This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json) Hash identifier: 0Ib207iy1YGP5N4AuQy10/99hkIjonCeBzwqIZN9jAc= Subject key identifier: DA:C4:EE:BD:1B:1B:68:1D:85:B2:C3:3A:5E:F8:94:1E:1D:E6:40:C2 Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Certificate serial: 019AF50ABB00E1FEF3610D71F28A625F7819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft Manifest number: 1464 Signing time: Sat 06 Dec 2025 19:01:52 +0000 Manifest this update: Sat 06 Dec 2025 19:01:52 +0000 Manifest next update: Sun 07 Dec 2025 19:01:52 +0000 Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=) 2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: pCmiJA8sMpM0IpFDAneIXOKaN+AQZS64y/rdBfkbkRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:bb:00:e1:fe:f3:61:0d:71:f2:8a:62:5f:78:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Validity Not Before: Dec 6 19:01:52 2025 GMT Not After : Dec 7 19:01:52 2025 GMT Subject: CN=dac4eebd1b1b681d85b2c33a5ef8941e1de640c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:67:8b:0f:59:1e:e2:19:81:12:73:16:b4:ca: d0:2a:cf:fe:20:45:77:79:ce:93:c4:73:73:f4:71: e9:0f:32:c7:4a:94:ef:1e:f9:9c:1f:4b:f6:08:40: 4a:0b:4b:38:a4:38:59:c7:82:3c:c9:d4:ee:1c:f6: 27:15:a4:31:e4:8f:fa:04:15:fd:ec:a0:39:e4:f3: 15:37:78:62:e1:75:76:c8:78:38:d0:1b:c1:76:ba: ad:e6:0d:24:7c:c5:2f:c3:54:71:45:b3:9c:22:14: df:a7:30:18:90:81:d1:f6:0b:d4:2c:a4:bf:40:0d: d6:69:be:6c:07:43:75:4f:6b:b3:81:49:68:e7:89: 55:95:77:15:cc:07:30:b6:fd:6b:b8:d1:d2:a0:1b: 6a:ce:f9:54:cc:9d:df:03:01:4b:88:82:fd:2e:85: f8:7d:43:0a:d8:4e:b6:38:2c:4b:f7:cc:91:69:e5: aa:6b:52:ea:7b:84:b9:e2:96:e5:89:71:99:3f:a7: d1:3c:d4:cc:c4:19:ad:e2:81:ee:c2:32:48:5c:0d: f7:ac:92:33:2a:83:33:e2:ea:62:42:b6:f9:5e:7a: ef:29:84:5d:c6:36:49:f2:ef:09:41:d2:2a:8c:4c: 8e:b1:c4:75:ad:58:4f:b9:f8:d3:22:47:06:73:58: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C4:EE:BD:1B:1B:68:1D:85:B2:C3:3A:5E:F8:94:1E:1D:E6:40:C2 X509v3 Authority Key Identifier: keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a3:a5:da:05:18:65:83:2d:d0:43:f8:b3:08:98:b9:04:6b: fc:52:78:e1:e8:90:4c:6f:49:b0:64:19:80:2f:e6:47:ef:4f: ce:90:39:1e:70:1c:bc:42:42:3d:82:f7:a2:f2:71:1c:6c:3b: 7a:6e:a0:3d:27:6a:ba:c1:61:93:7a:c7:36:28:1b:90:91:96: a5:02:95:11:2a:15:d6:cb:f3:5c:85:5a:73:af:f3:13:ee:81: 5e:a2:31:a1:7e:9b:b7:27:70:34:e1:bc:8e:2e:64:37:d9:dd: ca:9e:e0:c7:f5:31:16:68:c9:8e:3d:7a:53:fb:82:bc:31:f4: 6d:2d:dc:8f:cc:1b:61:2a:04:af:34:9f:ff:29:c3:ec:bd:8b: a5:33:4b:ef:10:f8:80:dc:af:02:c6:30:0c:ea:5a:6d:a9:a7: e6:a0:6f:d0:d4:74:ff:47:bf:f3:9f:79:94:e3:b1:4f:dd:ce: 42:e9:6a:46:dc:cd:1d:bd:c7:24:d2:06:f9:7b:52:f6:d4:b8: 3f:60:54:3d:d2:44:ff:12:a5:f4:9d:e6:bc:13:b8:db:e5:3f: b0:f1:51:47:d6:96:d0:62:cd:8c:6b:63:b5:26:d7:16:55:9e: 53:85:54:98:4a:4d:48:c0:3d:2b:5b:06:b9:65:ed:b8:3c:0f: 99:ae:f7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CrsA4f7zYQ1x8opiX3gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1 NmJmYmEwHhcNMjUxMjA2MTkwMTUyWhcNMjUxMjA3MTkwMTUyWjAzMTEwLwYDVQQD EyhkYWM0ZWViZDFiMWI2ODFkODViMmMzM2E1ZWY4OTQxZTFkZTY0MGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGeLD1ke4hmBEnMWtMrQKs/+IEV3 ec6TxHNz9HHpDzLHSpTvHvmcH0v2CEBKC0s4pDhZx4I8ydTuHPYnFaQx5I/6BBX9 7KA55PMVN3hi4XV2yHg40BvBdrqt5g0kfMUvw1RxRbOcIhTfpzAYkIHR9gvULKS/ QA3Wab5sB0N1T2uzgUlo54lVlXcVzAcwtv1ruNHSoBtqzvlUzJ3fAwFLiIL9LoX4 fUMK2E62OCxL98yRaeWqa1Lqe4S54pbliXGZP6fRPNTMxBmt4oHuwjJIXA33rJIz KoMz4upiQrb5XnrvKYRdxjZJ8u8JQdIqjEyOscR1rVhPufjTIkcGc1iwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrE7r0bG2gdhbLDOl74lB4d5kDCMB8GA1UdIwQY MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaOl2gUY ZYMt0EP4swiYuQRr/FJ44eiQTG9JsGQZgC/mR+9PzpA5HnAcvEJCPYL3ovJxHGw7 em6gPSdqusFhk3rHNigbkJGWpQKVESoV1svzXIVac6/zE+6BXqIxoX6btydwNOG8 ji5kN9ndyp7gx/UxFmjJjj16U/uCvDH0bS3cj8wbYSoErzSf/ynD7L2LpTNL7xD4 gNyvAsYwDOpabamn5qBv0NR0/0e/8595lOOxT93OQulqRtzNHb3HJNIG+XtS9tS4 P2BUPdJE/xKl9J3mvBO42+U/sPFRR9aW0GLNjGtjtSbXFlWeU4VUmEpNSMA9K1sG uWXtuDwPma73sA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:14 2025 by rpki-client