This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft File: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft (raw, json) Hash identifier: zvhNxzIukFoMWvQFuzs4vRI63yVOj9kt28fsi6tcVeg= Subject key identifier: CE:D7:82:B6:2A:DE:1B:B3:9D:42:09:B3:F0:0C:51:09:9E:80:98:9C Authority key identifier: CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D Certificate issuer: /CN=cbb525e263a95b1652064bdff8964d4bf62b533d Certificate serial: 019B1CF361208276B68CF57D95FD7922FAB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft Manifest number: 042B Signing time: Sun 14 Dec 2025 13:01:10 +0000 Manifest this update: Sun 14 Dec 2025 13:01:10 +0000 Manifest next update: Mon 15 Dec 2025 13:01:10 +0000 Files and hashes: 1: q6cfXUDveWHdgQWTYKqVwvvOAe0.roa (hash: BJPMM6GNYN6IqCj9i2G5fXzbZjuTVnz0OtAPd8t+eZk=) 2: y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl (hash: C38pUhnQvUgT8zYR9NjUb4PSlVG9qcy9PfukDXZ/gVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:61:20:82:76:b6:8c:f5:7d:95:fd:79:22:fa:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb525e263a95b1652064bdff8964d4bf62b533d Validity Not Before: Dec 14 13:01:10 2025 GMT Not After : Dec 15 13:01:10 2025 GMT Subject: CN=ced782b62ade1bb39d4209b3f00c51099e80989c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:d5:f6:6b:72:e5:be:dd:00:7c:75:d8:58: 8a:04:1f:39:2c:fc:1b:b0:3a:b5:f0:58:99:ce:34: cc:56:e6:b2:59:0b:f3:31:49:f4:b6:97:7e:54:41: 40:06:c6:85:92:38:c2:c7:44:fd:e2:18:13:a5:94: 0d:b8:c2:03:fc:5a:6e:2f:43:3d:4f:4e:61:17:f3: ae:f2:5f:7c:ef:f3:84:06:05:12:ba:be:b2:0a:e5: c8:04:55:60:95:95:41:bc:09:76:81:a0:a9:18:52: f7:2d:7a:82:ba:d8:58:b1:13:46:75:ab:80:27:ad: c5:2d:41:bd:5b:b1:19:5d:9a:86:26:dc:0a:b7:c1: b6:0e:89:41:96:b4:13:69:a7:45:64:63:a7:a0:71: a7:6f:2a:d2:68:ad:b4:70:7e:fe:2e:c5:5b:69:10: 4a:e6:3c:d4:e7:a5:a9:a7:0e:c3:5f:15:29:e3:c1: bc:10:eb:ea:ee:2f:43:fe:a5:4b:b8:94:24:d2:4d: f8:21:6f:d1:d9:f3:a6:d9:d1:8e:69:cc:39:7f:2f: 21:42:8d:3d:9a:27:01:ef:33:00:90:7b:33:4d:71: d4:ec:51:0c:a9:c1:8b:ec:0c:19:d7:79:65:98:fd: bd:9c:9a:5a:ee:ba:49:8e:14:f0:e1:7f:31:32:22: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D7:82:B6:2A:DE:1B:B3:9D:42:09:B3:F0:0C:51:09:9E:80:98:9C X509v3 Authority Key Identifier: keyid:CB:B5:25:E2:63:A9:5B:16:52:06:4B:DF:F8:96:4D:4B:F6:2B:53:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/y7Ul4mOpWxZSBkvf-JZNS_YrUz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:44:cf:d0:c0:bc:73:f1:48:10:cc:ee:85:00:bd:38:0b: