This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json) Hash identifier: pXgNSlV+FldIFD57Qf6ZlPunTWLE+vIT0PRVXfty2UM= Subject key identifier: BE:73:FA:C0:AA:6B:6D:7A:4A:AE:AD:6D:F1:F5:FB:F9:94:8F:02:AD Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97 Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397 Certificate serial: 019AF352ACD8860CAB509485D162B3816D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft Manifest number: 0C8B Signing time: Sat 06 Dec 2025 11:01:12 +0000 Manifest this update: Sat 06 Dec 2025 11:01:12 +0000 Manifest next update: Sun 07 Dec 2025 11:01:12 +0000 Files and hashes: 1: d43Bbm-jTlxIEQu_UfTFZQFzBcE.roa (hash: UkexUnRIJprjhWor4Jilgkay/bVJfFqJkF7dBPx8pH8=) 2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: ZkGPkA4rXEcJkB84ChWyN6YSllrQAQrJfVJvfa3BBy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:ac:d8:86:0c:ab:50:94:85:d1:62:b3:81:6d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397 Validity Not Before: Dec 6 11:01:12 2025 GMT Not After : Dec 7 11:01:12 2025 GMT Subject: CN=be73fac0aa6b6d7a4aaead6df1f5fbf9948f02ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:90:cf:9a:ea:7d:77:00:fc:ea:bd:b1:d5: b3:74:be:4d:5a:77:95:f9:2c:8a:e7:79:ff:ac:d2: c8:87:d2:f0:30:e8:35:24:af:16:86:79:16:ec:89: cc:36:7f:fe:40:03:8f:88:2f:5e:28:c6:a3:77:08: a0:92:21:03:5b:c6:22:b7:c3:d0:46:a7:b5:4e:f2: 9e:0e:6a:f2:22:b2:1d:27:e2:21:3f:a0:12:a8:7c: 1a:49:13:af:19:35:a4:f0:2f:77:14:f4:8a:64:96: f5:b8:d4:45:f6:ff:35:44:b1:d3:77:61:f6:92:d9: 35:73:ee:05:cb:78:c7:fd:90:91:50:69:bd:eb:95: ad:a3:b9:89:2e:8c:05:e7:d8:f5:8b:f1:39:8d:63: c4:9c:20:52:31:21:38:7d:65:59:c1:48:e9:7b:46: 82:f1:3c:30:f9:7b:d0:f1:f4:c4:4e:6b:a3:6b:0d: 2d:e1:99:66:ed:36:48:5d:fb:04:b5:a6:30:59:b7: 61:67:d6:8f:4f:c2:7a:39:94:f9:34:80:14:9c:58: 5e:10:3a:79:c7:cf:62:46:19:f9:bc:a7:d5:ea:b6: a7:3e:3e:30:0c:2b:12:b8:f5:b9:f4:a9:4a:9f:a5: 90:6b:94:fb:f4:a0:ef:e2:53:c3:ad:75:61:a1:02: 1d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:73:FA:C0:AA:6B:6D:7A:4A:AE:AD:6D:F1:F5:FB:F9:94:8F:02:AD X509v3 Authority Key Identifier: keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1c:23:c0:0d:fe:b1:45:72:d4:e0:22:e9:12:81:ad:22:a9: 33:12:d6:4c:b9:af:4d:81:2d:bd:05:38:ba:bc:d0:fd:8d:05: 2b:0f:8a:a6:3a:a6:1b:64:8b:fe:58:48:c1:b0:67:69:2f:ff: e8:2f:f5:08:00:23:a1:6b:f9:cb:fa:b7:2f:c3:47:f6:b8:7e: 43:79:14:47:a3:07:c8:43:fb:15:57:2e:6b:2a:98:4d:2d:dc: 5a:cb:fe:36:e8:05:bd:a1:6e:d8:ff:9d:fa:39:9b:8c:f3:d9: 2a:7e:e3:be:e8:5b:ab:1a:5c:ad:b2:58:06:1f:e7:21:ac:50: 36:0d:2d:42:0c:f5:0e:4b:cd:83:b5:14:a8:35:f2:d3:1a:af: 49:19:b4:6d:3d:49:a7:46:95:f8:5c:d1:de:16:52:e5:00:be: c8:c1:80:3d:64:3d:4e:8e:d6:e3:76:c9:01:12:7e:66:a9:e4: 96:76:46:e4:28:de:e7:4e:b0:72:fa:d9:b2:c4:be:47:a9:ef: 37:0c:0f:61:88:59:1e:07:60:85:c9:7c:45:d3:27:f6:4c:64: f2:df:73:68:0a:32:99:5d:23:89:9f:10:c7:68:82:40:1b:46: b4:a1:28:5c:a3:a5:15:c2:40:4d:09:3b:a9:76:c6:f7:8c:ab: 4d:b4:78:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqzYhgyrUJSF0WKzgW0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDViNmUxMjUxNmEwZmQ1ZWJhYmU3YTc4MTEwODJmM2E3 NDYzOTcwHhcNMjUxMjA2MTEwMTEyWhcNMjUxMjA3MTEwMTEyWjAzMTEwLwYDVQQD EyhiZTczZmFjMGFhNmI2ZDdhNGFhZWFkNmRmMWY1ZmJmOTk0OGYwMmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfCQz5rqfXcA/Oq9sdWzdL5NWneV +SyK53n/rNLIh9LwMOg1JK8WhnkW7InMNn/+QAOPiC9eKMajdwigkiEDW8Yit8PQ Rqe1TvKeDmryIrIdJ+IhP6ASqHwaSROvGTWk8C93FPSKZJb1uNRF9v81RLHTd2H2 ktk1c+4Fy3jH/ZCRUGm965Wto7mJLowF59j1i/E5jWPEnCBSMSE4fWVZwUjpe0aC 8Tww+XvQ8fTETmujaw0t4Zlm7TZIXfsEtaYwWbdhZ9aPT8J6OZT5NIAUnFheEDp5 x89iRhn5vKfV6ranPj4wDCsSuPW59KlKn6WQa5T79KDv4lPDrXVhoQIdPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5z+sCqa216Sq6tbfH1+/mUjwKtMB8GA1UdIwQY MBaAFMtFtuElFqD9Xrq+engRCC86dGOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYt ZjdjMTg5OWNkN2ZhLzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mODQxZDktNTUwNS00ZTNkLWEyZmYtZjdjMTg5OWNkN2Zh LzEveTBXMjRTVVdvUDFldXI1NmVCRUlMenAwWTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhwjwA3+ sUVy1OAi6RKBrSKpMxLWTLmvTYEtvQU4urzQ/Y0FKw+KpjqmG2SL/lhIwbBnaS// 6C/1CAAjoWv5y/q3L8NH9rh+Q3kUR6MHyEP7FVcuayqYTS3cWsv+NugFvaFu2P+d +jmbjPPZKn7jvuhbqxpcrbJYBh/nIaxQNg0tQgz1DkvNg7UUqDXy0xqvSRm0bT1J p0aV+FzR3hZS5QC+yMGAPWQ9To7W43bJARJ+ZqnklnZG5Cje506wcvrZssS+R6nv NwwPYYhZHgdghcl8RdMn9kxk8t9zaAoymV0jiZ8Qx2iCQBtGtKEoXKOlFcJATQk7 qXbG94yrTbR4RA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:59 2025 by rpki-client