This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json) Hash identifier: rUPmCcJbhvkqiVASl8X41+m0seztkvWJjr0w9dh/C/4= Subject key identifier: 5E:94:99:F3:D4:0D:0C:3F:D4:96:C8:16:33:E5:5A:C0:7F:B7:35:E7 Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1 Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1 Certificate serial: 019AF12CDAEBA5EF94E99DC5C8466E7AE8B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft Manifest number: 0869 Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=) 2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: Ef+aAJ45a4RGGPnrWzPuIuudaQSnuOxtlu4NawuXpio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:da:eb:a5:ef:94:e9:9d:c5:c8:46:6e:7a:e8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1 Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=5e9499f3d40d0c3fd496c81633e55ac07fb735e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:6d:18:30:5c:29:98:51:a4:91:65:bb:f1: 34:f4:57:d0:fa:2a:fa:e6:7a:46:f0:ae:5f:16:da: 71:e8:9f:8b:43:6f:49:38:1b:b5:f3:bd:61:bd:a7: c4:ee:27:1e:a6:89:16:87:f0:c2:f1:1f:f8:eb:5b: 22:91:20:73:06:97:e5:e5:16:63:86:93:1a:03:0f: 42:62:4d:40:52:48:c9:aa:d5:25:ce:31:5a:dc:f1: 53:b0:48:dd:d3:44:7e:62:d6:d4:3e:30:84:8c:68: 26:54:f3:67:67:b8:61:29:c7:a5:ab:00:d1:87:36: e5:4c:f0:f4:64:9d:10:60:d9:8a:96:75:95:bd:49: 8a:68:98:8c:27:39:23:86:99:77:47:39:e3:1f:b8: e3:70:8d:cc:92:cc:29:8c:b9:0d:f6:bd:66:aa:50: 57:35:6f:29:3b:6d:07:83:11:a5:7e:c0:d8:fc:f6: 71:61:41:87:87:1b:16:aa:77:5b:de:2b:ce:6d:b6: fe:72:93:c7:b1:fc:10:7f:94:87:bd:00:91:c3:38: d3:55:43:a2:b4:08:99:8e:f3:60:07:7d:af:e7:5e: c6:e4:23:f8:96:b6:e6:be:0c:98:17:f5:4f:df:d6: 06:97:07:8f:22:d3:61:9e:38:97:8c:b3:dc:5b:e3: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:94:99:F3:D4:0D:0C:3F:D4:96:C8:16:33:E5:5A:C0:7F:B7:35:E7 X509v3 Authority Key Identifier: keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:27:d7:01:13:fb:16:57:fd:69:69:43:e1:06:ff:02:f1:8f: 7d:cf:de:75:6f:02:41:2a:96:4c:1c:9b:e8:40:4f:72:0d:0f: cb:72:22:52:65:b6:bb:d4:13:0c:cc:98:6f:cd:fc:32:24:c0: b6:7f:83:b4:07:d9:ce:ac:9f:81:d4:98:65:69:f6:2d:89:1d: 24:ca:95:74:87:72:ce:0f:0a:1f:b0:90:3d:4a:5e:e8:9e:a0: a6:a0:f8:4d:22:a4:85:6c:a0:5f:4e:80:69:fd:a4:9a:72:31: 3a:12:bb:2f:2e:f6:0e:63:c6:22:a4:b8:e7:c8:71:e8:d1:3e: 82:ab:78:c5:05:e1:bd:ff:bf:6f:82:8b:37:e0:e7:d6:0e:56: 07:88:7b:24:e4:b1:cb:ca:ef:15:8a:84:ad:13:10:52:0a:de: 8e:eb:09:2c:26:fa:68:17:21:98:14:16:ba:0a:19:80:0b:2b: c7:9f:c1:b4:77:98:a0:37:1d:36:c1:cc:6f:44:24:de:67:c7: 68:8d:f5:7d:df:84:d6:98:f0:fb:7b:52:a9:dc:4f:60:cf:d7: d6:5e:3f:bb:96:40:2b:ef:e4:1b:38:ba:7e:31:94:59:c4:16: 41:97:7c:a8:c2:3b:b7:35:7b:ea:29:62:42:3c:01:f0:31:fe: 1c:33:a7:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNrrpe+U6Z3FyEZueuixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNTQyN2ZkNWQyMDU4NWU5N2MyZjI3NzFkNDgwOWJmNjM0 MWRhYTEwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD Eyg1ZTk0OTlmM2Q0MGQwYzNmZDQ5NmM4MTYzM2U1NWFjMDdmYjczNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskBtGDBcKZhRpJFlu/E09FfQ+ir6 5npG8K5fFtpx6J+LQ29JOBu1871hvafE7icepokWh/DC8R/461sikSBzBpfl5RZj hpMaAw9CYk1AUkjJqtUlzjFa3PFTsEjd00R+YtbUPjCEjGgmVPNnZ7hhKcelqwDR hzblTPD0ZJ0QYNmKlnWVvUmKaJiMJzkjhpl3RznjH7jjcI3MkswpjLkN9r1mqlBX NW8pO20HgxGlfsDY/PZxYUGHhxsWqndb3ivObbb+cpPHsfwQf5SHvQCRwzjTVUOi tAiZjvNgB32v517G5CP4lrbmvgyYF/VP39YGlwePItNhnjiXjLPcW+OzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6UmfPUDQw/1JbIFjPlWsB/tzXnMB8GA1UdIwQY MBaAFMtUJ/1dIFhel8Lydx1ICb9jQdqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgt MWYwZGQ5ZmRmNWYzLzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9iODllODYtYmZiNC00YWY2LTg0NDgtMWYwZGQ5ZmRmNWYz LzEveTFRbl9WMGdXRjZYd3ZKM0hVZ0p2Mk5CMnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyfXARP7 Flf9aWlD4Qb/AvGPfc/edW8CQSqWTByb6EBPcg0Py3IiUmW2u9QTDMyYb838MiTA tn+DtAfZzqyfgdSYZWn2LYkdJMqVdIdyzg8KH7CQPUpe6J6gpqD4TSKkhWygX06A af2kmnIxOhK7Ly72DmPGIqS458hx6NE+gqt4xQXhvf+/b4KLN+Dn1g5WB4h7JOSx y8rvFYqErRMQUgrejusJLCb6aBchmBQWugoZgAsrx5/BtHeYoDcdNsHMb0Qk3mfH aI31fd+E1pjw+3tSqdxPYM/X1l4/u5ZAK+/kGzi6fjGUWcQWQZd8qMI7tzV76ili QjwB8DH+HDOniA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:53 2025 by rpki-client