This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json) Hash identifier: OiKiIN4Ds2E+r5vS2dUsR7Sg+1l8yTh4JidR8+s5GBY= Subject key identifier: 0C:5D:88:A6:67:3F:55:47:27:B7:E1:C3:13:31:ED:4C:8F:5C:89:C4 Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019AF1D1F22F5CED1C7DE04049E50205777B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (hash: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=) 2: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (hash: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=) 3: WFk1Sbl9ffKO0_c5-wWqDgx_UdY.roa (hash: 17TQJSkjsNV4kLocHOeLmKp8frraMCHjxrwGJ2DZ/TA=) 4: YQH8RWxADt9aJV8FpUmZfLr_4hA.roa (hash: as+j57YQ6lscVO9lYUdKRdByZHNNE4AzI7PATyHo/j0=) 5: qB1Zo9eTq0Gf6RAAveJrJzHjkfE.roa (hash: k2V4zT3lW1qBoAk74wdn7K6a/aSM0/Ew+2PcshHyMps=) 6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: zgfOGpDCG4wCJ9jzAIwlyCQN+yCJ/UJ7r84jWM1EQeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f2:2f:5c:ed:1c:7d:e0:40:49:e5:02:05:77:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=0c5d88a6673f554727b7e1c31331ed4c8f5c89c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:64:8e:90:1d:fa:1f:f5:90:aa:91:9d:00:ea: 10:f0:88:77:28:89:15:1a:4e:f1:54:f9:63:c3:76: f6:89:25:4b:ff:5a:34:54:a7:4f:c3:c4:f7:61:31: 91:1a:f1:5c:98:9f:f3:d7:ac:a3:74:34:d2:58:e5: 09:5c:bc:9f:7a:06:5f:27:9f:fd:37:b2:61:5b:78: 3e:48:59:7a:c5:68:eb:70:c9:9c:9b:28:dd:97:ab: 93:96:04:cc:56:96:5a:f0:50:36:fa:13:c3:22:8e: 4e:27:2e:ca:79:fe:0e:99:d0:94:e0:81:4f:1b:1c: a7:4d:0d:f1:cc:07:48:1e:4a:74:0d:2d:f2:84:87: 64:60:e7:55:f6:57:99:3a:2d:56:a5:a8:c9:8d:35: 5d:e1:e2:05:9e:7b:b1:31:0b:14:89:4e:23:53:7d: fc:65:d5:fc:87:79:b5:1f:68:4a:9e:58:92:55:cb: 50:fd:46:73:fb:78:33:cf:63:15:ec:fb:ca:df:19: aa:7c:a7:92:e6:ee:0e:5a:00:b8:77:1c:66:8d:a6: f2:8e:b9:29:31:68:11:a2:0d:42:5c:42:69:99:fd: 9b:f6:08:86:ab:b4:c6:a9:ee:78:52:e5:05:b9:03: a2:df:92:66:09:36:01:cf:8f:d7:5c:f7:05:89:61: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5D:88:A6:67:3F:55:47:27:B7:E1:C3:13:31:ED:4C:8F:5C:89:C4 X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:63:26:21:1c:f9:54:9f:04:5e:c2:f0:8c:01:d9:21:fa:c8: c2:13:3b:b7:b0:66:7e:3e:2b:f5:c1:bd:1b:7f:83:d7:66:0a: 93:a0:27:2b:c6:aa:98:47:46:93:d4:1b:16:47:ca:ba:67:43: 37:78:ea:a5:0d:58:a4:8c:54:f8:e7:8a:5a:0f:29:c2:21:73: 22:49:a6:b8:5d:41:2f:24:02:bd:4b:da:5c:69:da:6e:a1:9e: 05:bb:b4:81:e3:bf:00:b7:67:43:51:83:52:0a:9e:7d:f2:92: 3e:87:1d:b7:7f:c1:b1:14:11:8d:b0:ca:43:4a:7c:cd:07:f9: 8e:f0:77:22:14:08:ff:48:47:c4:55:41:12:ba:96:dc:b3:fb: 81:36:62:23:d1:d1:28:4a:4d:7b:f2:35:3c:e6:d8:80:e3:eb: ff:86:c1:d1:d8:07:30:ff:38:95:9b:fe:61:60:a1:4e:f0:9a: 08:38:ad:4d:a9:8f:26:e0:43:ba:8b:10:2c:1b:48:df:31:df: 75:50:7e:28:63:58:9b:9a:ea:9d:19:79:64:dc:8b:9d:ec:7d: ee:77:ab:93:13:b5:59:8f:15:c6:ac:63:eb:ea:ab:b0:17:00: 8d:60:21:b0:86:eb:92:93:20:a2:08:13:9c:86:4a:ce:da:fb: 44:c1:32:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fIvXO0cfeBASeUCBXd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygwYzVkODhhNjY3M2Y1NTQ3MjdiN2UxYzMxMzMxZWQ0YzhmNWM4OWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWSOkB36H/WQqpGdAOoQ8Ih3KIkV Gk7xVPljw3b2iSVL/1o0VKdPw8T3YTGRGvFcmJ/z16yjdDTSWOUJXLyfegZfJ5/9 N7JhW3g+SFl6xWjrcMmcmyjdl6uTlgTMVpZa8FA2+hPDIo5OJy7Kef4OmdCU4IFP GxynTQ3xzAdIHkp0DS3yhIdkYOdV9leZOi1WpajJjTVd4eIFnnuxMQsUiU4jU338 ZdX8h3m1H2hKnliSVctQ/UZz+3gzz2MV7PvK3xmqfKeS5u4OWgC4dxxmjabyjrkp MWgRog1CXEJpmf2b9giGq7TGqe54UuUFuQOi35JmCTYBz4/XXPcFiWFnoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxdiKZnP1VHJ7fhwxMx7UyPXInEMB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGMmIRz5 VJ8EXsLwjAHZIfrIwhM7t7Bmfj4r9cG9G3+D12YKk6AnK8aqmEdGk9QbFkfKumdD N3jqpQ1YpIxU+OeKWg8pwiFzIkmmuF1BLyQCvUvaXGnabqGeBbu0geO/ALdnQ1GD UgqeffKSPocdt3/BsRQRjbDKQ0p8zQf5jvB3IhQI/0hHxFVBErqW3LP7gTZiI9HR KEpNe/I1PObYgOPr/4bB0dgHMP84lZv+YWChTvCaCDitTamPJuBDuosQLBtI3zHf dVB+KGNYm5rqnRl5ZNyLnex97nerkxO1WY8Vxqxj6+qrsBcAjWAhsIbrkpMgoggT nIZKztr7RMEy5w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:11 2025 by rpki-client