This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json) Hash identifier: d67dmaxLZYnaC1+XGp5OOZ8EdQFhVTtK1c6oUMsEVNk= Subject key identifier: EC:20:23:D4:0A:C4:D5:49:E0:96:05:8C:B1:A1:BB:14:9A:6C:F1:50 Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Certificate serial: 019AF12ECEDAF7E8B4F8D1723744370E5A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft Manifest number: 13F3 Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=) 2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: GKJq05rwsbcMdf2p6Zp4DbaCDMKtvLVtONKU7UXayYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ce:da:f7:e8:b4:f8:d1:72:37:44:37:0e:5a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31 Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=ec2023d40ac4d549e096058cb1a1bb149a6cf150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:b1:4e:b9:82:cd:59:8b:21:94:df:5e:ed: 04:65:c9:33:d8:5b:36:2b:4e:93:a1:d1:3c:34:dd: 74:f2:4b:16:8b:64:d6:90:86:ea:45:40:1c:3e:bd: 1d:33:56:a3:b6:8b:21:02:0b:36:42:26:84:b1:71: 99:13:09:0d:17:ae:ae:c5:09:81:75:da:14:0c:c2: 71:86:85:8c:84:92:7a:cc:2c:86:19:78:19:48:df: 88:01:ec:02:62:51:c1:cc:a6:8e:76:3e:3b:47:8f: 37:5a:ec:31:ee:2c:e7:98:23:d3:d8:24:9b:88:95: 42:db:bc:4e:d4:f2:31:24:2f:af:6b:5b:35:f9:aa: e1:62:83:73:d8:a6:a1:6b:ce:df:71:1a:c0:5f:c8: d5:c0:45:78:9b:57:14:9b:04:25:c6:1e:26:cb:39: cf:47:77:40:50:85:4b:ff:e0:64:13:18:27:1b:03: 6a:cc:3d:cd:6b:99:60:ff:56:27:1d:d3:aa:2e:92: c2:d2:91:cb:74:b0:3c:59:0b:6d:02:46:e0:b8:92: 11:e2:9a:eb:0e:88:6a:57:ba:91:29:12:f5:38:3f: 18:47:05:62:62:10:90:4c:5e:34:b2:d4:4a:dd:96: dd:76:a3:57:1a:7e:f5:d4:2e:fd:95:e0:2c:78:23: 0c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:20:23:D4:0A:C4:D5:49:E0:96:05:8C:B1:A1:BB:14:9A:6C:F1:50 X509v3 Authority Key Identifier: keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:41:35:80:75:39:ae:f0:3b:79:d5:8a:f7:f3:96:9d:fd:f6: ff:10:04:e4:62:6d:37:3f:91:49:91:06:ec:82:1f:63:09:b4: d3:d9:19:c6:e3:0a:cf:f5:23:79:43:f4:60:7c:d5:8a:f7:cc: d5:2d:7f:ca:e7:06:c7:4a:4c:6e:2f:04:1f:30:36:51:87:8d: 56:f4:7e:ae:4d:a6:c9:94:50:5d:8d:00:58:cd:17:7b:70:6f: 96:d2:10:ec:61:a3:0d:bc:f5:50:a8:bf:28:d5:34:33:90:5c: 65:56:6f:7f:32:8a:af:99:70:ce:04:91:32:69:02:40:e7:9f: 14:47:bf:50:02:fd:6d:e3:ea:cb:1b:c5:ec:ea:c2:ba:cb:82: c3:c3:cf:94:5f:1b:a5:a9:2f:7d:a1:fe:76:89:2c:b0:ec:0e: ae:e8:c5:1e:7d:d3:c9:b2:aa:04:28:fb:04:81:ed:1e:46:eb: 60:2f:bc:97:dd:58:96:07:11:fb:c1:95:5e:5d:fe:4c:34:4f: 23:a5:10:9f:56:d5:86:66:ea:ed:04:ff:ec:18:b8:db:d2:79: 83:a5:5a:be:26:ba:9d:5e:02:b8:e7:5f:93:f1:ac:1e:3c:95: 82:e2:08:57:df:5f:f8:50:9b:1c:e4:af:cf:94:d1:6d:92:01: a5:49:80:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs7a9+i0+NFyN0Q3DlprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw YmVhMzEwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD EyhlYzIwMjNkNDBhYzRkNTQ5ZTA5NjA1OGNiMWExYmIxNDlhNmNmMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/yxTrmCzVmLIZTfXu0EZckz2Fs2 K06TodE8NN108ksWi2TWkIbqRUAcPr0dM1ajtoshAgs2QiaEsXGZEwkNF66uxQmB ddoUDMJxhoWMhJJ6zCyGGXgZSN+IAewCYlHBzKaOdj47R483Wuwx7iznmCPT2CSb iJVC27xO1PIxJC+va1s1+arhYoNz2Kaha87fcRrAX8jVwEV4m1cUmwQlxh4myznP R3dAUIVL/+BkExgnGwNqzD3Na5lg/1YnHdOqLpLC0pHLdLA8WQttAkbguJIR4prr DohqV7qRKRL1OD8YRwViYhCQTF40stRK3ZbddqNXGn711C79leAseCMMrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwgI9QKxNVJ4JYFjLGhuxSabPFQMB8GA1UdIwQY MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUE1gHU5 rvA7edWK9/OWnf32/xAE5GJtNz+RSZEG7IIfYwm009kZxuMKz/UjeUP0YHzVivfM 1S1/yucGx0pMbi8EHzA2UYeNVvR+rk2myZRQXY0AWM0Xe3BvltIQ7GGjDbz1UKi/ KNU0M5BcZVZvfzKKr5lwzgSRMmkCQOefFEe/UAL9bePqyxvF7OrCusuCw8PPlF8b pakvfaH+dokssOwOrujFHn3TybKqBCj7BIHtHkbrYC+8l91YlgcR+8GVXl3+TDRP I6UQn1bVhmbq7QT/7Bi429J5g6Vavia6nV4CuOdfk/GsHjyVguIIV99f+FCbHOSv z5TRbZIBpUmAFg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:09 2025 by rpki-client