This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json) Hash identifier: p0pcnRmOd20tJsVQTbtByhck62JtTpER/+Aw/v4S+1E= Subject key identifier: 45:80:1A:9C:5C:88:CE:B0:9C:3E:C6:33:F6:75:4F:23:F4:31:EE:56 Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Certificate serial: 019AF164060F316B2B34077E70639E141246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft Manifest number: 17BA Signing time: Sat 06 Dec 2025 02:00:55 +0000 Manifest this update: Sat 06 Dec 2025 02:00:55 +0000 Manifest next update: Sun 07 Dec 2025 02:00:55 +0000 Files and hashes: 1: 46nBDvj667zfOAp042BssRV0tGo.roa (hash: ijvMinyi7MX0fq0QyRdi2Vr4DZ+zPLFltRyx4COFtiw=) 2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: h9cIXMjLfQJ7puJOOwKWZ2cIqP1UzbOPM1FWlIxBlvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:06:0f:31:6b:2b:34:07:7e:70:63:9e:14:12:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c Validity Not Before: Dec 6 02:00:55 2025 GMT Not After : Dec 7 02:00:55 2025 GMT Subject: CN=45801a9c5c88ceb09c3ec633f6754f23f431ee56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d4:a9:db:84:0f:2d:27:73:4d:4c:6b:3f:41: 5b:3c:54:f6:9d:da:50:24:d6:38:0b:c1:e2:73:f2: f5:3f:4f:45:13:af:06:0e:56:96:4c:81:a2:8f:6c: c3:ac:e2:b9:1c:94:c0:cf:11:06:ec:b9:aa:84:25: 7b:8b:c3:0a:1e:5a:3f:a4:c4:6a:05:ce:bd:1a:7f: f8:95:e4:d2:53:98:67:d9:7b:5a:27:38:c1:2c:e5: bf:6e:39:dd:1c:1e:27:28:32:77:dd:b4:5a:06:03: 66:06:b5:a9:bc:0e:c3:e4:72:6c:bf:4d:8f:a2:b6: 56:6b:0b:c4:3c:36:e0:27:9f:be:35:d9:54:ee:37: e0:a7:03:47:4b:1d:bd:c5:ee:03:d0:1b:6a:88:c8: f6:43:75:48:d4:b5:65:10:1c:8f:09:ba:0a:3f:0b: 41:b7:59:1e:b4:7e:d7:9e:da:8a:a7:c8:df:eb:ad: be:b7:eb:bd:81:1d:25:9e:37:a5:8f:43:16:f0:b7: 6d:02:61:f4:77:d7:8e:27:79:f7:b8:75:32:a4:55: b5:85:45:fa:06:e9:8a:6d:ba:51:97:c8:37:f4:12: 14:59:f2:b8:92:76:2e:24:fd:b0:5e:8c:b5:57:e4: 22:1c:82:32:09:7d:e6:89:a7:59:9e:c2:e7:65:0b: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:1A:9C:5C:88:CE:B0:9C:3E:C6:33:F6:75:4F:23:F4:31:EE:56 X509v3 Authority Key Identifier: keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:50:8e:88:4c:dc:ab:bd:44:60:b6:73:e6:12:e2:53:f9:3d: f4:52:31:47:ad:de:6e:b2:8c:7b:a7:78:84:59:b2:26:24:38: 1f:66:50:5b:af:ac:c8:a8:5f:41:c8:f8:9c:65:a5:1c:83:44: 47:bb:97:d5:65:7f:42:4a:53:2d:db:6c:70:e6:1b:33:bc:c9: 70:5f:47:38:80:77:d9:63:7f:ca:0d:37:23:a7:6c:ee:49:89: 00:5e:0c:52:73:0e:b7:ae:8d:c3:32:f0:e0:f7:bf:a3:cd:f9: 88:e6:bc:3a:94:2e:7e:01:55:2a:7b:f9:38:aa:6d:40:c0:6a: c8:6e:db:2c:99:f8:15:7e:4e:31:a0:fd:f1:ab:a2:d6:e1:f0: ec:0f:fd:d1:0c:89:1d:08:09:c6:47:b1:d1:83:7c:37:82:a0: 2e:12:5f:9b:95:6b:93:06:01:40:5e:46:84:fc:60:a3:a4:68: 48:09:96:2f:98:08:fe:cc:f0:a4:18:c0:2c:e0:58:88:85:b7: 98:2a:ea:d4:0a:27:27:79:f2:ed:f0:07:f1:f2:eb:e9:25:69: a5:7d:0c:9b:53:bc:f8:4d:39:a0:ad:4c:e5:bd:97:1c:c3:b4: 66:83:88:db:ad:93:41:91:b5:2a:24:a7:fb:98:a8:91:f9:57: 24:ba:6b:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAYPMWsrNAd+cGOeFBJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5 NTQzOWMwHhcNMjUxMjA2MDIwMDU1WhcNMjUxMjA3MDIwMDU1WjAzMTEwLwYDVQQD Eyg0NTgwMWE5YzVjODhjZWIwOWMzZWM2MzNmNjc1NGYyM2Y0MzFlZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotSp24QPLSdzTUxrP0FbPFT2ndpQ JNY4C8Hic/L1P09FE68GDlaWTIGij2zDrOK5HJTAzxEG7LmqhCV7i8MKHlo/pMRq Bc69Gn/4leTSU5hn2XtaJzjBLOW/bjndHB4nKDJ33bRaBgNmBrWpvA7D5HJsv02P orZWawvEPDbgJ5++NdlU7jfgpwNHSx29xe4D0BtqiMj2Q3VI1LVlEByPCboKPwtB t1ketH7XntqKp8jf662+t+u9gR0lnjelj0MW8LdtAmH0d9eOJ3n3uHUypFW1hUX6 BumKbbpRl8g39BIUWfK4knYuJP2wXoy1V+QiHIIyCX3miadZnsLnZQuygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWAGpxciM6wnD7GM/Z1TyP0Me5WMB8GA1UdIwQY MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVCOiEzc q71EYLZz5hLiU/k99FIxR63ebrKMe6d4hFmyJiQ4H2ZQW6+syKhfQcj4nGWlHINE R7uX1WV/QkpTLdtscOYbM7zJcF9HOIB32WN/yg03I6ds7kmJAF4MUnMOt66NwzLw 4Pe/o835iOa8OpQufgFVKnv5OKptQMBqyG7bLJn4FX5OMaD98aui1uHw7A/90QyJ HQgJxkex0YN8N4KgLhJfm5VrkwYBQF5GhPxgo6RoSAmWL5gI/szwpBjALOBYiIW3 mCrq1AonJ3ny7fAH8fLr6SVppX0Mm1O8+E05oK1M5b2XHMO0ZoOI262TQZG1KiSn +5iokflXJLprBA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:01 2025 by rpki-client