBt05u6xqHDSbPoQJYyGPZQUerC8 73RtOcc6HdPTK/3kTtRRzy+FDjJEDLYHiBwsgB+f/AwoolMuR8KFbuuSwnZK385U SV/mtpZbBoRSBgYd186AiWkAu28hhtOq45/iHrVKypesJtw/ktqWm6Q8xEk5TOlF ahK8IqTAPKaJL2vV0z/kjYwOxZ6XviiGTltZwN9nyewIX7Je/rt9AS2kAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHA9izuqyc05anjE6EBR6MHStuI8MB8GA1UdIwQY MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ2lea3x ZChkB16VHOAsH1Rq0WTUU/xRUVTRUdeKCsYlOxVwVfafmPAe9Pp4g+JrxGuXOQdL AtxLFIEoC2wJA70DWY4rv3E+2ly8UULTRpnsNCyArXCaKFhU0yRxwHe9b+h3LSHk LhwQlsnRHjSaLPbAXBzwiNEe7oeNpsckQxdBQV2gCFQz96NrtvUqsurd/EMLig4o lH0RYY1zt73UTe5FWztfZA/TSbaE2idQI6vTuI6n4EjKtFIFhft6DqqQ2feOPdzG /6ZHY7fJjc3GPz9S7Sibpri4DpLHqLwp6xsOdnfI4mG5E2T3O9RIgmmOR618aVUy XqKH/MBEo0grXA== -----END CERTIFICATE-----Generated at Fri Dec 26 19:31:14 2025 by rpki-client