This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft File: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json) Hash identifier: CeNMqBDH8XN8TJQEAAv62ZRQbuDMO1QTz/EGcEW822U= Subject key identifier: 53:B0:0A:CE:EB:C5:BA:22:94:24:3D:57:A7:56:C3:80:4A:55:03:1D Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9 Certificate issuer: /CN=6398ec15bc039c5a6042fbe90484456be02da7b9 Certificate serial: 019AF08825EC5E2E8086E4B8CBEB2A41FB6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft Manifest number: 1095 Signing time: Fri 05 Dec 2025 22:00:45 +0000 Manifest this update: Fri 05 Dec 2025 22:00:45 +0000 Manifest next update: Sat 06 Dec 2025 22:00:45 +0000 Files and hashes: 1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: IGGBeuRM5mJe+icx6yAp2OCSLE2tUv0ImFhWFOnxh7w=) 2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:25:ec:5e:2e:80:86:e4:b8:cb:eb:2a:41:fb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9 Validity Not Before: Dec 5 22:00:45 2025 GMT Not After : Dec 6 22:00:45 2025 GMT Subject: CN=53b00aceebc5ba2294243d57a756c3804a55031d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:bb:fd:79:7d:2a:a2:37:4e:bd:14:06:aa: d2:12:d7:4a:81:35:ce:05:a4:43:af:ac:af:b0:4f: 31:60:2c:9e:5b:31:a9:0c:03:06:f3:d1:05:3a:85: 04:96:d1:f1:39:51:da:d2:87:21:26:03:26:24:2e: 2f:09:b4:02:ff:1c:f5:ea:30:fd:df:d6:a8:cd:e8: 70:7f:70:2d:5b:5e:f0:d2:f5:80:e0:03:48:6d:51: 54:a6:e9:af:92:12:94:1e:d5:18:0a:59:b9:c4:07: a8:14:87:9d:44:7d:a6:02:e1:2f:d0:51:bc:68:ab: 75:ce:e1:41:c8:b2:25:26:cc:af:c0:74:3a:e5:5e: 90:8a:62:12:fa:81:af:14:c8:bf:9f:d0:22:98:f9: 0c:ed:68:60:de:78:ba:fb:06:aa:f3:6a:8f:e5:74: 69:5b:6e:84:ce:a5:0f:cd:38:fc:ca:60:34:15:0e: 0c:ad:2f:65:02:53:64:d5:af:c9:74:fa:65:1b:b1: 18:bb:95:8f:72:67:6c:3e:9f:bb:69:70:d3:bd:b5: 67:e1:19:81:4d:0f:01:18:60:0e:b7:85:13:89:62: 69:2b:17:28:73:64:8b:ad:99:4e:0d:4e:58:54:33: 4b:55:09:8b:6e:54:cc:d2:4e:0b:43:63:ed:72:87: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:0A:CE:EB:C5:BA:22:94:24:3D:57:A7:56:C3:80:4A:55:03:1D X509v3 Authority Key Identifier: keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e7:82:47:11:07:ad:0f:e7:9e:d0:56:ea:91:91:99:d9:b6: 35:de:52:a4:d6:b2:01:6d:4c:98:de:e8:fe:58:45:6e:ec:58: 63:03:23:48:92:02:e2:ba:4b:c8:a1:5f:f8:d7:f2:63:be:aa: d9:c8:5f:e7:ae:60:5e:c4:7c:93:16:d7:54:95:44:fc:5d:09: 6a:58:32:08:55:bc:68:7d:93:e1:9c:5c:1e:2a:7b:4c:49:3b: 69:51:4f:1a:d0:8b:d9:f5:57:fe:27:0a:bb:4b:c2:5a:a8:b7: 85:ab:77:ac:aa:d6:46:f9:2e:90:1c:c6:66:f2:52:48:86:ac: ae:49:30:f6:69:ef:ff:6e:93:ee:27:d9:18:55:38:96:4c:83: 0f:6e:9d:e2:59:7b:68:9e:1b:84:0e:c8:f0:c1:b5:04:b1:f3: 58:52:9d:90:72:6d:32:02:8f:8b:8e:80:73:d0:1c:44:d7:a9: 8e:aa:ce:aa:66:c9:bf:ed:ec:8c:a4:04:63:45:36:25:e9:8e: 27:c4:8a:e2:b3:c9:d1:c0:05:64:b8:3d:69:af:9b:2f:ce:25: 1e:ad:d9:ae:00:e4:67:f8:94:43:cf:22:43:94:2c:71:f9:cb: 2c:91:d0:64:37:62:9f:7b:01:83:04:12:9b:48:2e:4e:4d:42: e0:9f:df:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCXsXi6AhuS4y+sqQftsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzOThlYzE1YmMwMzljNWE2MDQyZmJlOTA0ODQ0NTZiZTAy ZGE3YjkwHhcNMjUxMjA1MjIwMDQ1WhcNMjUxMjA2MjIwMDQ1WjAzMTEwLwYDVQQD Eyg1M2IwMGFjZWViYzViYTIyOTQyNDNkNTdhNzU2YzM4MDRhNTUwMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHC7/Xl9KqI3Tr0UBqrSEtdKgTXO BaRDr6yvsE8xYCyeWzGpDAMG89EFOoUEltHxOVHa0ochJgMmJC4vCbQC/xz16jD9 39aozehwf3AtW17w0vWA4ANIbVFUpumvkhKUHtUYClm5xAeoFIedRH2mAuEv0FG8 aKt1zuFByLIlJsyvwHQ65V6QimIS+oGvFMi/n9AimPkM7Whg3ni6+waq82qP5XRp W26EzqUPzTj8ymA0FQ4MrS9lAlNk1a/JdPplG7EYu5WPcmdsPp+7aXDTvbVn4RmB TQ8BGGAOt4UTiWJpKxcoc2SLrZlODU5YVDNLVQmLblTM0k4LQ2Ptcoel+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOwCs7rxboilCQ9V6dWw4BKVQMdMB8GA1UdIwQY MBaAFGOY7BW8A5xaYEL76QSERWvgLae5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODct ZDZmMDRlNzA4NDU0LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83NzExZDktN2Y3Yy00ZWRiLWE2ODctZDZmMDRlNzA4NDU0 LzEvWTVqc0Zid0RuRnBnUXZ2cEJJUkZhLUF0cDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmueCRxEH rQ/nntBW6pGRmdm2Nd5SpNayAW1MmN7o/lhFbuxYYwMjSJIC4rpLyKFf+NfyY76q 2chf565gXsR8kxbXVJVE/F0JalgyCFW8aH2T4ZxcHip7TEk7aVFPGtCL2fVX/icK u0vCWqi3hat3rKrWRvkukBzGZvJSSIasrkkw9mnv/26T7ifZGFU4lkyDD26d4ll7 aJ4bhA7I8MG1BLHzWFKdkHJtMgKPi46Ac9AcRNepjqrOqmbJv+3sjKQEY0U2JemO J8SK4rPJ0cAFZLg9aa+bL84lHq3ZrgDkZ/iUQ88iQ5QscfnLLJHQZDdin3sBgwQS m0guTk1C4J/fpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:53 2025 by rpki-client