This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json) Hash identifier: p59SQ1TgyihKr4RiKu3TgI0iWu9ency7A92PMKUh+10= Subject key identifier: 1E:27:3F:11:14:DE:46:F9:45:8E:95:36:63:71:2A:57:C2:75:D6:C6 Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09 Certificate serial: 019AF19B154B3B684C376E6BA762DBD83BF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft Manifest number: 166E Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: JlQN0N4As8kTE_2777wqlcFNrC8.roa (hash: gQA+8fA2lRTUYRE2yD6RworLn/rUFJdeb4rtkckOnyE=) 2: WD7cwf6HLxZKq0IMG8YbMTooJt0.roa (hash: JexN5Bcs7RxXPWQCAkKPWPwbZPwuEud7FpPGiuV9xSU=) 3: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (hash: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=) 4: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (hash: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=) 5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: F6y6g/bUlQCpFA69dI1LsIwpC9l+2apfGrY26HEBGNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:15:4b:3b:68:4c:37:6e:6b:a7:62:db:d8:3b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=1e273f1114de46f9458e953663712a57c275d6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:e7:40:7b:46:f0:3e:97:7b:86:05:35:cc: 3d:b3:df:ac:82:7e:41:31:cc:16:90:f1:23:77:f6: 3f:4a:b7:92:80:0a:95:85:bb:24:a3:87:50:10:aa: 9a:0f:4c:0b:d0:20:0b:ab:ef:9a:35:61:4e:c2:aa: ba:09:4e:06:d6:11:7e:23:13:af:d2:e7:1b:34:57: 16:2c:cd:b7:8b:52:68:e0:05:71:f2:01:e8:81:4a: 4a:a6:e0:94:f5:28:b3:ed:e9:83:22:c2:17:a1:2a: 15:f5:74:d6:f4:51:01:b3:02:af:20:96:36:d6:07: f3:95:1d:22:61:02:fe:49:fb:cd:70:38:4c:2c:73: f5:ac:e4:e2:6f:d4:00:e4:e5:9c:9b:37:f8:23:71: 6e:c0:d8:c2:af:68:1d:d5:ec:eb:c0:54:41:22:62: a4:dd:f2:2a:9c:38:df:48:80:55:f1:8e:bc:37:7d: 21:d1:34:4a:96:59:cb:48:9d:b4:ef:8e:f9:83:c1: df:05:8c:4e:df:08:67:84:f4:b1:8e:2b:68:7d:2b: 9b:dc:6f:0b:93:fe:3d:26:de:7f:bc:be:a7:31:3b: bc:68:df:e0:24:7a:36:2f:6a:ed:1d:8c:e1:cc:e7: a7:48:58:6e:84:3b:70:98:bc:5f:7f:e9:a3:6a:0c: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:27:3F:11:14:DE:46:F9:45:8E:95:36:63:71:2A:57:C2:75:D6:C6 X509v3 Authority Key Identifier: keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:98:70:5a:90:f4:11:30:02:17:bf:5d:5c:0b:a9:08:37:46: 20:f6:21:f8:79:dc:13:40:f9:92:cf:4b:79:fe:77:1f:e6:89: ad:7a:1a:f2:f6:d2:8d:16:4e:ca:28:8f:66:4a:87:76:de:e3: 12:e2:e1:27:4d:4b:f1:2c:33:e0:7b:aa:15:a5:c7:67:a5:52: 49:3f:b3:46:db:0e:2b:0d:d3:58:64:d2:c3:83:ad:52:05:8c: d8:5a:b4:cd:6c:65:3b:53:ee:f0:21:7f:48:f2:d0:f4:3a:ff: 0a:59:39:42:48:c8:de:cb:c9:b3:46:0e:28:02:d2:4e:79:0c: 52:aa:a3:1a:8d:7b:41:b4:8e:41:94:71:f3:99:a0:cc:a3:4a: c1:c0:f3:b4:48:49:14:37:23:7b:58:63:e6:ba:12:7d:89:34: 41:01:de:4c:e6:24:2f:f5:23:1c:26:c0:cc:5a:10:c4:46:a3: c5:33:36:d1:7c:39:d5:97:65:83:66:fa:24:9a:59:ea:82:1a: aa:78:70:8b:b9:95:35:47:f8:c3:3f:7f:95:f1:89:03:d6:df: d8:0b:ce:31:65:96:4c:af:6b:b2:39:39:31:05:8e:09:01:9f: 4c:f5:10:49:40:c6:89:53:64:e0:a0:47:b9:a8:dd:7d:a2:72: 8e:89:1f:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxVLO2hMN25rp2Lb2Dv0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx MmRkMDkwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD EygxZTI3M2YxMTE0ZGU0NmY5NDU4ZTk1MzY2MzcxMmE1N2MyNzVkNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjjnQHtG8D6Xe4YFNcw9s9+sgn5B McwWkPEjd/Y/SreSgAqVhbsko4dQEKqaD0wL0CALq++aNWFOwqq6CU4G1hF+IxOv 0ucbNFcWLM23i1Jo4AVx8gHogUpKpuCU9Siz7emDIsIXoSoV9XTW9FEBswKvIJY2 1gfzlR0iYQL+SfvNcDhMLHP1rOTib9QA5OWcmzf4I3FuwNjCr2gd1ezrwFRBImKk 3fIqnDjfSIBV8Y68N30h0TRKllnLSJ207475g8HfBYxO3whnhPSxjitofSub3G8L k/49Jt5/vL6nMTu8aN/gJHo2L2rtHYzhzOenSFhuhDtwmLxff+mjagw8xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4nPxEU3kb5RY6VNmNxKlfCddbGMB8GA1UdIwQY MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJhwWpD0 ETACF79dXAupCDdGIPYh+HncE0D5ks9Lef53H+aJrXoa8vbSjRZOyiiPZkqHdt7j EuLhJ01L8Swz4HuqFaXHZ6VSST+zRtsOKw3TWGTSw4OtUgWM2Fq0zWxlO1Pu8CF/ SPLQ9Dr/Clk5QkjI3svJs0YOKALSTnkMUqqjGo17QbSOQZRx85mgzKNKwcDztEhJ FDcje1hj5roSfYk0QQHeTOYkL/UjHCbAzFoQxEajxTM20Xw51Zdlg2b6JJpZ6oIa qnhwi7mVNUf4wz9/lfGJA9bf2AvOMWWWTK9rsjk5MQWOCQGfTPUQSUDGiVNk4KBH uajdfaJyjokfUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:05 2025 by rpki-client