This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json) Hash identifier: /p/99oXFp/Yo2lUM4ClTBlP/WAWFEPmBh2k0vr8vmq8= Subject key identifier: 43:91:E7:72:66:D2:CB:CE:D5:3B:0C:B7:24:06:25:65:E5:4B:C2:DD Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Certificate serial: 019AF42E62C91F2DDBE51A8561CD1060FA0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft Manifest number: 0D9C Signing time: Sat 06 Dec 2025 15:01:11 +0000 Manifest this update: Sat 06 Dec 2025 15:01:11 +0000 Manifest next update: Sun 07 Dec 2025 15:01:11 +0000 Files and hashes: 1: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (hash: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=) 2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: JOvFUyd9eUVakovVjr401OW++0EWXYHXhGmx0pQE8O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:62:c9:1f:2d:db:e5:1a:85:61:cd:10:60:fa:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc Validity Not Before: Dec 6 15:01:11 2025 GMT Not After : Dec 7 15:01:11 2025 GMT Subject: CN=4391e77266d2cbced53b0cb724062565e54bc2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:6f:5a:76:7c:39:ec:d8:db:02:07:f4:68: 2e:a4:55:5b:6b:64:80:14:73:e2:0e:e5:4d:cd:1a: 72:c6:ff:c8:78:5c:30:9f:51:54:a1:53:e2:78:d0: ba:74:94:80:e4:81:8d:fa:c4:3d:f5:ac:d6:63:52: 88:9c:6b:a0:57:d4:31:23:94:fe:59:eb:f8:e8:66: 0d:27:30:75:69:a2:c4:81:c8:b6:2b:02:0e:15:96: 77:4b:63:97:bd:94:ca:d0:71:d6:31:ec:46:ca:af: db:f8:83:39:20:c9:ac:f6:31:f4:89:45:e6:5a:00: ef:c2:3b:f5:d3:e4:e0:29:49:c1:ba:a2:bb:3f:04: af:e5:d3:69:e0:25:51:fc:9c:20:3e:a3:ab:30:28: 9d:e4:38:80:9c:61:2d:cc:f1:41:e8:1b:73:b3:15: 90:c0:52:cd:b1:9a:ae:ab:6b:6b:6e:5a:43:5e:f5: f6:68:90:eb:2c:c8:b2:ca:43:a8:cd:f3:32:db:91: 45:ec:1e:9c:6f:5b:06:3e:2c:03:a7:3b:b9:62:15: 6d:95:df:e9:7d:90:10:38:2b:4c:ec:6c:6f:dc:63: fb:b6:ab:46:e2:5c:34:e6:c3:4a:1d:c9:f8:1f:4d: ce:c7:d4:80:0c:5e:71:58:f7:13:37:60:92:67:a9: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:91:E7:72:66:D2:CB:CE:D5:3B:0C:B7:24:06:25:65:E5:4B:C2:DD X509v3 Authority Key Identifier: keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:04:df:2b:f1:84:57:10:dc:c8:56:89:8b:6b:24:d4:7d:f2: e6:8c:26:f0:48:36:ee:02:86:f8:16:d5:19:cb:73:cc:5b:d8: 50:d9:08:0f:1c:4c:b1:e0:5c:e8:31:75:8d:27:dc:08:90:91: 68:95:51:59:ba:c6:4e:50:0e:e6:fb:47:aa:b4:92:1b:44:2c: 77:e6:b9:1f:76:61:f4:3b:5d:5b:cf:57:c7:46:51:72:f7:76: 6f:ab:f0:60:15:94:b6:0f:57:15:44:20:c0:87:09:b5:6e:8a: 0a:7a:48:36:a2:15:a9:18:5d:9a:35:a1:26:04:2a:25:53:55: 9c:b7:cc:57:b1:d6:8e:7f:2a:d8:29:c8:24:a7:64:e1:fe:7e: 9b:c9:64:9d:42:a8:b1:af:20:72:d8:db:16:7b:a0:36:0a:81: 3f:6e:79:bf:f4:6a:28:8d:49:49:62:ed:bf:d8:ca:f2:cf:34: 0a:d6:8e:14:ee:77:c3:04:4d:85:a2:41:07:d8:29:ff:99:79: 73:0c:0a:bc:f7:62:09:5d:92:d3:5d:ef:a5:82:d8:00:cf:19: c1:88:cf:13:1f:8e:1f:fd:f2:61:16:aa:4b:f7:ff:75:8b:eb: 67:37:0f:6b:3f:1c:42:dc:c8:1e:93:0b:f5:9f:17:44:88:1d: c4:1e:6a:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmLJHy3b5RqFYc0QYPoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTg5ZDJlMTUyMDFiMjBlMzQwODhkZDFjMDQ1NWIyNTQ0 NGY4ZmMwHhcNMjUxMjA2MTUwMTExWhcNMjUxMjA3MTUwMTExWjAzMTEwLwYDVQQD Eyg0MzkxZTc3MjY2ZDJjYmNlZDUzYjBjYjcyNDA2MjU2NWU1NGJjMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlndvWnZ8OezY2wIH9GgupFVba2SA FHPiDuVNzRpyxv/IeFwwn1FUoVPieNC6dJSA5IGN+sQ99azWY1KInGugV9QxI5T+ Wev46GYNJzB1aaLEgci2KwIOFZZ3S2OXvZTK0HHWMexGyq/b+IM5IMms9jH0iUXm WgDvwjv10+TgKUnBuqK7PwSv5dNp4CVR/JwgPqOrMCid5DiAnGEtzPFB6BtzsxWQ wFLNsZquq2trblpDXvX2aJDrLMiyykOozfMy25FF7B6cb1sGPiwDpzu5YhVtld/p fZAQOCtM7Gxv3GP7tqtG4lw05sNKHcn4H03Ox9SADF5xWPcTN2CSZ6kdIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOR53Jm0svO1TsMtyQGJWXlS8LdMB8GA1UdIwQY MBaAFMuYnS4VIBsg40CI3RwEVbJURPj8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEt MzY5MjYzNDQzMDI1LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEtMzY5MjYzNDQzMDI1 LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQTfK/GE VxDcyFaJi2sk1H3y5owm8Eg27gKG+BbVGctzzFvYUNkIDxxMseBc6DF1jSfcCJCR aJVRWbrGTlAO5vtHqrSSG0Qsd+a5H3Zh9DtdW89Xx0ZRcvd2b6vwYBWUtg9XFUQg wIcJtW6KCnpINqIVqRhdmjWhJgQqJVNVnLfMV7HWjn8q2CnIJKdk4f5+m8lknUKo sa8gctjbFnugNgqBP255v/RqKI1JSWLtv9jK8s80CtaOFO53wwRNhaJBB9gp/5l5 cwwKvPdiCV2S013vpYLYAM8ZwYjPEx+OH/3yYRaqS/f/dYvrZzcPaz8cQtzIHpML 9Z8XRIgdxB5qwA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:04 2025 by rpki-client