This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json) Hash identifier: P62xjcTcsOPsx6OPoE8ypnIB67LODJqm/6FKSPRJeHo= Subject key identifier: B8:2D:7D:62:C2:C6:1C:F1:B2:EA:D9:17:10:62:8C:1D:26:B6:D4:5B Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Certificate serial: 019B2E1DD4FF72C9369E952EA1486A0A6D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft Manifest number: 08B8 Signing time: Wed 17 Dec 2025 21:01:05 +0000 Manifest this update: Wed 17 Dec 2025 21:01:05 +0000 Manifest next update: Thu 18 Dec 2025 21:01:05 +0000 Files and hashes: 1: V9bu_0z7-vke15TqRAacNobtW_w.roa (hash: AcTyYpjmVQYslHpVhDjOI3OS/nx5PavwBhDkpmqXVeI=) 2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: UzSQOskBjYxWK4Vk2b6W9XDdaRfITnypBybjg73jlSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:d4:ff:72:c9:36:9e:95:2e:a1:48:6a:0a:6d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e Validity Not Before: Dec 17 21:01:05 2025 GMT Not After : Dec 18 21:01:05 2025 GMT Subject: CN=b82d7d62c2c61cf1b2ead91710628c1d26b6d45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:a2:9f:40:a0:0a:ab:01:4f:92:61:3a:ad: 16:0c:93:16:37:d9:4c:14:f1:db:34:2f:b5:d1:b3: d8:84:c4:b5:d1:4b:0f:cc:7f:84:96:9e:d4:75:3f: b0:d5:77:60:71:92:eb:b8:59:3d:f3:db:d6:c2:ef: e3:d4:ba:b5:09:78:63:07:ab:32:79:5a:86:60:6d: 47:28:3d:6a:0a:48:18:0d:1e:f3:0b:15:41:bb:b3: 07:fe:76:e0:06:27:dc:07:75:a3:39:28:f0:61:0a: 57:2f:36:87:f9:91:d1:9e:16:8a:80:42:2a:b3:10: ee:b8:a6:f7:88:03:fe:78:17:89:2f:84:66:60:29: 3d:d8:46:8f:d5:87:6a:10:e7:23:02:bb:0f:0f:ce: a4:b8:9a:d3:d3:a3:a3:15:aa:de:9c:de:db:47:2f: b0:41:a1:62:76:c0:f5:e0:2e:25:55:97:90:97:1e: d7:85:05:10:7c:06:25:e8:d0:ed:70:bd:ee:42:01: 70:d3:0d:62:6a:de:d5:0c:12:1a:b2:b8:69:a7:72: d1:ad:a9:27:bd:fe:88:27:56:bf:e3:54:a1:48:d9: 7d:da:76:18:e9:07:f0:7a:54:21:5a:2f:17:99:c2: b5:3f:25:25:fd:ac:83:35:4b:98:ce:38:c2:d7:a6: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:7D:62:C2:C6:1C:F1:B2:EA:D9:17:10:62:8C:1D:26:B6:D4:5B X509v3 Authority Key Identifier: keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:12:d8:39:d9:28:cf:1d:0d:91:18:19:de:66:00:72:7b:1c: d9:c5:de:c2:e0:aa:7e:7a:f8:0b:79:48:1a:3c:cb:30:ab:01: 3d:e0:f1:c0:3e:7e:d0:3f:49:67:36:d8:4b:68:0b:62:79:a5: 83:6e:c9:37:7a:e4:54:d2:47:71:96:8d:89:fb:db:75:99:c9: e0:3f:26:7c:41:4d:69:f7:57:cd:49:dd:66:bd:e5:d3:4b:97: 4c:1d:d8:ba:c0:a1:2a:d4:23:6b:31:16:61:0a:08:07:f1:ba: 06:d0:34:1e:33:34:23:48:9f:3c:6f:67:76:eb:c6:7f:0b:ee: 6a:00:6a:be:20:87:79:22:f6:e2:15:36:b7:21:b8:61:7e:a4: 67:09:5f:53:79:bf:ef:13:28:14:4c:42:de:fb:a0:4d:a4:c9: ae:03:b9:ff:66:e7:e0:8a:7a:76:9e:d0:34:f7:20:76:62:41: c4:e4:aa:26:c8:e5:30:3f:61:30:7d:bc:b6:e5:b7:11:6f:64: 6f:3d:49:69:9a:16:5b:2e:4a:86:8c:11:ac:92:d2:fb:9d:39: 38:7f:f6:23:c2:ff:90:b0:a5:6e:8e:e7:cd:9d:a4:a7:21:b9: 91:9a:8a:07:c7:10:09:9d:b4:a6:90:13:9c:a8:e5:3c:e7:55: e5:24:4b:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHdT/csk2npUuoUhqCm1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI0YjQwYzFmODQwODRmOGQ0MGYyYjlkY2JlMWUxZjkx NmFmM2UwHhcNMjUxMjE3MjEwMTA1WhcNMjUxMjE4MjEwMTA1WjAzMTEwLwYDVQQD EyhiODJkN2Q2MmMyYzYxY2YxYjJlYWQ5MTcxMDYyOGMxZDI2YjZkNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FSin0CgCqsBT5JhOq0WDJMWN9lM FPHbNC+10bPYhMS10UsPzH+Elp7UdT+w1XdgcZLruFk989vWwu/j1Lq1CXhjB6sy eVqGYG1HKD1qCkgYDR7zCxVBu7MH/nbgBifcB3WjOSjwYQpXLzaH+ZHRnhaKgEIq sxDuuKb3iAP+eBeJL4RmYCk92EaP1YdqEOcjArsPD86kuJrT06OjFarenN7bRy+w QaFidsD14C4lVZeQlx7XhQUQfAYl6NDtcL3uQgFw0w1iat7VDBIasrhpp3LRrakn vf6IJ1a/41ShSNl92nYY6QfwelQhWi8XmcK1PyUl/ayDNUuYzjjC16YyswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgtfWLCxhzxsurZFxBijB0mttRbMB8GA1UdIwQY MBaAFMtCS0DB+ECE+NQPK53L4eH5Fq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUt M2E1ZmVjYWNkNDlhLzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS81MWJmZDktN2ZmYi00MTU5LTllZDUtM2E1ZmVjYWNkNDlh LzEveTBKTFFNSDRRSVQ0MUE4cm5jdmg0ZmtXcno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARLYOdko zx0NkRgZ3mYAcnsc2cXewuCqfnr4C3lIGjzLMKsBPeDxwD5+0D9JZzbYS2gLYnml g27JN3rkVNJHcZaNifvbdZnJ4D8mfEFNafdXzUndZr3l00uXTB3YusChKtQjazEW YQoIB/G6BtA0HjM0I0ifPG9nduvGfwvuagBqviCHeSL24hU2tyG4YX6kZwlfU3m/ 7xMoFExC3vugTaTJrgO5/2bn4Ip6dp7QNPcgdmJBxOSqJsjlMD9hMH28tuW3EW9k bz1JaZoWWy5KhowRrJLS+505OH/2I8L/kLClbo7nzZ2kpyG5kZqKB8cQCZ20ppAT nKjlPOdV5SRLIA== -----END CERTIFICATE-----Generated at Thu Dec 18 00:10:11 2025 by rpki-client