This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json) Hash identifier: 5sVUEjRD2f5nmYMBD7tany1BGql8+AdeU36xtNkSRIc= Subject key identifier: 0F:69:CC:F1:BF:CD:EA:8A:91:5E:86:37:DC:A6:D7:15:35:23:42:C4 Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361 Certificate serial: 019B3456C494E18EE424A98747AA4D0F4C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft Manifest number: 0A01 Signing time: Fri 19 Dec 2025 02:01:00 +0000 Manifest this update: Fri 19 Dec 2025 02:01:00 +0000 Manifest next update: Sat 20 Dec 2025 02:01:00 +0000 Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=) 2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=) 3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=) 4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: vVjfE1/mRaeWwQmgFQ57AOS8i7g4EX6SgNSHVtcjkkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:c4:94:e1:8e:e4:24:a9:87:47:aa:4d:0f:4c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361 Validity Not Before: Dec 19 02:01:00 2025 GMT Not After : Dec 20 02:01:00 2025 GMT Subject: CN=0f69ccf1bfcdea8a915e8637dca6d715352342c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:2b:05:8a:23:d3:0e:25:cb:71:e6:8f:a1: ad:db:f5:9d:59:bc:87:fb:32:61:81:f1:39:bb:5a: a5:40:40:a9:19:db:1f:7b:57:3a:2b:38:27:3b:cc: 77:3f:bb:93:b8:db:96:2a:e6:07:89:0b:48:6f:5e: 17:ca:bd:76:20:2b:2e:c9:72:30:bb:2a:35:74:5b: 8c:a7:03:ee:d6:c6:df:fd:a9:a4:3c:e5:69:af:b5: b4:c3:8d:3e:86:61:08:b6:26:58:67:9b:ef:e1:98: d5:c0:a6:c6:8d:6c:39:f3:5c:96:21:25:8d:86:9f: 5f:cf:a5:32:e1:24:d4:f1:05:82:27:00:6b:40:8e: 1b:ca:1d:4c:a2:d6:3d:c6:f7:bb:fa:b4:81:49:e2: 17:9c:7d:70:88:e4:d4:d2:0e:0f:c1:5c:59:6a:f5: 2e:cc:54:9c:aa:d9:dc:f8:0e:2b:0d:c8:2a:05:69: 48:a9:e0:d4:82:d0:77:33:10:63:d8:d1:f7:0e:15: 0d:a9:ff:3f:61:9c:b2:46:28:b6:b6:b1:1d:55:ca: 6b:83:4a:46:99:05:a0:3d:af:d5:b1:a5:59:2c:aa: 85:ce:a0:1d:4f:97:a0:4c:c6:04:93:d0:34:65:c1: af:05:84:e1:8b:ac:da:29:89:99:bf:55:5e:33:99: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:69:CC:F1:BF:CD:EA:8A:91:5E:86:37:DC:A6:D7:15:35:23:42:C4 X509v3 Authority Key Identifier: keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f3:77:d2:7a:96:48:d2:62:a9:ce:69:e3:0d:23:64:12:e9: 7b:e8:03:bf:78:c3:14:d2:42:35:28:63:44:8c:61:ea:a5:60: 97:00:1f:93:c2:86:c5:76:39:3e:68:e2:77:8f:86:00:1f:72: 0a:8a:52:25:12:75:cc:a7:c9:97:22:55:ef:43:e2:80:e0:d3: 5e:de:8f:1b:79:18:ba:b9:ce:47:1b:c5:11:f8:a9:7e:4d:86: e2:fa:a9:47:74:ae:9b:6b:29:32:2c:1a:64:06:5d:86:ae:e9: ae:be:17:f4:7a:66:4e:43:c9:d5:3a:9a:5d:84:01:67:19:7a: ea:3b:ed:ca:4e:46:79:6e:3c:5b:58:58:68:a4:d4:1f:46:bd: d8:d1:48:77:c2:26:ea:63:68:47:ad:aa:93:b3:55:ff:93:5e: cf:8c:ed:44:b2:13:ea:0e:ca:d2:60:74:f7:49:98:5e:1c:65: ee:30:ef:81:53:07:f3:0a:86:50:cd:b9:59:db:70:3a:ab:9b: d0:e9:9c:dc:02:8b:c9:0e:7a:51:01:13:a2:41:1d:8c:af:c6: 3f:e4:29:9f:19:57:0d:d2:dc:60:5b:0c:f5:6a:25:96:82:08: 97:9b:e3:45:13:cf:f5:24:7a:2c:95:c6:18:b7:dc:96:fc:95: b2:01:ed:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VsSU4Y7kJKmHR6pND0xCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1 MzEzNjEwHhcNMjUxMjE5MDIwMTAwWhcNMjUxMjIwMDIwMTAwWjAzMTEwLwYDVQQD EygwZjY5Y2NmMWJmY2RlYThhOTE1ZTg2MzdkY2E2ZDcxNTM1MjM0MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj0rBYoj0w4ly3Hmj6Gt2/WdWbyH +zJhgfE5u1qlQECpGdsfe1c6KzgnO8x3P7uTuNuWKuYHiQtIb14Xyr12ICsuyXIw uyo1dFuMpwPu1sbf/amkPOVpr7W0w40+hmEItiZYZ5vv4ZjVwKbGjWw581yWISWN hp9fz6Uy4STU8QWCJwBrQI4byh1MotY9xve7+rSBSeIXnH1wiOTU0g4PwVxZavUu zFScqtnc+A4rDcgqBWlIqeDUgtB3MxBj2NH3DhUNqf8/YZyyRii2trEdVcprg0pG mQWgPa/VsaVZLKqFzqAdT5egTMYEk9A0ZcGvBYThi6zaKYmZv1VeM5mk0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9pzPG/zeqKkV6GN9ym1xU1I0LEMB8GA1UdIwQY MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfN30nqW SNJiqc5p4w0jZBLpe+gDv3jDFNJCNShjRIxh6qVglwAfk8KGxXY5Pmjid4+GAB9y CopSJRJ1zKfJlyJV70PigODTXt6PG3kYurnORxvFEfipfk2G4vqpR3Sum2spMiwa ZAZdhq7prr4X9HpmTkPJ1TqaXYQBZxl66jvtyk5GeW48W1hYaKTUH0a92NFId8Im 6mNoR62qk7NV/5Nez4ztRLIT6g7K0mB090mYXhxl7jDvgVMH8wqGUM25WdtwOqub 0Omc3AKLyQ56UQETokEdjK/GP+QpnxlXDdLcYFsM9WolloIIl5vjRRPP9SR6LJXG GLfclvyVsgHt7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:44 2025 by rpki-client