This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json) Hash identifier: +epguT9+TeVlWO1dZ9TyaKU/I6BVHdNNszyrUrVGl9c= Subject key identifier: A7:7A:14:67:7D:69:3D:F8:B3:F6:36:10:B5:D7:E3:59:A7:4F:2F:21 Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b Certificate serial: 019AF209852CBFA396CC99327AC42AAEB943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft Manifest number: 05CF Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: wkYXDy6jmP0Af0Mp2rQ3k6yOAAw.roa (hash: UUIGA4ibmPpEgaOdXWNcs3JAI5RUgnFEIrwSbmNcKfs=) 2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: 1iCer+vzlQAqCStgockY8tE4D+40BJixqoA9fvK70jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:85:2c:bf:a3:96:cc:99:32:7a:c4:2a:ae:b9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=a77a14677d693df8b3f63610b5d7e359a74f2f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:b2:13:12:7d:02:df:ad:1f:a4:a0:cd:0a: af:f1:b5:1c:6f:69:33:82:ac:bc:a0:7a:29:c3:a8: 1c:c5:58:15:b6:4a:76:00:fe:21:ab:07:d1:7b:da: 99:52:7a:51:6a:d0:a4:9b:1b:83:40:50:d5:30:7d: 39:96:2b:2e:d9:c9:e5:e3:3e:8b:85:6e:58:48:cd: 49:9c:17:03:a7:b9:19:b0:d4:f9:41:fc:00:a2:3b: fd:1b:b7:7d:52:9e:77:85:9b:b5:53:a2:14:51:63: b0:b4:03:fb:bc:bc:c4:86:cb:ff:b2:1e:2d:ac:a7: 7a:ab:ad:0a:35:21:70:56:39:41:8e:27:52:6c:28: 0d:32:c9:89:a9:8a:aa:3e:24:9a:9f:48:0d:30:99: 74:6a:70:3e:ed:fc:6c:f2:09:67:e6:0b:37:a9:b1: 50:96:e9:0e:6a:b3:ab:4e:ee:18:5c:6f:c9:74:02: b3:94:83:4b:45:72:90:91:25:08:b0:6a:4f:ae:eb: fa:92:fc:60:27:1b:29:ba:8b:e7:50:5c:04:c1:72: 9e:b0:2e:13:a9:12:a4:e5:15:b8:78:41:36:6d:33: 86:f3:85:ec:d5:5a:c3:03:49:ab:8a:12:02:3c:5a: 52:7d:82:a0:54:ca:32:b8:69:21:ed:77:1b:dd:7d: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7A:14:67:7D:69:3D:F8:B3:F6:36:10:B5:D7:E3:59:A7:4F:2F:21 X509v3 Authority Key Identifier: keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:22:d6:35:36:94:23:8a:10:15:c6:53:5a:e9:9b:2e:24:3e: 16:fb:b4:46:1e:10:03:b5:5d:8f:df:7b:98:93:8a:dd:d6:29: cd:0f:d3:09:f2:8a:8e:33:01:31:9c:f5:45:41:b6:38:e8:75: 74:0e:f3:a8:6f:80:de:e5:49:4b:f7:6b:83:05:c3:98:70:f3: 97:bf:bf:7c:49:77:d2:9a:86:2c:cc:8d:f2:3e:50:7f:e3:34: bc:8e:5b:29:bd:2a:12:54:3e:82:bf:b9:ba:5f:3f:ff:10:cb: 04:0b:a0:a2:de:a7:0d:ff:8c:15:01:79:86:31:f0:60:46:32: 96:c4:44:c7:1a:d0:a5:db:4f:f6:e1:10:59:91:fb:d9:05:f6: 76:90:9a:a4:27:8a:c9:8e:05:4d:25:10:9b:98:2d:cf:fa:46: fd:10:c6:54:68:d9:93:3a:e0:29:0b:25:8b:09:19:5b:f6:5b: 25:b0:7d:03:1e:a9:b8:40:8e:8f:f4:d8:c4:77:3a:2d:c7:a8: c6:d7:96:f1:24:1b:df:95:bf:d5:0f:3c:c8:be:af:2a:c9:6f: 6d:21:d8:fb:c0:1c:64:d8:f9:a6:39:d7:23:d1:04:de:f6:21: 59:5f:3f:3d:43:1a:f3:2d:08:fe:15:ea:75:0d:c4:70:3e:f6: f3:35:b2:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYUsv6OWzJkyesQqrrlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk YjFmOWIwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EyhhNzdhMTQ2NzdkNjkzZGY4YjNmNjM2MTBiNWQ3ZTM1OWE3NGYyZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujSyExJ9At+tH6SgzQqv8bUcb2kz gqy8oHopw6gcxVgVtkp2AP4hqwfRe9qZUnpRatCkmxuDQFDVMH05lisu2cnl4z6L hW5YSM1JnBcDp7kZsNT5QfwAojv9G7d9Up53hZu1U6IUUWOwtAP7vLzEhsv/sh4t rKd6q60KNSFwVjlBjidSbCgNMsmJqYqqPiSan0gNMJl0anA+7fxs8gln5gs3qbFQ lukOarOrTu4YXG/JdAKzlINLRXKQkSUIsGpPruv6kvxgJxspuovnUFwEwXKesC4T qRKk5RW4eEE2bTOG84Xs1VrDA0mrihICPFpSfYKgVMoyuGkh7Xcb3X1CZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd6FGd9aT34s/Y2ELXX41mnTy8hMB8GA1UdIwQY MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt YjEwODE3NTBjZTE1LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1 LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniLWNTaU I4oQFcZTWumbLiQ+Fvu0Rh4QA7Vdj997mJOK3dYpzQ/TCfKKjjMBMZz1RUG2OOh1 dA7zqG+A3uVJS/drgwXDmHDzl7+/fEl30pqGLMyN8j5Qf+M0vI5bKb0qElQ+gr+5 ul8//xDLBAugot6nDf+MFQF5hjHwYEYylsRExxrQpdtP9uEQWZH72QX2dpCapCeK yY4FTSUQm5gtz/pG/RDGVGjZkzrgKQsliwkZW/ZbJbB9Ax6puECOj/TYxHc6Lceo xteW8SQb35W/1Q88yL6vKslvbSHY+8AcZNj5pjnXI9EE3vYhWV8/PUMa8y0I/hXq dQ3EcD728zWyHw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:01 2025 by rpki-client