This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json) Hash identifier: kgRsXCcdfqrWDzSKqBtq6S3pqYpQN5zDOpQeGwODPmQ= Subject key identifier: 8F:A2:50:BF:B4:FB:A3:95:A3:D3:9B:70:E6:A5:03:50:BE:1B:C7:86 Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe Certificate serial: 019AF08870F1278861DF60DEC5DB4B16AE8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft Manifest number: 13F5 Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=) 2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: S2IhKbL66sIR8YUS41Fxgk7FY8di7l4MqeYWv89g1xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:70:f1:27:88:61:df:60:de:c5:db:4b:16:ae:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=8fa250bfb4fba395a3d39b70e6a50350be1bc786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:db:33:09:70:cd:2e:cd:a4:b3:98:f0:30: ef:f3:26:87:0a:6e:03:33:26:de:2e:fa:22:fe:34: 2e:ab:e6:97:35:bf:3f:70:09:b5:41:df:b1:60:c2: f9:b0:0c:f1:97:3d:7a:b4:80:a2:ab:58:eb:0f:73: 2a:6a:a5:0c:5f:d9:c9:c5:98:88:0a:44:93:41:85: d8:32:f0:7e:fe:fb:eb:15:77:58:b8:a6:f9:f9:3c: 07:70:25:9c:e9:4d:f8:63:7c:db:87:b1:a2:53:bb: 95:d1:ce:89:4f:ed:63:0f:a1:0b:f1:be:f3:54:1b: 90:30:f0:12:34:19:4c:b0:ff:7f:7c:37:92:0a:27: 92:5b:09:44:c0:65:46:a2:72:d4:05:9b:e4:62:16: 7f:a5:43:7d:ed:4e:8e:1c:05:ee:52:ff:bd:34:d8: aa:04:27:86:6d:83:65:a5:e7:d7:bc:ee:e6:77:5e: 1f:63:18:a5:c8:8c:4f:35:3b:dd:f3:87:72:4d:5d: e4:be:69:70:82:d9:c6:bc:a5:7c:65:af:b6:0e:4d: c5:f6:41:dc:3f:f5:c5:4a:4a:28:7f:19:f7:00:8a: c9:80:05:93:e3:6f:78:c6:04:9c:5e:cc:f4:8a:14: 85:38:19:d2:7a:53:30:a9:bf:42:03:91:2b:24:ef: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A2:50:BF:B4:FB:A3:95:A3:D3:9B:70:E6:A5:03:50:BE:1B:C7:86 X509v3 Authority Key Identifier: keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0f:1f:58:ad:85:24:5f:91:52:7e:eb:71:82:8c:b2:7e:f7: cd:e8:e9:e6:af:b2:12:ef:38:a7:c8:0b:32:23:1c:c1:2a:b3: d6:48:32:49:05:98:02:00:23:32:c8:14:c2:a3:56:cb:c8:d4: c1:13:cd:a9:07:30:59:a9:e7:cb:d1:65:0f:ae:72:11:c1:ef: 94:ce:0b:a1:1a:0c:6b:d2:c9:eb:78:a2:53:ea:38:e2:90:f7: 66:f4:b9:12:52:13:ee:52:9f:0a:63:8e:de:18:83:d4:15:ef: 24:ee:5a:ba:94:1a:43:c3:88:8e:cd:57:49:d5:e4:0e:e9:13: f7:ea:c2:f1:a3:39:0a:1d:e4:3f:cc:bd:83:52:27:b0:ef:c3: 98:23:e3:35:3a:c1:c8:e8:0a:03:ec:b3:22:e8:26:a1:09:4c: d7:eb:1c:d4:f9:fc:d5:b8:c4:00:6e:a0:12:57:f1:04:fc:bf: 75:2a:3f:9b:1e:33:e4:8b:78:5a:2e:43:b0:da:d3:29:34:60: 47:69:0d:1d:52:20:c4:d5:d3:29:4f:b8:bb:9d:b3:e1:dd:fc: 22:f8:97:bb:05:75:aa:c2:f1:e6:d3:24:d3:f5:8a:c7:8f:01: b0:51:f9:65:a4:e4:d6:42:ab:05:86:81:5c:11:0f:ff:bd:85: fe:d9:02:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHDxJ4hh32DexdtLFq6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4 NTBhYmUwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD Eyg4ZmEyNTBiZmI0ZmJhMzk1YTNkMzliNzBlNmE1MDM1MGJlMWJjNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscLbMwlwzS7NpLOY8DDv8yaHCm4D MybeLvoi/jQuq+aXNb8/cAm1Qd+xYML5sAzxlz16tICiq1jrD3MqaqUMX9nJxZiI CkSTQYXYMvB+/vvrFXdYuKb5+TwHcCWc6U34Y3zbh7GiU7uV0c6JT+1jD6EL8b7z VBuQMPASNBlMsP9/fDeSCieSWwlEwGVGonLUBZvkYhZ/pUN97U6OHAXuUv+9NNiq BCeGbYNlpefXvO7md14fYxilyIxPNTvd84dyTV3kvmlwgtnGvKV8Za+2Dk3F9kHc P/XFSkoofxn3AIrJgAWT4294xgScXsz0ihSFOBnSelMwqb9CA5ErJO/3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+iUL+0+6OVo9ObcOalA1C+G8eGMB8GA1UdIwQY MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0 LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg8fWK2F JF+RUn7rcYKMsn73zejp5q+yEu84p8gLMiMcwSqz1kgySQWYAgAjMsgUwqNWy8jU wRPNqQcwWanny9FlD65yEcHvlM4LoRoMa9LJ63iiU+o44pD3ZvS5ElIT7lKfCmOO 3hiD1BXvJO5aupQaQ8OIjs1XSdXkDukT9+rC8aM5Ch3kP8y9g1InsO/DmCPjNTrB yOgKA+yzIugmoQlM1+sc1Pn81bjEAG6gElfxBPy/dSo/mx4z5It4Wi5DsNrTKTRg R2kNHVIgxNXTKU+4u52z4d38IviXuwV1qsLx5tMk0/WKx48BsFH5ZaTk1kKrBYaB XBEP/72F/tkC5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:03 2025 by rpki-client