This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json) Hash identifier: rXu03NmeYpLtnlWoKIGPUFknUeNGV/bvLwOY0ECZi64= Subject key identifier: 8E:F5:1F:87:86:20:0C:73:A6:37:38:1E:D1:24:77:94:6D:20:25:51 Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Certificate serial: 019B2C9D37527E8D8A06EA4A1D89B943FEFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft Manifest number: 06E1 Signing time: Wed 17 Dec 2025 14:00:59 +0000 Manifest this update: Wed 17 Dec 2025 14:00:59 +0000 Manifest next update: Thu 18 Dec 2025 14:00:59 +0000 Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=) 2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: UPMeCYh4o1ITQTFHSQy9sk3su1iUZrcyrQEt71GWfmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:37:52:7e:8d:8a:06:ea:4a:1d:89:b9:43:fe:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Validity Not Before: Dec 17 14:00:59 2025 GMT Not After : Dec 18 14:00:59 2025 GMT Subject: CN=8ef51f8786200c73a637381ed12477946d202551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:7d:ee:4a:74:d7:82:04:47:b7:83:e5:6f: 45:00:ca:71:3f:4f:b4:c6:48:29:46:b4:af:5f:e1: c0:d7:6d:47:6d:ce:30:ef:92:db:38:68:4e:2c:3d: 50:8a:8b:89:41:ea:4f:3e:78:c3:3c:43:e0:d5:5e: 63:03:a9:8a:69:2f:b4:8d:5c:d1:b3:7d:8a:ec:ef: 0d:a2:17:de:8e:46:94:56:2a:1d:76:39:be:3f:dc: 53:90:b1:83:7f:fa:06:c1:fd:b8:6f:6c:59:d2:ae: 07:07:c2:55:b9:ff:a6:0c:87:58:89:2f:4e:c9:11: f3:84:38:35:57:2e:b1:89:8e:0f:59:92:bd:25:03: 70:01:4f:7f:94:ed:7c:0b:10:ca:85:58:4f:54:98: bb:7e:04:fc:b1:6f:50:06:bd:8e:13:8a:b8:e9:38: 69:dc:6c:a2:13:be:91:cf:d4:76:a7:fb:22:c3:e6: 2d:69:f0:2c:d8:93:f0:cc:eb:9d:5b:5b:69:da:cf: 76:29:f1:97:0e:a1:64:3b:62:c4:6b:da:6b:7d:f6: a5:8e:35:ea:06:7d:0f:9f:cf:22:78:f9:a2:7b:a7: a9:ad:73:f9:0a:83:7d:58:e3:c0:84:ca:9f:60:78: 0a:10:ef:f8:82:0c:eb:4c:53:c9:92:1a:0f:2f:8f: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F5:1F:87:86:20:0C:73:A6:37:38:1E:D1:24:77:94:6D:20:25:51 X509v3 Authority Key Identifier: keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ba:a3:6a:33:6d:5b:15:5f:78:14:9d:ff:18:7a:82:c8:97: c7:df:ba:d5:74:dc:04:a9:2a:1e:51:18:d3:50:73:ac:3c:49: ba:24:5b:96:41:dc:1c:ec:b5:98:0d:23:56:48:53:ab:6d:81: ac:45:59:86:16:d0:25:01:0c:8f:73:34:9f:58:08:6a:b2:f7: 83:69:45:21:96:4a:5e:08:86:0c:20:d0:b9:70:2f:0e:38:8c: 5e:32:02:59:e0:49:96:72:39:10:5b:b9:00:e6:f0:38:36:d6: 63:bd:08:43:70:dc:e4:4f:2e:60:6d:be:a4:7a:81:84:54:8c: a3:0a:8a:ce:33:e5:9a:95:91:e6:06:24:81:9f:4e:fa:a8:d4: e6:55:de:65:43:8a:99:32:fa:44:b5:31:ba:99:c5:b7:90:06: d4:ea:5d:eb:89:1a:d8:a2:a8:10:e6:39:d4:08:b6:f1:90:9b: f5:d6:82:67:da:19:51:45:16:54:06:07:53:a9:15:3d:c0:6d: 3d:58:e4:4e:af:11:f2:9e:a7:20:5a:a0:79:c3:e6:d3:b6:95: 8a:1f:7c:0d:8f:78:b5:51:32:c7:1c:aa:82:9d:6a:73:bb:14: 4e:f1:17:37:c8:f4:a6:de:c7:d4:fa:b1:07:98:8e:7a:9e:d3: 25:05:e7:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnTdSfo2KBupKHYm5Q/77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDAwZDQ4MDMyZDEyOWQ5NGJkMDhlZDI3MTdhOWExZjRj ZjJmNGIwHhcNMjUxMjE3MTQwMDU5WhcNMjUxMjE4MTQwMDU5WjAzMTEwLwYDVQQD Eyg4ZWY1MWY4Nzg2MjAwYzczYTYzNzM4MWVkMTI0Nzc5NDZkMjAyNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaB97kp014IER7eD5W9FAMpxP0+0 xkgpRrSvX+HA121Hbc4w75LbOGhOLD1QiouJQepPPnjDPEPg1V5jA6mKaS+0jVzR s32K7O8NohfejkaUVioddjm+P9xTkLGDf/oGwf24b2xZ0q4HB8JVuf+mDIdYiS9O yRHzhDg1Vy6xiY4PWZK9JQNwAU9/lO18CxDKhVhPVJi7fgT8sW9QBr2OE4q46Thp 3GyiE76Rz9R2p/siw+YtafAs2JPwzOudW1tp2s92KfGXDqFkO2LEa9prffaljjXq Bn0Pn88iePmie6eprXP5CoN9WOPAhMqfYHgKEO/4ggzrTFPJkhoPL4/m1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI71H4eGIAxzpjc4HtEkd5RtICVRMB8GA1UdIwQY MBaAFMtADUgDLRKdlL0I7ScXqaH0zy9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUt NzJjYjZiYWU0YTNkLzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUtNzJjYjZiYWU0YTNk LzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrqjajNt WxVfeBSd/xh6gsiXx9+61XTcBKkqHlEY01BzrDxJuiRblkHcHOy1mA0jVkhTq22B rEVZhhbQJQEMj3M0n1gIarL3g2lFIZZKXgiGDCDQuXAvDjiMXjICWeBJlnI5EFu5 AObwODbWY70IQ3Dc5E8uYG2+pHqBhFSMowqKzjPlmpWR5gYkgZ9O+qjU5lXeZUOK mTL6RLUxupnFt5AG1Opd64ka2KKoEOY51Ai28ZCb9daCZ9oZUUUWVAYHU6kVPcBt PVjkTq8R8p6nIFqgecPm07aVih98DY94tVEyxxyqgp1qc7sUTvEXN8j0pt7H1Pqx B5iOep7TJQXnHA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:13 2025 by rpki-client