This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json) Hash identifier: 3WwSzWbjEchXBtUGdF/UN3glG0U6uPJg4y0u4/1RKf0= Subject key identifier: 41:8B:E8:6D:59:94:15:55:96:17:E9:1B:BE:A3:B9:C8:5C:A8:58:4A Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361 Certificate serial: 019AF2ADEBA9170311A003E4E6F4A65CD57C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft Manifest number: 09DF Signing time: Sat 06 Dec 2025 08:01:15 +0000 Manifest this update: Sat 06 Dec 2025 08:01:15 +0000 Manifest next update: Sun 07 Dec 2025 08:01:15 +0000 Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=) 2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=) 3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=) 4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: 1i8mI//3o6GMQBktGCD3KFS8unbhRHFkbNWSWcPcDJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:eb:a9:17:03:11:a0:03:e4:e6:f4:a6:5c:d5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361 Validity Not Before: Dec 6 08:01:15 2025 GMT Not After : Dec 7 08:01:15 2025 GMT Subject: CN=418be86d599415559617e91bbea3b9c85ca8584a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:2c:b0:45:5e:e2:97:96:79:25:d2:16:ac: f3:d4:21:21:16:c7:7a:df:4a:55:0f:cb:18:30:f7: ea:d5:a4:cf:76:5e:9c:54:05:54:83:17:68:ae:b6: 39:0e:ca:ee:c9:8b:78:a8:84:99:69:6d:2f:34:7e: e9:86:93:bf:d7:f5:a1:b8:75:d1:87:c5:e1:f5:46: 01:a4:44:67:bb:94:2e:59:b0:4c:3c:35:32:fc:94: 42:e6:59:d8:30:93:39:10:e1:64:0d:28:2d:93:1a: 2d:4c:89:68:7a:41:88:79:ef:06:f8:d0:32:03:00: 72:2f:15:58:89:31:0a:71:bf:6c:77:8a:b2:7c:10: 74:cd:cc:33:a4:5b:1a:2d:31:10:e4:0b:3b:52:94: aa:15:bb:53:3a:d5:cd:42:c9:18:0d:18:06:15:b1: c6:f5:37:0b:45:26:98:93:1e:a0:83:93:62:d9:f2: d8:0a:88:16:b8:4b:0f:c2:20:2c:20:23:53:64:b6: 84:53:8b:b1:5f:9e:ae:89:5c:82:60:4a:0c:e3:b9: 31:ce:af:c9:d4:81:c3:17:0d:ff:c2:71:35:b9:ea: 40:a6:bf:c1:91:5f:94:fd:d9:f2:aa:1a:89:31:c4: f3:a4:51:38:52:8c:01:87:f4:55:29:a5:0a:b5:66: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8B:E8:6D:59:94:15:55:96:17:E9:1B:BE:A3:B9:C8:5C:A8:58:4A X509v3 Authority Key Identifier: keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:11:00:86:d7:f6:8e:0f:03:1d:23:93:89:e2:7d:93:25:16: 98:2b:12:85:d5:19:56:17:88:60:42:70:51:85:31:91:da:57: 3d:ef:3b:a3:a7:33:44:6b:89:5c:a0:7b:37:a7:12:91:52:b0: bf:ac:8f:81:47:d7:fa:81:7b:31:65:c0:4c:a9:2b:34:ee:c3: d2:e4:b2:9b:3a:3a:69:72:eb:bc:4a:f9:c5:2d:0f:5a:cb:fc: 28:35:ad:4f:ad:dd:fb:37:36:9b:56:f5:ba:55:82:40:fa:57: e3:49:08:b9:14:b1:a5:f7:96:c4:5c:d5:6e:85:03:f8:f1:5f: a3:7b:c2:11:d5:31:b0:a7:17:53:10:25:d5:11:7c:6e:90:27: eb:9a:40:81:a1:c6:d6:83:ae:03:3b:b7:ab:ae:77:ba:80:84: 2f:aa:6b:3d:bb:a6:c1:be:32:1d:42:98:d5:fb:d5:e8:fd:f4: 9b:93:b8:e2:2d:1d:ed:76:f7:60:6c:00:01:b2:2d:53:69:e7: c4:72:c3:15:9d:cc:41:06:25:a3:2e:91:03:54:0c:01:80:a4: 11:11:93:a4:0a:37:83:a8:88:d1:3a:3f:47:e8:1a:2f:8e:78: 7e:9a:21:19:5f:e5:df:31:6e:78:d0:6e:72:de:0e:2f:5b:35: 20:95:54:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreupFwMRoAPk5vSmXNV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1 MzEzNjEwHhcNMjUxMjA2MDgwMTE1WhcNMjUxMjA3MDgwMTE1WjAzMTEwLwYDVQQD Eyg0MThiZTg2ZDU5OTQxNTU1OTYxN2U5MWJiZWEzYjljODVjYTg1ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR4ssEVe4peWeSXSFqzz1CEhFsd6 30pVD8sYMPfq1aTPdl6cVAVUgxdorrY5DsruyYt4qISZaW0vNH7phpO/1/WhuHXR h8Xh9UYBpERnu5QuWbBMPDUy/JRC5lnYMJM5EOFkDSgtkxotTIloekGIee8G+NAy AwByLxVYiTEKcb9sd4qyfBB0zcwzpFsaLTEQ5As7UpSqFbtTOtXNQskYDRgGFbHG 9TcLRSaYkx6gg5Ni2fLYCogWuEsPwiAsICNTZLaEU4uxX56uiVyCYEoM47kxzq/J 1IHDFw3/wnE1uepApr/BkV+U/dnyqhqJMcTzpFE4UowBh/RVKaUKtWba8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGL6G1ZlBVVlhfpG76juchcqFhKMB8GA1UdIwQY MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBEAhtf2 jg8DHSOTieJ9kyUWmCsShdUZVheIYEJwUYUxkdpXPe87o6czRGuJXKB7N6cSkVKw v6yPgUfX+oF7MWXATKkrNO7D0uSymzo6aXLrvEr5xS0PWsv8KDWtT63d+zc2m1b1 ulWCQPpX40kIuRSxpfeWxFzVboUD+PFfo3vCEdUxsKcXUxAl1RF8bpAn65pAgaHG 1oOuAzu3q653uoCEL6prPbumwb4yHUKY1fvV6P30m5O44i0d7Xb3YGwAAbItU2nn xHLDFZ3MQQYloy6RA1QMAYCkERGTpAo3g6iI0To/R+gaL454fpohGV/l3zFueNBu ct4OL1s1IJVU+g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:10 2025 by rpki-client