This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json) Hash identifier: LtRsMyReLlWQM5kpBFpbQWpfWLX/Yd1x/f/9FBwLeFs= Subject key identifier: 3D:EE:D4:76:76:40:DD:01:C0:8C:56:63:52:38:75:87:F9:E1:C4:F7 Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Certificate serial: 019AF5782E3F884B545B3DD5EDF690E82DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft Manifest number: 0151 Signing time: Sat 06 Dec 2025 21:01:25 +0000 Manifest this update: Sat 06 Dec 2025 21:01:25 +0000 Manifest next update: Sun 07 Dec 2025 21:01:25 +0000 Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=) 2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=) 3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=) 4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=) 5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: Zi5nkkkLWATraXj8b7RY7PCHf+SUK+5FU6IA8/TRljk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:2e:3f:88:4b:54:5b:3d:d5:ed:f6:90:e8:2d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Validity Not Before: Dec 6 21:01:25 2025 GMT Not After : Dec 7 21:01:25 2025 GMT Subject: CN=3deed4767640dd01c08c566352387587f9e1c4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:19:21:43:41:ee:5f:40:d4:32:a1:01:6d: 93:a4:a5:ce:a7:00:b5:d0:d5:cd:1b:ad:7e:0e:8f: f6:00:f5:69:98:71:3d:09:f6:09:f5:10:dc:7c:ac: 40:fd:2e:a7:d4:42:c1:e3:87:69:a7:bb:51:cf:25: 55:61:1c:a2:db:4f:49:3b:04:51:0c:6b:05:c9:ae: 98:e1:30:03:3e:b4:61:c8:4b:97:70:2e:c2:81:2f: ea:86:75:7d:84:17:f5:f2:af:b5:c4:39:37:1d:1a: 11:8e:4e:a6:e5:7c:c7:d2:30:70:8d:bd:f3:66:7e: 65:84:ba:74:bc:b1:b2:a1:9e:3a:d4:01:b2:5f:8a: fd:52:71:42:89:a4:8a:3f:ac:23:0f:a0:30:3e:ab: ad:d0:9b:7a:fa:2e:90:ce:a5:6d:69:82:5e:c9:d7: 4e:a3:f6:e1:4d:f3:38:44:21:90:46:84:06:c9:d3: ce:29:e7:8e:53:95:9a:16:54:c1:e5:ee:da:e5:27: e7:9c:63:b7:66:31:4c:9c:69:5b:b2:af:a6:3a:a9: a3:ea:55:90:5d:b3:e3:0c:e3:be:61:11:40:70:6b: fc:91:d4:2c:7f:96:07:e9:ab:94:e8:d5:99:a5:11: cc:7c:c7:41:50:66:74:7b:59:e0:84:37:8a:ad:a2: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EE:D4:76:76:40:DD:01:C0:8C:56:63:52:38:75:87:F9:E1:C4:F7 X509v3 Authority Key Identifier: keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:3f:f4:8b:ee:2a:b1:c6:71:81:4d:36:27:67:d9:bb:bb:18: 1c:c5:47:0a:ee:cd:a4:1b:20:38:9b:33:83:51:43:8d:d7:86: 55:1d:94:33:51:a4:4a:1e:d7:8d:c1:ac:df:35:ba:f1:7f:69: ba:97:a7:c2:9f:53:50:e5:c4:24:e1:24:c0:cf:67:cb:32:1e: d0:85:e2:85:6a:ab:82:bc:e2:68:10:16:01:cf:2b:4a:4b:1d: 36:65:2f:7f:df:5b:43:d3:77:87:5f:35:c9:31:53:aa:ee:b6: 68:02:1b:10:0c:78:fd:80:45:e8:0b:cd:0e:ba:93:0c:f1:53: 8c:9f:e0:6e:72:51:b7:b7:9d:eb:38:d8:28:30:c7:26:1f:f5: 54:f4:2c:32:b7:63:68:21:a9:4d:4a:74:87:c7:07:74:03:90: 45:99:16:ed:db:78:29:bd:ef:07:9e:8a:30:e6:31:61:fa:74: 61:14:b1:3b:3f:b4:1f:c1:94:ea:1a:4b:1f:4c:0f:47:86:8d: 25:09:69:4c:4b:56:fd:9f:b6:60:79:57:86:e8:93:1c:23:cc: 4f:66:60:30:fd:01:91:61:11:9f:fc:c7:13:56:4e:72:d4:6d: 0e:9e:17:22:4d:ea:84:6d:5e:95:ca:74:98:3e:3c:f0:4c:30: 8b:2e:c7:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eC4/iEtUWz3V7faQ6C2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk YjU5NGMwHhcNMjUxMjA2MjEwMTI1WhcNMjUxMjA3MjEwMTI1WjAzMTEwLwYDVQQD EygzZGVlZDQ3Njc2NDBkZDAxYzA4YzU2NjM1MjM4NzU4N2Y5ZTFjNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytIZIUNB7l9A1DKhAW2TpKXOpwC1 0NXNG61+Do/2APVpmHE9CfYJ9RDcfKxA/S6n1ELB44dpp7tRzyVVYRyi209JOwRR DGsFya6Y4TADPrRhyEuXcC7CgS/qhnV9hBf18q+1xDk3HRoRjk6m5XzH0jBwjb3z Zn5lhLp0vLGyoZ461AGyX4r9UnFCiaSKP6wjD6AwPqut0Jt6+i6QzqVtaYJeyddO o/bhTfM4RCGQRoQGydPOKeeOU5WaFlTB5e7a5SfnnGO3ZjFMnGlbsq+mOqmj6lWQ XbPjDOO+YRFAcGv8kdQsf5YH6auU6NWZpRHMfMdBUGZ0e1nghDeKraL/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3u1HZ2QN0BwIxWY1I4dYf54cT3MB8GA1UdIwQY MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZT/0i+4q scZxgU02J2fZu7sYHMVHCu7NpBsgOJszg1FDjdeGVR2UM1GkSh7XjcGs3zW68X9p upenwp9TUOXEJOEkwM9nyzIe0IXihWqrgrziaBAWAc8rSksdNmUvf99bQ9N3h181 yTFTqu62aAIbEAx4/YBF6AvNDrqTDPFTjJ/gbnJRt7ed6zjYKDDHJh/1VPQsMrdj aCGpTUp0h8cHdAOQRZkW7dt4Kb3vB56KMOYxYfp0YRSxOz+0H8GU6hpLH0wPR4aN JQlpTEtW/Z+2YHlXhuiTHCPMT2ZgMP0BkWERn/zHE1ZOctRtDp4XIk3qhG1elcp0 mD488Ewwiy7H8w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:36 2025 by rpki-client