This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json) Hash identifier: bjV/3tZIWRVJf8ll5HHUbZniHX3lAT55swVG9L/4EiY= Subject key identifier: F8:B6:D0:82:14:26:30:1F:88:C9:87:34:A8:78:AB:F9:73:0B:CE:0F Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Certificate serial: 019AF087EB7A89C410343926687E55049EDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft Manifest number: 0C3C Signing time: Fri 05 Dec 2025 22:00:30 +0000 Manifest this update: Fri 05 Dec 2025 22:00:30 +0000 Manifest next update: Sat 06 Dec 2025 22:00:30 +0000 Files and hashes: 1: hUKLcWa9OHC5GxmVq6KR5PIsB6o.roa (hash: scGqiYOmrM2j/apqj1QvggRupECIf8XpZkFfLXcvrsc=) 2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: CICL61kZzlMwxjOZ9nRLUIBYspWg+fHAl5bli0JM01E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:eb:7a:89:c4:10:34:39:26:68:7e:55:04:9e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1 Validity Not Before: Dec 5 22:00:30 2025 GMT Not After : Dec 6 22:00:30 2025 GMT Subject: CN=f8b6d0821426301f88c98734a878abf9730bce0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:90:3d:cd:30:ad:f3:d7:5f:96:b4:f9:83: 62:dd:f2:9a:31:18:c8:7b:5d:3f:53:4f:6e:80:72: 4e:a5:9e:a2:ab:1c:92:a6:fb:38:a9:c8:cf:90:e3: bf:b3:2d:47:ca:ba:28:53:fe:4e:ce:8c:70:4d:74: f2:6f:80:6d:5f:8e:91:89:52:6c:86:fc:78:ce:75: a1:a0:4c:51:0f:4e:66:bb:54:e1:16:b3:cd:62:ba: 12:9a:43:4c:06:59:1a:78:f5:7c:17:78:25:ba:e9: 52:f7:04:8d:ad:ea:3f:5a:49:f0:73:b3:80:11:34: b7:b9:ab:e7:2e:54:da:c1:7d:51:a8:3c:7e:51:b4: d8:42:f0:19:03:78:d7:7e:dc:36:c7:e8:29:70:87: cb:4b:7c:a6:3e:d6:bf:17:29:12:89:3b:a2:5d:69: 35:3c:71:a1:da:62:77:aa:62:c9:17:c6:2f:8e:57: 71:5a:1c:2d:d3:f6:c6:48:68:49:42:99:19:c8:05: 8d:fc:5a:f5:c1:44:a4:e5:4f:37:c3:4b:e4:df:97: 65:a8:c4:46:d2:57:33:2c:4c:1d:bb:55:06:04:02: bf:23:1c:72:6f:c0:dd:c7:e8:76:46:54:10:86:58: cb:19:3c:53:24:c8:6c:38:64:6f:12:62:7f:cb:1a: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:D0:82:14:26:30:1F:88:C9:87:34:A8:78:AB:F9:73:0B:CE:0F X509v3 Authority Key Identifier: keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2c:1a:d8:81:6a:16:19:73:ed:94:cb:14:65:34:25:57:46: 52:0a:d5:68:4a:80:f5:e3:04:3b:e1:8a:02:85:4f:01:0c:55: ce:da:0d:e9:a2:9c:0e:a1:91:fc:e2:86:8d:78:f0:9a:46:d5: d7:58:1e:7a:1a:ae:22:ca:13:11:cc:e3:34:fc:3c:6b:de:18: 71:0f:7d:74:02:b3:30:41:0b:8b:3d:75:de:4a:6d:b6:da:17: 92:5d:20:65:7e:db:08:e1:27:4a:4a:9c:73:c9:0e:e2:5d:8d: c6:65:dd:a9:0c:15:fa:16:3f:5b:13:06:6d:fb:2f:ed:69:fe: 8b:67:00:f7:d7:d2:e3:26:8d:09:01:05:8f:90:cf:5e:dc:36: 32:aa:61:9d:8c:61:7b:ff:9a:da:9a:6b:b8:3e:b9:e4:1c:b8: 10:8e:d6:26:97:b9:16:78:61:a9:72:08:cd:25:99:ca:0f:cf: 57:6a:31:6f:24:7a:32:7f:66:02:f2:90:da:ee:b5:ae:76:7e: 08:21:99:9d:c4:cc:b6:ae:09:69:70:9f:68:67:12:eb:a2:ac: e3:b0:1b:a2:85:12:ad:e9:84:33:8b:0b:b8:00:9a:d2:0c:28: 05:a4:a8:d2:93:a9:ed:52:50:fc:86:15:81:31:fc:9b:45:d1: 23:a7:6d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+t6icQQNDkmaH5VBJ7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjk5NmZmMDU1ZDY1NzVlMDFmMmU2NGQ5YTNiMzgyODM0 NzAyZDEwHhcNMjUxMjA1MjIwMDMwWhcNMjUxMjA2MjIwMDMwWjAzMTEwLwYDVQQD EyhmOGI2ZDA4MjE0MjYzMDFmODhjOTg3MzRhODc4YWJmOTczMGJjZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLOQPc0wrfPXX5a0+YNi3fKaMRjI e10/U09ugHJOpZ6iqxySpvs4qcjPkOO/sy1HyrooU/5OzoxwTXTyb4BtX46RiVJs hvx4znWhoExRD05mu1ThFrPNYroSmkNMBlkaePV8F3gluulS9wSNreo/Wknwc7OA ETS3uavnLlTawX1RqDx+UbTYQvAZA3jXftw2x+gpcIfLS3ymPta/FykSiTuiXWk1 PHGh2mJ3qmLJF8YvjldxWhwt0/bGSGhJQpkZyAWN/Fr1wUSk5U83w0vk35dlqMRG 0lczLEwdu1UGBAK/Ixxyb8Ddx+h2RlQQhljLGTxTJMhsOGRvEmJ/yxozYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi20IIUJjAfiMmHNKh4q/lzC84PMB8GA1UdIwQY MBaAFMu5lv8FXWV14B8uZNmjs4KDRwLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYt MDlkNDIzMWMxYzk5LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYtMDlkNDIzMWMxYzk5 LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCwa2IFq Fhlz7ZTLFGU0JVdGUgrVaEqA9eMEO+GKAoVPAQxVztoN6aKcDqGR/OKGjXjwmkbV 11geehquIsoTEczjNPw8a94YcQ99dAKzMEELiz113kptttoXkl0gZX7bCOEnSkqc c8kO4l2NxmXdqQwV+hY/WxMGbfsv7Wn+i2cA99fS4yaNCQEFj5DPXtw2MqphnYxh e/+a2ppruD655By4EI7WJpe5FnhhqXIIzSWZyg/PV2oxbyR6Mn9mAvKQ2u61rnZ+ CCGZncTMtq4JaXCfaGcS66Ks47AbooUSremEM4sLuACa0gwoBaSo0pOp7VJQ/IYV gTH8m0XRI6dtgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:49 2025 by rpki-client