This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft File: y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json) Hash identifier: Y55CVS5fsvLjWB5iEY7j/F3haXAx15px4z3lrfXcYQI= Subject key identifier: C9:1E:69:D6:19:5B:28:44:9E:1A:1E:F3:4E:96:F5:61:0D:92:BD:37 Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e Certificate serial: 019B3DC77D18BA412EFCD7FFDD8D0074DFA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft Manifest number: 0DF7 Signing time: Sat 20 Dec 2025 22:00:42 +0000 Manifest this update: Sat 20 Dec 2025 22:00:42 +0000 Manifest next update: Sun 21 Dec 2025 22:00:42 +0000 Files and hashes: 1: OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa (hash: af8mlEBnTxkbr73XYFoiiYy6suBahBU1dHobCDHfy/U=) 2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: 7Blw1OZegFPGjKthA6A+2ZFWe4jMN9NgfLZ+a9QyLEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:7d:18:ba:41:2e:fc:d7:ff:dd:8d:00:74:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e Validity Not Before: Dec 20 22:00:42 2025 GMT Not After : Dec 21 22:00:42 2025 GMT Subject: CN=c91e69d6195b28449e1a1ef34e96f5610d92bd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:24:76:82:48:5e:4f:be:9c:19:6e:0e:96: f5:59:20:0e:91:11:f4:a4:ed:7e:a3:81:15:a4:6e: 0c:7f:08:5c:4c:ad:e6:ba:66:b7:08:e5:a0:7b:1c: 55:e9:4a:f8:c3:e6:84:a6:34:f6:fc:8c:ac:85:a2: 3e:83:a5:f6:f5:06:fc:8e:3e:00:2e:9a:1c:9f:27: b0:9e:98:3b:a6:2e:28:44:2f:b3:d6:87:29:44:a7: ce:31:d9:43:bf:d3:c6:93:07:ce:df:75:60:b3:cb: 8f:00:e6:05:51:36:04:90:82:2d:9a:3d:8d:d2:b8: a7:b6:f0:6c:38:7b:23:36:d0:ce:c0:f9:bf:0f:0e: 82:07:7d:60:1b:ee:57:61:56:fb:b9:53:7c:35:c2: fc:6b:e6:c3:05:95:25:52:09:09:e4:1d:ed:97:96: f7:db:df:3c:92:dd:ea:c0:92:1e:c8:75:c0:3a:4b: 50:35:3e:ed:31:51:c5:c5:4e:5b:a2:e8:03:9e:b2: 57:39:68:9e:2c:75:6e:60:8b:cd:77:da:79:55:2d: 38:64:ec:90:2c:e7:2e:01:b7:df:a0:52:66:a3:a4: c4:5f:c6:52:ba:cf:47:0b:7e:f7:8f:e3:b2:f2:49: 37:a3:60:7e:ee:f9:e6:36:53:bc:7d:b8:99:43:2b: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1E:69:D6:19:5B:28:44:9E:1A:1E:F3:4E:96:F5:61:0D:92:BD:37 X509v3 Authority Key Identifier: keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fa:6c:41:b7:d4:89:98:f2:65:04:7b:2d:c0:2d:21:49:a2: 19:d2:56:b0:7e:b6:dc:83:45:63:40:df:5f:e6:5f:7f:8e:7f: 9a:c5:7f:59:b1:ec:a9:32:f7:81:3d:98:81:e0:26:c5:51:04: 60:3d:cc:fc:6e:3c:dd:be:c0:16:21:ad:e6:ee:2a:5d:81:a7: cd:08:a9:69:dd:80:ed:12:6f:92:34:05:c1:37:22:e5:68:26: ba:61:55:d0:ca:72:24:2c:e9:63:9c:ca:d5:b0:98:c8:74:63: 30:7a:a3:0f:03:4b:e4:cb:a6:68:09:67:a3:1c:c0:6e:74:01: f5:4b:71:d6:c7:46:15:aa:44:42:09:d6:e2:38:07:36:54:ec: 63:7c:08:c6:c3:e2:0d:3c:c2:72:7b:43:a5:8f:eb:12:12:3f: 41:f2:bf:ec:c7:00:e6:96:a5:1b:85:2d:b0:5c:fe:70:5a:e9: 0c:83:b1:41:88:6a:13:5c:02:50:99:dc:11:98:0b:b5:39:dc: be:0d:b3:d7:08:cd:f0:4a:8d:c5:80:a4:a3:d8:c6:d1:7b:26: b4:20:27:d7:0e:b7:6d:e8:dd:63:17:c0:d7:19:8f:84:a2:ec: 21:90:2e:ec:87:02:8a:b6:fc:9e:e6:2d:7f:82:e7:7c:e2:6f: ed:5e:79:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x30YukEu/Nf/3Y0AdN+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiN2UwNTNjNzE5OTVhY2M5YmYxMzMzZmU3OWMzZDViZmQ2 ZTk2NGUwHhcNMjUxMjIwMjIwMDQyWhcNMjUxMjIxMjIwMDQyWjAzMTEwLwYDVQQD EyhjOTFlNjlkNjE5NWIyODQ0OWUxYTFlZjM0ZTk2ZjU2MTBkOTJiZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOMkdoJIXk++nBluDpb1WSAOkRH0 pO1+o4EVpG4MfwhcTK3muma3COWgexxV6Ur4w+aEpjT2/IyshaI+g6X29Qb8jj4A Lpocnyewnpg7pi4oRC+z1ocpRKfOMdlDv9PGkwfO33Vgs8uPAOYFUTYEkIItmj2N 0rintvBsOHsjNtDOwPm/Dw6CB31gG+5XYVb7uVN8NcL8a+bDBZUlUgkJ5B3tl5b3 2988kt3qwJIeyHXAOktQNT7tMVHFxU5bougDnrJXOWieLHVuYIvNd9p5VS04ZOyQ LOcuAbffoFJmo6TEX8ZSus9HC373j+Oy8kk3o2B+7vnmNlO8fbiZQyuU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkeadYZWyhEnhoe806W9WENkr03MB8GA1UdIwQY MBaAFMt+BTxxmVrMm/EzP+ecPVv9bpZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OGFhZDEtZDYxZi00MTZlLWFmNGMt OTM2MzdkNDE2OGJkLzEveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OGFhZDEtZDYxZi00MTZlLWFmNGMtOTM2MzdkNDE2OGJk LzEveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvpsQbfU iZjyZQR7LcAtIUmiGdJWsH623INFY0DfX+Zff45/msV/WbHsqTL3gT2YgeAmxVEE YD3M/G483b7AFiGt5u4qXYGnzQipad2A7RJvkjQFwTci5WgmumFV0MpyJCzpY5zK 1bCYyHRjMHqjDwNL5MumaAlnoxzAbnQB9Utx1sdGFapEQgnW4jgHNlTsY3wIxsPi DTzCcntDpY/rEhI/QfK/7McA5palG4UtsFz+cFrpDIOxQYhqE1wCUJncEZgLtTnc vg2z1wjN8EqNxYCko9jG0XsmtCAn1w63bejdYxfA1xmPhKLsIZAu7IcCirb8nuYt f4LnfOJv7V55Zw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:52 2025 by rpki-client