This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json) Hash identifier: UICJnykDwaCtPpeYm1dYg908JRLAShQBRzdLoe4qAEE= Subject key identifier: 5D:6D:7B:88:51:F7:72:57:AB:BF:0E:14:1E:BE:57:70:42:DD:F4:C9 Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe Certificate serial: 019B39EB0EAA8D66760F9D9118485E1FEDEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft Manifest number: 141B Signing time: Sat 20 Dec 2025 04:01:04 +0000 Manifest this update: Sat 20 Dec 2025 04:01:04 +0000 Manifest next update: Sun 21 Dec 2025 04:01:04 +0000 Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=) 2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: JwMzEK6qOEKJjL/q2oHVKVhxfUYHCTd607E3DFGpZPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:0e:aa:8d:66:76:0f:9d:91:18:48:5e:1f:ed:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe Validity Not Before: Dec 20 04:01:04 2025 GMT Not After : Dec 21 04:01:04 2025 GMT Subject: CN=5d6d7b8851f77257abbf0e141ebe577042ddf4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:09:f3:30:3d:6b:18:11:c9:5e:1d:54:c5:e1: 31:4d:42:f5:27:09:7f:a5:d9:2e:66:72:d5:f8:44: 7b:6b:40:94:da:34:5f:74:ce:a5:fc:c5:d0:af:fe: 90:8a:b9:65:36:95:54:61:0a:85:a3:c5:b8:f0:7b: d4:4d:a5:a7:a6:cb:b2:78:5c:59:29:b8:ab:6e:52: 69:22:e6:e0:9a:7e:88:ed:5e:42:9d:a7:05:de:98: c3:0a:28:73:1a:9f:dd:a1:18:24:88:30:ae:0e:98: 96:49:aa:94:e3:d3:60:83:f5:e7:78:59:64:15:00: 71:57:a9:ad:f6:1b:bc:c6:24:c3:7f:97:df:25:ad: 5b:fc:96:8a:01:c5:a4:11:c4:fe:74:9c:2d:66:97: 29:61:95:e6:21:c0:57:47:9f:b5:1a:9f:43:88:d7: 7e:a2:3c:cc:7f:e8:0a:8d:15:d0:66:44:87:fd:f8: ed:77:52:a5:44:51:48:00:65:2b:8d:06:86:cf:43: ea:30:c1:67:57:27:45:9c:37:ac:f0:b7:5c:88:ca: 78:36:54:3e:56:5b:e4:fe:ca:11:a6:09:a3:cb:cf: 80:d2:a0:8a:77:bc:0b:4f:13:94:f6:a9:b9:78:f6: 8d:78:42:02:1f:f3:14:0d:31:03:6c:00:1d:04:b0: 86:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6D:7B:88:51:F7:72:57:AB:BF:0E:14:1E:BE:57:70:42:DD:F4:C9 X509v3 Authority Key Identifier: keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cb:b1:ac:11:84:63:64:eb:04:8c:c5:82:c5:c1:ef:e6:e2: 75:3a:95:c6:a3:28:9e:18:b5:67:17:8d:ba:ed:d1:df:ee:18: b3:f9:10:3a:8e:ea:dd:e0:58:f5:98:cc:c1:ed:86:47:53:6d: 95:a6:ad:26:b9:ee:9b:74:25:95:0b:b2:6d:3e:a1:89:2d:92: ff:db:52:d5:80:b4:24:ef:93:e7:05:76:50:de:a6:eb:90:8c: 5f:50:2f:8d:eb:3a:74:5d:a2:b2:06:c6:56:14:e0:33:a1:4f: 6e:e3:4a:b5:9f:c9:50:99:1b:0c:69:dc:05:c5:71:b2:a3:4c: a8:fc:de:ee:7a:71:71:c8:ce:de:ea:ad:99:4b:49:a3:5a:28: 16:56:79:fa:c4:15:7b:77:c3:c0:63:50:07:31:88:1b:b2:ea: 4a:11:07:43:3d:0e:94:71:96:d3:65:b1:3c:77:aa:bd:f0:02: 5b:37:41:3f:3d:62:a8:c9:31:ec:b9:25:60:60:73:a8:67:ee: a0:ee:49:74:4a:b3:20:83:4b:d3:01:41:04:72:11:8e:30:f6: 05:e9:cb:83:a2:51:73:e1:f1:44:45:e6:ea:59:b2:20:79:97: 53:5a:e0:03:71:6a:eb:56:00:19:e8:92:52:0b:5d:da:bc:9d: bd:aa:1a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56w6qjWZ2D52RGEheH+3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4 NTBhYmUwHhcNMjUxMjIwMDQwMTA0WhcNMjUxMjIxMDQwMTA0WjAzMTEwLwYDVQQD Eyg1ZDZkN2I4ODUxZjc3MjU3YWJiZjBlMTQxZWJlNTc3MDQyZGRmNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QnzMD1rGBHJXh1UxeExTUL1Jwl/ pdkuZnLV+ER7a0CU2jRfdM6l/MXQr/6QirllNpVUYQqFo8W48HvUTaWnpsuyeFxZ KbirblJpIubgmn6I7V5CnacF3pjDCihzGp/doRgkiDCuDpiWSaqU49Ngg/XneFlk FQBxV6mt9hu8xiTDf5ffJa1b/JaKAcWkEcT+dJwtZpcpYZXmIcBXR5+1Gp9DiNd+ ojzMf+gKjRXQZkSH/fjtd1KlRFFIAGUrjQaGz0PqMMFnVydFnDes8LdciMp4NlQ+ Vlvk/soRpgmjy8+A0qCKd7wLTxOU9qm5ePaNeEICH/MUDTEDbAAdBLCG9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1te4hR93JXq78OFB6+V3BC3fTJMB8GA1UdIwQY MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0 LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8uxrBGE Y2TrBIzFgsXB7+bidTqVxqMonhi1ZxeNuu3R3+4Ys/kQOo7q3eBY9ZjMwe2GR1Nt laatJrnum3QllQuybT6hiS2S/9tS1YC0JO+T5wV2UN6m65CMX1Avjes6dF2isgbG VhTgM6FPbuNKtZ/JUJkbDGncBcVxsqNMqPze7npxccjO3uqtmUtJo1ooFlZ5+sQV e3fDwGNQBzGIG7LqShEHQz0OlHGW02WxPHeqvfACWzdBPz1iqMkx7LklYGBzqGfu oO5JdEqzIINL0wFBBHIRjjD2BenLg6JRc+HxREXm6lmyIHmXU1rgA3Fq61YAGeiS Ugtd2rydvaoa2g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:31 2025 by rpki-client