This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json) Hash identifier: 8lWOwigYrnikC3nJ34/VqwAhQ/9Y5zpDJYsKG1R9ALs= Subject key identifier: 0E:A6:EB:AC:58:76:9E:02:10:1B:7D:3E:8F:69:00:D2:04:A6:E4:D4 Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Certificate serial: 019AF389118EF9B816333E43A940ED5947DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft Manifest number: 0150 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=) 2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=) 3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=) 4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=) 5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: JXWTt5G/X76S6DgUHSWe/2FQM1CAFc7mEli118Gjprw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:11:8e:f9:b8:16:33:3e:43:a9:40:ed:59:47:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=0ea6ebac58769e02101b7d3e8f6900d204a6e4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:ac:7f:4d:ef:e6:00:b3:3a:ee:ad:26:e3: b2:03:05:ac:8b:76:39:14:15:72:fb:02:e0:98:f9: 81:4e:e6:99:39:eb:f7:1e:37:98:55:f8:23:d0:3d: 1a:47:47:b9:e5:e0:11:f7:d1:f0:42:4d:0a:43:6d: 21:41:81:de:03:40:82:4b:6f:7f:4c:39:a3:79:d9: 06:bd:14:95:8a:6b:1a:1f:05:8e:67:c8:43:b9:66: e4:15:ea:d4:d9:7c:bf:b1:83:a7:e7:5a:b4:86:b1: 41:20:01:af:c5:02:29:8a:3c:70:51:1e:ba:66:4b: 39:3c:fa:33:82:1d:8a:f1:ad:7a:82:34:01:2a:27: f5:20:b9:82:9d:5a:3f:8c:47:8e:60:29:46:23:3b: 21:57:d5:67:58:70:81:ca:99:84:8d:46:bf:fd:da: b0:85:26:d0:11:84:0e:48:cc:68:e2:9e:63:b6:4d: 9c:05:d3:9b:29:d8:b0:d1:75:a3:67:e4:d1:f4:a9: 59:8f:45:73:59:2a:db:9d:86:9e:66:2a:1f:4d:59: 4f:cc:79:d5:53:97:12:0d:e4:27:c9:cc:c9:a1:7c: 57:45:2a:49:07:4d:d8:a6:ab:b1:3f:38:3f:8f:81: 90:8a:93:56:a6:4c:07:67:3a:01:d5:17:e5:1f:f0: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A6:EB:AC:58:76:9E:02:10:1B:7D:3E:8F:69:00:D2:04:A6:E4:D4 X509v3 Authority Key Identifier: keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:60:11:ad:fb:c6:e0:ea:2f:ad:f4:08:16:71:84:56:92:28: 69:f8:1d:a3:63:20:73:dc:8b:79:3c:ec:a8:6f:cd:9c:c7:78: 28:0d:18:0c:fb:c8:59:bf:6b:c7:39:fd:34:3a:d2:c5:17:6c: 7b:5e:11:bd:4f:aa:75:51:1c:f0:9f:e3:99:a9:c3:30:45:4e: 67:b0:35:54:1c:63:2a:83:b8:cc:21:45:ba:eb:e1:bf:c2:e5: 9c:60:2e:55:4d:75:44:2e:3e:c4:de:d3:76:cc:55:a4:65:5c: cf:29:e0:a4:75:fe:55:95:bf:61:ba:15:2f:ee:93:de:b2:8a: 38:09:9a:f9:c2:7b:a2:d3:27:79:84:b7:ee:47:2d:49:71:f3: 05:2c:6e:8d:e6:d9:25:14:82:e5:68:1b:b9:77:45:a1:f3:cc: 34:be:65:08:31:a0:56:39:50:25:6c:02:8e:c0:bc:f2:90:b1: fc:96:61:97:ca:1f:5c:1f:b9:43:26:61:c1:d0:52:03:62:1f: 96:56:f4:4f:56:f8:3e:9a:28:dd:20:a7:c5:7c:bf:82:f0:cb: 11:06:2a:b8:01:02:40:8d:4d:c8:f7:1f:bd:84:3b:64:64:ba: 0e:7b:01:d5:1b:fe:3f:09:56:3d:48:ee:20:8a:f0:12:a2:95: 65:77:90:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRGO+bgWMz5DqUDtWUfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk YjU5NGMwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD EygwZWE2ZWJhYzU4NzY5ZTAyMTAxYjdkM2U4ZjY5MDBkMjA0YTZlNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IWsf03v5gCzOu6tJuOyAwWsi3Y5 FBVy+wLgmPmBTuaZOev3HjeYVfgj0D0aR0e55eAR99HwQk0KQ20hQYHeA0CCS29/ TDmjedkGvRSVimsaHwWOZ8hDuWbkFerU2Xy/sYOn51q0hrFBIAGvxQIpijxwUR66 Zks5PPozgh2K8a16gjQBKif1ILmCnVo/jEeOYClGIzshV9VnWHCBypmEjUa//dqw hSbQEYQOSMxo4p5jtk2cBdObKdiw0XWjZ+TR9KlZj0VzWSrbnYaeZiofTVlPzHnV U5cSDeQnyczJoXxXRSpJB03YpquxPzg/j4GQipNWpkwHZzoB1RflH/DzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6m66xYdp4CEBt9Po9pANIEpuTUMB8GA1UdIwQY MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGARrfvG 4OovrfQIFnGEVpIoafgdo2Mgc9yLeTzsqG/NnMd4KA0YDPvIWb9rxzn9NDrSxRds e14RvU+qdVEc8J/jmanDMEVOZ7A1VBxjKoO4zCFFuuvhv8LlnGAuVU11RC4+xN7T dsxVpGVczyngpHX+VZW/YboVL+6T3rKKOAma+cJ7otMneYS37kctSXHzBSxujebZ JRSC5WgbuXdFofPMNL5lCDGgVjlQJWwCjsC88pCx/JZhl8ofXB+5QyZhwdBSA2If llb0T1b4Ppoo3SCnxXy/gvDLEQYquAECQI1NyPcfvYQ7ZGS6DnsB1Rv+PwlWPUju IIrwEqKVZXeQ9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:12 2025 by rpki-client