This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft File: y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json) Hash identifier: dvu/H3RhrtYt3el197r4iZ9XksekSEKcizZJwNmwHro= Subject key identifier: BF:C8:9B:1E:E7:92:71:9F:84:96:E6:4E:59:93:EA:D1:19:D5:C8:62 Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D Certificate issuer: /CN=cb5799d8d05f4a020011dca8031762bea012255d Certificate serial: 019AF23FAE0F242C4468CED06A2D7249E7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft Manifest number: 0CD5 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: FXCR9Lc6KgRx_HPpZhjXnE6ILJY.roa (hash: TawwcEelbsmmDw/jX+MvcIQud2NnCnis9eNEGbrjubs=) 2: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: 5uy22oErFujsAnuuVdWwJcOGsVqkuhyZlq/oSFXMGQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ae:0f:24:2c:44:68:ce:d0:6a:2d:72:49:e7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=bfc89b1ee792719f8496e64e5993ead119d5c862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:6d:69:12:e8:4b:1b:ff:50:3d:9c:76:b3: 7a:0e:ca:b5:18:14:fe:5d:16:91:41:fc:a3:66:59: fc:17:b5:6a:d9:82:ce:f8:91:ca:3a:44:1f:ee:0d: 90:68:e0:9d:87:0b:ca:4c:6b:87:3b:d9:f1:b9:7e: f2:12:38:7e:63:45:ba:bd:1d:01:38:c8:d5:eb:e4: 65:86:30:7f:bb:90:bf:ba:c6:1c:fb:b7:c9:86:1e: 59:3f:86:0a:7c:e9:f6:c9:48:cc:0a:a6:64:7a:c7: 55:f6:20:57:a6:53:bf:b8:7a:94:55:0d:e9:d6:3d: 13:01:9e:37:5a:27:b7:17:84:19:03:da:85:b4:03: 84:9f:ec:e2:4f:33:2b:6b:4f:60:6b:59:21:51:00: d6:a8:04:5f:fc:65:ba:37:f6:f3:90:8b:c4:e6:e3: 34:f3:ab:c0:ae:90:10:a9:2c:0e:42:15:2e:5a:09: 47:6f:5e:4c:be:93:03:e4:b6:28:65:40:c5:49:b0: 0b:f6:c6:7d:cc:7e:12:2d:b4:31:6d:27:1b:a1:14: a4:a2:2f:d8:99:cd:00:c2:12:df:f6:d1:f4:39:e9: a7:44:da:4b:2b:2c:d4:8e:31:32:31:fe:29:20:50: 99:5d:c4:d5:4d:e5:2f:62:c0:87:3c:f3:88:f2:91: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C8:9B:1E:E7:92:71:9F:84:96:E6:4E:59:93:EA:D1:19:D5:C8:62 X509v3 Authority Key Identifier: keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d2:b2:41:6f:c8:73:70:0d:d3:07:c6:c7:ac:e4:5f:69:90: ee:72:bb:ec:ea:59:60:80:95:02:fd:6b:3f:04:73:03:f9:34: e6:b8:80:64:c1:2e:9a:ce:5a:e0:35:9f:88:4d:c5:4e:69:37: c1:da:de:ab:22:40:31:d4:a2:83:9e:15:f4:6d:8d:40:5f:c1: 5e:fa:42:fd:a9:32:54:2b:5e:e2:b2:6a:fa:3e:5c:3a:d6:16: 81:df:57:2e:05:af:65:3a:c4:ab:03:7c:39:ae:db:85:4b:6c: 85:40:61:42:8c:59:1a:3a:d0:3e:fc:70:e9:43:ed:bc:b6:ee: 2b:98:e1:49:e9:a6:16:ac:cf:3e:67:9d:ae:62:6a:5f:36:e7: 96:83:37:55:a3:d6:d9:c1:b3:4d:a3:79:29:80:af:90:41:3d: 58:78:44:21:7a:02:7c:1d:e4:ea:70:a6:1d:fe:10:93:4c:e9: 8d:30:32:89:67:21:1c:eb:99:ad:44:c5:c7:d5:5e:38:f8:0b: 89:ee:59:b5:a0:86:03:53:55:83:e6:4d:de:d8:53:9a:97:5a: 85:37:2b:ef:bc:2c:dc:fb:85:d1:3f:5c:7d:73:c2:a6:bb:57: 53:87:19:0c:68:2c:55:e8:ad:a3:59:35:f0:da:b1:43:21:0c: 19:7f:af:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP64PJCxEaM7Qai1ySeeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTc5OWQ4ZDA1ZjRhMDIwMDExZGNhODAzMTc2MmJlYTAx MjI1NWQwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhiZmM4OWIxZWU3OTI3MTlmODQ5NmU2NGU1OTkzZWFkMTE5ZDVjODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWRtaRLoSxv/UD2cdrN6Dsq1GBT+ XRaRQfyjZln8F7Vq2YLO+JHKOkQf7g2QaOCdhwvKTGuHO9nxuX7yEjh+Y0W6vR0B OMjV6+RlhjB/u5C/usYc+7fJhh5ZP4YKfOn2yUjMCqZkesdV9iBXplO/uHqUVQ3p 1j0TAZ43Wie3F4QZA9qFtAOEn+ziTzMra09ga1khUQDWqARf/GW6N/bzkIvE5uM0 86vArpAQqSwOQhUuWglHb15MvpMD5LYoZUDFSbAL9sZ9zH4SLbQxbScboRSkoi/Y mc0AwhLf9tH0OemnRNpLKyzUjjEyMf4pIFCZXcTVTeUvYsCHPPOI8pFtCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/Imx7nknGfhJbmTlmT6tEZ1chiMB8GA1UdIwQY MBaAFMtXmdjQX0oCABHcqAMXYr6gEiVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jNzgwMjAtZmEzMi00OTg4LTllMTQt NWM2MDJmZGU5NjNiLzEveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jNzgwMjAtZmEzMi00OTg4LTllMTQtNWM2MDJmZGU5NjNi LzEveTFlWjJOQmZTZ0lBRWR5b0F4ZGl2cUFTSlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdKyQW/I c3AN0wfGx6zkX2mQ7nK77OpZYICVAv1rPwRzA/k05riAZMEums5a4DWfiE3FTmk3 wdreqyJAMdSig54V9G2NQF/BXvpC/akyVCte4rJq+j5cOtYWgd9XLgWvZTrEqwN8 Oa7bhUtshUBhQoxZGjrQPvxw6UPtvLbuK5jhSemmFqzPPmedrmJqXzbnloM3VaPW 2cGzTaN5KYCvkEE9WHhEIXoCfB3k6nCmHf4Qk0zpjTAyiWchHOuZrUTFx9VeOPgL ie5ZtaCGA1NVg+ZN3thTmpdahTcr77ws3PuF0T9cfXPCprtXU4cZDGgsVeito1k1 8NqxQyEMGX+vIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:05 2025 by rpki-client