This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft File: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json) Hash identifier: se5XWVUCv53VQ4Y8uSdgexq+I6fUR7m65wmOKl+J9jo= Subject key identifier: AA:7D:2F:55:81:DA:02:5E:C1:22:B2:40:34:F4:3A:B4:4D:1A:DA:FF Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Certificate serial: 019B5A1AACF626E3BB0991AC69322CCD6445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft Manifest number: 04F7 Signing time: Fri 26 Dec 2025 10:00:56 +0000 Manifest this update: Fri 26 Dec 2025 10:00:56 +0000 Manifest next update: Sat 27 Dec 2025 10:00:56 +0000 Files and hashes: 1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=) 2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: FPVycLrfTPtMkGExC/j5DosyiEvPmv/cPbEqq8w4UGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ac:f6:26:e3:bb:09:91:ac:69:32:2c:cd:64:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Validity Not Before: Dec 26 10:00:56 2025 GMT Not After : Dec 27 10:00:56 2025 GMT Subject: CN=aa7d2f5581da025ec122b24034f43ab44d1adaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:b0:08:1f:23:b5:a1:de:e8:f0:3e:ce:46: 8f:db:71:60:8b:f6:9c:52:cb:47:4f:59:e6:04:88: a6:5b:97:e5:45:c1:6a:fe:10:08:44:6e:30:b1:7b: 9f:a3:57:88:d8:f8:62:9d:cd:07:21:97:09:80:a8: 41:d2:9c:03:d5:66:91:0e:65:5d:20:78:75:e2:82: 88:05:b7:8b:d3:cd:f2:a9:33:bd:01:fb:bb:4f:19: fb:9f:37:40:91:db:f6:df:c9:93:2c:b9:f4:bd:be: 9f:2a:5a:16:47:1b:94:96:34:7a:8f:a8:49:b8:5a: 79:b2:56:f2:df:86:15:31:04:b2:92:93:15:f4:9f: 8e:8c:2a:58:7d:eb:c4:7a:7d:b9:69:95:ee:bd:5f: f0:12:7b:04:f9:4b:1a:e2:b2:00:e8:d4:be:9d:4a: f9:9e:a1:22:82:d2:f3:29:29:52:1d:60:e1:b6:bf: e3:be:a3:1b:77:bc:a0:b9:fd:c8:05:8e:e8:6c:ec: 06:ed:91:1b:ee:08:e6:27:ee:f3:f7:24:9b:08:63: c4:9a:6a:b6:ba:c8:16:de:33:04:a3:7e:7b:10:54: 69:98:be:5e:49:ad:81:5d:4e:dc:e3:f9:7c:16:7f: 77:de:25:43:3d:04:ab:06:29:75:82:c5:c7:62:e0: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:2F:55:81:DA:02:5E:C1:22:B2:40:34:F4:3A:B4:4D:1A:DA:FF X509v3 Authority Key Identifier: keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ea:2a:d1:b4:1f:5c:65:10:5a:83:21:63:6d:a9:ae:2e:16: c6:00:81:d5:6f:e4:21:b9:1a:0f:ef:05:5a:a1:a6:53:2d:2c: 7a:17:98:0a:f9:8f:a0:da:d0:cb:f3:31:b9:f7:c4:45:9c:28: 22:32:ab:3a:94:4e:7d:90:85:a1:8a:81:63:c9:a0:7f:0e:64: 6f:ad:ac:1a:d5:70:e2:ab:a1:8e:bf:9b:a8:11:4b:09:23:4e: ad:da:34:ac:df:75:cf:b2:4c:54:d6:2a:7a:6c:88:cb:c2:b9: 86:d0:c3:11:2b:c6:a8:d4:a9:e8:63:77:69:92:0a:2e:6a:dc: b5:cf:71:9b:9e:75:1e:98:e1:96:1c:36:3e:da:08:f1:1e:12: 3b:d4:bc:68:8b:25:0c:b4:1a:02:6e:7c:71:ec:81:32:72:45: 4c:81:7f:81:87:00:ca:81:ca:8f:0d:bf:0a:8b:57:49:ba:07: 40:46:ea:24:1c:74:c1:cd:de:9c:af:cb:b3:48:ae:bd:ec:a1: 27:a1:92:28:6e:b4:42:1c:13:28:3f:96:da:96:72:01:fc:b5: 07:e6:46:dc:95:72:6b:72:06:03:60:fe:7c:26:5c:ec:f2:6c: cc:95:a6:e2:18:4c:4e:d1:3c:00:c6:46:c5:75:95:86:64:d9: a4:78:91:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqz2JuO7CZGsaTIszWRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk NTBhMzQwHhcNMjUxMjI2MTAwMDU2WhcNMjUxMjI3MTAwMDU2WjAzMTEwLwYDVQQD EyhhYTdkMmY1NTgxZGEwMjVlYzEyMmIyNDAzNGY0M2FiNDRkMWFkYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCywCB8jtaHe6PA+zkaP23Fgi/ac UstHT1nmBIimW5flRcFq/hAIRG4wsXufo1eI2Phinc0HIZcJgKhB0pwD1WaRDmVd IHh14oKIBbeL083yqTO9Afu7Txn7nzdAkdv238mTLLn0vb6fKloWRxuUljR6j6hJ uFp5slby34YVMQSykpMV9J+OjCpYfevEen25aZXuvV/wEnsE+Usa4rIA6NS+nUr5 nqEigtLzKSlSHWDhtr/jvqMbd7yguf3IBY7obOwG7ZEb7gjmJ+7z9ySbCGPEmmq2 usgW3jMEo357EFRpmL5eSa2BXU7c4/l8Fn933iVDPQSrBil1gsXHYuAJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp9L1WB2gJewSKyQDT0OrRNGtr/MB8GA1UdIwQY MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt NTVhNTRkZjE0MzRlLzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+oq0bQf XGUQWoMhY22pri4WxgCB1W/kIbkaD+8FWqGmUy0seheYCvmPoNrQy/MxuffERZwo IjKrOpROfZCFoYqBY8mgfw5kb62sGtVw4quhjr+bqBFLCSNOrdo0rN91z7JMVNYq emyIy8K5htDDESvGqNSp6GN3aZIKLmrctc9xm551Hpjhlhw2PtoI8R4SO9S8aIsl DLQaAm58ceyBMnJFTIF/gYcAyoHKjw2/CotXSboHQEbqJBx0wc3enK/Ls0iuveyh J6GSKG60QhwTKD+W2pZyAfy1B+ZG3JVya3IGA2D+fCZc7PJszJWm4hhMTtE8AMZG xXWVhmTZpHiRgA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:10 2025 by rpki-client