This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft File: y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json) Hash identifier: aFKO2tOfTatJs7Q0/Bz1TRUlITOZGslAvQxH+vA6vfg= Subject key identifier: 86:66:7F:71:A5:90:B5:FB:C0:5B:DB:28:77:DA:69:26:7A:8C:C7:71 Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B Certificate issuer: /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Certificate serial: 019AF0BF6F267D8A43758A392A8B776D8D6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft Manifest number: 06C2 Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: qeRkAxuKV7jDoBRtnwhgHvVO2oU.roa (hash: AbAyYkMckXNzAm/R63UZOCSEewsBDfH65FR66tVjq2s=) 2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: J5WLU0SnA/ZDK5eb7umb0LUZoT6DHzCQkeZvmvn8DjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6f:26:7d:8a:43:75:8a:39:2a:8b:77:6d:8d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=86667f71a590b5fbc05bdb2877da69267a8cc771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:8f:03:2a:63:75:87:93:e0:91:fa:79:d9: 73:56:06:57:5d:3e:fc:ef:83:64:a7:49:5d:10:2f: 9d:a3:92:ed:21:48:38:e6:2a:98:01:c1:45:f6:ac: 1d:3c:85:96:1f:14:e1:1f:bd:b2:47:49:0b:3e:b0: 39:36:76:35:c9:ed:ac:6c:8d:65:34:b2:fd:ec:b7: d5:cf:20:b1:8d:c9:cb:a5:d8:c5:b5:bd:91:57:6d: 26:07:3a:0d:d2:bf:dd:58:7f:57:0a:e9:d2:2d:85: 7c:71:ae:05:7f:f6:45:d7:da:12:45:f0:2d:03:57: c3:44:a3:7f:f0:7d:57:bc:92:0b:53:57:86:fc:a5: 4f:8a:bf:cb:29:f0:f5:f2:a7:cb:31:2f:5a:e2:e8: 80:2a:bc:c7:d4:cc:a3:e0:2a:11:ba:b3:3b:d8:32: 54:df:b3:7e:01:cf:b5:fb:3f:d3:43:d3:52:25:a0: 6e:64:8e:89:c3:83:4b:c0:6a:ba:17:89:8f:30:f5: 04:f7:e1:0f:4b:23:ae:b5:99:25:73:28:f0:79:ce: 4c:06:3a:74:58:45:2b:f3:29:ad:23:77:ef:7b:db: 2a:98:ad:c5:eb:88:c5:e7:3f:b3:a5:51:c1:e5:ad: 7f:6c:09:ea:11:6a:5d:e0:84:d5:08:17:5c:40:ee: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:66:7F:71:A5:90:B5:FB:C0:5B:DB:28:77:DA:69:26:7A:8C:C7:71 X509v3 Authority Key Identifier: keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1e:1f:a2:46:23:13:13:92:95:64:34:5e:61:07:74:fb:b9: 3e:86:b4:74:a1:00:89:27:ee:47:54:e2:97:cc:47:b1:58:f5: 20:99:8f:d6:fd:c2:13:a0:75:ef:5b:a5:ff:8d:45:62:e7:5d: cb:46:ea:c1:f7:22:c5:61:3b:e2:a0:b0:5d:aa:6e:08:0f:1f: 75:68:85:9c:39:ec:cd:2d:36:fb:c7:36:fa:07:0b:1d:1f:ad: bf:89:e0:c1:27:41:d8:68:af:cd:bf:57:dc:4d:78:9b:e8:5c: a8:3c:6d:6e:ad:6d:4e:2d:5a:37:02:5d:30:ba:59:e3:30:58: 06:5f:79:c5:a1:73:3c:7a:8d:70:fd:2a:3d:0d:1f:08:71:51: c1:6b:ea:b9:76:ff:96:f7:59:f9:47:87:75:88:d9:35:33:9b: b4:8d:1d:03:97:7d:92:1a:5c:7b:19:d7:3e:cc:96:72:b3:c2: f5:61:bb:8b:48:63:7a:fa:82:a2:df:6a:1b:be:36:a5:25:2c: 03:12:3e:e7:00:41:b6:78:50:03:15:69:7c:55:3e:c7:27:83: aa:f0:16:d3:fa:0d:45:b3:ee:7b:a0:1e:aa:45:be:a9:0c:d5: d1:8c:47:7a:64:6d:6d:09:6a:7e:60:4e:ed:4f:00:41:ed:b2: 29:3d:ca:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv28mfYpDdYo5Kot3bY1vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDAwZDQ4MDMyZDEyOWQ5NGJkMDhlZDI3MTdhOWExZjRj ZjJmNGIwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD Eyg4NjY2N2Y3MWE1OTBiNWZiYzA1YmRiMjg3N2RhNjkyNjdhOGNjNzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y+PAypjdYeT4JH6edlzVgZXXT78 74Nkp0ldEC+do5LtIUg45iqYAcFF9qwdPIWWHxThH72yR0kLPrA5NnY1ye2sbI1l NLL97LfVzyCxjcnLpdjFtb2RV20mBzoN0r/dWH9XCunSLYV8ca4Ff/ZF19oSRfAt A1fDRKN/8H1XvJILU1eG/KVPir/LKfD18qfLMS9a4uiAKrzH1Myj4CoRurM72DJU 37N+Ac+1+z/TQ9NSJaBuZI6Jw4NLwGq6F4mPMPUE9+EPSyOutZklcyjwec5MBjp0 WEUr8ymtI3fve9sqmK3F64jF5z+zpVHB5a1/bAnqEWpd4ITVCBdcQO47TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZmf3GlkLX7wFvbKHfaaSZ6jMdxMB8GA1UdIwQY MBaAFMtADUgDLRKdlL0I7ScXqaH0zy9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUt NzJjYjZiYWU0YTNkLzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUtNzJjYjZiYWU0YTNk LzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtB4fokYj ExOSlWQ0XmEHdPu5Poa0dKEAiSfuR1Til8xHsVj1IJmP1v3CE6B171ul/41FYudd y0bqwfcixWE74qCwXapuCA8fdWiFnDnszS02+8c2+gcLHR+tv4ngwSdB2Givzb9X 3E14m+hcqDxtbq1tTi1aNwJdMLpZ4zBYBl95xaFzPHqNcP0qPQ0fCHFRwWvquXb/ lvdZ+UeHdYjZNTObtI0dA5d9khpcexnXPsyWcrPC9WG7i0hjevqCot9qG742pSUs AxI+5wBBtnhQAxVpfFU+xyeDqvAW0/oNRbPue6AeqkW+qQzV0YxHemRtbQlqfmBO 7U8AQe2yKT3Kjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:22 2025 by rpki-client