This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json) Hash identifier: 5z3h843N8RXrNL6bmddpvxHDRuqwBeww31Ly7+IY5No= Subject key identifier: 2A:BB:DA:CA:FD:06:5F:35:34:40:83:1C:54:0A:E5:76:30:5B:5C:55 Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Certificate serial: 019B5975E152D158D806308E8104F35B944D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft Manifest number: 1498 Signing time: Fri 26 Dec 2025 07:00:56 +0000 Manifest this update: Fri 26 Dec 2025 07:00:56 +0000 Manifest next update: Sat 27 Dec 2025 07:00:56 +0000 Files and hashes: 1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=) 2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: tX7hYhAGM3ei1q1o+slCYgBKBDUis3dfVqvD5pK6mOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e1:52:d1:58:d8:06:30:8e:81:04:f3:5b:94:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba Validity Not Before: Dec 26 07:00:56 2025 GMT Not After : Dec 27 07:00:56 2025 GMT Subject: CN=2abbdacafd065f353440831c540ae576305b5c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e3:a6:15:15:bd:33:4e:e9:f0:28:e3:10:e5: 0f:8d:ba:ed:37:aa:95:62:1e:92:ce:e3:9d:b1:b8: 9f:aa:3d:07:1b:09:ee:0c:7d:6d:81:71:fc:e0:12: 38:3e:b5:d4:5d:85:22:52:af:64:de:d4:10:81:3b: b5:1e:13:74:cd:be:b2:20:3a:33:50:66:3c:3e:86: 8a:2e:af:8f:01:f9:62:33:ce:b9:5e:be:5a:ac:a0: d8:2f:7d:3e:e7:b7:2f:63:14:54:73:0c:c1:64:74: 8e:73:d6:78:07:3f:84:d4:56:2d:c4:a3:a0:ec:18: 9d:b9:b7:b4:1b:80:e5:e8:11:e0:66:79:80:8f:d6: 6b:9a:7d:b0:62:21:64:39:ce:da:cd:a8:6f:d9:bc: 49:9e:50:92:51:04:6e:39:2c:eb:5e:ea:2d:fb:72: 0c:f5:1f:38:9a:50:c0:b4:6a:15:76:1b:f1:e5:6b: f4:df:c3:96:f2:5f:dd:c9:de:a0:e7:c0:20:3b:21: 9b:a0:d2:28:bb:8d:e0:c9:dc:af:08:5b:14:42:d5: 4a:ae:a5:5b:51:74:d6:af:f3:c9:bd:13:c9:77:5e: 58:4a:c8:85:59:44:6e:a1:cc:77:f6:bb:c1:8b:ff: 43:35:57:a0:81:af:38:ac:3d:43:19:e7:ee:c3:b0: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:DA:CA:FD:06:5F:35:34:40:83:1C:54:0A:E5:76:30:5B:5C:55 X509v3 Authority Key Identifier: keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:22:50:bb:ec:70:8f:4a:ec:29:c3:da:a2:83:59:34:92:06: 8b:08:88:c8:0c:33:df:02:43:8d:f5:5f:1d:b3:13:a5:5d:a1: 73:b7:f4:84:3e:45:6e:54:89:ee:c6:17:d3:20:3d:3e:b7:9e: 47:d4:dd:d0:ba:8b:1c:91:4f:18:a1:fa:87:ea:e9:58:8c:5c: 97:97:e7:91:fc:96:e6:2e:4c:40:13:1b:19:f5:b3:fe:73:5d: d9:23:f4:c0:95:2b:58:1b:97:a2:16:1b:80:cd:67:08:f9:0d: 78:6e:d9:71:d0:97:b1:b1:45:e0:96:83:07:d2:14:06:5a:bd: 1f:61:43:27:2f:6b:a8:c3:38:ce:46:85:b6:01:02:b6:50:21: bd:ab:ff:32:6a:cc:fe:d3:fa:92:fc:75:e2:e2:c6:bc:28:ef: 7b:c4:da:3f:c3:db:85:a9:1f:0d:04:0f:9d:fe:27:4a:3b:7d: 05:22:99:28:68:4d:72:0a:9e:dd:df:e1:b7:dc:46:94:0e:c7: 3c:95:58:9a:90:7c:5e:6e:72:78:96:ee:55:66:a3:88:4a:34: 7e:aa:34:80:d5:4c:79:62:b7:ee:aa:85:c9:0b:ef:e4:37:0c: 87:94:cc:f6:e7:05:21:81:d2:9c:8b:88:17:15:e1:8d:0b:10: 95:b2:1a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdeFS0VjYBjCOgQTzW5RNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1 NmJmYmEwHhcNMjUxMjI2MDcwMDU2WhcNMjUxMjI3MDcwMDU2WjAzMTEwLwYDVQQD EygyYWJiZGFjYWZkMDY1ZjM1MzQ0MDgzMWM1NDBhZTU3NjMwNWI1YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+OmFRW9M07p8CjjEOUPjbrtN6qV Yh6SzuOdsbifqj0HGwnuDH1tgXH84BI4PrXUXYUiUq9k3tQQgTu1HhN0zb6yIDoz UGY8PoaKLq+PAfliM865Xr5arKDYL30+57cvYxRUcwzBZHSOc9Z4Bz+E1FYtxKOg 7Bidube0G4Dl6BHgZnmAj9Zrmn2wYiFkOc7azahv2bxJnlCSUQRuOSzrXuot+3IM 9R84mlDAtGoVdhvx5Wv038OW8l/dyd6g58AgOyGboNIou43gydyvCFsUQtVKrqVb UXTWr/PJvRPJd15YSsiFWURuocx39rvBi/9DNVegga84rD1DGefuw7Ba1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq72sr9Bl81NECDHFQK5XYwW1xVMB8GA1UdIwQY MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCJQu+xw j0rsKcPaooNZNJIGiwiIyAwz3wJDjfVfHbMTpV2hc7f0hD5FblSJ7sYX0yA9Pree R9Td0LqLHJFPGKH6h+rpWIxcl5fnkfyW5i5MQBMbGfWz/nNd2SP0wJUrWBuXohYb gM1nCPkNeG7ZcdCXsbFF4JaDB9IUBlq9H2FDJy9rqMM4zkaFtgECtlAhvav/MmrM /tP6kvx14uLGvCjve8TaP8PbhakfDQQPnf4nSjt9BSKZKGhNcgqe3d/ht9xGlA7H PJVYmpB8Xm5yeJbuVWajiEo0fqo0gNVMeWK37qqFyQvv5DcMh5TM9ucFIYHSnIuI FxXhjQsQlbIakA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:24 2025 by rpki-client