This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json) Hash identifier: IhkyE8JWt2VUMZrPXSkrKFNn4t5OcQg+nwf17jgbcWY= Subject key identifier: 2C:04:CA:DE:74:E5:A1:23:A5:87:17:D6:1E:A2:50:2D:EB:C7:BE:AD Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Certificate serial: 019AF1644CC436A227992284AE05D77E133B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft Manifest number: 104E Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: 09lPg3280N3ZZ86hKfoO1uBHQzU.roa (hash: nnylAsJyHM10QSoZPAI37zrHno/gVhQAjT+wCMZWOs0=) 2: H_d5LCU4L3XwGqLNkFDXFN1zy2I.roa (hash: 1Qd4GHmykP1jEc8/694tMFaYEbNeBbde2QJNxgvHfMw=) 3: IjrWIh0jzbH9AGDO-Vviq_eBA4Q.roa (hash: 7jujT2Lsuok7oL2vIrgbVf5j8YwADQ9BWos7sqz0ULQ=) 4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: nhFvgAKSHVQUP1XoYMTb1iYo7cl+dxEATkc/jx7oEqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4c:c4:36:a2:27:99:22:84:ae:05:d7:7e:13:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34 Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=2c04cade74e5a123a58717d61ea2502debc7bead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:4c:f1:36:b8:60:b9:09:6a:c2:ca:68:ee: e3:35:28:85:ee:75:c1:34:1a:ee:e6:d9:1d:38:b6: 52:9f:c2:b5:c3:b9:6b:50:9d:29:3c:fc:83:4f:33: 7e:29:89:bd:8c:8e:28:93:64:9f:65:7b:5e:61:91: 23:e0:40:af:bd:6e:54:02:ec:7d:5b:e0:e1:b7:ab: 92:fa:25:a6:00:83:ef:ab:1c:da:1b:0a:ea:29:a9: da:48:ef:15:1e:d7:63:1d:30:05:13:9a:c4:cd:6b: 05:c9:05:77:d2:df:49:f2:90:55:35:ec:7d:56:ab: 9b:b6:95:01:ae:1a:2c:e4:ef:33:a7:51:5a:22:68: ee:07:7a:06:3a:3b:ed:f1:bf:2b:91:b9:20:e6:7e: 8d:66:db:06:0c:6b:6e:c7:4e:13:98:69:68:03:8d: a6:94:dc:bf:e7:f8:a3:67:5f:07:55:50:99:97:a2: 93:d4:97:53:aa:5b:ae:f1:0b:68:02:27:b0:54:72: 46:a1:c6:64:69:67:3b:ed:21:08:3e:81:52:e0:6b: e4:df:23:e2:dd:5f:89:87:07:2f:43:95:21:d4:06: e0:88:54:3c:15:c4:b9:a6:92:e8:d9:f3:8d:80:08: 09:6b:8b:28:ca:97:b7:02:f6:ad:e5:14:c5:49:2f: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:04:CA:DE:74:E5:A1:23:A5:87:17:D6:1E:A2:50:2D:EB:C7:BE:AD X509v3 Authority Key Identifier: keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:5e:5a:a7:f3:53:e2:e9:4a:f3:7b:6e:32:33:ee:3b:d0:00: a1:a5:4c:93:b6:e0:2e:41:63:62:72:7e:5f:b9:d9:5c:f3:e3: 07:32:85:02:d1:69:8a:74:23:7b:1a:1c:2e:fa:02:68:3c:f3: e9:61:ba:59:1b:cd:24:58:98:e2:1f:6e:33:d6:6f:97:22:a2: 54:a4:3a:22:15:55:e5:6b:db:b1:a5:0a:03:bf:d2:25:33:00: fd:c8:e4:bf:b5:ed:91:4c:d5:48:dc:9a:6f:92:9f:6c:2e:ab: 76:26:c2:28:90:0e:61:c4:8a:49:7c:c4:26:f9:59:c6:33:27: 51:8c:26:f6:40:de:e9:aa:cd:89:e3:0e:e8:21:42:82:49:d0: 41:e4:46:41:a5:77:22:76:95:52:92:7b:90:d2:3d:6c:03:fd: 61:81:f0:02:ad:02:34:4c:43:c2:c7:b9:8c:08:50:0b:51:b8: 9a:26:a6:eb:f6:41:90:00:a3:ec:48:8c:1e:e3:9c:f0:ed:48: aa:f1:d1:35:d2:de:dd:46:58:ae:dc:48:c2:a5:7b:c0:5b:3f: 8d:5d:df:2b:b6:fe:9e:12:d8:e1:65:76:7e:4c:d6:e9:c3:5d: 49:af:f5:34:03:3f:fb:0d:05:76:f0:a2:4d:58:17:35:a4:86: 86:60:f4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEzENqInmSKErgXXfhM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjdjMjBiNTVhNDcwZGFiODkyZjRjOTFlYTAwMTBiZDFj MzlmMzQwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD EygyYzA0Y2FkZTc0ZTVhMTIzYTU4NzE3ZDYxZWEyNTAyZGViYzdiZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscFM8Ta4YLkJasLKaO7jNSiF7nXB NBru5tkdOLZSn8K1w7lrUJ0pPPyDTzN+KYm9jI4ok2SfZXteYZEj4ECvvW5UAux9 W+Dht6uS+iWmAIPvqxzaGwrqKanaSO8VHtdjHTAFE5rEzWsFyQV30t9J8pBVNex9 VqubtpUBrhos5O8zp1FaImjuB3oGOjvt8b8rkbkg5n6NZtsGDGtux04TmGloA42m lNy/5/ijZ18HVVCZl6KT1JdTqluu8QtoAiewVHJGocZkaWc77SEIPoFS4Gvk3yPi 3V+JhwcvQ5Uh1AbgiFQ8FcS5ppLo2fONgAgJa4soype3Avat5RTFSS9ElwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwEyt505aEjpYcX1h6iUC3rx76tMB8GA1UdIwQY MBaAFMu3wgtVpHDauJL0yR6gAQvRw580MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgt MjU2MzM5NzM2YzJiLzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83ZjBjMjQtNDQwYS00ZmY3LWEwYzgtMjU2MzM5NzM2YzJi LzEveTdmQ0MxV2tjTnE0a3ZUSkhxQUJDOUhEbnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVF5ap/NT 4ulK83tuMjPuO9AAoaVMk7bgLkFjYnJ+X7nZXPPjBzKFAtFpinQjexocLvoCaDzz 6WG6WRvNJFiY4h9uM9ZvlyKiVKQ6IhVV5WvbsaUKA7/SJTMA/cjkv7XtkUzVSNya b5KfbC6rdibCKJAOYcSKSXzEJvlZxjMnUYwm9kDe6arNieMO6CFCgknQQeRGQaV3 InaVUpJ7kNI9bAP9YYHwAq0CNExDwse5jAhQC1G4miam6/ZBkACj7EiMHuOc8O1I qvHRNdLe3UZYrtxIwqV7wFs/jV3fK7b+nhLY4WV2fkzW6cNdSa/1NAM/+w0FdvCi TVgXNaSGhmD0+g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:12 2025 by rpki-client