This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json) Hash identifier: h09IIvD+0WF4IIlw1xyfWUtkck/XLbfrpJQbqnpSXlA= Subject key identifier: E5:EE:9D:63:46:1C:DF:AC:11:7D:42:3A:36:6E:9F:0A:37:4B:DC:39 Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Certificate serial: 019AF19AACC246514EC748D55CEFD6A25BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft Manifest number: 0970 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=) 2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: 0qQ7reqCFGHBsTFrzsbemjZvHr7GCteQVidMy43w+CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ac:c2:46:51:4e:c7:48:d5:5c:ef:d6:a2:5b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=e5ee9d63461cdfac117d423a366e9f0a374bdc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:f5:96:d6:97:85:10:8c:cb:b5:e6:6f:41: 19:bb:07:97:ed:4f:ee:cb:40:21:ec:e8:56:b8:86: 08:40:09:e3:f9:5b:cd:81:4d:3e:e8:f2:49:51:9d: fb:d3:e0:5e:de:c6:15:9d:7c:e5:9c:98:f0:bd:6e: dc:ca:34:81:f7:59:8f:3a:19:41:e3:c4:07:4b:98: be:4e:f4:50:cd:a2:84:4e:50:0f:10:dc:5a:22:8f: f9:a1:07:3b:ee:62:0b:55:6f:33:25:30:51:4c:c1: 31:89:82:4d:b1:0b:27:33:13:63:92:d0:fe:9f:bc: 56:61:b0:3a:5d:a9:9d:fb:09:aa:89:48:58:d0:fb: de:2e:b2:ed:c4:6f:7e:8a:26:fb:17:9f:48:1b:41: 69:1a:26:cf:18:32:dc:54:90:c2:93:16:dd:04:b4: 77:e6:1e:b1:bc:41:2a:a0:37:26:e5:82:48:5a:50: 01:8c:b8:2e:f0:3f:aa:b8:24:19:33:01:7c:f0:5d: 12:a4:d4:e0:78:05:81:df:45:dd:e7:00:6e:ec:e6: 51:62:5d:60:af:14:99:02:14:cc:ba:5e:6d:c6:d3: 9f:06:c2:c9:8a:bc:47:c6:a0:5e:a1:50:81:39:84: bb:2f:4a:5d:e6:b1:22:7b:6b:16:66:5b:0d:ed:cf: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EE:9D:63:46:1C:DF:AC:11:7D:42:3A:36:6E:9F:0A:37:4B:DC:39 X509v3 Authority Key Identifier: keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e2:bc:89:52:a9:39:1b:8f:67:32:a7:a8:2c:fd:e5:8c:06: be:12:87:cb:7b:3f:43:68:1c:d1:de:68:e4:3a:46:7d:5d:f5: f5:65:9d:2a:ab:04:bd:17:1b:69:08:fe:6d:0e:44:9b:57:bd: 24:5f:ad:66:3a:a5:a8:b2:a6:50:39:52:b6:36:d8:74:7a:54: 2a:74:87:c3:af:b6:0d:bb:2f:03:bb:db:95:2b:f4:23:b4:bd: f6:3e:2f:e6:5b:23:a5:a0:e8:3f:f4:f8:14:a7:8b:40:43:e4: 37:d9:ba:ae:36:2b:a3:b1:79:26:85:ff:e6:b2:e5:c5:4a:02: 56:36:35:08:a3:dc:3d:5a:d1:c4:99:92:36:fd:26:17:97:3f: 61:9a:0c:a5:3b:2c:ae:29:6c:ec:75:38:ed:71:6c:e3:f2:ea: 4b:4f:5a:7c:1b:95:fd:d0:a3:f9:69:dc:b0:87:1b:b6:ae:ed: 9d:72:1a:e4:d4:85:ab:7a:06:25:67:18:7c:36:0f:d2:2b:a4: f3:b1:f2:8a:5d:35:94:1e:0d:85:4b:10:7e:a5:d7:43:e9:a7: e7:95:7c:b2:92:f4:a9:90:e1:27:b2:97:7e:65:f5:84:11:b4: c0:f0:da:1b:fa:29:8c:30:24:a8:b7:bc:e6:51:3d:8e:53:78: 9c:f1:94:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqzCRlFOx0jVXO/WolvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh MjBiMjMwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhlNWVlOWQ2MzQ2MWNkZmFjMTE3ZDQyM2EzNjZlOWYwYTM3NGJkYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVX1ltaXhRCMy7Xmb0EZuweX7U/u y0Ah7OhWuIYIQAnj+VvNgU0+6PJJUZ370+Be3sYVnXzlnJjwvW7cyjSB91mPOhlB 48QHS5i+TvRQzaKETlAPENxaIo/5oQc77mILVW8zJTBRTMExiYJNsQsnMxNjktD+ n7xWYbA6Xamd+wmqiUhY0PveLrLtxG9+iib7F59IG0FpGibPGDLcVJDCkxbdBLR3 5h6xvEEqoDcm5YJIWlABjLgu8D+quCQZMwF88F0SpNTgeAWB30Xd5wBu7OZRYl1g rxSZAhTMul5txtOfBsLJirxHxqBeoVCBOYS7L0pd5rEie2sWZlsN7c9mmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXunWNGHN+sEX1COjZunwo3S9w5MB8GA1UdIwQY MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuK8iVKp ORuPZzKnqCz95YwGvhKHy3s/Q2gc0d5o5DpGfV319WWdKqsEvRcbaQj+bQ5Em1e9 JF+tZjqlqLKmUDlStjbYdHpUKnSHw6+2DbsvA7vblSv0I7S99j4v5lsjpaDoP/T4 FKeLQEPkN9m6rjYro7F5JoX/5rLlxUoCVjY1CKPcPVrRxJmSNv0mF5c/YZoMpTss rils7HU47XFs4/LqS09afBuV/dCj+WncsIcbtq7tnXIa5NSFq3oGJWcYfDYP0iuk 87Hyil01lB4NhUsQfqXXQ+mn55V8spL0qZDhJ7KXfmX1hBG0wPDaG/opjDAkqLe8 5lE9jlN4nPGUzw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:30:41 2025 by rpki-client