This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json) Hash identifier: OkBxGU0EC5cn3vTkTVVqM91pSTmhl8DKhnXwcNmN85I= Subject key identifier: 94:E0:76:81:51:15:7B:4A:6D:9A:1D:1A:7E:06:3E:26:04:AE:4D:99 Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411 Certificate serial: 019AF0889994265D4069AFFCFFD3A2E6D615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft Manifest number: 11FE Signing time: Fri 05 Dec 2025 22:01:15 +0000 Manifest this update: Fri 05 Dec 2025 22:01:15 +0000 Manifest next update: Sat 06 Dec 2025 22:01:15 +0000 Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=) 2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: gPasCOzJCx86r8wnW3pvR1lYBtyIQWHJXD9lrpXyW9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:99:94:26:5d:40:69:af:fc:ff:d3:a2:e6:d6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411 Validity Not Before: Dec 5 22:01:15 2025 GMT Not After : Dec 6 22:01:15 2025 GMT Subject: CN=94e0768151157b4a6d9a1d1a7e063e2604ae4d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:07:5c:d4:f3:0e:f4:c7:ed:b5:a3:17:db: 80:ca:ad:69:f4:9b:2d:ad:14:ea:7f:07:74:cc:ac: 7b:3f:bb:d6:93:b6:82:dc:d3:52:56:c9:ee:6e:20: 29:cf:85:c3:d2:0f:cf:d2:a5:d9:34:41:93:cd:f3: c7:02:ff:0e:5b:52:21:e9:04:5c:c7:11:26:a8:74: 52:ed:40:d6:eb:9b:93:c0:60:b1:86:a4:b7:9b:1c: 80:27:71:71:0f:d3:3b:1c:1a:45:f9:f6:8b:28:31: 9d:a3:51:0d:38:67:12:51:d9:86:3f:79:b3:e7:44: 4c:3a:0c:46:d4:71:11:a6:56:0a:98:a0:a2:89:46: 0a:e3:44:17:e5:c8:c7:86:8d:f2:73:11:0b:28:62: f3:77:43:37:37:f0:62:0f:fa:be:ad:29:2c:50:81: 82:1b:e4:12:ad:99:8b:2c:84:07:26:55:7b:dc:8a: 2c:97:58:2b:15:c8:ea:a8:41:f6:88:a7:3a:69:99: 70:85:e2:73:ee:51:6b:64:b4:4d:a8:0a:21:a9:7a: 0e:5c:e1:3e:8c:f8:9f:e2:52:3e:16:15:b6:6a:d3: dc:cc:df:1f:d4:04:9e:8d:5b:95:69:8b:02:38:af: c5:d5:d9:a3:8c:2f:0a:0a:2b:a1:d9:83:fc:27:86: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E0:76:81:51:15:7B:4A:6D:9A:1D:1A:7E:06:3E:26:04:AE:4D:99 X509v3 Authority Key Identifier: keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8e:1a:84:d5:f1:72:37:a2:78:ff:01:2c:c0:78:e7:a5:d2: 00:ed:a8:b3:a1:7e:10:f4:56:7f:d9:c6:af:d7:94:0e:10:b1: a1:0f:51:e3:ff:83:c4:d3:ac:ee:dc:7d:2e:67:4b:f1:0a:bb: 0d:ed:62:6d:e3:4f:1e:bd:35:9f:b7:55:4f:b4:ee:44:f8:88: 0b:b5:b7:e6:02:b0:2d:e2:49:29:aa:5a:ee:88:6b:a0:40:f3: 66:b8:28:4a:b1:ac:37:55:11:44:ab:bf:f7:a8:0a:0e:2e:e4: d3:92:9b:71:9d:74:8f:3f:c1:38:2f:ab:91:89:8b:68:ee:de: fd:af:d4:3e:fc:60:12:74:af:5b:15:f6:61:fd:95:50:06:86: 04:31:c0:6f:ab:af:21:f1:e4:91:d7:c1:e7:eb:d5:d8:7b:52: 73:94:67:53:11:58:d1:16:fd:04:c8:1c:47:87:37:08:1e:23: b7:d8:6f:fa:60:ad:a3:e4:70:8b:26:03:e0:0f:8d:b0:1c:61: 89:c5:65:fa:1a:e2:03:60:cf:b9:87:cd:64:47:b4:b3:3a:cc: a5:58:c9:2e:eb:43:e5:96:db:d5:49:20:3c:92:29:81:f7:fd: e1:2e:73:d1:36:b1:2e:fe:2b:23:5b:bf:ff:41:fc:39:c0:c8: fc:9b:29:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJmUJl1Aaa/8/9Oi5tYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3 ZDE0MTEwHhcNMjUxMjA1MjIwMTE1WhcNMjUxMjA2MjIwMTE1WjAzMTEwLwYDVQQD Eyg5NGUwNzY4MTUxMTU3YjRhNmQ5YTFkMWE3ZTA2M2UyNjA0YWU0ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRwHXNTzDvTH7bWjF9uAyq1p9Jst rRTqfwd0zKx7P7vWk7aC3NNSVsnubiApz4XD0g/P0qXZNEGTzfPHAv8OW1Ih6QRc xxEmqHRS7UDW65uTwGCxhqS3mxyAJ3FxD9M7HBpF+faLKDGdo1ENOGcSUdmGP3mz 50RMOgxG1HERplYKmKCiiUYK40QX5cjHho3ycxELKGLzd0M3N/BiD/q+rSksUIGC G+QSrZmLLIQHJlV73Iosl1grFcjqqEH2iKc6aZlwheJz7lFrZLRNqAohqXoOXOE+ jPif4lI+FhW2atPczN8f1ASejVuVaYsCOK/F1dmjjC8KCiuh2YP8J4Z9UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTgdoFRFXtKbZodGn4GPiYErk2ZMB8GA1UdIwQY MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo44ahNXx cjeieP8BLMB456XSAO2os6F+EPRWf9nGr9eUDhCxoQ9R4/+DxNOs7tx9LmdL8Qq7 De1ibeNPHr01n7dVT7TuRPiIC7W35gKwLeJJKapa7ohroEDzZrgoSrGsN1URRKu/ 96gKDi7k05KbcZ10jz/BOC+rkYmLaO7e/a/UPvxgEnSvWxX2Yf2VUAaGBDHAb6uv IfHkkdfB5+vV2HtSc5RnUxFY0Rb9BMgcR4c3CB4jt9hv+mCto+RwiyYD4A+NsBxh icVl+hriA2DPuYfNZEe0szrMpVjJLutD5Zbb1UkgPJIpgff94S5z0TaxLv4rI1u/ /0H8OcDI/JspOA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:50 2025 by rpki-client