This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft File: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft (raw, json) Hash identifier: Uo2Hgg3CqKmVq1j6DAL4ATlZSa12AZJSYnk5/M1P4nk= Subject key identifier: CA:99:41:F3:04:52:AA:CA:26:CE:59:57:B8:EB:5C:27:E9:9C:34:4F Authority key identifier: 63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E Certificate issuer: /CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e Certificate serial: 019AF2ADB650CEB6F5A35907D899DD9A9514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft Manifest number: 1423 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: 3q5cMH_JMDPWbBWsvj1oSnffC60.roa (hash: PsjJWV+kYSf71t9/bKVlp3KCFoEso5Ik+VCJED3EfZo=) 2: Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl (hash: xf98c6veK3eYDKyDeqHhz5or4Yle1PdIi3owX37Rx24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b6:50:ce:b6:f5:a3:59:07:d8:99:dd:9a:95:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63f97267e7c00795309509f1e8d3d9cde0a76c4e Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=ca9941f30452aaca26ce5957b8eb5c27e99c344f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:c9:bc:81:d9:73:f5:60:3c:b0:5d:02:c3: c2:0b:cd:f1:b7:aa:2a:c6:09:ba:8c:42:43:b1:f5: df:6b:ab:3d:94:75:61:e1:66:dd:42:58:2a:84:ae: 7b:74:39:e3:5f:09:b9:5a:55:bb:ef:c4:dd:b5:49: ab:c3:ff:ac:d9:98:26:4b:5a:51:a5:89:bb:49:41: cd:c2:d2:11:05:bd:6f:9f:47:cb:b0:67:4c:17:7e: 5b:62:40:e7:98:f0:74:46:73:fb:db:ce:a4:5a:85: 6e:07:52:1b:bb:27:89:6f:06:5c:1f:73:98:16:39: cd:b6:45:39:5a:3d:ef:ce:c0:ad:62:e5:07:13:c4: 1a:84:4e:4e:a0:c6:15:ab:0b:d3:0d:35:7f:cb:a4: 7e:b6:a1:39:4b:53:9e:07:d2:4e:d7:e8:7b:ba:dd: 1c:2e:08:65:79:c0:3a:d1:04:f1:4e:ed:5f:08:de: 34:42:6e:3e:96:da:d3:03:5e:c8:fc:d9:b7:34:37: 6d:ec:82:6c:fd:b4:75:fb:ce:eb:f8:78:9e:41:9c: df:0f:d7:58:19:5b:fd:7a:8a:7f:67:9a:fe:7c:6d: 0b:bc:34:ae:0d:5f:c6:b2:51:8c:b0:1a:fb:97:64: df:6d:9e:a4:d5:c0:be:cc:51:61:b9:13:11:e5:fd: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:99:41:F3:04:52:AA:CA:26:CE:59:57:B8:EB:5C:27:E9:9C:34:4F X509v3 Authority Key Identifier: keyid:63:F9:72:67:E7:C0:07:95:30:95:09:F1:E8:D3:D9:CD:E0:A7:6C:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7a1c2e-75fb-44c6-a83c-14673c72a1df/1/Y_lyZ-fAB5UwlQnx6NPZzeCnbE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:6e:0a:09:b7:c4:8b:3c:3b:1c:e7:fd:23:18:0c:74:4b:9a: d6:13:7f:bb:c4:0d:5e:e7:62:1c:05:dd:61:c0:a8:9e:5d:80: 8f:82:47:fd:30:9e:6a:99:e8:04:e4:f2:7d:34:81:a1:f3:29: fc:52:57:71:72:4a:d3:b0:e2:f9:60:ca:e7:9a:3e:13:07:91: 82:22:f4:fd:ce:c8:0c:0c:f1:f8:fc:f2:c2:2c:fa:ce:85:2f: ba:b9:a6:72:f7:d8:90:db:48:80:bb:85:46:03:f9:72:10:e7: b5:2f:39:01:08:04:1c:ce:1e:4d:5f:ff:ef:dc:04:9c:b0:88: 43:92:02:d6:58:ae:fa:d3:44:03:2a:0b:4e:63:85:56:6a:b0: eb:b3:60:30:9c:96:03:83:25:ed:7a:31:34:8c:74:0d:0e:59: b2:af:e2:2a:b6:bd:19:c8:94:8d:ad:26:c7:16:d4:e1:de:11: b7:1b:28:e4:cc:fb:80:da:86:5c:18:53:5a:67:4c:d8:93:85: 7e:dc:38:e0:81:6f:39:07:6e:c2:9d:07:05:7c:42:8e:ca:46: 6a:17:3d:02:cd:ed:70:f3:af:b2:7e:ac:97:94:45:bd:37:70: f4:6b:d6:b2:81:33:13:88:f5:42:6e:1e:9c:d9:9e:f4:c3:49: 15:02:4a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbZQzrb1o1kH2JndmpUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZjk3MjY3ZTdjMDA3OTUzMDk1MDlmMWU4ZDNkOWNkZTBh NzZjNGUwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD EyhjYTk5NDFmMzA0NTJhYWNhMjZjZTU5NTdiOGViNWMyN2U5OWMzNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop7JvIHZc/VgPLBdAsPCC83xt6oq xgm6jEJDsfXfa6s9lHVh4WbdQlgqhK57dDnjXwm5WlW778TdtUmrw/+s2ZgmS1pR pYm7SUHNwtIRBb1vn0fLsGdMF35bYkDnmPB0RnP7286kWoVuB1IbuyeJbwZcH3OY FjnNtkU5Wj3vzsCtYuUHE8QahE5OoMYVqwvTDTV/y6R+tqE5S1OeB9JO1+h7ut0c LghlecA60QTxTu1fCN40Qm4+ltrTA17I/Nm3NDdt7IJs/bR1+87r+HieQZzfD9dY GVv9eop/Z5r+fG0LvDSuDV/GslGMsBr7l2TfbZ6k1cC+zFFhuRMR5f1qTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqZQfMEUqrKJs5ZV7jrXCfpnDRPMB8GA1UdIwQY MBaAFGP5cmfnwAeVMJUJ8ejT2c3gp2xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2Mt MTQ2NzNjNzJhMWRmLzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83YTFjMmUtNzVmYi00NGM2LWE4M2MtMTQ2NzNjNzJhMWRm LzEvWV9seVotZkFCNVV3bFFueDZOUFp6ZUNuYkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGG4KCbfE izw7HOf9IxgMdEua1hN/u8QNXudiHAXdYcConl2Aj4JH/TCeapnoBOTyfTSBofMp /FJXcXJK07Di+WDK55o+EweRgiL0/c7IDAzx+Pzywiz6zoUvurmmcvfYkNtIgLuF RgP5chDntS85AQgEHM4eTV//79wEnLCIQ5IC1liu+tNEAyoLTmOFVmqw67NgMJyW A4Ml7XoxNIx0DQ5Zsq/iKra9GciUja0mxxbU4d4Rtxso5Mz7gNqGXBhTWmdM2JOF ftw44IFvOQduwp0HBXxCjspGahc9As3tcPOvsn6sl5RFvTdw9GvWsoEzE4j1Qm4e nNme9MNJFQJKaw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:31 2025 by rpki-client