This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json) Hash identifier: CMWYTJX91lyfQiCH9MycspaXDKv+I0zgVSTNwQjDzjA= Subject key identifier: 89:FC:04:4D:F3:D1:85:41:78:3E:D5:34:DC:AC:06:49:30:E6:15:0F Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Certificate serial: 019AF1644CFA4468B81D041D760A099F1042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft Manifest number: 012E Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: IjHqWxuNpJU8DaK_lff-VC_PVWQ.roa (hash: kBcWX1ntdL3bghAjxPsE3h6Q1xLnJksKwhAqQ4KHWmw=) 2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: De9MCzmPc1ke3ZsizxM3+7q8ZdUcc0elVYXHqDmsbGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4c:fa:44:68:b8:1d:04:1d:76:0a:09:9f:10:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913 Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=89fc044df3d18541783ed534dcac064930e6150f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:02:fe:78:04:78:63:1a:d8:22:cd:57:38: aa:2f:ae:3f:eb:72:50:7c:66:89:79:09:2f:75:05: 4c:47:22:67:cb:21:01:f4:47:67:47:04:2e:20:0b: e4:54:0d:e7:f0:a5:d5:28:11:25:38:e7:de:a4:b7: fe:36:d0:d3:4b:cc:77:55:4a:7c:0e:d5:3a:ab:cd: 76:0e:1b:b8:6d:07:b1:38:c9:36:79:19:21:f3:2f: 09:a5:8a:03:db:e2:0c:33:f6:0c:f2:2e:86:2f:9a: 4c:33:f2:6a:39:c6:4a:6e:ff:e1:55:f3:67:9b:19: ad:7c:d2:ce:08:0c:ee:cc:4d:bb:4f:83:2d:4d:f3: 5d:f7:d3:bf:f4:1b:d5:ae:0a:5c:be:c2:6b:83:b9: 1e:bd:de:07:b2:4c:c2:c9:22:49:cb:be:85:ed:cf: 09:6d:92:b2:83:13:14:58:43:65:f2:86:81:77:ea: 56:f2:06:31:bb:21:b6:05:4f:c5:ed:37:ab:5e:58: 6b:c9:49:cc:45:dc:86:7e:f8:d9:a0:27:b1:7d:ab: ab:d4:8f:a0:a3:ba:14:3d:ab:b2:d4:40:03:bb:af: a0:7c:30:57:af:c4:36:4a:2e:1b:a7:65:41:60:6c: ae:fb:85:dd:d7:fa:52:3f:79:da:77:a0:e7:36:88: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FC:04:4D:F3:D1:85:41:78:3E:D5:34:DC:AC:06:49:30:E6:15:0F X509v3 Authority Key Identifier: keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f3:98:47:68:d6:86:3b:7b:49:73:04:b9:e3:99:7e:2e:f0: 15:08:0b:28:8b:08:92:60:48:05:f7:79:b5:18:0b:04:3f:4b: 38:a9:dd:47:d1:14:67:48:5a:29:14:6f:07:f0:93:a1:3e:8e: 3a:d5:7c:10:fb:cb:b1:ca:d6:14:dc:39:72:4e:14:a9:af:b6: f2:90:06:a5:d7:b1:89:de:5f:14:72:99:70:ea:29:13:0c:3e: a1:b7:ea:ff:73:a9:75:48:e6:b5:d0:c4:5e:49:64:27:ea:96: 74:6a:95:d4:30:ed:95:6f:07:04:e8:44:e5:d5:a3:fd:98:8d: c9:2b:9a:83:c6:59:98:e5:0d:51:c7:64:f0:6c:e7:a2:72:c0: d6:ba:0b:9b:fc:7f:be:90:20:a6:56:4b:1f:9a:cc:03:4e:a0: 8f:38:de:38:ec:50:14:8a:1a:85:52:d2:64:2d:57:ad:41:b8: 27:b7:02:2a:0f:b1:9a:22:5e:73:bc:b3:dd:da:82:e2:2c:59: d2:cf:0a:98:95:6e:93:8f:61:bc:29:29:3d:aa:d6:ed:90:c1: 3f:e3:46:a9:fc:c8:ed:a0:5d:48:e2:c1:db:52:02:48:a2:65: de:69:6a:30:41:6d:6a:2b:ff:12:63:38:ee:f5:90:b0:5b:0c: fb:a6:11:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEz6RGi4HQQddgoJnxBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNmFmNTJmNzgyNDU1M2FmM2I2Y2JhYTczYWYzYTE3OGMx YzU5MTMwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD Eyg4OWZjMDQ0ZGYzZDE4NTQxNzgzZWQ1MzRkY2FjMDY0OTMwZTYxNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MoC/ngEeGMa2CLNVziqL64/63JQ fGaJeQkvdQVMRyJnyyEB9EdnRwQuIAvkVA3n8KXVKBElOOfepLf+NtDTS8x3VUp8 DtU6q812Dhu4bQexOMk2eRkh8y8JpYoD2+IMM/YM8i6GL5pMM/JqOcZKbv/hVfNn mxmtfNLOCAzuzE27T4MtTfNd99O/9BvVrgpcvsJrg7kevd4HskzCySJJy76F7c8J bZKygxMUWENl8oaBd+pW8gYxuyG2BU/F7TerXlhryUnMRdyGfvjZoCexfaur1I+g o7oUPauy1EADu6+gfDBXr8Q2Si4bp2VBYGyu+4Xd1/pSP3nad6DnNoiTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn8BE3z0YVBeD7VNNysBkkw5hUPMB8GA1UdIwQY MBaAFMtq9S94JFU687bLqnOvOheMHFkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYt MWQ0YWE3ODFiNGQ0LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNjlmNTAtMjc0MC00MjEzLTk2MTYtMWQ0YWE3ODFiNGQ0 LzEveTJyMUwzZ2tWVHJ6dHN1cWM2ODZGNHdjV1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/OYR2jW hjt7SXMEueOZfi7wFQgLKIsIkmBIBfd5tRgLBD9LOKndR9EUZ0haKRRvB/CToT6O OtV8EPvLscrWFNw5ck4Uqa+28pAGpdexid5fFHKZcOopEww+obfq/3OpdUjmtdDE XklkJ+qWdGqV1DDtlW8HBOhE5dWj/ZiNySuag8ZZmOUNUcdk8GznonLA1roLm/x/ vpAgplZLH5rMA06gjzjeOOxQFIoahVLSZC1XrUG4J7cCKg+xmiJec7yz3dqC4ixZ 0s8KmJVuk49hvCkpParW7ZDBP+NGqfzI7aBdSOLB21ICSKJl3mlqMEFtaiv/EmM4 7vWQsFsM+6YR+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:48 2025 by rpki-client