This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft File: y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json) Hash identifier: 2gezXEmVOLZ3kT6rpXfRDEoKcNpuZeIFa+8ONrkTzwM= Subject key identifier: AD:2E:CB:84:AB:9D:8E:98:AE:A2:3D:ED:10:B2:CF:99:68:55:F8:89 Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361 Certificate serial: 019B22F59C162FB1738EFDB9DFC767112895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft Manifest number: 09F8 Signing time: Mon 15 Dec 2025 17:01:20 +0000 Manifest this update: Mon 15 Dec 2025 17:01:20 +0000 Manifest next update: Tue 16 Dec 2025 17:01:20 +0000 Files and hashes: 1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=) 2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=) 3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=) 4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: EAYglF8enzQFYuqPv7Rmn3qxcLH+YYOBOizAvcbTbYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:9c:16:2f:b1:73:8e:fd:b9:df:c7:67:11:28:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361 Validity Not Before: Dec 15 17:01:20 2025 GMT Not After : Dec 16 17:01:20 2025 GMT Subject: CN=ad2ecb84ab9d8e98aea23ded10b2cf996855f889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:7d:af:13:f0:a0:ae:a4:3e:17:31:1c:77: 9b:34:e5:07:89:b6:af:82:e6:36:d2:67:7d:d4:2a: 36:35:d9:bd:00:18:66:7f:8e:bd:f5:6a:00:58:75: 08:28:f4:50:69:72:47:15:db:c3:51:ef:d7:ee:87: e6:d1:d3:a2:6e:98:3a:25:6e:d7:11:d2:ef:53:7e: 5e:c2:67:f0:95:6b:79:48:e8:d0:af:f9:98:ea:50: 48:1e:64:80:90:ac:32:58:dc:30:24:ba:d2:7d:21: f8:69:86:51:09:36:62:09:3b:19:9e:1c:c3:39:62: 49:e2:21:29:34:76:78:5b:d9:c6:a6:a8:22:0d:49: c0:ec:75:dc:ad:a1:c1:9b:db:f8:76:66:98:b6:c1: c1:c5:56:2b:1d:20:52:d3:27:1c:a0:8d:58:3c:28: 50:d8:cf:6f:2c:42:37:ea:1f:da:d0:8e:8c:aa:af: f6:e4:82:aa:84:20:e5:4a:92:d1:11:b8:b8:37:04: 76:71:d4:11:53:f0:dd:fd:f4:43:4f:73:9a:47:6a: 7a:02:b3:25:7a:d3:da:0d:ce:a5:f7:45:f7:25:4f: 39:ef:0d:22:75:8f:e6:b6:e9:d6:73:66:2c:51:c9: 30:83:08:eb:46:0e:d5:6f:47:35:b6:19:5a:71:4c: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:CB:84:AB:9D:8E:98:AE:A2:3D:ED:10:B2:CF:99:68:55:F8:89 X509v3 Authority Key Identifier: keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e4:f8:da:29:46:80:57:82:40:59:e5:2e:51:ad:ec:62:bf: 40:6f:01:1a:bc:b1:3f:49:4b:21:20:3f:23:f8:7c:65:c8:72: d3:c5:ac:5a:5f:5c:50:f5:74:e5:05:bf:c2:7b:c1:56:ab:b9: 7b:92:e4:bf:c9:cd:79:b7:4d:fc:d1:51:52:93:b0:34:bd:b6: d5:e4:bf:87:47:7f:81:f6:fc:3d:41:77:86:11:5b:fc:3f:15: 96:14:cf:4a:15:5b:f8:4e:38:c1:67:57:59:14:18:bc:8a:e2: d5:ac:d1:1e:32:87:c0:5e:d4:4b:58:fa:65:60:94:44:0d:3a: b6:7c:f1:36:84:f0:4e:75:aa:a3:7b:c9:91:d0:0b:4f:9f:fb: 87:a1:f8:76:bc:4c:cb:5d:ab:30:5f:d7:4c:16:ae:ad:58:0c: f5:25:5d:b4:ab:84:95:fb:fc:46:4f:81:f3:44:6d:c6:fb:ef: 79:ba:15:d5:c6:ca:f8:4b:b6:1c:f7:b9:7d:fe:83:12:f4:7e: fe:e4:99:35:a5:15:d4:c9:90:7a:c3:b3:29:9d:55:87:98:1e: 1c:eb:f1:d0:23:37:ab:08:f7:a4:55:ba:52:b6:c2:e3:f7:b1: e7:41:6c:f9:e2:b2:fc:03:b9:35:05:4a:bf:4c:03:5a:32:cb: 94:4b:ba:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9ZwWL7Fzjv2538dnESiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1 MzEzNjEwHhcNMjUxMjE1MTcwMTIwWhcNMjUxMjE2MTcwMTIwWjAzMTEwLwYDVQQD EyhhZDJlY2I4NGFiOWQ4ZTk4YWVhMjNkZWQxMGIyY2Y5OTY4NTVmODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJh9rxPwoK6kPhcxHHebNOUHibav guY20md91Co2Ndm9ABhmf4699WoAWHUIKPRQaXJHFdvDUe/X7ofm0dOibpg6JW7X EdLvU35ewmfwlWt5SOjQr/mY6lBIHmSAkKwyWNwwJLrSfSH4aYZRCTZiCTsZnhzD OWJJ4iEpNHZ4W9nGpqgiDUnA7HXcraHBm9v4dmaYtsHBxVYrHSBS0yccoI1YPChQ 2M9vLEI36h/a0I6Mqq/25IKqhCDlSpLREbi4NwR2cdQRU/Dd/fRDT3OaR2p6ArMl etPaDc6l90X3JU857w0idY/mtunWc2YsUckwgwjrRg7Vb0c1thlacUz0qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0uy4SrnY6YrqI97RCyz5loVfiJMB8GA1UdIwQY MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct MzE2NjBjMjJkMTllLzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOT42ilG gFeCQFnlLlGt7GK/QG8BGryxP0lLISA/I/h8Zchy08WsWl9cUPV05QW/wnvBVqu5 e5Lkv8nNebdN/NFRUpOwNL221eS/h0d/gfb8PUF3hhFb/D8VlhTPShVb+E44wWdX WRQYvIri1azRHjKHwF7US1j6ZWCURA06tnzxNoTwTnWqo3vJkdALT5/7h6H4drxM y12rMF/XTBaurVgM9SVdtKuElfv8Rk+B80RtxvvveboV1cbK+Eu2HPe5ff6DEvR+ /uSZNaUV1MmQesOzKZ1Vh5geHOvx0CM3qwj3pFW6UrbC4/ex50Fs+eKy/AO5NQVK v0wDWjLLlEu6aQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:54:43 2025 by rpki-client