This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft File: Y5-G_U81pnvLwn-OtveHq4veSfk.mft (raw, json) Hash identifier: NhcJKBzneUDZMZYMUiuQMhUvLwCbBXNT8jv/tuDrUys= Subject key identifier: 05:94:D5:80:AD:70:6F:12:70:14:E3:20:1B:42:BC:91:E6:74:54:C9 Authority key identifier: 63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9 Certificate issuer: /CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9 Certificate serial: 019AF088CD0BB7CEAAB19781FB34E38830E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft Manifest number: 1158 Signing time: Fri 05 Dec 2025 22:01:28 +0000 Manifest this update: Fri 05 Dec 2025 22:01:28 +0000 Manifest next update: Sat 06 Dec 2025 22:01:28 +0000 Files and hashes: 1: Y5-G_U81pnvLwn-OtveHq4veSfk.crl (hash: HZp1X1iEpS8XDo6TkwsPnblsg59CODrQLCj2tVbsYjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:cd:0b:b7:ce:aa:b1:97:81:fb:34:e3:88:30:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639f86fd4f35a67bcbc27f8eb6f787ab8bde49f9 Validity Not Before: Dec 5 22:01:28 2025 GMT Not After : Dec 6 22:01:28 2025 GMT Subject: CN=0594d580ad706f127014e3201b42bc91e67454c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:8e:ea:fb:ac:a7:33:a1:92:1c:2f:26:ef: d1:43:a3:7b:ab:0d:f8:92:a7:50:c8:a5:8f:3d:14: db:54:d4:9f:50:7e:40:58:48:01:12:74:70:d7:10: 3c:f3:d9:74:53:c2:9c:fa:3d:90:69:fc:91:a8:45: a8:4c:d1:1b:e7:84:fe:b1:f6:e8:bb:c7:e5:42:06: 21:4c:7a:72:b7:35:33:62:14:da:b3:0e:ae:10:89: 9d:01:8a:76:7e:45:5a:4c:86:dc:5c:c8:18:a6:84: d1:26:4f:62:6f:3c:26:24:4f:53:2d:9f:e9:91:09: 67:d3:ac:91:0c:b1:90:53:ca:a2:dd:d3:c6:1f:ca: 84:95:80:96:1e:44:c8:39:df:8a:87:c4:2b:41:e0: da:f6:da:19:64:4f:f0:4c:6a:b6:03:9e:4d:58:fb: 05:bb:d4:4a:07:a2:63:a8:74:42:30:d9:26:53:cc: 63:37:f7:69:4f:e3:8c:9b:01:51:da:81:b1:da:5e: e0:eb:e1:2a:44:af:64:4c:6b:c9:e5:a1:28:bb:93: 3e:fe:de:04:b8:4d:44:68:12:43:5f:15:1a:ce:10: ff:be:ba:c0:45:2c:df:96:3d:3d:0d:c7:40:19:1d: fe:af:ac:a4:38:ff:26:d8:94:75:6f:6e:45:da:76: 71:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:94:D5:80:AD:70:6F:12:70:14:E3:20:1B:42:BC:91:E6:74:54:C9 X509v3 Authority Key Identifier: keyid:63:9F:86:FD:4F:35:A6:7B:CB:C2:7F:8E:B6:F7:87:AB:8B:DE:49:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5-G_U81pnvLwn-OtveHq4veSfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/13e253-344a-4db7-bacf-0f11da289e1f/1/Y5-G_U81pnvLwn-OtveHq4veSfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:47:dc:c4:67:b9:7e:fc:2b:5b:33:f2:9c:68:c0:9c:ae:d6: