This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft File: y1VBA5WqtJkUDDplzh90DvBw0-Y.mft (raw, json) Hash identifier: rBI9EjLWqCjP+2jSKcvZ3xFquttu695mvR+UitZEIHY= Subject key identifier: 6F:DC:21:BA:64:13:80:DC:4D:4C:A0:45:73:FE:DD:F0:59:66:8A:A3 Authority key identifier: CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6 Certificate issuer: /CN=cb55410395aab499140c3a65ce1f740ef070d3e6 Certificate serial: 019AF19B6E0ECEF676483E03A1E7F12FEDF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft Manifest number: E4 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: BbKEBgKAZuG3-4_d3jMXZeggsD0.roa (hash: IICjx5LS8I3lp2HvjFP9QP+Q2FZJdJqUoqfGvrxQA9o=) 2: y1VBA5WqtJkUDDplzh90DvBw0-Y.crl (hash: o+9ut7othagZA8P2vMjchy+GW07YiNsn7Uh2rh4/484=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6e:0e:ce:f6:76:48:3e:03:a1:e7:f1:2f:ed:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb55410395aab499140c3a65ce1f740ef070d3e6 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=6fdc21ba641380dc4d4ca04573feddf059668aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:7b:9a:d3:a9:1b:ff:71:9e:c7:f3:ab:86: 3a:b0:2d:a4:ee:3d:04:ad:a3:08:94:ca:8e:62:12: af:f0:75:a6:21:26:0e:87:34:73:09:63:42:79:d7: a5:89:51:d6:3b:ab:58:79:31:ba:d2:e7:37:71:bb: d8:ef:f3:b6:38:ef:f7:ca:7e:15:a1:09:9f:30:f9: 34:1f:a3:6e:00:69:35:63:af:d6:de:d1:99:fa:46: c1:fa:37:2d:94:14:58:00:59:71:a5:ec:b1:51:75: 5f:f5:cd:c6:8a:d4:13:b5:68:28:fd:10:cb:7f:fd: 33:f0:92:4f:e7:c9:c1:82:a7:98:8c:46:5a:50:c4: 2d:8d:30:73:3f:f0:d1:da:4f:99:5f:52:b6:4e:90: ec:de:da:ba:69:97:24:83:09:82:00:e8:67:9b:83: 82:b8:d1:eb:f9:60:15:92:7b:e0:5b:d0:83:0d:d2: 57:3a:9e:1d:06:a5:9b:35:29:38:f9:2d:5d:90:10: ff:36:dd:9c:71:e6:95:96:9b:ca:b1:12:97:75:94: 42:ee:0d:36:2a:e1:c8:f1:39:67:a5:7f:00:03:28: d0:7d:0d:d3:69:2c:85:41:e7:f8:36:71:69:60:2c: 40:96:ac:0d:6d:59:36:14:df:c0:85:f7:c3:62:6e: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DC:21:BA:64:13:80:DC:4D:4C:A0:45:73:FE:DD:F0:59:66:8A:A3 X509v3 Authority Key Identifier: keyid:CB:55:41:03:95:AA:B4:99:14:0C:3A:65:CE:1F:74:0E:F0:70:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VBA5WqtJkUDDplzh90DvBw0-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/127f29-c1d6-4ce1-9a74-62c7694b57ee/1/y1VBA5WqtJkUDDplzh90DvBw0-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:dc:13:e8:32:69:1a:5a:04:61:cf:5c:15:48:ff:a9:39:ad: ec:98:30:ac:5e:4b:76:3d:63:d9:09:61:6d:ff:30:65:81:35: e1:ca:82:76:c2:d3:fa:7a:74:86:d6:08:80:50:50:e2:12:f0: 50:dd:8b:b9:4f:b6:3f:8c:98:fb:e2:54:79:fc:5f:fc:f1:41: 13:fd:64:69:18:7e:81:ed:ab:aa:3c:09:59:87:99:0f:b7:76: b8:7e:f5:b0:e8:0e:44:e7:af:5d:b1:a1:3b:17:c5:c6:2a:d4: 62:27:11:53:3f:f8:2a:68:bb:43:4a:6a:1f:38:2b:f2:e0:e9: e7:40:fd:5e:3b:26:01:2e:37:4d:92:75:f1:6d:b8:f9:19:05: 51:4a:59:ab:80:eb:7a:e3:ec:50:a6:60:d4:97:9b:72:58:db: c5:01:75:35:4a:e5:76:e1:70:f8:e4:53:60:17:db:e9:66:ad: 97:30:c7:79:ea:fc:50:bd:cf:a9:40:ad:7a:1c:92:41:20:09: 54:ab:29:b8:7d:d4:9b:71:dd:b7:2d:c5:3e:18:42:3f:73:d2: 84:77:de:36:0b:dd:c3:6a:10:54:1a:c3:0c:87:f0:65:b1:27: 13:cc:e2:66:3f:30:45:56:56:bb:1b:1b:2c:f9:cd:4e:c1:8b: 4f:d6:30:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm24OzvZ2SD4DoefxL+35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTU0MTAzOTVhYWI0OTkxNDBjM2E2NWNlMWY3NDBlZjA3 MGQzZTYwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD Eyg2ZmRjMjFiYTY0MTM4MGRjNGQ0Y2EwNDU3M2ZlZGRmMDU5NjY4YWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSZ7mtOpG/9xnsfzq4Y6sC2k7j0E raMIlMqOYhKv8HWmISYOhzRzCWNCedeliVHWO6tYeTG60uc3cbvY7/O2OO/3yn4V oQmfMPk0H6NuAGk1Y6/W3tGZ+kbB+jctlBRYAFlxpeyxUXVf9c3GitQTtWgo/RDL f/0z8JJP58nBgqeYjEZaUMQtjTBzP/DR2k+ZX1K2TpDs3tq6aZckgwmCAOhnm4OC uNHr+WAVknvgW9CDDdJXOp4dBqWbNSk4+S1dkBD/Nt2cceaVlpvKsRKXdZRC7g02 KuHI8TlnpX8AAyjQfQ3TaSyFQef4NnFpYCxAlqwNbVk2FN/AhffDYm7F+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/cIbpkE4DcTUygRXP+3fBZZoqjMB8GA1UdIwQY MBaAFMtVQQOVqrSZFAw6Zc4fdA7wcNPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xMjdmMjktYzFkNi00Y2UxLTlhNzQt NjJjNzY5NGI1N2VlLzEveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xMjdmMjktYzFkNi00Y2UxLTlhNzQtNjJjNzY5NGI1N2Vl LzEveTFWQkE1V3F0SmtVRERwbHpoOTBEdkJ3MC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNwT6DJp GloEYc9cFUj/qTmt7JgwrF5Ldj1j2Qlhbf8wZYE14cqCdsLT+np0htYIgFBQ4hLw UN2LuU+2P4yY++JUefxf/PFBE/1kaRh+ge2rqjwJWYeZD7d2uH71sOgOROevXbGh OxfFxirUYicRUz/4Kmi7Q0pqHzgr8uDp50D9XjsmAS43TZJ18W24+RkFUUpZq4Dr euPsUKZg1JebcljbxQF1NUrlduFw+ORTYBfb6WatlzDHeer8UL3PqUCtehySQSAJ VKspuH3Um3Hdty3FPhhCP3PShHfeNgvdw2oQVBrDDIfwZbEnE8ziZj8wRVZWuxsb LPnNTsGLT9Ywbg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:09 2025 by rpki-client