This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json) Hash identifier: 6Nib0J4MWTA/Parq8q3v40uuyUhUL8wBfuRPvPv9HMY= Subject key identifier: 2A:44:F9:FF:B4:B1:A4:CB:E0:CD:8F:C7:56:51:72:E7:D5:A7:BD:F7 Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411 Certificate serial: 019B5ABFE7144C0FFEA8335C317466F32E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft Manifest number: 1235 Signing time: Fri 26 Dec 2025 13:01:24 +0000 Manifest this update: Fri 26 Dec 2025 13:01:24 +0000 Manifest next update: Sat 27 Dec 2025 13:01:24 +0000 Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=) 2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: onMbx1Uh+PHBppjn1La6YbmvC8qW08XdbzIDmSkjI9k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e7:14:4c:0f:fe:a8:33:5c:31:74:66:f3:2e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411 Validity Not Before: Dec 26 13:01:24 2025 GMT Not After : Dec 27 13:01:24 2025 GMT Subject: CN=2a44f9ffb4b1a4cbe0cd8fc7565172e7d5a7bdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:b2:7a:8a:06:89:ca:a4:01:a2:ce:51:93: 5c:51:23:2c:68:16:69:b5:0d:40:bb:93:a8:bc:04: ed:22:03:2b:96:db:2e:c2:ed:26:4a:84:4f:f3:3f: ec:59:71:c9:f0:7e:7a:ff:89:1c:7a:23:77:0e:c1: 78:ba:6f:c3:37:8d:45:18:67:1d:f0:c5:f0:2e:db: ba:ed:0f:5a:10:10:89:fc:ae:34:8c:01:bf:a0:01: 6e:b8:81:b3:a4:3c:5b:25:d7:81:8c:93:d5:1f:6c: 99:38:92:41:53:71:4d:e1:3e:8b:7f:28:66:66:99: 28:98:15:1f:03:ce:d4:c7:64:c2:c2:17:87:30:74: 67:c1:b3:15:19:81:aa:b3:78:fb:97:d4:aa:9b:35: 81:36:d4:53:a8:51:c9:3a:8d:74:fe:f0:7b:4c:a3: 3f:32:55:88:a7:a4:02:69:ef:8c:47:8c:80:f6:64: 5f:ea:f9:8f:0c:b8:f6:74:6d:40:a6:d6:8c:43:bb: 82:b6:d0:1a:71:6e:91:23:39:87:dd:3a:70:c6:a0: fd:f0:6b:55:cd:ba:02:32:2a:e5:f4:38:d0:28:0f: 2d:72:54:34:d6:95:ef:0d:92:57:df:b1:00:fd:60: fd:f8:54:e6:d4:ae:b0:01:92:70:95:b5:03:f3:3e: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:44:F9:FF:B4:B1:A4:CB:E0:CD:8F:C7:56:51:72:E7:D5:A7:BD:F7 X509v3 Authority Key Identifier: keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:57:c0:6c:19:38:89:d7:9e:79:62:14:ac:4f:7a:c5:9c:88: d6:9a:70:7e:7c:3b:a2:55:2f:40:af:dd:ed:2c:cb:0b:b1:4c: 0e:f3:62:8f:20:aa:82:b4:c9:c1:f8:77:c3:9b:13:b3:8a:a5: ac:97:40:a9:07:fd:bd:0f:81:45:3a:67:51:64:c5:4d:cd:cb: 25:fb:5d:1c:6b:c0:db:90:c4:f5:67:56:b2:03:6e:bc:a4:7f: 30:cd:3a:ef:57:fd:18:a6:41:77:5e:61:36:07:5d:a7:5b:f8: d0:6b:c2:39:47:84:d5:f6:b2:73:f1:b7:7b:93:0d:d8:67:ac: 0e:d0:3b:ab:95:19:b9:76:c2:56:f9:1e:d1:3c:8a:67:56:95: ac:3e:25:db:da:e3:bc:cf:4f:fe:84:8f:d2:38:d6:2e:ba:27: 4e:ab:8b:21:9f:c7:fa:ba:8f:86:6e:87:e2:c5:00:4c:34:68: 71:39:a0:d8:3c:eb:3f:6d:4c:25:0f:cb:96:22:00:13:35:82: ec:e7:8c:92:eb:e3:35:23:a8:e7:05:9d:e6:fb:11:f3:ee:e6: 3f:90:95:81:25:68:71:6b:64:b0:33:f3:c1:6a:d3:b8:a2:23: c3:5d:32:0c:b9:eb:4f:2c:44:27:06:58:e7:8d:70:8d:ad:fc: 45:0f:08:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+cUTA/+qDNcMXRm8y6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODg5ZmVlZDEzNWRjMDM0OTJkOGIzZTgyOGM3MzA5NTg3 ZDE0MTEwHhcNMjUxMjI2MTMwMTI0WhcNMjUxMjI3MTMwMTI0WjAzMTEwLwYDVQQD EygyYTQ0ZjlmZmI0YjFhNGNiZTBjZDhmYzc1NjUxNzJlN2Q1YTdiZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiySyeooGicqkAaLOUZNcUSMsaBZp tQ1Au5OovATtIgMrltsuwu0mSoRP8z/sWXHJ8H56/4kceiN3DsF4um/DN41FGGcd 8MXwLtu67Q9aEBCJ/K40jAG/oAFuuIGzpDxbJdeBjJPVH2yZOJJBU3FN4T6Lfyhm ZpkomBUfA87Ux2TCwheHMHRnwbMVGYGqs3j7l9SqmzWBNtRTqFHJOo10/vB7TKM/ MlWIp6QCae+MR4yA9mRf6vmPDLj2dG1AptaMQ7uCttAacW6RIzmH3TpwxqD98GtV zboCMirl9DjQKA8tclQ01pXvDZJX37EA/WD9+FTm1K6wAZJwlbUD8z5QJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpE+f+0saTL4M2Px1ZRcufVp733MB8GA1UdIwQY MBaAFMuIn+7RNdwDSS2LPoKMcwlYfRQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUt YzFmMTJlNThmZWRkLzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kZjBlODEtYmRjYi00YTI0LTg0MzUtYzFmMTJlNThmZWRk LzEveTRpZjd0RTEzQU5KTFlzLWdveHpDVmg5RkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVfAbBk4 ideeeWIUrE96xZyI1ppwfnw7olUvQK/d7SzLC7FMDvNijyCqgrTJwfh3w5sTs4ql rJdAqQf9vQ+BRTpnUWTFTc3LJftdHGvA25DE9WdWsgNuvKR/MM0671f9GKZBd15h Ngddp1v40GvCOUeE1fayc/G3e5MN2GesDtA7q5UZuXbCVvke0TyKZ1aVrD4l29rj vM9P/oSP0jjWLronTquLIZ/H+rqPhm6H4sUATDRocTmg2DzrP21MJQ/LliIAEzWC 7OeMkuvjNSOo5wWd5vsR8+7mP5CVgSVocWtksDPzwWrTuKIjw10yDLnrTyxEJwZY 541wja38RQ8ILg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:31 2025 by rpki-client