This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft File: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json) Hash identifier: 4JoG8nwGzrZJQuIgjto2NixjeyGSmuT3JIhKeKNp4ac= Subject key identifier: 1C:A0:7C:C8:74:DB:58:73:8C:09:9D:F1:DA:D6:D5:0F:8F:9D:FA:05 Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Certificate serial: 019ACCE9B5C8648F3C3B2E49730699B01866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft Manifest number: 013C Signing time: Sat 29 Nov 2025 00:00:59 +0000 Manifest this update: Sat 29 Nov 2025 00:00:59 +0000 Manifest next update: Sun 30 Nov 2025 00:00:59 +0000 Files and hashes: 1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=) 2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=) 3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=) 4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=) 5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: IUDX/irtmlDUW9i7YkzZwzHxmbNCV3LLldsV3dJ1ZpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:e9:b5:c8:64:8f:3c:3b:2e:49:73:06:99:b0:18:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Validity Not Before: Nov 29 00:00:59 2025 GMT Not After : Nov 30 00:00:59 2025 GMT Subject: CN=1ca07cc874db58738c099df1dad6d50f8f9dfa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:b2:8d:5f:94:ce:0a:9a:a9:9d:87:dc:f6: 70:1d:2b:d2:98:b9:6e:da:cd:f7:72:cb:8d:09:0d: 1c:c4:06:75:59:7b:ed:4d:97:0c:f9:cd:33:26:45: 4c:a8:87:9f:67:5e:66:af:76:ef:c2:45:20:d8:db: f6:56:86:c7:14:55:7c:40:6b:67:d9:ac:9c:ad:36: 6d:74:bb:59:e2:6a:c3:ea:1d:bc:21:e9:81:64:de: 14:1f:3a:5c:a7:15:5e:c8:81:76:1b:36:90:b1:35: 40:ed:bf:e4:7c:05:60:06:ad:29:4b:84:bd:dc:6a: cb:33:70:7a:52:7b:a5:7a:3c:49:c0:de:b0:68:69: c6:ee:7b:aa:33:1b:c1:a4:9a:c3:ab:42:af:5e:c6: 76:cd:88:bf:4d:02:e4:b4:3b:5a:4b:74:55:f7:7d: b3:e3:7f:c9:34:52:72:4a:0a:33:01:b9:e0:4e:9d: 8c:1f:de:15:66:22:95:f6:44:86:b8:99:bd:27:07: e7:b6:34:06:ae:3e:42:32:37:28:c3:32:f4:cd:b7: 15:82:b8:2e:ac:52:6f:01:b3:16:8a:52:57:3f:b5: 42:1e:47:9c:f0:3f:d1:b9:aa:df:d7:f7:92:04:ad: 76:cd:70:97:2d:5c:8f:0f:0f:5e:4f:3e:65:17:14: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A0:7C:C8:74:DB:58:73:8C:09:9D:F1:DA:D6:D5:0F:8F:9D:FA:05 X509v3 Authority Key Identifier: keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f9:27:dd:4b:af:ee:98:92:8b:6e:c6:b7:a8:f6:26:db:94: d3:0f:b4:1e:a7:15:2f:8a:9a:60:d2:04:a7:3a:1b:81:f5:e7: 2b:93:eb:1a:8c:0f:50:ac:0d:52:4b:6b:55:1c:29:73:66:1f: 62:b3:e9:7b:7b:28:63:61:f3:e8:58:3e:d7:67:9b:dc:02:ea: be:d8:4f:64:86:d6:ff:d1:e3:a3:ec:19:89:91:50:83:a3:51: 20:cb:a2:e6:ec:3d:51:fe:8d:95:20:9f:7b:dc:ef:11:46:55: da:ea:2d:9c:1a:0f:c4:08:52:f6:ed:e2:76:48:cf:7a:6b:c3: 88:64:75:5c:8f:2e:fc:47:43:e7:04:58:d6:7e:2d:13:57:7d: 7d:3e:16:27:2b:5a:ca:58:ee:5e:1a:d3:df:c4:ea:91:63:b1: 8b:df:53:ec:bb:4e:10:47:cb:23:40:7b:d4:0f:e6:9a:09:25: 81:e3:4a:66:51:a6:e5:05:2a:7a:b2:d6:20:dc:60:16:e9:05: b3:1e:ad:d1:ee:60:9e:26:4a:f4:58:3e:ff:f5:b5:3b:b9:f4: 91:0e:d2:16:0c:ec:b4:2e:49:77:56:16:e8:39:04:c7:be:d3: c9:57:49:de:21:79:7c:34:f9:2b:b9:69:68:b5:d0:e2:ba:fd: 94:02:5d:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrM6bXIZI88Oy5JcwaZsBhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk YjU5NGMwHhcNMjUxMTI5MDAwMDU5WhcNMjUxMTMwMDAwMDU5WjAzMTEwLwYDVQQD EygxY2EwN2NjODc0ZGI1ODczOGMwOTlkZjFkYWQ2ZDUwZjhmOWRmYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKiyjV+UzgqaqZ2H3PZwHSvSmLlu 2s33csuNCQ0cxAZ1WXvtTZcM+c0zJkVMqIefZ15mr3bvwkUg2Nv2VobHFFV8QGtn 2aycrTZtdLtZ4mrD6h28IemBZN4UHzpcpxVeyIF2GzaQsTVA7b/kfAVgBq0pS4S9 3GrLM3B6UnulejxJwN6waGnG7nuqMxvBpJrDq0KvXsZ2zYi/TQLktDtaS3RV932z 43/JNFJySgozAbngTp2MH94VZiKV9kSGuJm9JwfntjQGrj5CMjcowzL0zbcVgrgu rFJvAbMWilJXP7VCHkec8D/Ruarf1/eSBK12zXCXLVyPDw9eTz5lFxTywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBygfMh021hzjAmd8drW1Q+PnfoFMB8GA1UdIwQY MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt OWFkMzNhZTY1M2FkLzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/kn3Uuv 7piSi27Gt6j2JtuU0w+0HqcVL4qaYNIEpzobgfXnK5PrGowPUKwNUktrVRwpc2Yf YrPpe3soY2Hz6Fg+12eb3ALqvthPZIbW/9Hjo+wZiZFQg6NRIMui5uw9Uf6NlSCf e9zvEUZV2uotnBoPxAhS9u3idkjPemvDiGR1XI8u/EdD5wRY1n4tE1d9fT4WJyta yljuXhrT38TqkWOxi99T7LtOEEfLI0B71A/mmgklgeNKZlGm5QUqerLWINxgFukF sx6t0e5gniZK9Fg+//W1O7n0kQ7SFgzstC5Jd1YW6DkEx77TyVdJ3iF5fDT5K7lp aLXQ4rr9lAJd1Q== -----END CERTIFICATE-----Generated at Sat Nov 29 01:59:34 2025 by rpki-client