a2:21:c6:71:cc:6d:a2:73:ee:90:f9:82:ee:52:ba:af:fd:0a: 81:0d:08:3f:71:57:e4:84:0b:4d:fb:f7:3b:f9:29:4c:5a:9f: 06:0e:63:e6:d2:69:ef:a8:59:16:4c:96:19:c0:74:5c:17:53: d2:e9:3c:3d:40:ac:2b:20:fd:44:7f:a2:5b:19:4a:9e:41:fd: db:4b:c8:63:b8:51:9e:22:4e:57:77:eb:50:17:80:48:33:a7: 32:67:da:20:cc:bf:be:ca:57:c5:7f:ca:9e:6a:2b:99:4d:cd: 02:62:13:71:4a:15:06:15:1d:61:e4:70:45:a2:0a:a3:b7:9b: 4f:c0:9d:98:4b:32:62:e1:0d:4a:35:17:2e:aa:27:07:27:90: b0:80:a0:72:28:44:09:9d:48:49:ca:0a:1d:7b:d7:95:c5:e1: f0:bd:2a:c8:8f:d3:ba:b0:ba:f4:b8:15:8e:d0:d8:d6:b4:c6: fc:cb:cf:c3:ff:fd:6d:bc:a8:e7:7a:6a:92:6d:0b:2e:8a:ea: f7:e7:ed:40:c1:ab:81:58:c2:a3:3e:98:c2:e6:05:d0:4b:db: 46:ed:23:92:a3:34:2e:e3:cb:fe:f3:88:30:b9:2f:1c:f1:14: c8:bd:25:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc82Eggna2jPV9lf15IvqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYjUyNWUyNjNhOTViMTY1MjA2NGJkZmY4OTY0ZDRiZjYy YjUzM2QwHhcNMjUxMjE0MTMwMTEwWhcNMjUxMjE1MTMwMTEwWjAzMTEwLwYDVQQD EyhjZWQ3ODJiNjJhZGUxYmIzOWQ0MjA5YjNmMDBjNTEwOTllODA5ODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpzV9mty5b7dAHx12FiKBB85LPwb sDq18FiZzjTMVuayWQvzMUn0tpd+VEFABsaFkjjCx0T94hgTpZQNuMID/FpuL0M9 T05hF/Ou8l987/OEBgUSur6yCuXIBFVglZVBvAl2gaCpGFL3LXqCuthYsRNGdauA J63FLUG9W7EZXZqGJtwKt8G2DolBlrQTaadFZGOnoHGnbyrSaK20cH7+LsVbaRBK 5jzU56Wppw7DXxUp48G8EOvq7i9D/qVLuJQk0k34IW/R2fOm2dGOacw5fy8hQo09 micB7zMAkHszTXHU7FEMqcGL7AwZ13llmP29nJpa7rpJjhTw4X8xMiK2owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7XgrYq3huznUIJs/AMUQmegJicMB8GA1UdIwQY MBaAFMu1JeJjqVsWUgZL3/iWTUv2K1M9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTdVbDRtT3BXeFpTQmt2Zi1KWk5TX1lyVXowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQt Yjg5ZGM0ZmQ2ZWUwLzEveTdVbDRtT3BXeFpTQmt2Zi1KWk5TX1lyVXowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQtYjg5ZGM0ZmQ2ZWUw LzEveTdVbDRtT3BXeFpTQmt2Zi1KWk5TX1lyVXowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn1Ez9DA vHPxSBDM7oUAvTgLoiHGccxtonPukPmC7lK6r/0KgQ0IP3FX5IQLTfv3O/kpTFqf Bg5j5tJp76hZFkyWGcB0XBdT0uk8PUCsKyD9RH+iWxlKnkH920vIY7hRniJOV3fr UBeASDOnMmfaIMy/vspXxX/KnmormU3NAmITcUoVBhUdYeRwRaIKo7ebT8CdmEsy YuENSjUXLqonByeQsICgcihECZ1IScoKHXvXlcXh8L0qyI/TurC69LgVjtDY1rTG /MvPw//9bbyo53pqkm0LLorq9+ftQMGrgVjCoz6YwuYF0EvbRu0jkqM0LuPL/vOI MLkvHPEUyL0lhw== -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:47 2025 by rpki-client