This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft File: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json) Hash identifier: bamCX5ZSsPt9L8hpk2fMfODcb8vCZK1jEjTD+D/3OZE= Subject key identifier: 62:75:06:07:2E:DE:E9:43:C1:85:6D:86:10:5E:7E:20:9A:BB:13:64 Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D Certificate issuer: /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d Certificate serial: 019B50A9F4DADDE7124ABEA39A422806C22B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft Manifest number: 05BA Signing time: Wed 24 Dec 2025 14:01:14 +0000 Manifest this update: Wed 24 Dec 2025 14:01:14 +0000 Manifest next update: Thu 25 Dec 2025 14:01:14 +0000 Files and hashes: 1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=) 2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: oMDPO5jU0Mnx+OKJpPkNyUrWyx7ZEPrWvyNk2aytnq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:f4:da:dd:e7:12:4a:be:a3:9a:42:28:06:c2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d Validity Not Before: Dec 24 14:01:14 2025 GMT Not After : Dec 25 14:01:14 2025 GMT Subject: CN=627506072edee943c1856d86105e7e209abb1364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:97:c3:d7:be:18:c8:af:bc:cc:aa:a5:38: c7:44:e0:23:d5:79:b6:18:5a:2a:e1:bd:2a:41:25: 11:2d:a4:b6:8e:92:39:e3:15:a1:69:11:71:d5:75: 27:a8:d3:b9:27:a9:01:95:62:8d:4e:a3:70:ae:96: 75:00:c0:f1:8b:54:18:c5:b1:44:6b:0b:01:14:15: a2:63:71:04:47:f0:20:a1:6c:75:a5:78:6d:c5:b8: 91:8c:54:5e:ea:a5:b0:d0:bd:27:49:cd:69:42:26: 3c:3c:7c:67:1f:0f:7d:d5:aa:4e:4e:77:25:cd:ae: fa:c8:f5:e2:b2:06:e4:dc:63:ca:ff:40:17:c1:d8: 84:ba:b1:76:1f:b0:1c:48:de:45:56:f0:fd:d6:87: b7:d3:15:37:32:f0:12:6f:d3:50:a2:80:4f:76:47: aa:f0:eb:81:db:cc:5f:5d:a5:d7:00:ed:7d:83:46: 8a:8f:11:b7:a8:ad:7c:42:c0:55:fd:0d:a9:83:39: 82:25:d1:09:8f:25:ae:7f:0d:f7:eb:ee:a4:19:12: 7c:bc:e5:6e:00:e9:fd:e5:c7:24:48:71:d7:61:2f: 5d:6d:81:9d:60:23:99:fa:1b:a3:50:b0:83:47:ee: f8:88:5b:45:39:74:29:30:5b:51:22:ce:e4:55:7c: 25:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:06:07:2E:DE:E9:43:C1:85:6D:86:10:5E:7E:20:9A:BB:13:64 X509v3 Authority Key Identifier: keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:e4:53:25:ca:28:e0:0c:ed:ae:45:9b:a0:d2:af:a7:f2: eb:32:0d:13:9b:b2:00:04:c0:ba:11:20:ad:eb:8f:01:2a:65: 67:2e:69:6d:27:a5:a7:59:93:03:4f:22:9b:91:5d:f8:05:a1: f5:69:55:14:a4:7a:e2:8d:4a:17:9a:86:6e:76:f3:9c:86:c9: 41:e2:c1:52:de:f9:a3:e1:67:a0:47:6f:b2:63:26:73:11:23: 65:bc:44:95:fb:a7:1e:89:f3:27:58:80:83:4d:0e:88:3f:f7: 7f:fa:08:a3:d3:84:f0:9c:3f:ac:d5:4c:fb:16:c5:e6:7b:ad: 7a:12:30:09:eb:42:e1:c1:65:6c:06:bf:37:a6:95:da:82:35: c7:a3:b7:31:6c:ae:7a:23:8c:75:0b:68:e2:1d:8e:11:13:a3: a9:75:bf:1d:7c:a9:c8:28:02:ae:d5:b2:b7:85:d6:fb:33:6c: 68:4b:eb:1d:e6:19:df:2d:e3:55:a0:32:48:83:89:98:7c:25: 88:73:27:d6:a9:d8:bd:f8:c7:13:da:52:4b:a6:65:1e:a4:5b: 0f:7e:f4:2b:6a:da:48:65:c3:5b:8b:59:73:67:e7:a9:1b:ae: ff:4a:63:3e:a2:b8:b0:67:e8:a2:3a:e8:6c:90:ad:0b:00:63: 08:e9:c7:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqfTa3ecSSr6jmkIoBsIrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGVkODhjNWJmYmMyYjk1NmZjYmIzMGQxNGU4MzJiZGJi OTYxMGQwHhcNMjUxMjI0MTQwMTE0WhcNMjUxMjI1MTQwMTE0WjAzMTEwLwYDVQQD Eyg2Mjc1MDYwNzJlZGVlOTQzYzE4NTZkODYxMDVlN2UyMDlhYmIxMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSyXw9e+GMivvMyqpTjHROAj1Xm2 GFoq4b0qQSURLaS2jpI54xWhaRFx1XUnqNO5J6kBlWKNTqNwrpZ1AMDxi1QYxbFE awsBFBWiY3EER/AgoWx1pXhtxbiRjFRe6qWw0L0nSc1pQiY8PHxnHw991apOTncl za76yPXisgbk3GPK/0AXwdiEurF2H7AcSN5FVvD91oe30xU3MvASb9NQooBPdkeq 8OuB28xfXaXXAO19g0aKjxG3qK18QsBV/Q2pgzmCJdEJjyWufw336+6kGRJ8vOVu AOn95cckSHHXYS9dbYGdYCOZ+hujULCDR+74iFtFOXQpMFtRIs7kVXwlEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ1Bgcu3ulDwYVthhBefiCauxNkMB8GA1UdIwQY MBaAFMtO2Ixb+8K5Vvy7MNFOgyvbuWENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iMzA5MTYtMjEyNS00YTRmLTlhMzYt MjY0MTk3NTQ0M2ZmLzEveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iMzA5MTYtMjEyNS00YTRmLTlhMzYtMjY0MTk3NTQ0M2Zm LzEveTA3WWpGdjd3cmxXX0xzdzBVNkRLOXU1WVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGvkUyXK KOAM7a5Fm6DSr6fy6zINE5uyAATAuhEgreuPASplZy5pbSelp1mTA08im5Fd+AWh 9WlVFKR64o1KF5qGbnbznIbJQeLBUt75o+FnoEdvsmMmcxEjZbxElfunHonzJ1iA g00OiD/3f/oIo9OE8Jw/rNVM+xbF5nutehIwCetC4cFlbAa/N6aV2oI1x6O3MWyu eiOMdQto4h2OEROjqXW/HXypyCgCrtWyt4XW+zNsaEvrHeYZ3y3jVaAySIOJmHwl iHMn1qnYvfjHE9pSS6ZlHqRbD370K2raSGXDW4tZc2fnqRuu/0pjPqK4sGfoojro bJCtCwBjCOnH+g== -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:48 2025 by rpki-client