cb:d5:41:55:89:18:15:5b:69:b0:73:df:64:10:a9:ae:f8:f2: 2b:15:42:66:2e:c9:a2:61:ea:e0:42:d5:cc:96:6b:ce:e4:1a: e7:cd:69:9d:fd:64:41:9b:ca:e7:a3:ca:aa:20:e8:1d:45:55: d5:4f:eb:24:0b:c7:88:b0:b6:53:34:65:2d:62:2b:92:91:fa: 4c:e5:c4:5b:ac:7e:ac:6d:4d:c3:89:5a:8e:7c:88:01:6a:16: ee:22:3b:37:44:47:fa:ef:6d:09:2d:95:5a:01:be:5c:6a:01: c3:57:7f:52:98:12:16:d7:b0:bf:51:da:a4:20:64:85:8f:7f: f2:02:48:01:f9:f8:69:e5:d3:3e:c2:2c:20:1d:26:a8:ef:d6: 93:84:b6:86:0f:99:36:6a:52:4b:67:85:4e:77:1c:a6:e8:4d: 3d:40:71:a1:65:cf:a3:84:58:e1:79:b4:cf:39:df:73:fb:13: bb:f2:1c:10:e0:ab:4c:1e:07:2d:43:40:24:3d:ab:b0:67:0a: 39:ef:39:05:76:f6:e1:e8:27:b3:5c:d4:2b:6a:de:22:1e:6c: 8a:32:98:85:94:ad:3b:b5:98:c4:33:4f:ae:c6:9f:d6:5e:32: 2a:83:7d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiM0Lt86qsZeB+zTjiDDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOWY4NmZkNGYzNWE2N2JjYmMyN2Y4ZWI2Zjc4N2FiOGJk ZTQ5ZjkwHhcNMjUxMjA1MjIwMTI4WhcNMjUxMjA2MjIwMTI4WjAzMTEwLwYDVQQD EygwNTk0ZDU4MGFkNzA2ZjEyNzAxNGUzMjAxYjQyYmM5MWU2NzQ1NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz2O6vuspzOhkhwvJu/RQ6N7qw34 kqdQyKWPPRTbVNSfUH5AWEgBEnRw1xA889l0U8Kc+j2QafyRqEWoTNEb54T+sfbo u8flQgYhTHpytzUzYhTasw6uEImdAYp2fkVaTIbcXMgYpoTRJk9ibzwmJE9TLZ/p kQln06yRDLGQU8qi3dPGH8qElYCWHkTIOd+Kh8QrQeDa9toZZE/wTGq2A55NWPsF u9RKB6JjqHRCMNkmU8xjN/dpT+OMmwFR2oGx2l7g6+EqRK9kTGvJ5aEou5M+/t4E uE1EaBJDXxUazhD/vrrARSzflj09DcdAGR3+r6ykOP8m2JR1b25F2nZxeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWU1YCtcG8ScBTjIBtCvJHmdFTJMB8GA1UdIwQY MBaAFGOfhv1PNaZ7y8J/jrb3h6uL3kn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xM2UyNTMtMzQ0YS00ZGI3LWJhY2Yt MGYxMWRhMjg5ZTFmLzEvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xM2UyNTMtMzQ0YS00ZGI3LWJhY2YtMGYxMWRhMjg5ZTFm LzEvWTUtR19VODFwbnZMd24tT3R2ZUhxNHZlU2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0fcxGe5 fvwrWzPynGjAnK7Wy9VBVYkYFVtpsHPfZBCprvjyKxVCZi7JomHq4ELVzJZrzuQa 581pnf1kQZvK56PKqiDoHUVV1U/rJAvHiLC2UzRlLWIrkpH6TOXEW6x+rG1Nw4la jnyIAWoW7iI7N0RH+u9tCS2VWgG+XGoBw1d/UpgSFtewv1HapCBkhY9/8gJIAfn4 aeXTPsIsIB0mqO/Wk4S2hg+ZNmpSS2eFTnccpuhNPUBxoWXPo4RY4Xm0zznfc/sT u/IcEOCrTB4HLUNAJD2rsGcKOe85BXb24egns1zUK2reIh5sijKYhZStO7WYxDNP rsaf1l4yKoN9+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:54 2025 by rpki-client