This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json) Hash identifier: ugeLcdzJAWL8nMus/tOP+vRmEu+67eMKV0aZZ/8ucJA= Subject key identifier: 26:DB:EC:92:CA:80:B0:38:85:E6:3E:C5:20:58:7A:42:3D:84:DB:60 Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Certificate serial: 019B2DAFE34A092DD8A875B9BE25145B441F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft Manifest number: 04E0 Signing time: Wed 17 Dec 2025 19:01:00 +0000 Manifest this update: Wed 17 Dec 2025 19:01:00 +0000 Manifest next update: Thu 18 Dec 2025 19:01:00 +0000 Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=) 2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: r4bigvqNKiiGM69wpNz91e9fhsI+LAxtLzFBufX1edg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:af:e3:4a:09:2d:d8:a8:75:b9:be:25:14:5b:44:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Validity Not Before: Dec 17 19:01:00 2025 GMT Not After : Dec 18 19:01:00 2025 GMT Subject: CN=26dbec92ca80b03885e63ec520587a423d84db60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:9b:ca:74:3a:56:21:c4:27:4e:4c:4a:d2: cf:ab:c1:fa:b4:74:64:2e:69:6e:d9:a3:9f:d1:7d: a7:4c:b3:5d:9d:c1:3a:57:c6:4d:87:55:74:63:38: 0e:c6:d5:a6:ab:69:b4:21:da:f2:38:dc:de:df:8f: f7:3a:84:0c:8c:09:80:9b:5e:dc:be:23:db:26:3f: 76:2b:66:62:67:13:54:ab:da:b5:9a:6b:0b:3c:ae: f5:bd:db:48:17:3e:0d:6e:7d:16:7b:65:39:5e:f7: 59:e0:41:b7:db:65:fc:b0:af:d0:ea:5d:a3:ec:31: db:dd:07:05:fb:1a:36:5e:b2:7d:7a:92:9f:1c:08: 5c:5b:61:f7:e3:55:d8:8e:db:50:a4:fa:5b:7b:60: dd:e6:2f:7c:bb:12:4b:7e:5a:7a:f1:b9:4c:b5:d0: a9:5a:5f:c5:be:60:c3:4f:90:04:15:a8:19:43:49: 29:d3:a2:fc:20:69:56:d6:55:e7:2c:39:71:eb:16: 8a:24:70:b9:00:6e:4e:6e:cb:3c:a2:35:a9:e1:4c: 26:97:a5:6b:da:df:96:f4:d7:0e:d4:0a:a0:e8:18: 0f:ae:79:f6:82:af:99:0a:57:06:d3:cb:4a:2b:88: 6e:6c:1b:71:77:e1:35:58:33:81:c9:79:ce:0c:da: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DB:EC:92:CA:80:B0:38:85:E6:3E:C5:20:58:7A:42:3D:84:DB:60 X509v3 Authority Key Identifier: keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:dd:9d:21:1c:a0:cb:9e:52:7a:ac:81:94:cc:ae:0d:bb:5c: 46:42:77:e2:f7:d7:7b:60:31:68:9a:bd:7d:d9:ec:72:4f:65: 18:29:f7:9d:0e:f2:d4:38:60:60:34:8a:f3:3d:1e:e0:70:bf: 62:b2:4b:39:e6:13:f0:f2:93:cd:e4:18:2d:46:14:0e:8f:65: c3:e6:4e:b2:d0:43:e6:3b:d7:fa:cd:da:72:59:cf:15:19:9e: 3d:aa:de:71:19:21:fe:0d:c9:01:b2:8a:5b:68:f6:47:42:7c: d5:24:c5:7b:3d:97:80:ce:cc:35:7e:aa:d8:61:fa:e2:21:02: 2b:19:b3:4b:70:5c:26:6e:3a:5a:5b:2e:d6:fd:90:b7:e6:9e: 49:3d:aa:46:75:49:7b:ea:34:b0:2b:13:44:d0:43:1f:20:20: 75:5b:4b:8c:03:41:b7:d2:b5:d3:d8:87:d0:0d:37:24:4f:c8: 74:43:cd:16:0a:dd:5c:db:2e:cc:71:9b:28:f2:04:ba:b1:98: 46:5a:99:71:c6:68:41:95:f6:4e:e0:f6:c0:67:0c:2a:72:e6: 4b:9d:80:40:ac:98:35:96:ea:2e:80:da:3d:9e:d4:aa:73:03: f1:dd:49:e7:0b:6b:94:96:04:15:9d:05:bf:b2:f6:52:b3:a0: ac:d9:4c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstr+NKCS3YqHW5viUUW0QfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk NTBhMzQwHhcNMjUxMjE3MTkwMTAwWhcNMjUxMjE4MTkwMTAwWjAzMTEwLwYDVQQD EygyNmRiZWM5MmNhODBiMDM4ODVlNjNlYzUyMDU4N2E0MjNkODRkYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0ebynQ6ViHEJ05MStLPq8H6tHRk Lmlu2aOf0X2nTLNdncE6V8ZNh1V0YzgOxtWmq2m0IdryONze34/3OoQMjAmAm17c viPbJj92K2ZiZxNUq9q1mmsLPK71vdtIFz4Nbn0We2U5XvdZ4EG322X8sK/Q6l2j 7DHb3QcF+xo2XrJ9epKfHAhcW2H341XYjttQpPpbe2Dd5i98uxJLflp68blMtdCp Wl/FvmDDT5AEFagZQ0kp06L8IGlW1lXnLDlx6xaKJHC5AG5Obss8ojWp4Uwml6Vr 2t+W9NcO1Aqg6BgPrnn2gq+ZClcG08tKK4hubBtxd+E1WDOByXnODNpFJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbb7JLKgLA4heY+xSBYekI9hNtgMB8GA1UdIwQY MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApt2dIRyg y55SeqyBlMyuDbtcRkJ34vfXe2AxaJq9fdnsck9lGCn3nQ7y1DhgYDSK8z0e4HC/ YrJLOeYT8PKTzeQYLUYUDo9lw+ZOstBD5jvX+s3aclnPFRmeParecRkh/g3JAbKK W2j2R0J81STFez2XgM7MNX6q2GH64iECKxmzS3BcJm46Wlsu1v2Qt+aeST2qRnVJ e+o0sCsTRNBDHyAgdVtLjANBt9K109iH0A03JE/IdEPNFgrdXNsuzHGbKPIEurGY RlqZccZoQZX2TuD2wGcMKnLmS52AQKyYNZbqLoDaPZ7UqnMD8d1J5wtrlJYEFZ0F v7L2UrOgrNlMzw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:17 2025 by rpki-client